Warning: Permanently added '[localhost]:56818' (ECDSA) to the list of known hosts. 2025/01/23 18:43:22 fuzzer started 2025/01/23 18:43:22 dialing manager at localhost:45511 syzkaller login: [ 78.409345] cgroup: Unknown subsys name 'net' [ 78.502513] cgroup: Unknown subsys name 'cpuset' [ 78.526474] cgroup: Unknown subsys name 'rlimit' [ 85.648255] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 18:43:51 syscalls: 207 2025/01/23 18:43:51 code coverage: enabled 2025/01/23 18:43:51 comparison tracing: enabled 2025/01/23 18:43:51 extra coverage: enabled 2025/01/23 18:43:51 setuid sandbox: enabled 2025/01/23 18:43:51 namespace sandbox: enabled 2025/01/23 18:43:51 Android sandbox: enabled 2025/01/23 18:43:51 fault injection: enabled 2025/01/23 18:43:51 leak checking: enabled 2025/01/23 18:43:51 net packet injection: enabled 2025/01/23 18:43:51 net device setup: enabled 2025/01/23 18:43:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 18:43:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 18:43:51 USB emulation: enabled 2025/01/23 18:43:51 hci packet injection: enabled 2025/01/23 18:43:51 wifi device emulation: enabled 2025/01/23 18:43:51 802.15.4 emulation: enabled 2025/01/23 18:43:51 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 18:43:53 starting 8 fuzzer processes 18:43:53 executing program 0: r0 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "6c551ab16837253944ed86f5dc0f3cf82123450feb3c4313ec8e6408c25e60c2b80aad71f73510ebe810f0af8a9318692c59b7f83406bb0c9575ec963c4c5b39", 0x3b}, 0x48, 0xfffffffffffffff8) keyctl$reject(0x13, r0, 0x8, 0x5, r1) r2 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='fscrypt:', r1) keyctl$get_persistent(0x16, 0xee00, r2) keyctl$unlink(0x9, r0, r2) request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='logon\x00', 0xfffffffffffffffc) r3 = syz_usb_connect(0x0, 0x5af, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x91, 0x18, 0xd4, 0xff, 0x46d, 0x8b9, 0xd21e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59d, 0x2, 0x8, 0x0, 0x80, 0x2, [{{0x9, 0x4, 0xfa, 0x0, 0xf, 0x8c, 0xa3, 0xf, 0x2, [], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x4, 0x0, 0xc8}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x40, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}, @generic={0xfd, 0x30, "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"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xea, 0x4e, 0xfb}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x1f, 0x90, 0x50, [@generic={0xdc, 0xc, "84a1e4efb335190ad927e7e9c28c37816fbd7ca6948297a5ac9bdb58f5623edb2ec69663dd166a88649278e8bdd1072bd33129efca62edd3ab2680c9b9460cb8df5b2aab41d3ba834aac4f1f1d0105863db73efedd279c5bae700e8945e55166172a89504343b93522465153e6378788af398cd322321a621046bcfb751e2d880d22e2ef34eae240cc52eb5657c337904b45df4946fae505a21848d1b1e22a6975a49c4a0392359a63f2556efbb26245750dee07bebc146683bb1cae9bb87df8497a0c0636458a1ebde71a2daea6f03ff6000ac0c3d286969a06"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x40, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x100}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x9c, 0xce, 0xff}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x6, 0x7f, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x4}, @generic={0xc, 0x8, "9082bc8c4a4dc3000190"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x4, 0x3f, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd9, 0x8001}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x4, 0x5, 0x94, [@generic={0x40, 0x1, "2c72fbbbc5ebbe52ad10abaa949e10e2af661cafbf49945b7871e201a1fa4b23b8f366ac459091b540ac454a8a6c15fca24b5a2ac3632878c1a7ebf09d42"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x9, 0x3, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x80, 0x4, 0x64, [@generic={0xbf, 0x1, "9e8054b209be81cd72b784abab535d7f73a5691df6b2140905671cd3575f8c24c2971e8b4dc51eab4a8d61e3f96214a83bdd199f85c709443c84da962333aac2346b10e15abc19d7a7e6c19f1ca4b951f5bae26677e75976f4824c0e3f9a92f469d61ef5756481fc56e5c03d8f22e3ec03a7d46720512e48e584d6021cfd73ebedc64082c920c9a6d0c08960d112f15554530c5a21a1ac04e2be5c6ed37e312b3817da4e5aec8858796681532478a55debe31b6dea815de7247bc8cbea"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x1, 0x0, 0x81, [@generic={0x19, 0x21, "e341d2fa74220b522ca2871d16271a78d273c65f11a02f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2b, 0x81, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @generic={0x3c, 0x10, "2d16d122092604951ebb88556f507532a851424219ccb36cf4939375f9af0953c8fc84fe08adb9046bdefec1ba97e4d3ea9cde98023b7ab44e45"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x6}]}}]}}, {{0x9, 0x4, 0xd9, 0xff, 0x2, 0xe2, 0x5e, 0x14, 0x80, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x54, 0x1, 0x0, 0x3f, 'I'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x40, 0x3, "b666ca9d"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x7, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0xba, 0x4, "", "e4"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x80, 0xe2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2d, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0xa3}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x20, 0x9, 0x0, [@generic={0x64, 0x4, "a98235e4621a01b14d280b6936d559a621f5069d5a9b954e4b56007f0f9eab158099bea4079df6e0ce16e4a236d9f594504ed5a2814f68cc69a34a0a11371ce81dc2fc2d1cfc56599fb05ad08cc6adac965c007c878f136cc66687415f03d0956955"}, @generic={0xe1, 0xe, "1fe42b114e661c9f9a63a28aedd1f50dc36d26584520695c497842311483597a8048697cef48622c8a81424d4e4cd1fa6c26da715fa13b228f8c44b6e94cecfa49d424dc733ef0e65dd803f50e72ea92c8f3f5ba8473e4cd09de0c99b25ad43b5ea5f4eb61f74b301837207157314788023dfe0d47134261b23241d575bed70a75ecfc220bc58862deb3a3a025a6c241e4c7e0d1076743b3fe4466ba1aa41e130b580bbd0d4b1a4184715e176946163705e9e1cc7dde7fb47228359a6f412eb96ebb0c951f5358b87cfafd530269114b1d2f8ba980ac906a111b9183ac4328"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x6, 0x1, 0x1, 0x10, 0x7}, 0xf, &(0x7f0000000940)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x30, 0x89, 0x7f}]}, 0x2, [{0xe3, &(0x7f0000000980)=@string={0xe3, 0x3, "5dcc1f227b4d4661031ac9233635a9f88c6f4aaac9908e3aefacd3ed5da98dfe60574126b9df33515f147a7ce3931822c036adcf0c749cc3a635f5c11f1c2cccc97d7552d0c6e17a552d7aab2687d0c6c3f326166a3dca57876dfc74f8c5bf46831de1b2af28d95fc21e0377f3fc76373108cce77d5141a3bb283e2ab5b7dd12d0e2f3713a7cf2dbe15aee2fe8b6e55711432a2602de3cbc878bf1b17e38e92447c9405e1e80db3f193fa9b12b1083ce5329229c6ef56834a22718c7ca56a3fe94e9367b3b84c84c9130029b2e88aa2f861f42d420fe03067cbb5e2649e1e4a4f6"}}, {0x1e, &(0x7f0000000a80)=@string={0x1e, 0x3, "02a43200c10ee64045e95ed3a9eaf010f64318932f78011c600fdb7a"}}]}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000b00)=@ready={0x0, 0x0, 0x8, "a5a11f37", {0x1, 0x1, 0xffe6, 0x7, 0x5}}) syz_usb_ep_write(r3, 0x0, 0x28, &(0x7f0000000b40)="7f3b6c3708464ff1fa781d06d0650e2f84a3d3275294051fefad37f234a085474ac5decec00e43a6") socket$nl_generic(0x10, 0x3, 0x10) keyctl$link(0x8, r1, r2) socketpair(0x5, 0x3, 0x400, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x78, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x20044800) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000dc0), 0x500, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x50) keyctl$get_persistent(0x16, 0x0, r0) socketpair(0x8, 0x800, 0x5, &(0x7f0000000f00)) r6 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r6, r1) 18:43:53 executing program 1: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf0, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x11}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x32b7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff2aee}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc000}, 0x880) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x12, 0x5, 0x20, @loopback, @remote, 0x80, 0x8000, 0x9d5, 0x3}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x220, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40844) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) io_submit(0x0, 0x3, &(0x7f00000007c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000500)="8868ae19fed0573a5196c89fdf7647d6048ef3d0400c4160f977097b55ed62e2e42907335e58bbffc7d7973e86a6cf50f097e24f3ee1125a3d9b197c6e3c160959b25208a18e2bafac79d4915f7d098fea1637891a028ab329c501bc6cb08ce14aa46dd8c08149680a8c", 0x6a, 0xade, 0x0, 0x2, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, 0xffffffffffffffff, &(0x7f0000000600)="651fe04a092648d71aece0c715dfabde97231701595a59f8c3d9158d4e4b7905e5de49aa17b886554293cb361f292511094ecf36381a3f5c53b1809d443937a90efd55f31a6b9991f7833173a2fc6306be1853f88d97ea09f2a788c86a3402e3a46e69ba34cc97dc73d60244eca5366150221207af69b22c97b98094fe21e6101440a97c16c67da0db4338ebad4b67368765facecef22235f6086056", 0x9c, 0xffff, 0x0, 0x1, r0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f0000000700)="720d4cedbf7c567dbcd2827b226b1cd3e1f7", 0x12, 0x4, 0x0, 0x0, r4}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) recvmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000008c0)=""/190, 0xbe}, {&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/71, 0x47}, {&(0x7f0000001b00)=""/223, 0xdf}, {&(0x7f0000001c00)=""/86, 0x56}], 0x6, &(0x7f0000001d00)=""/144, 0x90}, 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r4) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x54, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480d0}, 0x80090) r7 = accept(r0, &(0x7f0000001fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000002040)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x60, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000021c0)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000002240)=0x1) 18:43:53 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x0, 0x5, 0x800, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1, 0x88cf, 0x707, 0x660}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x76, 0x3, 0x4, 0x8, 0x0, 0x8000, 0x40025, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3b430ce0, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x40206, 0xffffffffffffff99, 0x1, 0x7, 0x814e, 0x0, 0x9, 0x0, 0x48836795, 0x0, 0x9}, 0xffffffffffffffff, 0x7, r2, 0x0) fstat(r4, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x11d}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xde}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x28}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x1, 0x10, @loopback, @empty, 0x1, 0x8, 0x400, 0x3}}) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x48, &(0x7f0000000780)={[{0x44, 0x4e00, "3b784dcb24ddea43e946d24b9fb8790733572b7d3039303393d980a2fc645405e4a812a249e26237954a33c2f2d208442ec4b3f5195690c0f1f8a4b0c80797e37081e400"}]}) r8 = accept(r2, &(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000880)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x4, 0x4a, 0x7f, 0xd4c9, 0x63, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x7800, 0x0, 0x9, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'ip6_vti0\x00', r6, 0x2f, 0x81, 0x2, 0x5, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x10, 0x1, 0x9, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', r6, 0x2f, 0x5, 0x5, 0x7, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x3, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001ec0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e80)={&(0x7f00000014c0)={0x998, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x546}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff9e3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1cf}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x81, 0x1, 0x7}, {0x2000, 0x7, 0x6, 0xf0}, {0x1000, 0x7f, 0xc8, 0x7}]}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) 18:43:53 executing program 4: syz_usb_ep_read(0xffffffffffffffff, 0x4, 0xf5, &(0x7f0000000000)=""/245) io_setup(0x2, &(0x7f0000000100)) syz_usb_ep_read(0xffffffffffffffff, 0xf9, 0x7f, &(0x7f0000000140)=""/127) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) wait4(r0, &(0x7f0000000240), 0x1, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xa9, &(0x7f0000000480)="5b66a0fdedf49d05140560e7ba781d0c8b4d9ab2e5e80bea58a03c1772e3aaf3968bf30699e7dcbfeebee3c3ae2fbbe7caaea0a033f7a71bbc91e413a821a78e0439b551bc823351256310e66fc032a7bda90cb30de2d38f8c8e4a49f0ab9e4b8c617068e63b4f5a8d154f48c0ec37717c90e4841e05c0a29aeb21d96e57b6955e1436097b16b5a1370c2a9e9bab1637f008f03c7e308a8259f146ee1e166e81b17ab4a676317b19e7") syz_usb_ep_read(0xffffffffffffffff, 0x20, 0xb1, &(0x7f0000000540)=""/177) wait4(r0, &(0x7f0000000600), 0x20000000, 0x0) socketpair(0x22, 0x6, 0x100, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x54}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40010}, 0x20000800) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000840)={0x0, 0x0}) waitid(0x2, r5, &(0x7f00000008c0), 0x20000000, &(0x7f0000000940)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40040001}, 0x20000000) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xc2942edb3fef6232}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x39, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) syz_usb_connect(0x3, 0x5bf, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0xe6, 0xa3, 0x2c, 0x40, 0x2100, 0x9e6a, 0x9a66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ad, 0x4, 0x8, 0x81, 0x30, 0x1, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x93, 0x9, 0xef, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "be1f71"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xc1, 0x9f7, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x68, 0xffff, [0x20, 0x5, 0x5, 0x28b, 0x4, 0x4]}, @obex={0x5, 0x24, 0x15, 0x7}]}]}}, {{0x9, 0x4, 0x64, 0x3, 0xc, 0x60, 0x3d, 0x26, 0x1, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "c814b128"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x2, 0x200, 0x9}, {0x6, 0x24, 0x1a, 0xcd}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x3ff}, @dmm={0x7, 0x24, 0x14, 0xffeb, 0x7fff}, @mbim_extended={0x8, 0x24, 0x1c, 0xa7, 0x6, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x7, 0x1, 0x3, 0x0, 0xff}]}, @uac_control={{0xa, 0x24, 0x1, 0x6e7a, 0xc0}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x3, 0x2, [0x8, 0x3], 0xef}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x6, 0x5, 0x20}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xfa, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x3, 0x2d, 0xdf}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x9, 0x9}}, {{0x9, 0x5, 0x5, 0x1f, 0x40, 0x56, 0x30, 0x81, [@generic={0x8a, 0xc, "531315deca3a9c63078c1bad789e3a5784a4531c7e635b14b2d9ae38e97d3dbeee54118e0e83392280557ec14540b390376d91efeba2d066ba4279e250350c1d0787e5a2d3272a7cfc3c9e7faf4d8137d789e7c1f39e2b95f78352192d667f2e445b3eaf52cca4c9e67fc59a92209e1ce19f15e87848187e17eafe143242856cb51dedcef422d816"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x8a, 0x0, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x7f, 0xae, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd4, 0x8a5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x40, 0x2, 0xfd}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x20, 0x2, 0x1}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x16, 0x9}]}}, {{0x9, 0x5, 0xc, 0x97ac803757dbd826, 0x8, 0x80, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xf8c5}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x1, 0x1, 0x4, [@generic={0x87, 0x7, "5039c629038bdf8c7bd38ee887ddc7c45216700661beda315e9735985b166db87fe656d073cc4790f78c3670ce3e286880947fd8e593f4f7725bda0c2d08a1a806f90482711886ad16c5dde1dd424ba6040e682c6112369baf88f06d0e122f7c48cbef2933fbdaf2282093ca424df587642a3902f4b21cdb9a7c8a84c0e8929350d8986058"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}]}}]}}, {{0x9, 0x4, 0xb0, 0x8, 0x7, 0x26, 0xbe, 0x7a, 0xf1, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xedf8, 0x2f, 0x1, 0x1}, [@obex={0x5, 0x24, 0x15, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xfffc, 0x7ff, 0x3, 0x1f, 0x40, 0x8}]}, @generic={0xf0, 0x12, "f30851ad6684acbfc6e34b2666791510b1b338ba81e3e87015d2886a19e12756eee3659ce56850d9cb01a99fdbfe8be08985bcb8bd7f5fff45d6bc88c42db810bd7354cb76890bb14be4d1d84f68f7605143cddee92e7ff512e0ac433c5a3b2e611b61d8deb05ab0c1d96c25fdccd1a2ec117ec7545a651a0f5aa5ae1894a0b63354d37fc1030141ba04b07e1a830ea9ad0b03b87a3763bd5ad37d0ad610531c65e7d553e2f92552954bd0794008283f70568505c5541fd538cf844ffd983ed10b41aa6e12e05349e0b43992accd8cce8b6a6b44c41884960641b7f03088a4205ad06889195953d7ecc1fd5c2352"}], [{{0x9, 0x5, 0xd, 0x4, 0x10, 0x1f, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xa2}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x2f, 0x0, 0x9, [@generic={0xb1, 0xa, "55d73a0d4329bee9786539009b3775f9377cb609a2cb25ee52d1a61dd8c2305659440a90c0c81548eb8af45cfc0e20085e271f311a4eccf831b55c044ea845c86cdde02db9aa5836fb71c78c66e00625c3a73dd1eb4544857b9f952feeacb7bf84d26ef22504daede00ac5ade7b2261067e5a71893e2c6bcb7895bfe9d868a7505c8e4af9778fdc752d5f495f777227c402dff890f51b6bfa53b84561764b202c83dbdde25def21a3cdcbae663faa9"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x6, 0x2, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x3, 0x76}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x5, 0x3f, 0x6, [@generic={0x23, 0xf, "1217b44f88bc51501df5dcf7a4fa492270b109fd64515ede6090ae8b8a383af7f7"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xe6, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x0, 0x8}]}}, {{0x9, 0x5, 0x0, 0x3, 0x0, 0x4a, 0x20, 0x9, [@generic={0xef, 0x22, "31d9bc9bca2ef75eee81112aeca2380b5152dc0fb64ccab0a6ae67ad8b677a90c6038d27559f3f33bd1b64aa7adc6ed8707dfecacfd0c912f0bb7a91d92c97849d83f07565b378f8ff6d62c26192d52ed9141496529737cf8fce3402b74272ac384d66ccb3b061af26138aa4729d9c551e4d00d41b2039c4aeaf889eadb3efd270d815237317460d37742808e85d48193160adadc181c31e73631dce68c45e16fb9039b9fbe2eedbc989014cf5678c4ee53b7ef772f82f1f09a445253ab377057628b11007e068ef126008ab5a01e4a891603ae8006bf4deb194979bc0684f987cdb058421f617d34d059eb17c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xdc, 0xe9df}]}}]}}, {{0x9, 0x4, 0x1a, 0x6, 0x0, 0xbc, 0xcc, 0x6d, 0x8}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x0, 0x5, 0x9, 0x5, 0x20, 0x7}, 0x5, &(0x7f0000001300)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x44f}}, {0xef, &(0x7f0000001380)=@string={0xef, 0x3, "cd566f5968b2ef303883f0f1a359614f1ab6e5d8f375bcfe8931b4c67cfc5bd3410abeac87068da292ecfb29dc6e1593985a7052a70d191fd83d8ca8440e175fb6a8cb02db0d646aaba72c1f150da7ed08849e3f2be77fdd439961d57056ed87f5d74a8dfd6935f4b1c4ebb1fc6ecd75ebfc14ab8582aa577c5baaeefbeea21fc5928e49b6f36d59bc84108e013175929bc2b25eabda108cd79164118fdbecfa0de10d493ee776fa8f580e7c9897d3dc8452b7f429917eff513749e611781099af6bb28de846499971221cb8f1484763a178dc5fa2b983aa64f5aa4ac77a10c4502bac0b926241a6a77ca84c9c"}}, {0x8a, &(0x7f0000001480)=@string={0x8a, 0x3, "a0546d0eaccde5cc183a2b289c48c81626f73d494905fcc56556279d18cc7397071507cf607a98b214b6f43181b7ef59eaa3f4572036dbf80925437ac72aa40a1daf68019866ce297099adcde47b46105270c009cf7bb2ad6c66bc58a469f6ed775bd0100f1bac1e53656c7cda5a9e6a34c553b68bf17be0ee8022712b08a82e9cf83c8608e2a7a1"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x816}}, {0xad, &(0x7f0000001580)=@string={0xad, 0x3, "ae8b92b4c475dc4fa89b64a088b001add3c1d61d1a9b0b1e3beb7174899e7be7ad2706f363df4a4c0dd35ef33c0117ed830db1ae075d85a549a8dabdec41c954323cd80135e0db474b601104a34964227fe20901c1bb9894f6cd685ab94c2965406bff2ad63d03bd00d489d297f093352b4c3b5ad325606ef238a2c889349cc0570630e267b2c952b80b497bdcb69e79a02130a929586e4500039c89884667532e34d558d6213a746ee125"}}, {0x52, &(0x7f0000001640)=@string={0x52, 0x3, "61728957f3ea37ad262b95c2b2910ec5016e437cd77bdc992b6702424fcc8b8ed9635cd4b7822d6fd28071c06546e00dbf41479f9d0ff7bfceccf4118343273b0fb4152330a66b7d7d446c1367db23ff"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x100c}}, {0x5d, &(0x7f0000001740)=@string={0x5d, 0x3, "406db9ea6608510c6c8a8c0e113e6d7d4a39b119c628f4f513c9c962678a6a9f55394fa13a95c9363dcafe812277bf769ab95af372bf93d6d298c74cff89b934ab24dbc9ea6a26a393ed00588fd99f8e124fbcc90988682a0c17f7"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x446}}]}) 18:43:53 executing program 3: clock_getres(0x5, &(0x7f0000000000)) io_pgetevents(0x0, 0x0, 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x6, &(0x7f0000000180)) clock_gettime(0x7, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0x80000001, 0x2, 0x3de700000, 0x8, 0x5, 0x0, 0xfffffffffffffe01, 0x8}, &(0x7f0000000240)={0x1, 0x3f, 0x8, 0x1, 0xe37f, 0x7f, 0xffffffff}, &(0x7f0000000280)={0x3, 0x8, 0x2, 0x7f8000, 0x3f, 0x6, 0xda87, 0x5}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x7]}, 0x8}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc002) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3f, 0x5462, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x80, 0x8, 0x5, 0x5}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000084}, 0x4404) clock_gettime(0x0, &(0x7f0000000740)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000780)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x0, 0xb0c, 0x10, @empty, @local, 0x1, 0x80, 0x11, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6tnl0\x00', r0, 0x2f, 0x7, 0x3, 0x9d4, 0x8, @loopback, @loopback, 0x0, 0x8000, 0xfffffffa, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', r0, 0x4, 0x80, 0xff, 0xa770, 0x51, @private0, @loopback, 0x10, 0x1, 0x400, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b00)={0x37c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2e23}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x80, 0x1, 0xff}, {0x8001, 0x9, 0x4, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc3c2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbd5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1d951badb179e5a3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'syztnl1\x00', r1, 0x4, 0x0, 0x2, 0xb0, 0x32, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x700, 0x100, 0x3df2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000fc0)={'sit0\x00', r4, 0x4, 0x1f, 0x2, 0x9, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0xfffffff8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'ip6gre0\x00', r4, 0x29, 0x5, 0x7, 0x7f, 0x53, @loopback, @private1, 0x80, 0x10, 0x2, 0x3f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001280)={'syztnl1\x00', &(0x7f0000001200)={'sit0\x00', r5, 0x4, 0xe8, 0x3f, 0x73, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0xff, 0x9}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, 0x0, 0x4, 0x70bd28, 0x10001, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4015) [ 108.825027] audit: type=1400 audit(1737657833.456:7): avc: denied { execmem } for pid=273 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:43:53 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000000)) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x700, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0xc8, 0xf2, 0x0, 0x42, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8, 0x7800, 0x9, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x80, 0x8000, 0x40, @mcast2, @mcast2, 0x7800, 0x700, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x40, 0x5, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7, 0x8700, 0x0, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000740)={0x6e0, r0, 0xa00, 0xc2, 0x25dfdbfe, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8d82}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1f, 0x40, 0x1f, 0x2000000}, {0x3f, 0x3, 0x9, 0x101}, {0x2, 0x9, 0x4, 0x5}, {0x2, 0x6, 0xc8, 0x9}, {0x1, 0x0, 0xbd, 0x2}, {0x7, 0x8, 0x7f, 0x4}, {0x4, 0x4, 0x20, 0x811}, {0x4432, 0x2, 0x80, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x101, 0x3f, 0x1f, 0x6}, {0x3, 0x6, 0x7, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9e15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0x81, 0x20, 0x10000}, {0x1, 0x2, 0x7b}, {0x6, 0x1, 0x3f, 0x59a}, {0x0, 0x40, 0xbc, 0x100}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x10008041}, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000ec0), 0x28180, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x0, 0x1, 0xff, 0x8e2b, 0x1, @local, @empty, 0x10, 0x1, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x4, 0x2000000, 0x64, @mcast2, @private1, 0x10, 0x0, 0x1, 0x8}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001080)={0x0}) r8 = perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0xff, 0x8, 0x5, 0x0, 0x0, 0x4, 0x401, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x8}, 0x2200, 0x7ff, 0x0, 0x8, 0x772, 0x7, 0x7, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe, r6, 0x13) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001180)={r7, 0x0, r8, 0x1000, 0x80000}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'ip6tnl0\x00', r1, 0x2f, 0x0, 0x1, 0x3, 0x4, @private1, @ipv4={'\x00', '\xff\xff', @empty}, 0x80f0, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000001300)={'syztnl2\x00', &(0x7f0000001280)={'ip6tnl0\x00', r9, 0x0, 0x87, 0xff, 0x3, 0x1, @local, @loopback, 0x1, 0x40, 0xffff, 0x48}}) r10 = accept(r6, &(0x7f0000001340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f00000013c0)=0x80) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001440), r6) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x2ea7e0691e641e77) 18:43:53 executing program 6: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_pgetevents(0x0, 0xfa, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7d8f]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x14338516, 0xffff, 0x0, 0x10000, 0x2c, 0x6, 0x5, 0xd3af}, &(0x7f0000000240)={0x30, 0x8, 0xfffffffffffffc00, 0x81, 0x7, 0x5, 0x2eb1, 0x7}, &(0x7f0000000280)={0xfffffffffffffffb, 0x0, 0x3, 0x8, 0x9, 0x100000000, 0x9}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x4]}, 0x8}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) io_getevents(0x0, 0x8, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000480)={r2, r3+10000000}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) io_pgetevents(0x0, 0x6, 0x3, &(0x7f00000004c0)=[{}, {}, {}], &(0x7f0000000580)={r4, r5+10000000}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x41000) pselect6(0x40, &(0x7f0000000700)={0x6ff6, 0x5, 0xfffffffffffff001, 0x3f, 0x0, 0x100, 0xf1c3, 0xe00000000}, &(0x7f0000000740)={0x3f, 0x2, 0x1000, 0x5, 0x0, 0x40, 0x2, 0x20}, &(0x7f0000000780)={0x5e, 0x40, 0x5, 0x40, 0x7, 0x5, 0x30000, 0x800}, &(0x7f00000007c0), &(0x7f0000000840)={&(0x7f0000000800)={[0x84fa]}, 0x8}) io_pgetevents(0x0, 0x3e5a, 0x3, &(0x7f0000000880)=[{}, {}, {}], &(0x7f0000000900)={0x0, 0x989680}, 0x0) clock_getres(0x0, &(0x7f0000000940)) syz_usb_connect$uac1(0x6, 0xc4, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x80, 0x60, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x80}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x4, 0x8c, "f381bd"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0x8, "87c37f"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x1, 0x3, 0x6, 0x3]}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x529255643b6156c7, 0x5, 0x7, 0x80, 0x1f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1f, 0x2, 0xfc, 0x3f, "a719"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x2, 0x2, {0x7, 0x25, 0x1, 0x80, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x4, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0x1, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x6, "8cd5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb6, 0x3, 0x1, {0x7, 0x25, 0x1, 0x0, 0xcc, 0x9}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x201, 0x8, 0x0, 0x3f, 0x10, 0xa1}, 0x5, &(0x7f0000000ac0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x444}}]}) io_pgetevents(0x0, 0x3, 0x1, &(0x7f0000000cc0)=[{}], &(0x7f0000000d00), 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000d40)='logon\x00', 0xfffffffffffffffc, 0xfffffffffffffff8) syz_usb_ep_write(0xffffffffffffffff, 0x30, 0x28, &(0x7f0000000d80)="ed1be91a7525a6a281b6daebf09c03d0db23ce5811643a40ba964a2bd51d7677c8e3fc1b8f588c5d") sched_rr_get_interval(0x0, &(0x7f0000000dc0)) clock_gettime(0x7, &(0x7f0000000e00)) clock_gettime(0x4, &(0x7f0000000e40)) io_pgetevents(0x0, 0x5, 0x6, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x6]}, 0x8}) 18:43:53 executing program 7: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/76, 0x4c}, {&(0x7f0000002440)=""/206, 0xce}], 0x9, &(0x7f0000002600)=""/49, 0x31}, 0x60) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002700)={'syztnl0\x00', &(0x7f0000002680)={'syztnl2\x00', r0, 0x29, 0x9, 0x67, 0x7ff, 0xa0, @mcast2, @empty, 0x7800, 0x7, 0x0, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000027c0)={'syztnl0\x00', &(0x7f0000002740)={'syztnl2\x00', r1, 0x4, 0x7, 0x2, 0x5, 0x1a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8041, 0x1, 0x5d92853a, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002880)={'ip6_vti0\x00', &(0x7f0000002800)={'syztnl1\x00', r3, 0x4, 0xc1, 0x7f, 0x400, 0x8, @remote, @remote, 0x40, 0x7800, 0xffff, 0x6}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000028c0)) wait4(0x0, 0x0, 0x8, &(0x7f0000002900)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000002a40)={'sit0\x00', &(0x7f00000029c0)={'ip6_vti0\x00', r2, 0x29, 0x3d, 0x2, 0x8, 0x12, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x10, 0x8, 0xff}}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x40, 0x0, 0x2, 0x70bd2b, 0x5, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x40}}, 0x20000040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002b80)={'vcan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x3c, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCOUTQ(r10, 0x5411, &(0x7f0000002d00)) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x44, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbe28}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa7f}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x11) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000002fc0)={'ip6gre0\x00', &(0x7f0000002f40)={'ip6tnl0\x00', r2, 0x2f, 0x1, 0x2, 0x1, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, @private0, 0x700, 0x7800, 0x2, 0x8}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003400)={&(0x7f0000003000)={0x3c4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x129f59e7}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x7f, 0x81, 0x5}, {0x3ff, 0xf7, 0x4, 0x2d54}, {0x8c, 0x26, 0x7, 0x1ff}, {0x7ff, 0x0, 0x4, 0x1}, {0x4, 0x2, 0x61, 0xffff7fff}, {0x100, 0x7, 0x8, 0x1}, {0x24fe, 0xeb, 0x20, 0x6258}]}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r2}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40}, 0x40040c4) [ 110.264716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.270797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.274185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.285210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.294453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.300462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.348619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.357600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.359978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.361840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.364109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.369549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.375027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.377171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.379961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.384221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.388783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.394854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.396498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.396788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.403721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.405976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.407770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.409633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.411015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.413965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.421215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.428880] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.432145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.443582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.465752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.478063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.482682] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.484560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.501748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.505894] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.514547] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.532314] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.535992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.539764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.541112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.549845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.572987] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.585964] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 110.587321] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.590108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.597944] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 110.613797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.344018] Bluetooth: hci0: command tx timeout [ 112.471453] Bluetooth: hci1: command tx timeout [ 112.535481] Bluetooth: hci4: command tx timeout [ 112.536199] Bluetooth: hci2: command tx timeout [ 112.536265] Bluetooth: hci3: command tx timeout [ 112.600540] Bluetooth: hci5: command tx timeout [ 112.663436] Bluetooth: hci6: command tx timeout [ 112.727431] Bluetooth: hci7: command tx timeout [ 114.393525] Bluetooth: hci0: command tx timeout [ 114.519744] Bluetooth: hci1: command tx timeout [ 114.583582] Bluetooth: hci4: command tx timeout [ 114.583613] Bluetooth: hci3: command tx timeout [ 114.583668] Bluetooth: hci2: command tx timeout [ 114.647455] Bluetooth: hci5: command tx timeout [ 114.711474] Bluetooth: hci6: command tx timeout [ 114.776366] Bluetooth: hci7: command tx timeout [ 116.440577] Bluetooth: hci0: command tx timeout [ 116.568941] Bluetooth: hci1: command tx timeout [ 116.631561] Bluetooth: hci3: command tx timeout [ 116.632626] Bluetooth: hci2: command tx timeout [ 116.633507] Bluetooth: hci4: command tx timeout [ 116.695693] Bluetooth: hci5: command tx timeout [ 116.759770] Bluetooth: hci6: command tx timeout [ 116.823490] Bluetooth: hci7: command tx timeout [ 118.489379] Bluetooth: hci0: command tx timeout [ 118.615431] Bluetooth: hci1: command tx timeout [ 118.679460] Bluetooth: hci2: command tx timeout [ 118.679980] Bluetooth: hci4: command tx timeout [ 118.680918] Bluetooth: hci3: command tx timeout [ 118.744140] Bluetooth: hci5: command tx timeout [ 118.807790] Bluetooth: hci6: command tx timeout [ 118.873387] Bluetooth: hci7: command tx timeout [ 137.896186] hrtimer: interrupt took 9859809 ns [ 170.044447] syz-executor.5 (288) used greatest stack depth: 23248 bytes left [ 172.266003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.270736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.276979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.284014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.295083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.298765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.390821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.396748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.398929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.406691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.412395] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.414467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.474645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.480130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.486530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.488476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.494692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.496681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.521191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.525063] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.528084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.535259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.544841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.547950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.601868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.611023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.614319] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.619955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.624744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.624840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.639584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.642167] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.645555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.654629] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.656047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.664070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.762616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.766949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 172.784268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.785000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.787755] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.837413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.861103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.862563] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.876451] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 172.878787] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 172.883865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.892648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.360194] Bluetooth: hci0: command tx timeout [ 174.487645] Bluetooth: hci1: command tx timeout [ 174.616435] Bluetooth: hci3: command tx timeout [ 174.681451] Bluetooth: hci4: command tx timeout [ 174.682166] Bluetooth: hci2: command tx timeout [ 174.938508] Bluetooth: hci5: command tx timeout [ 175.000510] Bluetooth: hci6: command tx timeout [ 175.063646] Bluetooth: hci7: command tx timeout [ 176.407524] Bluetooth: hci0: command tx timeout [ 176.535564] Bluetooth: hci1: command tx timeout [ 176.663486] Bluetooth: hci3: command tx timeout [ 176.730485] Bluetooth: hci2: command tx timeout [ 176.730587] Bluetooth: hci4: command tx timeout [ 176.983837] Bluetooth: hci5: command tx timeout [ 177.048401] Bluetooth: hci6: command tx timeout [ 177.111536] Bluetooth: hci7: command tx timeout [ 178.455495] Bluetooth: hci0: command tx timeout [ 178.585358] Bluetooth: hci1: command tx timeout [ 178.711477] Bluetooth: hci3: command tx timeout [ 178.775448] Bluetooth: hci4: command tx timeout [ 178.775511] Bluetooth: hci2: command tx timeout [ 179.031501] Bluetooth: hci5: command tx timeout [ 179.095619] Bluetooth: hci6: command tx timeout [ 179.159448] Bluetooth: hci7: command tx timeout [ 180.504622] Bluetooth: hci0: command tx timeout [ 180.632810] Bluetooth: hci1: command tx timeout [ 180.761735] Bluetooth: hci3: command tx timeout [ 180.823976] Bluetooth: hci2: command tx timeout [ 180.824877] Bluetooth: hci4: command tx timeout [ 181.079466] Bluetooth: hci5: command tx timeout [ 181.143552] Bluetooth: hci6: command tx timeout [ 181.208037] Bluetooth: hci7: command tx timeout [ 234.534677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.540719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.543930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.551255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.555019] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.557118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.663825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.666932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.668907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.673244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.676520] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 234.678170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.730097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.741780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.750770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.770491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.775789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.795650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.803677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.804158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.813192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.816759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.826260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.829120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.835163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.838976] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.846123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.870426] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.878262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.881855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.976869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.979966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.984995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.992887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.997965] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.000915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.209032] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.220740] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.235265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.242835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.282596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.300962] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.307795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.317770] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 235.328582] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.350192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.404876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.410081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.631582] Bluetooth: hci0: command tx timeout [ 236.695799] Bluetooth: hci1: command tx timeout [ 236.887800] Bluetooth: hci2: command tx timeout [ 236.952086] Bluetooth: hci3: command tx timeout [ 237.015454] Bluetooth: hci4: command tx timeout [ 237.143655] Bluetooth: hci5: command tx timeout [ 237.401443] Bluetooth: hci7: command tx timeout [ 237.527748] Bluetooth: hci6: command tx timeout [ 238.680432] Bluetooth: hci0: command tx timeout [ 238.743538] Bluetooth: hci1: command tx timeout [ 238.935553] Bluetooth: hci2: command tx timeout [ 239.001458] Bluetooth: hci3: command tx timeout [ 239.063447] Bluetooth: hci4: command tx timeout [ 239.192591] Bluetooth: hci5: command tx timeout [ 239.448334] Bluetooth: hci7: command tx timeout [ 239.576383] Bluetooth: hci6: command tx timeout [ 240.727591] Bluetooth: hci0: command tx timeout [ 240.791395] Bluetooth: hci1: command tx timeout [ 240.984369] Bluetooth: hci2: command tx timeout [ 241.047403] Bluetooth: hci3: command tx timeout [ 241.112398] Bluetooth: hci4: command tx timeout [ 241.239416] Bluetooth: hci5: command tx timeout [ 241.495405] Bluetooth: hci7: command tx timeout [ 241.623423] Bluetooth: hci6: command tx timeout [ 242.775477] Bluetooth: hci0: command tx timeout [ 242.840583] Bluetooth: hci1: command tx timeout [ 243.031388] Bluetooth: hci2: command tx timeout [ 243.095565] Bluetooth: hci3: command tx timeout [ 243.160524] Bluetooth: hci4: command tx timeout [ 243.287369] Bluetooth: hci5: command tx timeout [ 243.545354] Bluetooth: hci7: command tx timeout [ 243.671523] Bluetooth: hci6: command tx timeout [ 297.007159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.009947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.020778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.023112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.023490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.026148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.035035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.036840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.044914] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.050136] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.053287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.061695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.074267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.080535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.091798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.102988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.124783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.133523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.139274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.147548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.152694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.172566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.185601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.190730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.202024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.206191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.209215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.211270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.216003] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.218061] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.222993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.236678] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.246246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.250191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.256057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.257055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.261227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.263039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.301019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.302990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.306174] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.323172] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.325041] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.328222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 297.332740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.349874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.362759] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 297.366739] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.096380] Bluetooth: hci0: command tx timeout [ 299.160442] Bluetooth: hci2: command tx timeout [ 299.161236] Bluetooth: hci1: command tx timeout [ 299.287454] Bluetooth: hci4: command tx timeout [ 299.351461] Bluetooth: hci5: command tx timeout [ 299.352587] Bluetooth: hci3: command tx timeout [ 299.415461] Bluetooth: hci6: command tx timeout [ 299.479472] Bluetooth: hci7: command tx timeout [ 301.143675] Bluetooth: hci0: command tx timeout [ 301.207461] Bluetooth: hci2: command tx timeout [ 301.208601] Bluetooth: hci1: command tx timeout [ 301.336205] Bluetooth: hci4: command tx timeout [ 301.399591] Bluetooth: hci5: command tx timeout [ 301.400845] Bluetooth: hci3: command tx timeout [ 301.463970] Bluetooth: hci6: command tx timeout [ 301.527443] Bluetooth: hci7: command tx timeout [ 303.192712] Bluetooth: hci0: command tx timeout [ 303.255402] Bluetooth: hci1: command tx timeout [ 303.255857] Bluetooth: hci2: command tx timeout [ 303.385315] Bluetooth: hci4: command tx timeout [ 303.448340] Bluetooth: hci5: command tx timeout [ 303.448791] Bluetooth: hci3: command tx timeout [ 303.511512] Bluetooth: hci6: command tx timeout [ 303.575560] Bluetooth: hci7: command tx timeout [ 305.240504] Bluetooth: hci0: command tx timeout [ 305.304529] Bluetooth: hci2: command tx timeout [ 305.304993] Bluetooth: hci1: command tx timeout [ 305.432383] Bluetooth: hci4: command tx timeout [ 305.496464] Bluetooth: hci3: command tx timeout [ 305.496928] Bluetooth: hci5: command tx timeout [ 305.560405] Bluetooth: hci6: command tx timeout [ 305.624540] Bluetooth: hci7: command tx timeout [ 359.659572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.663093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.666827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.672558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.676202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.679575] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.683819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.695332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.698500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.703446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.709001] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.714051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.735707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.745205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.749669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.750998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.753100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.754639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.767607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.783757] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.786082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.799879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.802022] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.806760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.806920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.814726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.818946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.838880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.845809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.851430] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.853864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.860805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.867988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.877570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.879952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.880119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.884121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.901748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.908814] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 359.912836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.914780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.914908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.920008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.923224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.924851] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 359.926107] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.927145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.928511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.754337] Bluetooth: hci0: command tx timeout [ 361.815496] Bluetooth: hci1: command tx timeout [ 361.880023] Bluetooth: hci2: command tx timeout [ 361.881030] Bluetooth: hci3: command tx timeout [ 361.944454] Bluetooth: hci6: command tx timeout [ 362.007475] Bluetooth: hci4: command tx timeout [ 362.008192] Bluetooth: hci5: command tx timeout [ 362.009430] Bluetooth: hci7: command tx timeout [ 363.799496] Bluetooth: hci0: command tx timeout [ 363.865381] Bluetooth: hci1: command tx timeout [ 363.927630] Bluetooth: hci3: command tx timeout [ 363.928160] Bluetooth: hci2: command tx timeout [ 363.991448] Bluetooth: hci6: command tx timeout [ 364.055488] Bluetooth: hci5: command tx timeout [ 364.055631] Bluetooth: hci7: command tx timeout [ 364.056048] Bluetooth: hci4: command tx timeout [ 365.847519] Bluetooth: hci0: command tx timeout [ 365.912384] Bluetooth: hci1: command tx timeout [ 365.975479] Bluetooth: hci3: command tx timeout [ 365.976413] Bluetooth: hci2: command tx timeout [ 366.040346] Bluetooth: hci6: command tx timeout [ 366.105567] Bluetooth: hci7: command tx timeout [ 366.105750] Bluetooth: hci5: command tx timeout [ 366.106023] Bluetooth: hci4: command tx timeout [ 367.896395] Bluetooth: hci0: command tx timeout [ 367.960461] Bluetooth: hci1: command tx timeout [ 368.024481] Bluetooth: hci2: command tx timeout [ 368.024531] Bluetooth: hci3: command tx timeout [ 368.090397] Bluetooth: hci6: command tx timeout [ 368.151427] Bluetooth: hci5: command tx timeout [ 368.152111] Bluetooth: hci7: command tx timeout [ 368.152848] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 18:49:01 Registers: info registers vcpu 0 RAX=ffff88800d98f3e0 RBX=ffff88800bfec190 RCX=ffff88800d183758 RDX=ffff88802392f2b8 RSI=ffff88800bfec190 RDI=1ffff11001b31e7c RBP=ffff88800bfec190 RSP=ffff88802cf7f9a0 R8 =0000000000000001 R9 =ffffed10059eff2e R10=0000000000000003 R11=0000000000000001 R12=ffff88800bfec1a0 R13=ffff88802392f2b8 R14=ffff88800bfec190 R15=ffffffff882c9550 RIP=ffffffff84a4acb3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f108b9664a1 CR3=000000001a476000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff11006056e9c RBX=000000000000000c RCX=0000000000000001 RDX=0000000000000cc0 RSI=000000000000000f RDI=ffff8880302b74e0 RBP=dffffc0000000000 RSP=ffff8880302b73f8 R8 =0000000000000001 R9 =ffff888026158a48 R10=ffffffff864043d7 R11=0000000000000000 R12=000000000000000f R13=0000000000000000 R14=ffff8880302b7480 R15=0000000000000cc0 RIP=ffffffff815ec62a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f18352fd260 CR3=0000000027bee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000