Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:34584' (ECDSA) to the list of known hosts. 2025/01/15 09:24:29 fuzzer started 2025/01/15 09:24:29 dialing manager at localhost:33219 syzkaller login: [ 68.752333] cgroup: Unknown subsys name 'net' [ 68.894642] cgroup: Unknown subsys name 'cpuset' [ 68.932747] cgroup: Unknown subsys name 'rlimit' [ 74.574160] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/15 09:24:47 syscalls: 212 2025/01/15 09:24:47 code coverage: enabled 2025/01/15 09:24:47 comparison tracing: enabled 2025/01/15 09:24:47 extra coverage: enabled 2025/01/15 09:24:47 setuid sandbox: enabled 2025/01/15 09:24:47 namespace sandbox: enabled 2025/01/15 09:24:47 Android sandbox: enabled 2025/01/15 09:24:47 fault injection: enabled 2025/01/15 09:24:47 leak checking: enabled 2025/01/15 09:24:47 net packet injection: enabled 2025/01/15 09:24:47 net device setup: enabled 2025/01/15 09:24:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/15 09:24:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/15 09:24:47 USB emulation: enabled 2025/01/15 09:24:47 hci packet injection: enabled 2025/01/15 09:24:47 wifi device emulation: enabled 2025/01/15 09:24:47 802.15.4 emulation: enabled 2025/01/15 09:24:47 fetching corpus: 0, signal 0/0 (executing program) 2025/01/15 09:24:48 starting 8 fuzzer processes 09:24:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000104) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x344, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x1d4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x344}, 0x1, 0x0, 0x0, 0x24044}, 0x40040c1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4fc3}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xce2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r1 = socket(0x2c, 0x3, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2b3856}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fc0fd24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b788e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c659844}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39dff1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd70efcd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2414c1b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xda8bee4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e778cb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70153187}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}]}, 0xe8}}, 0x10) r3 = socket(0x18, 0x3, 0x6) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x47877a1d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10080004}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x95) connect$802154_dgram(r3, &(0x7f0000000dc0)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb0}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, 0x34}}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x94, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x94}, 0x1, 0x0, 0x0, 0x200408c4}, 0x400c000) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0x1, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 09:24:48 executing program 1: keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x34}}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r3 = syz_open_dev$vcsa(&(0x7f0000000340), 0x5, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x15c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000010}, 0x80) pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RWALK(r5, &(0x7f00000007c0)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x2, 0x7}, {0x2, 0x1, 0x4}, {0x2, 0x2, 0x4}, {0x10, 0x1, 0x6}, {0x8, 0x3, 0x7}, {0x0, 0x0, 0x6}]}}, 0x57) r6 = socket(0x7, 0x800, 0xffff) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x8800) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x48a}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x8805}, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x0, 0xd08, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f65}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x8000) 09:24:48 executing program 2: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c015) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x840) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd4, 0x4, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1ba7319a}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xd30}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1fc7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x34}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5c7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x63}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe93b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x680, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000740)=0x1, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r4 = syz_open_dev$usbmon(&(0x7f0000000a00), 0x8, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000a40)={0x2002}) epoll_wait(r1, &(0x7f0000000a80)=[{}, {}], 0x2, 0x21) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb0, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x600000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd1b8}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20048800) r6 = syz_open_dev$vcsa(&(0x7f0000000c80), 0x12e4, 0x145002) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r6) 09:24:48 executing program 3: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x20, 0x1, 0x6}, 0x8}}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x400c0) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0xfff, 0x12001) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x40840) r3 = socket(0xb, 0x2, 0x7) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x66f2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) write$P9_RLCREATE(r2, &(0x7f0000000400)={0x18, 0xf, 0x1, {{0x1, 0x3, 0x3}, 0x57}}, 0x18) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r2, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x204003, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x2004c000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000d00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)={0x444, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x274, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x98}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6ad}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf61}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3211176}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x466e932a}}, {0x8, 0x6, r4}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) [ 87.400536] audit: type=1400 audit(1736933088.945:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:24:48 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x4e7) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x800000000000000, 0x2) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000240)={0x64c1, 0x9}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000280)=0x9, 0x4) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r4 = syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x75}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x2e}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89a2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x40040) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4884}, 0x10048840) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x22a08}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200400c0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008801}, 0x4896) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xcc, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x53}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4a85}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x666}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20048050}, 0x1480) 09:24:49 executing program 5: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x6160c91b9be6e0c, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}}}, 0xe) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x276, 0x484000) write$P9_RLOCK(r2, &(0x7f0000000140)={0x8, 0x35, 0x1}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x3f, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}}, 0x0, 0x0, 0x5, 0x0, "dd9c9dbf96cc8325ccfb224a2fce892612c814431ab92f7c2fe0c5c72b07dac623010a10b2012f6062772885e4cbea92b95321e56de483675557ac86fbea6cdbfb781ca38f2f707001a73a939f2fafa0"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @sack_perm, @mss={0x2, 0x8}, @mss={0x2, 0x4}, @window={0x3, 0x401, 0x8}, @timestamp, @mss={0x2, 0x11cd0b9c}], 0x7) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) write$P9_RWRITE(r0, &(0x7f0000000300)={0xb, 0x77, 0x2, 0xd3c2}, 0xb) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="43a38c8a6a4107f9e752bfb5b5e21128", 0x10) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8880) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x51) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000600)={0x1270, 0x3, 0x1, 0x3, 0x70bd26, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@nested={0x124f, 0x3c, 0x0, 0x1, [@generic="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", @generic="91ad5a53533b3ed50dc235014085627fb88a64aa51660bf06ce8d378adb5f9daa3c0d39ab66995e1aa0d2abc2a1f40d81d", @generic="762e7e065f2529164a3a7b5b5cac0549517f218de95fd7b05c2bf733f2f153431b30f72191b28e44ab7171713bf5c544eb52cfb10bd24288d7156d7ff492d1ec4e6b218485ab900ae0ab9046b6da5590d3999352535cbf98fb73368d24f0cb25e7774257cb8461940648029b77edbfcc5edc972dccd237c9cbe2527924c4bd6e2351bb70bfb2871d6cefa389e559bfc984262e7337a51486070a3b4d674a27d75796b6fcff397660caf121877778157f040e744ed5aeafc40a62d6a1100c3b83bf58bced59ee4ff8c155f57db38c34ae113d333151bc", @generic="5a941cb70c89bc6cac97f08630b5cd5427aa930e23cae3d8284e72f7a21cae30879f1f23e965446878569170485e49797e13d934c5d4edfd4751b7", @typed={0x4, 0x75}, @typed={0x2a, 0x45, 0x0, 0x0, @binary="46c6102fabb03f5f7c3825083f4c30b5358c6f4c4c9c1edf311acb739d11ed09fb056d97dd0c"}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="8fbe33c2f23ea63fbd7868a47cfacb5c40229ccb60f5e63a06f142ecb9d876d20c03a6d7b3ca3656be5429d92c3119b628906ba842c1e5e1bfd36a2bf822452ac75b42ce0448c3a929f55b28304fe5a8de72bdf8b0671af5e196ed99ef679c35367cff66559d48c4da537c32a9be045256f7e8a80932109d46a5ab138876a8e7a69c3cb697dbaf5bd8236d59dcb5efb2edd9150ee2e7fd1afe10666270caff87f3c92dd8ce5ed7095b9bb8d8fd1997e52b4bc97ad12b003fba5baad29d4cbf5603c68fca19"]}, @typed={0xc, 0x42, 0x0, 0x0, @u64=0x8}]}, 0x1270}, 0x1, 0x0, 0x0, 0x4}, 0x4004085) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001980)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000001a80)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000002680)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002640)={&(0x7f0000001dc0)={0x858, 0x0, 0xc0a, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x1, 0x30, 0x10001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8a00, 0x1, 0x1, 0x6}, {0xff, 0x6, 0xdf, 0xffffffff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3cc}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x858}, 0x1, 0x0, 0x0, 0x8001}, 0x20008804) 09:24:49 executing program 6: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x430183, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x13, 0x4, 0x301, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x9}, [@typed={0x6, 0x2f, 0x0, 0x0, @str='+\x00'}, @generic="9d99b85190a21c445d768450656f424bc170761fd4ff7f398d64874b589569e6014c70d190555196cdcfcd8afd1857ffa012f3cd8c343e5ab409a34e0290b01b42b147bc0f6eafaac7e7b49860704ed3dc"]}, 0x70}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000045) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x804, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000080) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x1000}, @sack_perm, @window={0x3, 0x6, 0x80}], 0x3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r1, 0x608, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004041}, 0xc000) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000580)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0xc001) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x121101, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x1c}}, 0x81) r5 = syz_open_dev$vcsa(&(0x7f0000000b40), 0x8, 0x101202) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000b80)) 09:24:49 executing program 7: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x90002006}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x24e0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x101082, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) read$usbmon(r2, &(0x7f0000000240)=""/137, 0x89) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/247, 0xf7, 0x0, &(0x7f0000000400)=""/11, 0xb}, &(0x7f0000000480)=0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0x9, 0x200000) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_vlan\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}]}, 0x1c}}, 0x40801) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x240400d1) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000800)=0xffff, 0x4) write$snapshot(r2, &(0x7f0000000840)="60d735d8ae8b7775cc31dc0f2b95b0e8f61aa1dac0eca818fcedfa8d1b2218a466f8587b49fa8fa1e2abcf4d878948e90924db8030299b112990c837d366299e5351fe3f88d74a7da2f71215814135c0e6e3351831c775f318d00bb0da07f1681b27fba7484ec4d8efb461d346993f1e637e1dce8074d6c0038c15e52eb84d6bc5b6bd2de52073a6bd7d90db1e607112f02480c9a3779f008e352a2a4882ae113330773da862d83b384bd66a94402b40c8e4", 0xb2) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x48084) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18}, 0x4) [ 88.951671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.952486] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.955320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.956711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.962164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.962768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.963042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.967494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.970159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.972263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.973072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.973993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.977122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.981243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.982196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.999148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.000517] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.001077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.033003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.035235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.038526] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.041308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.042695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.045575] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.048392] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.050141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.060205] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.060480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.063553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.065176] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.067092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.075678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.076930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.078528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.081425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.085310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.104500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.107502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.107579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.108774] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.109273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.118171] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.120128] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.121768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.122488] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.127345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.128430] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.139230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.038589] Bluetooth: hci0: command tx timeout [ 91.038975] Bluetooth: hci2: command tx timeout [ 91.102020] Bluetooth: hci1: command tx timeout [ 91.102999] Bluetooth: hci6: command tx timeout [ 91.171746] Bluetooth: hci3: command tx timeout [ 91.175935] Bluetooth: hci4: command tx timeout [ 91.176288] Bluetooth: hci5: command tx timeout [ 91.230055] Bluetooth: hci7: command tx timeout [ 93.085968] Bluetooth: hci0: command tx timeout [ 93.086097] Bluetooth: hci2: command tx timeout [ 93.150063] Bluetooth: hci6: command tx timeout [ 93.151707] Bluetooth: hci1: command tx timeout [ 93.214608] Bluetooth: hci4: command tx timeout [ 93.214746] Bluetooth: hci5: command tx timeout [ 93.214897] Bluetooth: hci3: command tx timeout [ 93.278029] Bluetooth: hci7: command tx timeout [ 95.134427] Bluetooth: hci0: command tx timeout [ 95.134455] Bluetooth: hci2: command tx timeout [ 95.198079] Bluetooth: hci1: command tx timeout [ 95.198199] Bluetooth: hci6: command tx timeout [ 95.264119] Bluetooth: hci4: command tx timeout [ 95.264215] Bluetooth: hci3: command tx timeout [ 95.264367] Bluetooth: hci5: command tx timeout [ 95.326989] Bluetooth: hci7: command tx timeout [ 97.182955] Bluetooth: hci0: command tx timeout [ 97.183017] Bluetooth: hci2: command tx timeout [ 97.246954] Bluetooth: hci1: command tx timeout [ 97.246988] Bluetooth: hci6: command tx timeout [ 97.310104] Bluetooth: hci3: command tx timeout [ 97.310403] Bluetooth: hci4: command tx timeout [ 97.310502] Bluetooth: hci5: command tx timeout [ 97.374023] Bluetooth: hci7: command tx timeout [ 151.793707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.795611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.797550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.801395] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.803424] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.804729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.851639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.856054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.857449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.863380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.865546] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.867176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.927769] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.928283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.935512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.938321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.938714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.943134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.944321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.946249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.952154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.953880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.957143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.962006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.962039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.986794] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.992170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.998016] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.004263] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.004569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.006884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.011315] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.013178] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.014201] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.015268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.016292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.020879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.021273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.022536] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.025277] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.034126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.034987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.038943] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.049420] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.050256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.058218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.068181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.072416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.821943] Bluetooth: hci0: command tx timeout [ 153.885999] Bluetooth: hci1: command tx timeout [ 154.078090] Bluetooth: hci3: command tx timeout [ 154.142071] Bluetooth: hci4: command tx timeout [ 154.142526] Bluetooth: hci2: command tx timeout [ 154.142649] Bluetooth: hci6: command tx timeout [ 154.142753] Bluetooth: hci5: command tx timeout [ 154.207929] Bluetooth: hci7: command tx timeout [ 155.870075] Bluetooth: hci0: command tx timeout [ 155.934008] Bluetooth: hci1: command tx timeout [ 156.126005] Bluetooth: hci3: command tx timeout [ 156.190182] Bluetooth: hci4: command tx timeout [ 156.190365] Bluetooth: hci6: command tx timeout [ 156.190440] Bluetooth: hci5: command tx timeout [ 156.190535] Bluetooth: hci2: command tx timeout [ 156.253943] Bluetooth: hci7: command tx timeout [ 157.918926] Bluetooth: hci0: command tx timeout [ 157.981966] Bluetooth: hci1: command tx timeout [ 158.173947] Bluetooth: hci3: command tx timeout [ 158.238096] Bluetooth: hci2: command tx timeout [ 158.240026] Bluetooth: hci4: command tx timeout [ 158.240220] Bluetooth: hci5: command tx timeout [ 158.240326] Bluetooth: hci6: command tx timeout [ 158.302966] Bluetooth: hci7: command tx timeout [ 159.965977] Bluetooth: hci0: command tx timeout [ 160.030021] Bluetooth: hci1: command tx timeout [ 160.222929] Bluetooth: hci3: command tx timeout [ 160.285995] Bluetooth: hci4: command tx timeout [ 160.286045] Bluetooth: hci2: command tx timeout [ 160.286161] Bluetooth: hci6: command tx timeout [ 160.286230] Bluetooth: hci5: command tx timeout [ 160.350054] Bluetooth: hci7: command tx timeout [ 214.129409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.134548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.137249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.157269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.161036] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.163415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.252384] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.254152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.277141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.277587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.287400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.288692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.303233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.315973] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.321971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.322244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.330793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.334187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.437496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.443107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.446323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.486150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.491390] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.492130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.517496] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.521218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.525055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.534119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.536297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.537632] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.540354] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.548474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.561145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.615097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.624263] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.631216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.637005] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.637127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.640079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.642560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.644057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.653153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.663462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.668279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.678191] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.681783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.682481] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.692361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.221990] Bluetooth: hci0: command tx timeout [ 216.350957] Bluetooth: hci1: command tx timeout [ 216.478217] Bluetooth: hci2: command tx timeout [ 216.606917] Bluetooth: hci5: command tx timeout [ 216.606958] Bluetooth: hci3: command tx timeout [ 216.734168] Bluetooth: hci7: command tx timeout [ 216.734416] Bluetooth: hci4: command tx timeout [ 216.926917] Bluetooth: hci6: command tx timeout [ 218.270979] Bluetooth: hci0: command tx timeout [ 218.399045] Bluetooth: hci1: command tx timeout [ 218.526140] Bluetooth: hci2: command tx timeout [ 218.654212] Bluetooth: hci5: command tx timeout [ 218.654323] Bluetooth: hci3: command tx timeout [ 218.781975] Bluetooth: hci7: command tx timeout [ 218.782121] Bluetooth: hci4: command tx timeout [ 218.973939] Bluetooth: hci6: command tx timeout [ 220.319120] Bluetooth: hci0: command tx timeout [ 220.446927] Bluetooth: hci1: command tx timeout [ 220.574108] Bluetooth: hci2: command tx timeout [ 220.703903] Bluetooth: hci3: command tx timeout [ 220.703984] Bluetooth: hci5: command tx timeout [ 220.830162] Bluetooth: hci4: command tx timeout [ 220.831170] Bluetooth: hci7: command tx timeout [ 221.022104] Bluetooth: hci6: command tx timeout [ 222.367337] Bluetooth: hci0: command tx timeout [ 222.493938] Bluetooth: hci1: command tx timeout [ 222.621987] Bluetooth: hci2: command tx timeout [ 222.749929] Bluetooth: hci3: command tx timeout [ 222.750041] Bluetooth: hci5: command tx timeout [ 222.878921] Bluetooth: hci7: command tx timeout [ 222.879037] Bluetooth: hci4: command tx timeout [ 223.069977] Bluetooth: hci6: command tx timeout [ 276.788692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.792993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.795903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.800951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.803403] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.804739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.855964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.872425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.874323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.929272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.971307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.006332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.039840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.043432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.046566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.069131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.088664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.097408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.100395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.118602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.122477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.127437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.131269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.163948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.165425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.169896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.172876] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.174699] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.218683] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.231366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.345463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.349216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.358425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.365097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.368718] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.371074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.437773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.447072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.455309] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.458300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.458694] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.468490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.492203] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.498580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.507374] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.511089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.511941] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.514878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.878063] Bluetooth: hci0: command tx timeout [ 279.070336] Bluetooth: hci1: command tx timeout [ 279.199188] Bluetooth: hci2: command tx timeout [ 279.261933] Bluetooth: hci4: command tx timeout [ 279.518042] Bluetooth: hci3: command tx timeout [ 279.774911] Bluetooth: hci6: command tx timeout [ 279.775372] Bluetooth: hci7: command tx timeout [ 279.775626] Bluetooth: hci5: command tx timeout [ 280.927880] Bluetooth: hci0: command tx timeout [ 281.117963] Bluetooth: hci1: command tx timeout [ 281.246086] Bluetooth: hci2: command tx timeout [ 281.309978] Bluetooth: hci4: command tx timeout [ 281.566917] Bluetooth: hci3: command tx timeout [ 281.822213] Bluetooth: hci5: command tx timeout [ 281.822274] Bluetooth: hci7: command tx timeout [ 281.822361] Bluetooth: hci6: command tx timeout [ 282.974893] Bluetooth: hci0: command tx timeout [ 283.166971] Bluetooth: hci1: command tx timeout [ 283.294052] Bluetooth: hci2: command tx timeout [ 283.359061] Bluetooth: hci4: command tx timeout [ 283.614906] Bluetooth: hci3: command tx timeout [ 283.870011] Bluetooth: hci7: command tx timeout [ 283.870126] Bluetooth: hci5: command tx timeout [ 283.870183] Bluetooth: hci6: command tx timeout [ 285.021908] Bluetooth: hci0: command tx timeout [ 285.214925] Bluetooth: hci1: command tx timeout [ 285.341971] Bluetooth: hci2: command tx timeout [ 285.406888] Bluetooth: hci4: command tx timeout [ 285.661943] Bluetooth: hci3: command tx timeout [ 285.919962] Bluetooth: hci6: command tx timeout [ 285.920053] Bluetooth: hci5: command tx timeout [ 285.920158] Bluetooth: hci7: command tx timeout [ 339.368624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.371161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.372224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.378018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.379227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.379743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.505565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.507406] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.509404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.516278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.519659] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.526964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.568687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.573602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.585055] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.588651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.590716] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.591528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.656684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.671568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.680158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.702750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.710737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.712853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.768332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.778300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.780015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.818172] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.819303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.820135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.881339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.890277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.895320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.914502] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.915056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.917403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.917615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.920118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.920351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.927580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.929304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.940504] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.944314] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.946428] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.947489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.964050] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.974286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.985732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.406192] Bluetooth: hci0: command tx timeout [ 341.597928] Bluetooth: hci1: command tx timeout [ 341.662397] Bluetooth: hci2: command tx timeout [ 341.789912] Bluetooth: hci3: command tx timeout [ 341.917908] Bluetooth: hci4: command tx timeout [ 342.047064] Bluetooth: hci7: command tx timeout [ 342.110998] Bluetooth: hci6: command tx timeout [ 342.430987] Bluetooth: hci5: command tx timeout [ 343.456036] Bluetooth: hci0: command tx timeout [ 343.646025] Bluetooth: hci1: command tx timeout [ 343.710480] Bluetooth: hci2: command tx timeout [ 343.837911] Bluetooth: hci3: command tx timeout [ 343.965916] Bluetooth: hci4: command tx timeout [ 344.094022] Bluetooth: hci7: command tx timeout [ 344.157941] Bluetooth: hci6: command tx timeout [ 344.478936] Bluetooth: hci5: command tx timeout [ 345.502903] Bluetooth: hci0: command tx timeout [ 345.694249] Bluetooth: hci1: command tx timeout [ 345.758847] Bluetooth: hci2: command tx timeout [ 345.886962] Bluetooth: hci3: command tx timeout [ 346.014057] Bluetooth: hci4: command tx timeout [ 346.141975] Bluetooth: hci7: command tx timeout [ 346.206004] Bluetooth: hci6: command tx timeout [ 346.528860] Bluetooth: hci5: command tx timeout [ 347.550004] Bluetooth: hci0: command tx timeout [ 347.742145] Bluetooth: hci1: command tx timeout [ 347.805941] Bluetooth: hci2: command tx timeout [ 347.933986] Bluetooth: hci3: command tx timeout [ 348.063047] Bluetooth: hci4: command tx timeout [ 348.189969] Bluetooth: hci7: command tx timeout [ 348.253909] Bluetooth: hci6: command tx timeout [ 348.573988] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 09:29:58 Registers: info registers vcpu 0 RAX=ffff88802ac40001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802ac3fb01 RSI=ffff88802ac3fbe0 RDI=ffff88802ac3f6b8 RBP=ffff88802ac3f700 RSP=ffff88802ac3f638 R8 =0000000000000001 R9 =ffff88802ac3f6e8 R10=000000000003ab2c R11=0000000000021f44 R12=ffff88802ac3f708 R13=ffff88802ac3f6f0 R14=ffff88802ac3fbe0 R15=ffff88802ac3f6a8 RIP=ffffffff81349b1a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f678f890540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f678f961710 CR3=000000001363e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87f0a430 RBX=b733ab67388145f3 RCX=ffffffff814f3f5e RDX=fffffbfff0fe11dd RSI=0000000000000008 RDI=ffffffff87f0a470 RBP=ffff888009a34248 RSP=ffff88801aaa75f8 R8 =0000000000000000 R9 =fffffbfff0fe11dc R10=ffffffff87f08ee7 R11=0000000000000000 R12=ffff888009a33780 R13=0000000000000000 R14=ffffffff86403a30 R15=0000000000000000 RIP=ffffffff814fe94c RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056522f3a54c8 CR3=000000002856e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000