Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 61.698906] sshd (230) used greatest stack depth: 24304 bytes left Warning: Permanently added '[localhost]:43524' (ECDSA) to the list of known hosts. 2024/11/11 23:49:09 fuzzer started 2024/11/11 23:49:10 dialing manager at localhost:46317 [ 65.632714] cgroup: Unknown subsys name 'net' [ 65.714488] cgroup: Unknown subsys name 'cpuset' [ 65.728930] cgroup: Unknown subsys name 'rlimit' 2024/11/11 23:49:27 syscalls: 203 2024/11/11 23:49:27 code coverage: enabled 2024/11/11 23:49:27 comparison tracing: enabled 2024/11/11 23:49:27 extra coverage: enabled 2024/11/11 23:49:27 setuid sandbox: enabled 2024/11/11 23:49:27 namespace sandbox: enabled 2024/11/11 23:49:27 Android sandbox: enabled 2024/11/11 23:49:27 fault injection: enabled 2024/11/11 23:49:27 leak checking: enabled 2024/11/11 23:49:27 net packet injection: enabled 2024/11/11 23:49:27 net device setup: enabled 2024/11/11 23:49:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/11 23:49:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/11 23:49:27 USB emulation: enabled 2024/11/11 23:49:27 hci packet injection: enabled 2024/11/11 23:49:27 wifi device emulation: enabled 2024/11/11 23:49:27 802.15.4 emulation: enabled 2024/11/11 23:49:27 fetching corpus: 0, signal 0/0 (executing program) 2024/11/11 23:49:28 starting 8 fuzzer processes 23:49:28 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x79) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2c}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd80}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x593}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda0c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc805}, 0x40) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1ff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10008000}, 0x40011) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x60, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0xa, 0x1, 0x2a}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000640), 0x0, 0x2, 0x1c}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}, 0x1000}, @dead_binder_done, @acquire], 0x84, 0x0, &(0x7f00000007c0)="4326e650034ac260734410c956cdbf59c8586864be53d243e33aa026efbff9c48945edeb297139bcad99bc3cc351c11e83e8724b81f4ea5f6168e4b360d9e0bbb1c6e83486f2586b340bf427d19409df5427d711741e688516f6fe47f2ea491f123ebf3f58f725c54af1abea9eab10d29e4b62e0a38e70d5fece51f963aacc9d7938873c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000008c0)={{r3, 0x8001, 0x3ff, 0x471, 0x101, 0x8001, 0x0, 0x1f, 0x742, 0x1, 0x673, 0x0, 0x80000001, 0x8, 0x8}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000980)=0x1, 0x101, 0x7) sendmsg(r0, &(0x7f0000000d80)={&(0x7f00000009c0)=@isdn={0x22, 0xa0, 0xaa, 0x4, 0x80}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="f8c468d07d7a4d093174fc37fbd49e7abfedfc4207c6de2beafe11496c43ccec4df533d5cc4f251ceee4db02a606eec61f6b95ded7ad23b2ddf0c724c6285d035112d7469035b4dd7aab1a", 0x4b}, {&(0x7f0000000ac0)="fbad76966bccaf8e223f15567da0ef5de0", 0x11}, {&(0x7f0000000b00)="19581b6eb225e1c5d6e128a2fdee3962bbb928412e6921621be26a797c08bc1cc742698957217646690d7e1b3bb8064a1d3a0c9b6c1735340e901a9d526a5fb250fceeb8f18c9df2726dc72365a11182d2ad50a0ad22dbcf7ad220174d4dd76a2fc59ac4f44805fb6059d5a0e5d2040a96a5582ebb01b9f7d28e39a03eb91aa4717c78823502d37a715f5437a60af51fd3b76484785907b4ee2e1b5f8c065a3cca75acf19b67c72406801f871c4be750f650d4789db52ebc2e", 0xb9}], 0x3, &(0x7f0000000c00)=[{0x40, 0x29, 0x6, "ee4a725659359999aba7be8c3d300d78ee32c815a3ccf5aec0e4f4daccc2d694ec9a9d60e002ecaec4"}, {0x20, 0xff, 0x7, "82e5e772d48e314832b5e41414"}, {0xf8, 0x111, 0x40, "d08d66dcccdf7095e7375874fa796899268fe7ad0d8e541727198eba13a54a2ce6924c45375f787fe585a4c355c14894acfa5e4b93f808279397325af068a2623c6654a31861949603992f92c3b4877e1bee643d81b678a4e16ffa7d6c622c2696e5571093f47edf80291323dde4932c4cb417265cc336155a71607eac86a26a7bbe7f6665b76bfdb9e144821fb95c31a5f47557bb93d002233fb8c907bc2f1b76ef2310eb2aeeff58f7d77b78050569a949756eb4f267b34c14846e01e55a61d6d49503806748a276b1df96f7c79f3cc3fc928f03951a1658557eca176d75333a25"}], 0x158}, 0x4) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xffffffffffffffff) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000dc0), 0x600000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000e00)='posixacl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000e40)) r5 = fsmount(r4, 0x0, 0x8a) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001040)={'sit0\x00', 0x0, 0x0, 0xcb, 0xda, 0x5, 0x28, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8000, 0x20, 0x2, 0xffffffff}}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001340)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x84, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 23:49:28 executing program 1: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80) r2 = socket$inet(0x2, 0x80000, 0xfffffffd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000000100)="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", 0xfa, r2}, 0x68) r3 = fsmount(0xffffffffffffffff, 0x1, 0x76) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff44}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mprotect(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x4) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000003c0)='IPVS\x00', &(0x7f0000000400)='./file0\x00', r3) r5 = fsmount(r3, 0x1, 0x81) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x72}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x58}}, 0x8904) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) r7 = fsmount(r5, 0x1, 0xd) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004005}, 0x48014) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r3) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x47a61b855a8cd77b) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000940)={@loopback, 0x71, r1}) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, r4, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x108}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000b80)={0x6a4, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x5a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "eac007dedda3521f73d483900c8979606f17ce46b85ea414314a3ed0a90d03f146a3f98f578e8ae7740f6f39ef040f82d21e9363eb64eea84f37b799a7449fa3b1f7eef198fb52007ef72560ee80675e6f64f06947ce64ef76e5cfc91eb84fe544860cf4ac294816b11de30b42a9ce97f5c1582cc9aca2636967a74a032ad4"}, @ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{/\\.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '#+})++{]{//\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$]~[\xdc[(\\-\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&-\xc0.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7454}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "5d07cef3e245995b5e4ef6dbf3f6aff4b89d53e0baf02a84547d937b76bd60a8082e6c21b31658230bb30aeee179c0ff3f48ec36b12a208d50bde4e862d249b1471193248da9f97f2fb3428ec855086e34ba6186408b0d86a515c77e3de3f1ec982d8200817e8283d30d6713b2440fa5a364f36fc5fe718ee0fb7483436db9039c959fc94afb1a6ea771bc8935aff703abd73e21c5b37f5b8acefdc2f549f816"}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/\xfc^[]&::\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*(]/\'(*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'@^]*.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\'\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':!$&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[+\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x70000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x1b\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'nq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "fa99a59b1f086d87a15c88dc6870f1c421431fb8212354c543249e80cb5556160d9a8542afb1c236a19072b49143a543ec514e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "24561298ac0cff6bc6dda086931bc2459d9e14ab585fe344b58d4e57e4b6fc720c45ffea5d2e805aa407c032f0c4ca24a334ad08e3f95ad1a751781159705f5e849c7bd386e486e70d96c632b2919d38d4142dddb846b5726358fa5c8453cfab5a85386eb19fae966ff31c3d0d4d66029c320f15c6f584cff1b01ac1dc4254fe893f61d77c6e14dc628839"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) 23:49:28 executing program 2: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xac}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x60000000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x45, 0x1, 0x9b50, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, @private0, 0x10, 0x10, 0x1ea27b36, 0x401}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @empty}, &(0x7f00000003c0)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @broadcast, @broadcast}, &(0x7f0000000440)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000d00)={&(0x7f0000000480)={0x848, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xeece}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3b}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x6, 0x3f, 0x1}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x81, 0x1, 0x2}, {0x9, 0x7, 0x40, 0xc39}, {0x2, 0x1, 0x6, 0x5}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc74, 0x24, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x800}, 0x20044015) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffeffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000f80)={'sit0\x00', &(0x7f0000000f00)={'syztnl1\x00', r4, 0x2f, 0x7f, 0x8, 0x81, 0x7d, @empty, @local, 0x40, 0x7, 0x20, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000fc0)) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020000}, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'syztnl0\x00', r8, 0x29, 0x6, 0xfe, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x20, 0x2, 0x6}}) r10 = socket(0x28, 0x2, 0x1) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f00000011c0)={@private1={0xfc, 0x1, '\x00', 0x1}, r3}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x800) 23:49:28 executing program 3: sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x8000000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x202000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x2010, r0, 0x8000000) r1 = fsmount(r0, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x7, 0x3, 0xf, @private2, @mcast1, 0x780, 0x20, 0x9, 0x5}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x69, r3}) socketpair(0x26, 0x800, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x8, 0x13, 0x3, 0x0, 0x6, 0x80800, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x1, 0xffffffff80000000, 0x101, 0x7, 0x2, 0x5, 0x20, 0x0, 0x7f, 0x0, 0x1}, 0x0, 0x4, r2, 0x1) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000002c0)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0xc0) r7 = socket(0x23, 0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', r3, 0x29, 0x3, 0x20, 0xffffffa5, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x700, 0x8000, 0x4, 0xe9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', r8, 0x2f, 0x2, 0x81, 0x9, 0x3, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0x6, 0x800}}) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x10080, 0x0) recvfrom(r2, &(0x7f0000000600)=""/212, 0xd4, 0x10000, &(0x7f0000000700)=@nfc_llcp={0x27, 0x1, 0x1, 0x2, 0x9, 0xda, "8a2116c79b86c5c274d960667bf73a76fb98b3eab23504da5bcd90effb9e00ed484904fcaeaf4e7357de7af620359c716c71cd9a4b94a5b896118ae803c935", 0x2b}, 0x80) io_uring_setup(0x67ac, &(0x7f0000000800)={0x0, 0x84e8, 0x10, 0x1, 0xdd}) [ 83.569146] audit: type=1400 audit(1731368968.958:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:49:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0xc001) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3f}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffffe0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4051}, 0x4015) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6e}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000129c}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x20}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xb2b25452b2915f85) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000009c0)={'wpan0\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000000d40)={0x560, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc5d}}, {0x8}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xf45, 0xff, 0x4, 0x1}, {0xbe3, 0x6, 0x1, 0x76}]}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x81, 0x24, 0x1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5c8}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 23:49:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbf88}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x7, 0xc, @empty, @loopback, 0x10, 0x80, 0x2, 0x5f}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r3 = socket(0x9, 0x1, 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x22}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcea}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xadd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xca5c}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0xa4}}, 0x41) r5 = fsmount(0xffffffffffffffff, 0x1, 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x90, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10cc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x400c814) bind(r0, &(0x7f0000000b40)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x80) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x80, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa0f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x40810) bind(r5, &(0x7f0000000d40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-ce\x00'}, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) 23:49:29 executing program 6: io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) r0 = eventfd(0x9) write$eventfd(r0, &(0x7f0000000080)=0x7, 0x8) r1 = fsmount(0xffffffffffffffff, 0x1, 0x71) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000000c0)=r1, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf0, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x8c, 0x3, "58481ecf28741669a91a32b26ad9c67a49be25f541953ed2aa1a15c16c946725faa386e8fc4bda406f1d3e9fb00263c2bf28ec49f0593b17fb07e36a76c3210da7fb580febe067e178cdee2247614f5d8739c7a379ac86c59dee9c8970294ee0d3a55e6d9d6838259d563816b059ca0941e23c9ec376a7ee67bbf241fe8b5db2c821f646d31afd52"}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040085}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r5) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x7f, 0x6, 0x20, 0x2, 0x0, 0x3ff, 0x800, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0x405662b6}, 0x40, 0xfffffffffffff801, 0x9, 0x9, 0x100, 0x740b, 0x1f, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5ee}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x86}]}, 0x70}, 0x1, 0x0, 0x0, 0x2001c000}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2880000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r6, 0xa00, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0xfffffff7, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x19}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x300000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x10000050}, 0x0) r7 = socket(0x6, 0x6, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x844) 23:49:29 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x8, 0xffffffff, 0x1, 0x86c, 0x7ff, 0x8, 0x87, 0x200, 0x3, 0x4, 0x8, 0x3, 0x7, 0x294e}, 0x20, [0x0, 0x0, 0x0, 0x0]}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe639}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xda}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb0}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x19}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair(0x2a, 0x2, 0x401, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r1, &(0x7f00000002c0)={0x11, 0x1c, 0x0, 0x1, 0x5}, 0x14) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000300), 0xf) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000340)=@target={'target ', {'PCI:', '1e', ':', '1a', ':', '8', '.', '18'}}, 0x16) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x29, 0x5, 0x23, 0x3, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x20, 0xffffffff, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', r3, 0x4, 0x7, 0x19, 0x9, 0x10, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xbc, 0x2209}}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4844) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'ip6_vti0\x00', r3, 0x2f, 0x7, 0x0, 0x3ff, 0x10, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0xfffffffd, 0x35e2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', r5, 0x2f, 0x5, 0x6, 0xbdc, 0x3, @local, @local, 0x8, 0x80, 0x80, 0x6}}) r6 = socket$inet6(0xa, 0x60534756a7ceea9b, 0x50) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000800)={0x3c87, {{0xa, 0x4e21, 0x3f, @private2, 0x3}}, {{0xa, 0x4e21, 0xe5d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x108) r7 = fsmount(r4, 0x1, 0x8b) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = fsmount(r4, 0x0, 0xcb) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0xc) [ 84.937810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.939193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.942315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.943135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.952846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.953886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.958127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.959426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.963931] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.966595] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.967296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.970082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.017022] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.019582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.020944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.031727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.035812] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.041898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.052850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.053985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.058983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.060483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.062105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.064135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.076787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.077822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.079391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.081138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.083369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.088866] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.089964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.091390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.095435] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.108334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.122293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.123949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.125284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.131031] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.132284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.138254] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.139423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.161924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.191958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.196573] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.203995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.243947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.258977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.280985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.023273] Bluetooth: hci1: command tx timeout [ 87.023349] Bluetooth: hci0: command tx timeout [ 87.089737] Bluetooth: hci2: command tx timeout [ 87.215291] Bluetooth: hci5: command tx timeout [ 87.215477] Bluetooth: hci3: command tx timeout [ 87.216936] Bluetooth: hci4: command tx timeout [ 87.217973] Bluetooth: hci6: command tx timeout [ 87.406796] Bluetooth: hci7: command tx timeout [ 89.070915] Bluetooth: hci0: command tx timeout [ 89.071485] Bluetooth: hci1: command tx timeout [ 89.134855] Bluetooth: hci2: command tx timeout [ 89.263700] Bluetooth: hci4: command tx timeout [ 89.263735] Bluetooth: hci6: command tx timeout [ 89.263788] Bluetooth: hci3: command tx timeout [ 89.264273] Bluetooth: hci5: command tx timeout [ 89.456214] Bluetooth: hci7: command tx timeout [ 91.119045] Bluetooth: hci0: command tx timeout [ 91.120221] Bluetooth: hci1: command tx timeout [ 91.182846] Bluetooth: hci2: command tx timeout [ 91.310768] Bluetooth: hci3: command tx timeout [ 91.311373] Bluetooth: hci5: command tx timeout [ 91.311962] Bluetooth: hci4: command tx timeout [ 91.312450] Bluetooth: hci6: command tx timeout [ 91.502742] Bluetooth: hci7: command tx timeout [ 93.166843] Bluetooth: hci0: command tx timeout [ 93.167423] Bluetooth: hci1: command tx timeout [ 93.230862] Bluetooth: hci2: command tx timeout [ 93.358757] Bluetooth: hci6: command tx timeout [ 93.359340] Bluetooth: hci4: command tx timeout [ 93.359903] Bluetooth: hci3: command tx timeout [ 93.360386] Bluetooth: hci5: command tx timeout [ 93.550747] Bluetooth: hci7: command tx timeout [ 102.452080] hrtimer: interrupt took 5236521 ns [ 144.819353] syz-executor.5 (287) used greatest stack depth: 24208 bytes left [ 147.640242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.642164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.643327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.645549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.647365] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.648541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.657235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.661117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.662757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.667840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.669065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.673658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.677169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.679376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.683034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.684193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.694360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.702928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.732597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.734875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.741954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.744406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.747221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.754471] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.771211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.799397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.803203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.806184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.812289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.814949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.817507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.819669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.824994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.826883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.834874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.840880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.842278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.847283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.853094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.854974] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.856302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.877913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.878851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.889058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.894729] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.898920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.900868] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.907809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.678720] Bluetooth: hci0: command tx timeout [ 149.742768] Bluetooth: hci1: command tx timeout [ 149.808318] Bluetooth: hci2: command tx timeout [ 149.934849] Bluetooth: hci3: command tx timeout [ 149.998841] Bluetooth: hci5: command tx timeout [ 149.998968] Bluetooth: hci4: command tx timeout [ 149.999738] Bluetooth: hci6: command tx timeout [ 149.999981] Bluetooth: hci7: command tx timeout [ 151.726861] Bluetooth: hci0: command tx timeout [ 151.791941] Bluetooth: hci1: command tx timeout [ 151.856707] Bluetooth: hci2: command tx timeout [ 151.988136] Bluetooth: hci3: command tx timeout [ 152.046817] Bluetooth: hci4: command tx timeout [ 152.048548] Bluetooth: hci7: command tx timeout [ 152.049027] Bluetooth: hci5: command tx timeout [ 152.049931] Bluetooth: hci6: command tx timeout [ 153.776925] Bluetooth: hci0: command tx timeout [ 153.838715] Bluetooth: hci1: command tx timeout [ 153.902751] Bluetooth: hci2: command tx timeout [ 154.030748] Bluetooth: hci3: command tx timeout [ 154.094731] Bluetooth: hci4: command tx timeout [ 154.095302] Bluetooth: hci6: command tx timeout [ 154.095330] Bluetooth: hci7: command tx timeout [ 154.096061] Bluetooth: hci5: command tx timeout [ 155.823214] Bluetooth: hci0: command tx timeout [ 155.886733] Bluetooth: hci1: command tx timeout [ 155.951711] Bluetooth: hci2: command tx timeout [ 156.088766] Bluetooth: hci3: command tx timeout [ 156.142786] Bluetooth: hci4: command tx timeout [ 156.143341] Bluetooth: hci7: command tx timeout [ 156.143877] Bluetooth: hci5: command tx timeout [ 156.144350] Bluetooth: hci6: command tx timeout [ 209.917040] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.918712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.919905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.923834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.925345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.926920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.038255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.039533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.040844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.046198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.049480] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.051544] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.173521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.197051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.199012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.211081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.219005] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.224092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.253315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.256742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.258389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.263713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.266787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.272077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.297513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.305253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.310462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.324000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.330567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.344567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.351749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.355965] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.358182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.359918] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.367263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.388999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.466969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.481844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.498006] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.507167] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.514776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.521162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.529853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.573301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.581981] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.589875] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.607988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.608880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.952815] Bluetooth: hci0: command tx timeout [ 212.081668] Bluetooth: hci1: command tx timeout [ 212.270876] Bluetooth: hci2: command tx timeout [ 212.336106] Bluetooth: hci3: command tx timeout [ 212.463785] Bluetooth: hci5: command tx timeout [ 212.465036] Bluetooth: hci4: command tx timeout [ 212.656656] Bluetooth: hci6: command tx timeout [ 212.782769] Bluetooth: hci7: command tx timeout [ 213.999645] Bluetooth: hci0: command tx timeout [ 214.126701] Bluetooth: hci1: command tx timeout [ 214.319856] Bluetooth: hci2: command tx timeout [ 214.382780] Bluetooth: hci3: command tx timeout [ 214.510726] Bluetooth: hci4: command tx timeout [ 214.511874] Bluetooth: hci5: command tx timeout [ 214.704648] Bluetooth: hci6: command tx timeout [ 214.830848] Bluetooth: hci7: command tx timeout [ 216.046771] Bluetooth: hci0: command tx timeout [ 216.174819] Bluetooth: hci1: command tx timeout [ 216.366771] Bluetooth: hci2: command tx timeout [ 216.430743] Bluetooth: hci3: command tx timeout [ 216.558783] Bluetooth: hci5: command tx timeout [ 216.558802] Bluetooth: hci4: command tx timeout [ 216.751017] Bluetooth: hci6: command tx timeout [ 216.880630] Bluetooth: hci7: command tx timeout [ 218.094819] Bluetooth: hci0: command tx timeout [ 218.224683] Bluetooth: hci1: command tx timeout [ 218.414711] Bluetooth: hci2: command tx timeout [ 218.479502] Bluetooth: hci3: command tx timeout [ 218.609882] Bluetooth: hci5: command tx timeout [ 218.609906] Bluetooth: hci4: command tx timeout [ 218.800641] Bluetooth: hci6: command tx timeout [ 218.929638] Bluetooth: hci7: command tx timeout [ 272.196726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.200292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.205842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.208439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.210890] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.213789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.435282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.438119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.440839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.452108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.455924] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.460484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.463963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.467049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.469395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.487936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.492828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.495050] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.522133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.524100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.525207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.534321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.568563] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.574776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.583000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.592171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.599386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.609323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.609867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.611301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.638104] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.643800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.646074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.647968] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.650969] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.652375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.655937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.660920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.661075] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.664901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.675658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.686788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.688211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.705832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.710747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.725047] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.727278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.730840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.287778] Bluetooth: hci0: command tx timeout [ 274.478690] Bluetooth: hci1: command tx timeout [ 274.543661] Bluetooth: hci2: command tx timeout [ 274.670705] Bluetooth: hci3: command tx timeout [ 274.735663] Bluetooth: hci5: command tx timeout [ 274.736380] Bluetooth: hci7: command tx timeout [ 274.798771] Bluetooth: hci4: command tx timeout [ 274.799452] Bluetooth: hci6: command tx timeout [ 276.334837] Bluetooth: hci0: command tx timeout [ 276.527665] Bluetooth: hci1: command tx timeout [ 276.590661] Bluetooth: hci2: command tx timeout [ 276.718760] Bluetooth: hci3: command tx timeout [ 276.782744] Bluetooth: hci7: command tx timeout [ 276.782768] Bluetooth: hci5: command tx timeout [ 276.846690] Bluetooth: hci6: command tx timeout [ 276.846931] Bluetooth: hci4: command tx timeout [ 278.382686] Bluetooth: hci0: command tx timeout [ 278.574826] Bluetooth: hci1: command tx timeout [ 278.640638] Bluetooth: hci2: command tx timeout [ 278.766657] Bluetooth: hci3: command tx timeout [ 278.830759] Bluetooth: hci5: command tx timeout [ 278.831322] Bluetooth: hci7: command tx timeout [ 278.898131] Bluetooth: hci4: command tx timeout [ 278.898861] Bluetooth: hci6: command tx timeout [ 280.430907] Bluetooth: hci0: command tx timeout [ 280.622673] Bluetooth: hci1: command tx timeout [ 280.687444] Bluetooth: hci2: command tx timeout [ 280.814658] Bluetooth: hci3: command tx timeout [ 280.878680] Bluetooth: hci5: command tx timeout [ 280.878730] Bluetooth: hci7: command tx timeout [ 280.942779] Bluetooth: hci4: command tx timeout [ 280.943261] Bluetooth: hci6: command tx timeout [ 334.757105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.763834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.773879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.783874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.787447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.788526] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.790428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.791729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.796207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.797312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.800328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.801494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.803121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.815161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.818039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.820843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.822940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.824256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.849183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.863988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.866211] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.869381] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.874987] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.877514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.997656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.001196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.002622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.005272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.006993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.008301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.034075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.054702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.060150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.083252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.119782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.122657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.128249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.129801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.133082] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.133329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.136202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.169003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.185297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.195057] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.210846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.222106] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.225522] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.229985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.814698] Bluetooth: hci0: command tx timeout [ 336.878771] Bluetooth: hci2: command tx timeout [ 336.880160] Bluetooth: hci1: command tx timeout [ 336.942665] Bluetooth: hci3: command tx timeout [ 337.070880] Bluetooth: hci4: command tx timeout [ 337.200631] Bluetooth: hci6: command tx timeout [ 337.262709] Bluetooth: hci5: command tx timeout [ 337.967740] Bluetooth: hci7: command tx timeout [ 338.862649] Bluetooth: hci0: command tx timeout [ 338.926645] Bluetooth: hci1: command tx timeout [ 338.928090] Bluetooth: hci2: command tx timeout [ 338.992643] Bluetooth: hci3: command tx timeout [ 339.118673] Bluetooth: hci4: command tx timeout [ 339.246632] Bluetooth: hci6: command tx timeout [ 339.310681] Bluetooth: hci5: command tx timeout [ 340.015642] Bluetooth: hci7: command tx timeout [ 340.912528] Bluetooth: hci0: command tx timeout [ 340.976625] Bluetooth: hci2: command tx timeout [ 340.976642] Bluetooth: hci1: command tx timeout [ 341.040615] Bluetooth: hci3: command tx timeout [ 341.167709] Bluetooth: hci4: command tx timeout [ 341.294808] Bluetooth: hci6: command tx timeout [ 341.359764] Bluetooth: hci5: command tx timeout [ 342.064639] Bluetooth: hci7: command tx timeout [ 342.961601] Bluetooth: hci0: command tx timeout [ 343.022716] Bluetooth: hci1: command tx timeout [ 343.023637] Bluetooth: hci2: command tx timeout [ 343.087718] Bluetooth: hci3: command tx timeout [ 343.214741] Bluetooth: hci4: command tx timeout [ 343.344627] Bluetooth: hci6: command tx timeout [ 343.406812] Bluetooth: hci5: command tx timeout [ 344.110895] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:54:29 Registers: info registers vcpu 0 RAX=1ffff11002c4d959 RBX=ffff88801626c280 RCX=ffffffff817d3f1b RDX=ffff888035d70000 RSI=ffffffff817d3f28 RDI=ffff88801626cac8 RBP=0000000000000000 RSP=ffff8880353979e8 R8 =0000000000000000 R9 =ffff888035d70a38 R10=0000000000000000 R11=00000000000c33ea R12=00007f20fdf47000 R13=dffffc0000000000 R14=00007f20fe0dd000 R15=00007f20fe0dcfff RIP=ffffffff8151d950 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa5f097f620 CR3=0000000025950000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888008ff0280 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806cf09b01 RSI=ffff88806cf09b30 RDI=ffff88806cf09ae8 RBP=ffff88806cf09af0 RSP=ffff88806cf099d8 R8 =0000000000000001 R9 =ffff88806cf09ad8 R10=000000000003c001 R11=0000000000003eff R12=ffff88806cf09af8 R13=ffff88806cf09ae0 R14=ffff88806cf09b30 R15=ffff88806cf09a98 RIP=ffffffff81149cee RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4e055a6f4 CR3=000000001b97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fd4e056947000007fd4e0568f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000