Warning: Permanently added '[localhost]:47632' (ECDSA) to the list of known hosts. 2024/12/19 11:20:09 fuzzer started 2024/12/19 11:20:09 dialing manager at localhost:44037 syzkaller login: [ 75.601446] cgroup: Unknown subsys name 'net' [ 75.727773] cgroup: Unknown subsys name 'cpuset' [ 75.747186] cgroup: Unknown subsys name 'rlimit' 2024/12/19 11:20:26 syscalls: 205 2024/12/19 11:20:26 code coverage: enabled 2024/12/19 11:20:26 comparison tracing: enabled 2024/12/19 11:20:26 extra coverage: enabled 2024/12/19 11:20:26 setuid sandbox: enabled 2024/12/19 11:20:26 namespace sandbox: enabled 2024/12/19 11:20:26 Android sandbox: enabled 2024/12/19 11:20:26 fault injection: enabled 2024/12/19 11:20:26 leak checking: enabled 2024/12/19 11:20:26 net packet injection: enabled 2024/12/19 11:20:26 net device setup: enabled 2024/12/19 11:20:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/19 11:20:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/19 11:20:26 USB emulation: enabled 2024/12/19 11:20:26 hci packet injection: enabled 2024/12/19 11:20:26 wifi device emulation: enabled 2024/12/19 11:20:26 802.15.4 emulation: enabled 2024/12/19 11:20:26 fetching corpus: 0, signal 0/0 (executing program) 2024/12/19 11:20:27 starting 8 fuzzer processes 11:20:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x4841) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2a4}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x232}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008814) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000540)=""/241) r4 = syz_open_dev$sg(&(0x7f0000000640), 0x1, 0x8900) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x90000809}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x41) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x255}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004004) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000980)) 11:20:27 executing program 1: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x8000) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/29, 0x1d}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xa0401, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_dev$sg(&(0x7f0000000180), 0xfff, 0x40140) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000300)=0xb359) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0xc004) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000480)=""/109) r4 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000680)={&(0x7f0000000540), &(0x7f0000000580)=""/236, 0xec}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) select(0x40, &(0x7f00000006c0)={0x1, 0x7, 0x10001, 0x1f, 0x10001, 0x7fff, 0x1000, 0x4bd}, &(0x7f0000000700)={0x40, 0x0, 0x5, 0x7, 0x0, 0x4, 0x8001, 0x80000000}, &(0x7f0000000740)={0x1000, 0x2, 0x0, 0x401, 0xa0, 0x800, 0xff, 0x2a}, &(0x7f00000007c0)={r5, r6/1000+10000}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x1, 0x3, 0x6, @remote, @rand_addr=' \x01\x00', 0x40, 0x20, 0x9, 0x80000000}}) 11:20:27 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x6, 0x6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x40, 0x700, 0x8, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r0, 0x2f, 0x40, 0x4, 0x73e6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x7800, 0x4, 0x9}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x29, 0x0, 0x1, 0x9d1c, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x10, 0x700, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r3, 0x29, 0x20, 0x4, 0x401, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0x20, 0x7, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', r3, 0x2f, 0x2, 0xe1, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x8000, 0x40, 0x7fffffff, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x4, 0x80, 0x55, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, 0x700, 0x40, 0x9, 0x40}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', r5, 0x29, 0xc4, 0x3c, 0x7f, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x8000, 0x8, 0x3dd8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', r4, 0x29, 0x2, 0x2, 0x6762, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x80000001, 0x8001}}) setsockopt$inet6_mreq(r6, 0x29, 0xe, &(0x7f0000000600)={@mcast2, r4}, 0x14) r8 = socket$inet6(0xa, 0x6, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r7, 0x29, 0x9, 0x22, 0x3, 0x53, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x80, 0xffff0001, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'sit0\x00', r5, 0x0, 0x80, 0x40, 0x3, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8000, 0x40, 0x9, 0x80000000}}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000007c0)={@dev={0xfe, 0x80, '\x00', 0x11}, r3}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000800), 0x4) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x240, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000880)=0x6, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000008c0)=0x800, 0x4) 11:20:27 executing program 3: sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2d8, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb058}, {0x6, 0x16, 0x1356}, {0x5}, {0x6, 0x11, 0x8}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x73a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x4a52a2aa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x47cc}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3b2}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5}, {0x6}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x7}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x1}, 0x20008001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000006c0)) r4 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000980)={@dev={0xfe, 0x80, '\x00', 0x2b}}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x7c}}, 0x40) r8 = socket(0x4, 0x5, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c004}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), r1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x88080082}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 11:20:27 executing program 6: set_robust_list(&(0x7f0000000040)={0x0, 0x10001, &(0x7f0000000000)}, 0x18) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf8ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x60}}, 0x4014044) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x8000000) r1 = socket$netlink(0x10, 0x3, 0xa) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x2, 0x4, 0x1, 0x4}}, 0x0, 0x0, 0x1}, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) r2 = socket(0x2, 0x800, 0x95) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x14, 0x4) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000300)={0x0, 0x9, 0x4, 0x3ff}, 0x10) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r3, 0x2f, 0x3, 0x10, 0x80, 0x2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7, 0xc6, 0x6}}) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xd2, &(0x7f0000000540)="427cb57218604e6854ab3b45493dab96bf7d57229cc61fb260d5832255874865571a28e8891d7465f3544797f406085669c5e9fdc1d41162220ef32300dbd47bcbc5e2c1d0db16979985020d855951abd8c2cbb2df6d184b9324461df341ef8cc238243992b9e3945c4d5e3fa1abc2f21b358caf039566d587d92a7ed398bdd4e8ee04a76b2a71356acf9d849e23a1b5cd485199b21f85d457a9ed95d67f27757b909feaff547a63f9246a904c246445f51f04d9db1da37376", 0xb9) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000640)={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xeab1}, {0xa, 0x4e20, 0x9, @private2, 0x1f}, 0x8c, [0xf42a00, 0x0, 0x9, 0x20, 0x8, 0x9, 0x80000001, 0x7]}, 0x5c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b0346514ba97"}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000845}, 0x4000010) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x1724, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000000) 11:20:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0xffff, 0x110e03) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000002c0)) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000380)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000340)}) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x1e23f) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)={0x3f4, 0x12, 0x300, 0x70bd2b, 0x25dfdbff, {0x15, 0x7f, 0x0, 0x98, {0x4e20, 0x4e20, [0x800, 0x2, 0x3ff, 0x3], [0x800, 0x2, 0x1, 0x4], 0x0, [0x6, 0x3f]}, 0x9, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x28, 0x1, "d5fb0307da9b7b94ee6ae1c9f7bd65b1b2f5c83d84d725d2fc608d4bb996f078ca6f236d"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "c28a771fcc6dde0888209fb737e40421be7d68c2d20b8b213dc8335144be3092aeede247ab9027c2ebbbea4c23b70375c73fa1453c2e854d75ab8cf5e5d96ae5e2eafa93d33cd1d223764148a69b693ecb685e70a7eaf21053c1fb8f14e154fc7b5c19aed5c840116a129f0a99307e3baa2fa9af17f18765ae2058d5a7c0f63aa93b437ed566284d9007441bac02d1481f9dbfd4ff73bd5e86d85d9c1aaa190cee40b394548c30d7f4c7983de835bb9d86fa9cb0ee978d47322725fb6a4d429fdc38ee3790347c57"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "c765a18d8da06b35da05d63a0f2d8bdd4966e8b76515ffd9e07a51538ddc033dc99341c2de0151f7122ec3326a9b027aeaef28365634da6a68d7233093e142ca463bfd66e76399ec163aa820a2dc4397d7d616103e19364a5126a4f4df66e6f4464e19b1f0ee6246cc8296164ede28e468e3027193deb92f1906fee3a46ab7c56a113111183c872dc6a74fa42c20e2d7a9ada22184db33a2bbbfb74eac163989f5e45de3027a93f6"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "599d53ac51135ab1a59d0cb1afb19a07e64fec2abf808bdf74f0d4d838bdff9b7e69501d217d1a494d3e1c644e415c465a0a9bcdbbf9df2a90cc4ce909f380d4213fa091194c651406e05179ab21d6eb5afa85cff2115e0b906c1933a5944b5d5b704bf001a1e9e716c7e623435202fb13cd81c024addaf1a1df17e51b7cebb3af03d770"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "9a08702e46ab9e21a0217867588638a708a84f7e8d6db69d67d141a2c909ad3f6a8a045c2ea849f1155ba0f36cb23d0c46542e7f8f5bfbd45f2817116f569f153c94bf1aee74b02445f52ebb078457839e3d73ad40c78e738d2d9ca931e5aa66354ec7ef5c6305e7f8672b0ae356e6bfc4f988eb9ff0d5691ba4d13f2bad0abab81a9d0cb6143c5d131aecf35997e02aeb825c3ca780e05135cf14ba145e1c46c3f84f7905a636e8a81b8580edc234404f702549d07128af071629d4a7b4f3d0ddb7fba9fe19049f7b"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "8d45ff9904f6"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "358f3372b8b9a93be9af"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "c075e95ad4266cfca0ee1da62dd96f00d8412f7dd2b70badb3b9d3e96aa15d6bf42855b34f10cd2f9629b0f8e1c17d59669ee9bab4ff573a41e6c2157e02085ecf42353e874441c4148aba869258fd1305086b8b1d8797a8bb5b9398c467a0eaf612c04db244ffc62ab6f0ef9b146e2c84f0e2efc05ac26d078e8291d5ae8b93840dcad1c0a0de6f6acca0fbddbd"}]}, 0x3f4}}, 0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x80, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc77}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80090}, 0x20000000) read$usbmon(r2, &(0x7f0000000b40)=""/111, 0x6f) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1f0001}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}]}, 0x3c}}, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000cc0)=0x9) 11:20:28 executing program 5: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x1) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x8801) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x20840, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}}, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000540)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000580)={0x9bdcdd0}, 0x4) r5 = socket(0x28, 0x1, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) [ 93.274322] audit: type=1400 audit(1734607228.011:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:20:28 executing program 7: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)={0x3d, ""/61}) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000080)={0xe5, ""/229}) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000180)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x90, 0x0, &(0x7f0000001400)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd, @fda={0x66646185, 0x0, 0x1, 0x5}, @flat=@handle={0x73682a85, 0x1100}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001340)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/94, 0x5e, 0x1, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/4096, 0x1000, 0x2, 0x35}, @fd}, &(0x7f00000013c0)={0x0, 0x28, 0x50}}, 0x1440}], 0x9, 0x0, &(0x7f00000014c0)="a26201998623500ded"}) r1 = syz_open_dev$sg(&(0x7f0000001540), 0x9377, 0x86c1) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000001580)={0x86, ""/134}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000001640)={0x89, ""/137}) r2 = syz_io_uring_complete(0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001880)={0x53, 0xfffffffffffffffc, 0x7, 0xc0, @buffer={0x0, 0x8e, &(0x7f0000001700)=""/142}, &(0x7f00000017c0)="7084698ec399d3", &(0x7f0000001800)=""/41, 0x10000, 0x17, 0x1, &(0x7f0000001840)}) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001900), &(0x7f0000001940)=0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000001980), &(0x7f00000019c0)=0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001a00), 0x800, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x50, r0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000001b00)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x10000000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001b40)="8f54f592df8af5dee8b0eba1ca0966e023f624754e9d877c89cd5abeec64aef074639102a48865ed3454ee0a0e0fad8daf5107babc3c48d2be67f6f317a0fe958a5b82e1b0c2b4193874c0888c6b6721f0e372f6086eb90110fb68767aa968a5f28ab5b379b6083a26cbba4507ce95bb93f46e1ae0670d32de0d9ee020", 0x7d) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) [ 94.737074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.737377] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.738100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.738704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.742404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.745872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.746738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.747484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.748207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.750507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.752157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.755089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.758292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.758439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.759658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.763125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.763837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.765113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.767171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.773602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.775063] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.776227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.778323] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.780062] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.781685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.783635] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.784747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.788026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.788781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.789599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.790523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.808939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.821168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.834515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.837167] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.841264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.842432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.849141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.850756] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.851602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.858775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.860231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.863572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.867822] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.869491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.894940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.912163] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.915852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.815343] Bluetooth: hci4: command tx timeout [ 96.882100] Bluetooth: hci3: command tx timeout [ 96.882701] Bluetooth: hci1: command tx timeout [ 96.883306] Bluetooth: hci0: command tx timeout [ 96.883856] Bluetooth: hci2: command tx timeout [ 96.943030] Bluetooth: hci6: command tx timeout [ 96.943645] Bluetooth: hci7: command tx timeout [ 97.008049] Bluetooth: hci5: command tx timeout [ 98.863112] Bluetooth: hci4: command tx timeout [ 98.928187] Bluetooth: hci2: command tx timeout [ 98.928689] Bluetooth: hci0: command tx timeout [ 98.929238] Bluetooth: hci1: command tx timeout [ 98.929719] Bluetooth: hci3: command tx timeout [ 98.991041] Bluetooth: hci7: command tx timeout [ 98.991535] Bluetooth: hci6: command tx timeout [ 99.057583] Bluetooth: hci5: command tx timeout [ 100.911090] Bluetooth: hci4: command tx timeout [ 100.976739] Bluetooth: hci3: command tx timeout [ 100.978372] Bluetooth: hci1: command tx timeout [ 100.979500] Bluetooth: hci0: command tx timeout [ 100.980621] Bluetooth: hci2: command tx timeout [ 101.040027] Bluetooth: hci6: command tx timeout [ 101.042057] Bluetooth: hci7: command tx timeout [ 101.103964] Bluetooth: hci5: command tx timeout [ 102.960112] Bluetooth: hci4: command tx timeout [ 103.023261] Bluetooth: hci2: command tx timeout [ 103.023757] Bluetooth: hci1: command tx timeout [ 103.025037] Bluetooth: hci0: command tx timeout [ 103.025513] Bluetooth: hci3: command tx timeout [ 103.088084] Bluetooth: hci6: command tx timeout [ 103.088586] Bluetooth: hci7: command tx timeout [ 103.153170] Bluetooth: hci5: command tx timeout [ 157.633235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.634785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.636272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.650265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.652793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.654355] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.699519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.704673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.705980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.709196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.711351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.716389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.753426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.792330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.793235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.803995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.806578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.810188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.840062] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.841342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.844749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.847780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.851106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.857292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.857499] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.860406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.861561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.864530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.865057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.866801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.873202] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.878243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.880060] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.881248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.885046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.893589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.898496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.904229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.908350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.908467] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.910338] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.912319] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.914210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.949555] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.951275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.965424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.972742] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.974161] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.728573] Bluetooth: hci0: command tx timeout [ 159.792029] Bluetooth: hci1: command tx timeout [ 159.919067] Bluetooth: hci7: command tx timeout [ 159.982988] Bluetooth: hci3: command tx timeout [ 160.047023] Bluetooth: hci2: command tx timeout [ 160.047732] Bluetooth: hci6: command tx timeout [ 160.048426] Bluetooth: hci4: command tx timeout [ 160.111011] Bluetooth: hci5: command tx timeout [ 161.776033] Bluetooth: hci0: command tx timeout [ 161.839938] Bluetooth: hci1: command tx timeout [ 161.967072] Bluetooth: hci7: command tx timeout [ 162.031006] Bluetooth: hci3: command tx timeout [ 162.095080] Bluetooth: hci4: command tx timeout [ 162.095591] Bluetooth: hci6: command tx timeout [ 162.096290] Bluetooth: hci2: command tx timeout [ 162.159949] Bluetooth: hci5: command tx timeout [ 163.823121] Bluetooth: hci0: command tx timeout [ 163.887101] Bluetooth: hci1: command tx timeout [ 164.015995] Bluetooth: hci7: command tx timeout [ 164.078976] Bluetooth: hci3: command tx timeout [ 164.143116] Bluetooth: hci4: command tx timeout [ 164.143618] Bluetooth: hci6: command tx timeout [ 164.144417] Bluetooth: hci2: command tx timeout [ 164.208158] Bluetooth: hci5: command tx timeout [ 165.871090] Bluetooth: hci0: command tx timeout [ 165.937112] Bluetooth: hci1: command tx timeout [ 166.062954] Bluetooth: hci7: command tx timeout [ 166.127127] Bluetooth: hci3: command tx timeout [ 166.190999] Bluetooth: hci2: command tx timeout [ 166.191541] Bluetooth: hci6: command tx timeout [ 166.192147] Bluetooth: hci4: command tx timeout [ 166.255954] Bluetooth: hci5: command tx timeout [ 201.642376] hrtimer: interrupt took 4160388 ns [ 220.278547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.280082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.281198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.283173] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.284259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.285652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.287003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.296498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.299152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.304625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.311158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.313511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.314835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.316280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.316448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.318192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.318778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.330990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.367128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.368389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.381810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.382579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.387156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.387949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.395556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.437687] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.439677] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.443383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.450601] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.456413] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.476527] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.476950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.479040] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.482185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.484375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.485577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.517254] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.524227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.527384] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.540697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.552300] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.552323] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.557543] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.559837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.570114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.579308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.582165] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.584355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 222.384052] Bluetooth: hci2: command tx timeout [ 222.384194] Bluetooth: hci0: command tx timeout [ 222.447132] Bluetooth: hci1: command tx timeout [ 222.511092] Bluetooth: hci4: command tx timeout [ 222.511245] Bluetooth: hci3: command tx timeout [ 222.638977] Bluetooth: hci6: command tx timeout [ 222.703224] Bluetooth: hci7: command tx timeout [ 222.703318] Bluetooth: hci5: command tx timeout [ 224.432929] Bluetooth: hci2: command tx timeout [ 224.434003] Bluetooth: hci0: command tx timeout [ 224.496112] Bluetooth: hci1: command tx timeout [ 224.559407] Bluetooth: hci4: command tx timeout [ 224.559974] Bluetooth: hci3: command tx timeout [ 224.687133] Bluetooth: hci6: command tx timeout [ 224.751029] Bluetooth: hci7: command tx timeout [ 224.752100] Bluetooth: hci5: command tx timeout [ 226.478995] Bluetooth: hci2: command tx timeout [ 226.479050] Bluetooth: hci0: command tx timeout [ 226.542935] Bluetooth: hci1: command tx timeout [ 226.608959] Bluetooth: hci3: command tx timeout [ 226.609519] Bluetooth: hci4: command tx timeout [ 226.735008] Bluetooth: hci6: command tx timeout [ 226.800068] Bluetooth: hci5: command tx timeout [ 226.801655] Bluetooth: hci7: command tx timeout [ 228.528921] Bluetooth: hci0: command tx timeout [ 228.529009] Bluetooth: hci2: command tx timeout [ 228.591063] Bluetooth: hci1: command tx timeout [ 228.655189] Bluetooth: hci4: command tx timeout [ 228.655221] Bluetooth: hci3: command tx timeout [ 228.784098] Bluetooth: hci6: command tx timeout [ 228.847072] Bluetooth: hci5: command tx timeout [ 228.848082] Bluetooth: hci7: command tx timeout [ 282.176208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.178043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.183822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.195944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.203880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.205669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.233681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.235056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.237227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.239508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.248318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.249504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.296399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.297899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.299287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.303618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.307660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.308664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.434390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.436402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.437593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.438488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.440026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.440443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.447186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.459098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.473073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.478202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.479026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.489329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.500031] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.503071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.516041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.520103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.546082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.547084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.557176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.559437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.576297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.602071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.623112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.628523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.634095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.635180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.658117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.690744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.722553] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.737270] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.271032] Bluetooth: hci1: command tx timeout [ 284.271112] Bluetooth: hci0: command tx timeout [ 284.334944] Bluetooth: hci2: command tx timeout [ 284.526958] Bluetooth: hci4: command tx timeout [ 284.592610] Bluetooth: hci3: command tx timeout [ 284.719025] Bluetooth: hci5: command tx timeout [ 284.782998] Bluetooth: hci6: command tx timeout [ 284.783187] Bluetooth: hci7: command tx timeout [ 286.319932] Bluetooth: hci1: command tx timeout [ 286.319955] Bluetooth: hci0: command tx timeout [ 286.382977] Bluetooth: hci2: command tx timeout [ 286.575015] Bluetooth: hci4: command tx timeout [ 286.640015] Bluetooth: hci3: command tx timeout [ 286.767047] Bluetooth: hci5: command tx timeout [ 286.830939] Bluetooth: hci7: command tx timeout [ 286.831432] Bluetooth: hci6: command tx timeout [ 288.367627] Bluetooth: hci0: command tx timeout [ 288.368334] Bluetooth: hci1: command tx timeout [ 288.431964] Bluetooth: hci2: command tx timeout [ 288.623012] Bluetooth: hci4: command tx timeout [ 288.686920] Bluetooth: hci3: command tx timeout [ 288.815915] Bluetooth: hci5: command tx timeout [ 288.879922] Bluetooth: hci7: command tx timeout [ 288.880411] Bluetooth: hci6: command tx timeout [ 290.416769] Bluetooth: hci0: command tx timeout [ 290.417348] Bluetooth: hci1: command tx timeout [ 290.479229] Bluetooth: hci2: command tx timeout [ 290.671932] Bluetooth: hci4: command tx timeout [ 290.735901] Bluetooth: hci3: command tx timeout [ 290.863481] Bluetooth: hci5: command tx timeout [ 290.927979] Bluetooth: hci7: command tx timeout [ 290.928466] Bluetooth: hci6: command tx timeout [ 344.571422] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.573203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.577090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.586129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.589422] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.591608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.707512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.711758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.713012] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.721064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.722669] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.723787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.765556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.767903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.769250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.773769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.776711] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.777763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.789187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.797045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.804947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.837110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.838387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.866226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.867254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.868388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.869354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.880160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.890590] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.908063] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.913705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.915548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.923406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.948939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.988221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.988281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.999956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.004375] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.005383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.022016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.025215] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.044141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.184485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.196075] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.209408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.228051] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.260089] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.311741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.671955] Bluetooth: hci0: command tx timeout [ 346.734918] Bluetooth: hci1: command tx timeout [ 346.799030] Bluetooth: hci2: command tx timeout [ 346.927120] Bluetooth: hci3: command tx timeout [ 346.990996] Bluetooth: hci4: command tx timeout [ 347.056293] Bluetooth: hci5: command tx timeout [ 347.183010] Bluetooth: hci6: command tx timeout [ 347.375935] Bluetooth: hci7: command tx timeout [ 348.720004] Bluetooth: hci0: command tx timeout [ 348.784894] Bluetooth: hci1: command tx timeout [ 348.847906] Bluetooth: hci2: command tx timeout [ 348.974892] Bluetooth: hci3: command tx timeout [ 349.039996] Bluetooth: hci4: command tx timeout [ 349.102909] Bluetooth: hci5: command tx timeout [ 349.231976] Bluetooth: hci6: command tx timeout [ 349.424910] Bluetooth: hci7: command tx timeout [ 350.768215] Bluetooth: hci0: command tx timeout [ 350.831899] Bluetooth: hci1: command tx timeout [ 350.896097] Bluetooth: hci2: command tx timeout [ 351.023965] Bluetooth: hci3: command tx timeout [ 351.087905] Bluetooth: hci4: command tx timeout [ 351.152054] Bluetooth: hci5: command tx timeout [ 351.280875] Bluetooth: hci6: command tx timeout [ 351.472855] Bluetooth: hci7: command tx timeout [ 352.816038] Bluetooth: hci0: command tx timeout [ 352.879900] Bluetooth: hci1: command tx timeout [ 352.943915] Bluetooth: hci2: command tx timeout [ 353.071942] Bluetooth: hci3: command tx timeout [ 353.134993] Bluetooth: hci4: command tx timeout [ 353.199942] Bluetooth: hci5: command tx timeout [ 353.327912] Bluetooth: hci6: command tx timeout [ 353.520077] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:25:29 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=1ffff110012c0f74 RCX=ffffffff81503bae RDX=1ffffffff0ba03fb RSI=0000000000000008 RDI=0000000000000000 RBP=ffffffff863fd634 RSP=ffff888009607b90 R8 =0000000000000001 R9 =fffffbfff0c7f912 R10=ffffffff863fc897 R11=0000000000000001 R12=ffffffff85d01fd8 R13=ffffffff81a497c0 R14=ffff8880095e3780 R15=0000000000000000 RIP=ffffffff81503c82 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b8f13f24c8 CR3=000000000b770000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888009738001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888009737f01 RSI=ffff888009737f00 RDI=ffff8880097378a0 RBP=ffff888009737f00 RSP=ffff8880097377f8 R8 =0000000000000001 R9 =ffff8880097378d0 R10=000000000003aa55 R11=000000000000aa69 R12=0000000000000008 R13=ffff888009730000 R14=ffff888009737f00 R15=ffff888009737890 RIP=ffffffff81349abe RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fd964ff080 CR3=00000000252d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc40094247000007fc400941f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000