Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 35.908776] sshd (243) used greatest stack depth: 24768 bytes left Warning: Permanently added '[localhost]:42220' (ECDSA) to the list of known hosts. 2022/09/20 10:35:29 fuzzer started 2022/09/20 10:35:29 dialing manager at localhost:42121 [ 38.534461] cgroup: Unknown subsys name 'net' [ 38.619686] cgroup: Unknown subsys name 'rlimit' 2022/09/20 10:35:43 syscalls: 201 2022/09/20 10:35:43 code coverage: enabled 2022/09/20 10:35:43 comparison tracing: enabled 2022/09/20 10:35:43 extra coverage: enabled 2022/09/20 10:35:43 setuid sandbox: enabled 2022/09/20 10:35:43 namespace sandbox: enabled 2022/09/20 10:35:43 Android sandbox: enabled 2022/09/20 10:35:43 fault injection: enabled 2022/09/20 10:35:43 leak checking: enabled 2022/09/20 10:35:43 net packet injection: enabled 2022/09/20 10:35:43 net device setup: enabled 2022/09/20 10:35:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/20 10:35:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/20 10:35:43 USB emulation: enabled 2022/09/20 10:35:43 hci packet injection: enabled 2022/09/20 10:35:43 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/20 10:35:43 802.15.4 emulation: enabled 2022/09/20 10:35:43 fetching corpus: 0, signal 0/0 (executing program) 2022/09/20 10:35:45 starting 8 fuzzer processes 10:35:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$link(0x8, r3, r1) r4 = getuid() keyctl$get_persistent(0x16, r4, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r6 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='$\x00', 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x8, 0x280082) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f0000000500)) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r6) r8 = socket(0x21, 0x80000, 0xbe31) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0x7, 0x2, 0x0, 0xeb}, {0xf8e, 0x7, 0x1, 0x101}, {0x5, 0x1, 0x2, 0xffffffff}, {0x912, 0x8, 0x3f, 0x7}, {0x5aa, 0x2, 0x1, 0xfffffbff}, {0x8000, 0x20, 0x9, 0xffffffff}, {0x40, 0x7, 0x4, 0x4}, {0x6, 0x80, 0x20, 0x3}, {0x4, 0x4, 0x1, 0x800}, {0xbe1, 0x4, 0x3, 0xcf47}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000dc0)={'gretap0\x00', &(0x7f0000000d80)={'tunl0\x00', r5, 0x10, 0x40, 0x1, 0x80000000, {{0x6, 0x4, 0x0, 0x2a, 0x18, 0x64, 0x0, 0x3f, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x70, 0x3, 0x9}]}}}}}) getpeername$packet(r8, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e40)=0x14) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001000)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x12c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7ff, 0x7f, 0x3}, {0xd3, 0x9, 0x1, 0x20000}, {0x3e3d, 0x3f, 0x0, 0xfc}, {0xfff, 0x9, 0x3, 0x821}, {0xf7, 0x7, 0x3, 0x20}]}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4091}, 0x40000800) 10:35:45 executing program 1: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x3c, 0x18, 0x17, 0x8, 0x6, 0x7, 0x5, 0x149, 0xffffffffffffffff}) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000040)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000100)) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x22, 0x1a, 0x8, 0x16, 0x2, 0x2, 0x4, 0x32, 0xffffffffffffffff}) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000200)) r2 = syz_open_dev$rtc(&(0x7f0000000a40), 0x4, 0x400) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000a80)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000ac0)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00), 0x301000, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000b40)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x8040, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000bc0)) accept(r3, &(0x7f0000000c00)=@xdp, &(0x7f0000000c80)=0x80) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000cc0), 0x448001, 0x0) ioctl$RTC_UIE_OFF(r5, 0x7004) syz_genetlink_get_family_id$gtp(&(0x7f0000000d00), 0xffffffffffffffff) 10:35:45 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x0, 0x200, {{0x20, 0x4, 0x2, 0x14, 0x80, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x27, 0xed, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102]}, @cipso={0x86, 0x1d, 0x3, [{0x6, 0x9, "7a27585c881f1c"}, {0x7, 0xe, "c31547120c4ffe7d2880599f"}]}, @ssrr={0x89, 0xb, 0xec, [@broadcast, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x1, [{@multicast2, 0x4fea1ff2}, {@private=0xa010101, 0x1}, {@private=0xa010101, 0xffffffff}]}]}}}}}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xe0, 0x0, 0x40, @private0, @local, 0x80, 0x8, 0x7, 0x40}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)={0x4a8, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x33}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8aa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4084}, 0xc000) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000dc0)={r3, 0x1, 0x6, @multicast}, 0x10) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e00), 0x1912c1, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r10, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r11 = pidfd_getfd(r9, r5, 0x0) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x218, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000002}, 0x40000) r12 = accept$packet(r9, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000012c0)=0x14) bind$packet(r12, &(0x7f0000001300)={0x11, 0x6, r6, 0x1, 0x3, 0x6, @broadcast}, 0x14) clock_gettime(0x2, &(0x7f0000001340)) r13 = fsmount(r11, 0x1, 0x80) setsockopt$packet_buf(r13, 0x107, 0x16, &(0x7f0000001380)="45d813b3bac6b0ac2b61868b249d300714aadbce7344314aecf4c0462a8b68f06e8db914311c63e4ab71fb0cc0ca1f6bd1d229c6139819694922b1eeb97ea56d79b8d4777f06dd33a9e6fb4bf34ec0a9520203d25f7f2da1a81abcacc53405d05eada5d55d59fde5ddc74e798d20a7b55e004bf1c6d134ffd9edfd187e2fa8478378dd0aae6c26962d344e92c9b6337bb0a5de433ace1c0d456f4face7fd7047139e7a62f1e112aeb768367e559f7b5f92036edeb7f08bd1d1713419d7c83a555ca69d67557a6d1c8462d26a4a11abdb44c26a737d7353d277385195bc9a36e70ebe4e144d6ea297f62879876cb5d3978db43ad3f8", 0xf5) 10:35:45 executing program 2: r0 = getpgid(0xffffffffffffffff) wait4(r0, &(0x7f0000000000), 0x40000001, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x1, 0x1, 0x3f, 0x1, 0x80000000}, 0x6, 0xc967}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000014c0)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000018c0)={0x18c, 0x0, &(0x7f00000016c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd, @flat=@binder={0x73622a85, 0x10a, 0x2}, @flat=@weak_handle={0x77682a85, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001280)={@fd, @fda={0x66646185, 0x9, 0x0, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x70e9}}, &(0x7f0000001300)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001340)={@fda={0x66646185, 0x5, 0x2, 0x39}, @fd, @fda={0x66646185, 0x0, 0x1, 0x30}}, &(0x7f00000013c0)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001400)={@flat=@weak_handle={0x77682a85, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x0, 0x4}, @fd}, &(0x7f0000001480)={0x0, 0x18, 0x38}}}, @request_death, @free_buffer, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001600)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000001500)=""/243, 0xf3, 0x1, 0x19}, @flat=@handle={0x73682a85, 0x0, 0x3}}, &(0x7f0000001680)={0x0, 0x18, 0x40}}}], 0x4, 0x0, &(0x7f0000001880)="b2e6ecb0"}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001900), &(0x7f0000001940)=0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001980)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002d80)={0xd8, 0x0, &(0x7f0000002c00)=[@free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000029c0)={@fda={0x66646185, 0x2, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f00000019c0)=""/4096, 0x1000, 0x0, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1001, 0x1}}, &(0x7f0000002a40)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002b40)={@fda={0x66646185, 0x8, 0x2, 0x14}, @ptr={0x70742a85, 0x1, &(0x7f0000002a80)=""/61, 0x3d, 0x1, 0x14}, @ptr={0x70742a85, 0x0, &(0x7f0000002ac0)=""/65, 0x41, 0x0, 0x3c}}, &(0x7f0000002bc0)={0x0, 0x20, 0x48}}}, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x3}, @release, @clear_death], 0x74, 0x0, &(0x7f0000002d00)="0e7af0a85ff77bcf493f7d60b1a78a64e99e68e3acd35ce396e1a653dc7cacc7c681ae27b725817e64f03ba9f62961565bc1ebba689977c678a36c3e3a8a0ca73f6ffa5e6514257992302cbef8f2fefc8095f169613ff16b95cf666f56a15754b0789b20f31eec82c2b1b4f858d2f7bfe4f619d3"}) recvfrom$packet(r1, &(0x7f0000002dc0)=""/83, 0x53, 0x4062, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) accept$packet(r4, 0x0, &(0x7f0000002e40)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000002e80)) r5 = pidfd_open(r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000002ec0)=0x7, 0x4) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003040)={'syztnl0\x00', &(0x7f0000002fc0)={'syztnl1\x00', 0x0, 0x2, 0x8000, 0x0, 0x200, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x81, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @empty, {[@noop, @rr={0x7, 0xf, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010101]}]}}}}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000003080)={r7, 0x1, 0x6, @link_local}, 0x10) mq_notify(r6, &(0x7f0000003200)={0x0, 0x26, 0x2, @thr={&(0x7f00000030c0)="81071c1560b9050a7fb9c618e08301871400d7103ea43468a19d6c77957ca869", &(0x7f0000003100)="25f6633b311d0acaf59e4eba171c698a1572020166032b3763b46db1ba2ca093246c94a00e96a716182b7e02d9217f58dbca981489f61af56f9433198370b0ca95fdaf405bf725f27920c85892371f47ae2a0de137491fff3605c8a728081f1596da9bc4ad185d05d8ddfcd856405cba97f67c89ad281a4a876a5832075af789a9c5bcd8bc4821056fefc4b40536e6f21bc3d029fa9dbceaa7805ee8519d0cb1b8fdb6d41eff9a6a961b322031f146e7395bc262fb0792f1dccc0b216786b075d2a0a71caf68415ad18d5482b4ca"}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10:35:45 executing program 4: keyctl$link(0x8, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0x0) keyctl$clear(0x7, r0) r1 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', r0) pidfd_send_signal(0xffffffffffffffff, 0x19, &(0x7f0000000140)={0xb, 0x4dd, 0x8}, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', r2) keyctl$negate(0xd, r1, 0x4, 0xfffffffffffffffa) accept4$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x180000) keyctl$unlink(0x9, r3, r2) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000380)=0x1) mq_timedreceive(0xffffffffffffffff, &(0x7f00000003c0)=""/40, 0x28, 0x7fff, &(0x7f0000000400)={0x0, 0x989680}) r4 = request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='keyring\x00', r2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000540)) r6 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r4) r7 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, r6, r7) ioctl$CDROM_MEDIA_CHANGED(r5, 0x5325, 0x5) 10:35:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004854}, 0x4004044) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40044) ioctl$CDROMSTOP(r1, 0x5307) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x4080, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000280)=@type=0x4) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x8015) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x0, 0x70bd28, 0xff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8011) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000004c0)=0x8, 0x4) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000780)={"7bc100819d4b7b6c09f46494", &(0x7f0000000640)="729caf0f5a2a1154eb4ea817d0af44fc4fc3c805fe80767c1cd52343261b52d176360f1167bd56546e42a8aa4106f0b3916bf27558c99636f52a03281851597e5df8f75eba1f6d7f0a98c563714483ca8cf2998827c25ba8259d5bd24049fc76ef12a3880f5722ed7ee071a6d600b3a4322b5c644ff62b32ddcadf526a54517250912b536a4ccac632bb1e517a7c503ab40fa21d1e3431518fe99397849a3d", 0x9f, 0x3, &(0x7f0000000700)={0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, "8e60d261", 0xe0, "614adcec", 0x6, 0x81, 0x5, "3c29b6", "404d889f65b7558270f5135923c1f763bccddf09ecf3118232b1dce86e199358598ec9632812a40836bbec334b36"}, 0x3, 0x8, 0x7ff, &(0x7f0000000740)}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000007c0)=@req3={0x3f, 0xdf1c, 0x1, 0x100, 0xfffffff8, 0xffffffff, 0x4}, 0x1c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r4) fspick(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0) 10:35:45 executing program 7: ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x400) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000000)) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000040)={0x8, 0x0, 0x40, 0x1f, 0x4, 0x3f}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d00)={'ip_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x7, 0xfdc5, {{0x1c, 0x4, 0x3, 0x14, 0x70, 0x66, 0x0, 0x7f, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1e}, {[@generic={0x44, 0x4, "35ce"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3f, 0x2, [{0x5, 0xa, "dc56490e6673040f"}, {0x0, 0x6, "c5c454c2"}, {0x7, 0xe, "3ca732a48173730f85dfeefc"}, {0x3, 0xd, "112ea6d315390a2e26fc48"}, {0x7, 0x3, "c4"}, {0x7, 0xb, "b348077af432642307"}]}, @lsrr={0x83, 0x13, 0xf2, [@rand_addr=0x64010101, @private=0xa010102, @remote, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d40)={'syztnl1\x00', r2, 0x2f, 0x1, 0x71, 0x100, 0xb, @mcast1, @mcast2, 0x1, 0x700, 0x58eee1fe, 0xfffffffd}}) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000e00)='/%&\x00', &(0x7f0000000e40)='./file0\x00', r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/binder1\x00', 0x0, 0x0) fspick(r1, &(0x7f0000000ec0)='./file0\x00', 0x1) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000f00)=@hsc={0x1, 0x3, "1a5f6c29529467335075"}) r3 = socket(0x29, 0x6, 0x9) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001000), &(0x7f0000001040)=0x14) r4 = syz_genetlink_get_family_id$team(&(0x7f00000010c0), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) [ 53.824261] audit: type=1400 audit(1663670145.464:6): avc: denied { execmem } for pid=284 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:35:45 executing program 6: r0 = socket(0xa, 0x3, 0x7) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x5, 0x56, 0xfffffffb}]}, 0x10) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000000c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x185040, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c0, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbeca}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x42}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000500)={0x2, 0x1, 0x7, 0x1, 0x1}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0xc040, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000580)={0xffffffffffffffff, 0x2, 0x1ff, 0x0, 0x2}) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f00000005c0)=@lrpcs={0x1, 0x3, 0x3, 0x1, 0x5}) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000600)=0x10001, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl1\x00', r6, 0x29, 0x1, 0x1, 0x8, 0x38, @rand_addr=' \x01\x00', @loopback, 0x20, 0x0, 0x40, 0x1}}) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000002dc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d80)={&(0x7f0000002580)={0x7e4, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x8, 0x5, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0xff, 0x5, 0x100}, {0xffff, 0x2, 0xaa, 0x5}, {0x4, 0x2f, 0x4, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x0, 0x9, 0xfff}, {0x9, 0x4d, 0x7f, 0x4}]}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa401, 0x8, 0xfd, 0x81}, {0x2c7, 0x7, 0x4, 0x10}, {0x8, 0x40, 0x5, 0x68}, {0x8, 0x81, 0x4, 0x2}, {0x3, 0x8, 0x1, 0x8}, {0x7, 0x3, 0x1, 0x5}, {0x8, 0x7e, 0x4, 0x8}, {0x1f, 0x3, 0x7, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x3, 0x1, 0xff, 0x1}, {0xa79, 0x6, 0x6, 0x81}, {0x9423, 0x7, 0x8, 0x4c}, {0x2, 0x4e, 0x20, 0x7}, {0xaa, 0x7f, 0x6, 0x80000001}, {0x7f, 0x5, 0x8, 0x7}, {0x8000, 0x81, 0xfc, 0x9}, {0x3, 0x1, 0x0, 0x2}, {0x3, 0xff, 0x2, 0x3}, {0x5, 0x8, 0x8, 0x1}]}}}]}}, {{0x8, 0x1, r4}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1f, 0x6, 0x1, 0x80000000}, {0x2, 0x5, 0x7, 0x4796f64}, {0xd27, 0x2, 0x4, 0x6}, {0x9, 0x81, 0x1, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4962}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80c) [ 55.172777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.194517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.197341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.199278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.200865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.202536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.204447] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.205855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.206263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.213187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.216186] Bluetooth: hci2: HCI_REQ-0x0c1a [ 55.222723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.242535] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.244317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.249588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 55.252567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.253821] Bluetooth: hci3: HCI_REQ-0x0c1a [ 55.256719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.264124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.267157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 55.268722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.275227] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.294019] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.295918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 55.298432] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.301098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.303019] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.307583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.309096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.310837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 55.312347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 55.314050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.319068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.320859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.327893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.329032] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 55.330199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.337395] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.338935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.340502] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 55.346013] Bluetooth: hci6: HCI_REQ-0x0c1a [ 55.346967] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 55.350094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.358527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.363022] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.375352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.376481] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.382086] Bluetooth: hci1: HCI_REQ-0x0c1a [ 55.390853] Bluetooth: hci0: HCI_REQ-0x0c1a [ 57.252108] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 57.252330] Bluetooth: hci2: command 0x0409 tx timeout [ 57.315817] Bluetooth: hci3: command 0x0409 tx timeout [ 57.315822] Bluetooth: hci5: command 0x0409 tx timeout [ 57.379923] Bluetooth: hci6: command 0x0409 tx timeout [ 57.443723] Bluetooth: hci0: command 0x0409 tx timeout [ 57.443727] Bluetooth: hci7: command 0x0409 tx timeout [ 57.446563] Bluetooth: hci1: command 0x0409 tx timeout [ 59.299854] Bluetooth: hci2: command 0x041b tx timeout [ 59.363861] Bluetooth: hci3: command 0x041b tx timeout [ 59.365100] Bluetooth: hci5: command 0x041b tx timeout [ 59.427866] Bluetooth: hci6: command 0x041b tx timeout [ 59.491828] Bluetooth: hci1: command 0x041b tx timeout [ 59.492978] Bluetooth: hci0: command 0x041b tx timeout [ 59.495582] Bluetooth: hci7: command 0x041b tx timeout [ 61.347803] Bluetooth: hci2: command 0x040f tx timeout [ 61.411809] Bluetooth: hci5: command 0x040f tx timeout [ 61.413105] Bluetooth: hci3: command 0x040f tx timeout [ 61.475734] Bluetooth: hci6: command 0x040f tx timeout [ 61.539821] Bluetooth: hci7: command 0x040f tx timeout [ 61.541226] Bluetooth: hci0: command 0x040f tx timeout [ 61.545788] Bluetooth: hci1: command 0x040f tx timeout [ 62.435801] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 63.395753] Bluetooth: hci2: command 0x0419 tx timeout [ 63.459807] Bluetooth: hci3: command 0x0419 tx timeout [ 63.460451] Bluetooth: hci5: command 0x0419 tx timeout [ 63.523794] Bluetooth: hci6: command 0x0419 tx timeout [ 63.587709] Bluetooth: hci1: command 0x0419 tx timeout [ 63.588199] Bluetooth: hci0: command 0x0419 tx timeout [ 63.588601] Bluetooth: hci7: command 0x0419 tx timeout [ 65.163530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.164688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.166301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.168409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.188148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.189567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.195499] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.235711] Bluetooth: hci4: command 0x0409 tx timeout [ 69.283765] Bluetooth: hci4: command 0x041b tx timeout [ 71.331908] Bluetooth: hci4: command 0x040f tx timeout [ 73.379702] Bluetooth: hci4: command 0x0419 tx timeout [ 115.180451] syz-executor.6 (298) used greatest stack depth: 24640 bytes left [ 116.532224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.534848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.538591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.542937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.544973] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.546533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.559742] Bluetooth: hci0: HCI_REQ-0x0c1a [ 116.851261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.853594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.855332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.859568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.861924] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 116.863579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.882728] Bluetooth: hci1: HCI_REQ-0x0c1a [ 117.100589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.102716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.104101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.113193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.115001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.116279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.120910] Bluetooth: hci2: HCI_REQ-0x0c1a [ 117.511851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.561608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.563930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.566762] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.568294] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 117.569381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.573331] Bluetooth: hci5: HCI_REQ-0x0c1a [ 117.608284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.619378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.620550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.630039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.630236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 117.632928] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 117.633523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 117.652923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.655357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 117.657385] Bluetooth: hci6: HCI_REQ-0x0c1a [ 117.686920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 117.692277] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 117.711920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.718455] Bluetooth: hci7: HCI_REQ-0x0c1a [ 118.627742] Bluetooth: hci0: command 0x0409 tx timeout [ 118.947763] Bluetooth: hci1: command 0x0409 tx timeout [ 119.139705] Bluetooth: hci2: command 0x0409 tx timeout [ 119.269503] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 119.587785] Bluetooth: hci5: command 0x0409 tx timeout [ 119.716724] Bluetooth: hci6: command 0x0409 tx timeout [ 119.779748] Bluetooth: hci7: command 0x0409 tx timeout [ 120.675806] Bluetooth: hci0: command 0x041b tx timeout [ 120.995802] Bluetooth: hci1: command 0x041b tx timeout [ 121.187798] Bluetooth: hci2: command 0x041b tx timeout [ 121.636908] Bluetooth: hci5: command 0x041b tx timeout [ 121.764725] Bluetooth: hci6: command 0x041b tx timeout [ 121.828800] Bluetooth: hci7: command 0x041b tx timeout [ 122.037319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.040418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.048766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.071830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.088996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.095108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.120714] Bluetooth: hci3: HCI_REQ-0x0c1a [ 122.723781] Bluetooth: hci0: command 0x040f tx timeout [ 123.045391] Bluetooth: hci1: command 0x040f tx timeout [ 123.235721] Bluetooth: hci2: command 0x040f tx timeout [ 123.683738] Bluetooth: hci5: command 0x040f tx timeout [ 123.811850] Bluetooth: hci6: command 0x040f tx timeout [ 123.875734] Bluetooth: hci7: command 0x040f tx timeout [ 124.131779] Bluetooth: hci3: command 0x0409 tx timeout [ 124.772767] Bluetooth: hci0: command 0x0419 tx timeout [ 125.092725] Bluetooth: hci1: command 0x0419 tx timeout [ 125.283755] Bluetooth: hci2: command 0x0419 tx timeout [ 125.732853] Bluetooth: hci5: command 0x0419 tx timeout [ 125.860791] Bluetooth: hci6: command 0x0419 tx timeout [ 125.923958] Bluetooth: hci7: command 0x0419 tx timeout [ 126.179766] Bluetooth: hci3: command 0x041b tx timeout [ 128.228919] Bluetooth: hci3: command 0x040f tx timeout [ 128.483854] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 130.275755] Bluetooth: hci3: command 0x0419 tx timeout [ 131.132355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.134902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.136688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.145368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.159917] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.169425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.207778] Bluetooth: hci4: HCI_REQ-0x0c1a [ 133.220024] Bluetooth: hci4: command 0x0409 tx timeout [ 135.267735] Bluetooth: hci4: command 0x041b tx timeout [ 137.315802] Bluetooth: hci4: command 0x040f tx timeout [ 139.364720] Bluetooth: hci4: command 0x0419 tx timeout [ 178.444516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.448067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.449279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.452591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.454255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.457258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.472358] Bluetooth: hci0: HCI_REQ-0x0c1a [ 179.074502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.076876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.078451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.081466] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.084240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.085139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.089991] Bluetooth: hci1: HCI_REQ-0x0c1a [ 179.134228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.156875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.158945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.168945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.170526] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 179.172780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.181767] Bluetooth: hci2: HCI_REQ-0x0c1a [ 179.497070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.498287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.609915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.622947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.624826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.625625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.636454] Bluetooth: hci5: HCI_REQ-0x0c1a [ 179.711623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.713507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.715252] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.719300] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.721185] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 179.722294] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.726369] Bluetooth: hci7: HCI_REQ-0x0c1a [ 180.516773] Bluetooth: hci0: command 0x0409 tx timeout [ 181.155704] Bluetooth: hci1: command 0x0409 tx timeout [ 181.219981] Bluetooth: hci2: command 0x0409 tx timeout [ 181.539730] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 181.731804] Bluetooth: hci7: command 0x0409 tx timeout [ 181.731943] Bluetooth: hci5: command 0x0409 tx timeout [ 182.564917] Bluetooth: hci0: command 0x041b tx timeout [ 183.203761] Bluetooth: hci1: command 0x041b tx timeout [ 183.268736] Bluetooth: hci2: command 0x041b tx timeout [ 183.338342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.353106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.355562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.359252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.363895] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.365808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.387751] Bluetooth: hci3: HCI_REQ-0x0c1a [ 183.779757] Bluetooth: hci5: command 0x041b tx timeout [ 183.780329] Bluetooth: hci7: command 0x041b tx timeout [ 184.612740] Bluetooth: hci0: command 0x040f tx timeout [ 185.252737] Bluetooth: hci1: command 0x040f tx timeout [ 185.316721] Bluetooth: hci2: command 0x040f tx timeout [ 185.444726] Bluetooth: hci3: command 0x0409 tx timeout [ 185.827733] Bluetooth: hci7: command 0x040f tx timeout [ 185.829223] Bluetooth: hci5: command 0x040f tx timeout [ 186.020124] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 186.659765] Bluetooth: hci0: command 0x0419 tx timeout [ 187.299722] Bluetooth: hci1: command 0x0419 tx timeout [ 187.363768] Bluetooth: hci2: command 0x0419 tx timeout [ 187.491703] Bluetooth: hci3: command 0x041b tx timeout [ 187.875785] Bluetooth: hci5: command 0x0419 tx timeout [ 187.876344] Bluetooth: hci7: command 0x0419 tx timeout [ 189.539834] Bluetooth: hci3: command 0x040f tx timeout [ 190.627748] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 191.588764] Bluetooth: hci3: command 0x0419 tx timeout [ 192.414669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.419911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.421292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.424184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.425473] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.426749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.430753] Bluetooth: hci4: HCI_REQ-0x0c1a [ 193.193112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.194696] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.195826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.199072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.200497] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 193.217935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.244726] Bluetooth: hci6: HCI_REQ-0x0c1a [ 194.467728] Bluetooth: hci4: command 0x0409 tx timeout [ 195.299732] Bluetooth: hci6: command 0x0409 tx timeout [ 196.515758] Bluetooth: hci4: command 0x041b tx timeout [ 197.347726] Bluetooth: hci6: command 0x041b tx timeout [ 198.563794] Bluetooth: hci4: command 0x040f tx timeout [ 199.395721] Bluetooth: hci6: command 0x040f tx timeout [ 200.611774] Bluetooth: hci4: command 0x0419 tx timeout [ 201.443865] Bluetooth: hci6: command 0x0419 tx timeout [ 240.552231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.553932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.554989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.557237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.559095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.560057] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.565188] Bluetooth: hci0: HCI_REQ-0x0c1a [ 241.096611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.103096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.105511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.118040] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.120457] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.124063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.130023] Bluetooth: hci1: HCI_REQ-0x0c1a [ 241.340223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.341494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.342940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.345738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.347407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.348614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.355760] Bluetooth: hci2: HCI_REQ-0x0c1a [ 241.557039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.561333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.563407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.566307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.568627] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.570671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.962787] Bluetooth: hci5: HCI_REQ-0x0c1a [ 242.218803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.222874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.224827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.232076] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.235826] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 242.237856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.244711] Bluetooth: hci7: HCI_REQ-0x0c1a [ 242.595721] Bluetooth: hci0: command 0x0409 tx timeout [ 243.171930] Bluetooth: hci1: command 0x0409 tx timeout [ 243.427731] Bluetooth: hci2: command 0x0409 tx timeout [ 244.003723] Bluetooth: hci5: command 0x0409 tx timeout [ 244.323842] Bluetooth: hci7: command 0x0409 tx timeout [ 244.643812] Bluetooth: hci0: command 0x041b tx timeout [ 245.033998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.035333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.037450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.041851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.043147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.045252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.052862] Bluetooth: hci3: HCI_REQ-0x0c1a [ 245.219855] Bluetooth: hci1: command 0x041b tx timeout [ 245.475768] Bluetooth: hci2: command 0x041b tx timeout [ 246.051841] Bluetooth: hci5: command 0x041b tx timeout [ 246.371721] Bluetooth: hci7: command 0x041b tx timeout [ 246.691737] Bluetooth: hci0: command 0x040f tx timeout [ 247.075723] Bluetooth: hci3: command 0x0409 tx timeout [ 247.267857] Bluetooth: hci1: command 0x040f tx timeout [ 247.523991] Bluetooth: hci2: command 0x040f tx timeout [ 248.099717] Bluetooth: hci5: command 0x040f tx timeout [ 248.419796] Bluetooth: hci7: command 0x040f tx timeout [ 248.739933] Bluetooth: hci0: command 0x0419 tx timeout [ 249.123726] Bluetooth: hci3: command 0x041b tx timeout [ 249.315732] Bluetooth: hci1: command 0x0419 tx timeout [ 249.571711] Bluetooth: hci2: command 0x0419 tx timeout [ 250.147761] Bluetooth: hci5: command 0x0419 tx timeout [ 250.467698] Bluetooth: hci7: command 0x0419 tx timeout [ 251.171778] Bluetooth: hci3: command 0x040f tx timeout [ 253.219730] Bluetooth: hci3: command 0x0419 tx timeout [ 254.897285] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.910853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.915468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.933001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.937608] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.948398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.974807] Bluetooth: hci6: HCI_REQ-0x0c1a [ 256.099783] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 257.059931] Bluetooth: hci6: command 0x0409 tx timeout [ 259.107787] Bluetooth: hci6: command 0x041b tx timeout [ 260.707788] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 261.155726] Bluetooth: hci6: command 0x040f tx timeout [ 263.203719] Bluetooth: hci6: command 0x0419 tx timeout [ 265.379787] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 269.988080] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 274.595839] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 279.203726] Bluetooth: hci4: Opcode 0x c03 failed: -110 2022/09/20 10:39:31 executor 7 failed 11 times: executor 7: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 10:39:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85406ea0 RDI=ffff888036762438 RBP=ffffffff85406ea0 RSP=ffff888032da79a0 R8 =0000000000000000 R9 =ffffffff85b02e57 R10=fffffbfff0b605ca R11=0000000000000001 R12=ffff888036761ac0 R13=ffff888036762438 R14=00000000ffffffff R15=ffff888036762438 RIP=ffffffff84244350 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f87eab6d540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f87eabbcb90 CR3=000000002b762000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00ff00ff00ff00 ff00ff00ffffff00 YMM01=0000000000000000 0000000000000000 0100010001000100 01000100010100ff YMM02=0000000000000000 0000000000000000 61305f315f315f4c 53534e45504f0030 YMM03=0000000000000000 0000000000000000 0000000000000000 00000000004f0030 YMM04=0000000000000000 0000000000000000 504f0061305f315f 315f4c53534e4550 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0e0b0e0 RDX=0000000000000000 RSI=ffffffff81784450 RDI=0000000000000001 RBP=ffff8880102c7578 RSP=ffff8880102c7488 R8 =ffffffff85eda984 R9 =ffffffff85eda988 R10=ffffed1002058eb1 R11=ffff8880102c7560 R12=ffff8880102c75e8 R13=0000000000000000 R14=ffff8880102c7520 R15=ffff888030ff1000 RIP=ffffffff8120521a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0e24d1d310 CR3=0000000035474000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000