Warning: Permanently added '[localhost]:5650' (ECDSA) to the list of known hosts. 2025/06/20 04:12:25 fuzzer started 2025/06/20 04:12:26 dialing manager at localhost:40967 syzkaller login: [ 101.460489] cgroup: Unknown subsys name 'net' [ 101.623380] cgroup: Unknown subsys name 'cpuset' [ 101.671394] cgroup: Unknown subsys name 'rlimit' 2025/06/20 04:12:41 syscalls: 212 2025/06/20 04:12:41 code coverage: enabled 2025/06/20 04:12:41 comparison tracing: enabled 2025/06/20 04:12:41 extra coverage: enabled 2025/06/20 04:12:41 setuid sandbox: enabled 2025/06/20 04:12:41 namespace sandbox: enabled 2025/06/20 04:12:41 Android sandbox: enabled 2025/06/20 04:12:41 fault injection: enabled 2025/06/20 04:12:41 leak checking: enabled 2025/06/20 04:12:41 net packet injection: enabled 2025/06/20 04:12:41 net device setup: enabled 2025/06/20 04:12:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/20 04:12:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/20 04:12:41 USB emulation: enabled 2025/06/20 04:12:41 hci packet injection: enabled 2025/06/20 04:12:41 wifi device emulation: enabled 2025/06/20 04:12:41 802.15.4 emulation: enabled 2025/06/20 04:12:41 fetching corpus: 0, signal 0/0 (executing program) 2025/06/20 04:12:42 starting 8 fuzzer processes 04:12:42 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x123, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4841}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r2) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x2000000) socketpair(0x8, 0x4, 0x400, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = eventfd2(0x100, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r7}}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0xa) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r3) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x80000, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r9, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) 04:12:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x4, 0x5, 0x0, 0x1, 0x1}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r0, 0x0, &(0x7f0000000080)='./file0\x00', 0x153, 0x600, 0x12345}, 0x52) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3e78}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @local}, &(0x7f0000000340)=0xc) setuid(0xee01) r3 = dup(r2) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) r4 = syz_io_uring_complete(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000003c0)={r2, 0x3, 0x3, 0x5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x80000001}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x40800, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8a1c3fe54c68726e}, 0x20000001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000700)={{0x0, 0x0, 0x4, 0x1, 0x56d04dda}}) 04:12:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x80000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0xc040) r1 = syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r1, 0x0, &(0x7f0000000140)='./file0\x00', 0x20, 0x301003, 0x12345}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x4044000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r1, r3) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x400) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x440000, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f00000003c0)={0xa}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x101100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf106}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008050) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r6, 0x8000000) mount$9p_fd(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x800022, &(0x7f0000000a80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@afid}, {@debug={'debug', 0x3d, 0x4}}, {@version_u}, {@cache_fscache}, {@cache_fscache}, {@cache_mmap}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@subj_type={'subj_type', 0x3d, '\','}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/dev/zero\x00'}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/hwrng\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000c00)={{0xffffffffffffffff, 0x7}, {0x4, 0x7}, 0xe7b, 0x1}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000c40)={'\x00', 0xb7, 0x0, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xbc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) [ 117.861302] audit: type=1400 audit(1750392763.011:7): avc: denied { execmem } for pid=279 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:12:43 executing program 3: setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x4, 0x4) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xed5b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c055) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x244c01) r2 = fsmount(r0, 0x0, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xca8c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe4f6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6a}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40015}, 0x40080c0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x40080, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x2400, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20000060) r8 = fsmount(r6, 0x0, 0x72) ioctl$PTP_CLOCK_GETCAPS(r8, 0x80503d01, &(0x7f00000005c0)) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000640), 0x121480, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0x4, 0x2, 0x3}) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000700)={@initdev}, &(0x7f0000000740)=0xc) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0xb2158ec1165cd62f, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) dup2(r2, r1) 04:12:43 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x1ff, 0x8}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) write$eventfd(r0, &(0x7f0000000040)=0x415e, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r2 = dup2(r1, r0) r3 = socket$packet(0x11, 0x4, 0x300) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4b3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r4, 0xffffffffffff21d4, 0x3ff, 0x2}) ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000240)={0x19}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socketpair(0x2, 0xa, 0x5, &(0x7f0000000b00)={0xffffffffffffffff}) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000b40)=0x1000, 0x4) r7 = fsmount(r0, 0x1, 0x8) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) write$eventfd(0xffffffffffffffff, &(0x7f0000000b80)=0x80000000, 0x8) r8 = syz_open_dev$mouse(&(0x7f0000000bc0), 0x42, 0x701400) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x400000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f0000000c40)=""/219, &(0x7f0000000d40)=0xdb) 04:12:43 executing program 6: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x8, 0x4) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xcec1f03bde3af6f4, &(0x7f0000000040)=""/148, &(0x7f0000000100)=0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x1, 0x101}) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) r2 = syz_io_uring_complete(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r0, 0x80000000, {0x0, r1}, 0x3, 0x6, 0x0, {0x0, 0x0, r2}}, 0x5) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0x101, 0x4) getpeername$netlink(r2, &(0x7f0000000240), &(0x7f0000000280)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r3, &(0x7f00000002c0), &(0x7f0000000300)=0xc) recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/112, 0x70}], 0x3, &(0x7f00000005c0)=""/148, 0x94}, 0x20) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000006c0)={@private, @dev, 0x0}, &(0x7f0000000700)=0xc) r6 = io_uring_setup(0x5fc3, &(0x7f0000000740)={0x0, 0x2879, 0x2, 0x2, 0x15e, 0x0, r1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0xc, 0x15, "b1dc4301d435b1cd8714a26618cb80db9989b5467ac459411c6a87afbf360453658a448958fd06dec1582ea9125b43ec22171e2e84c121482e86878da96f4d2b", "0aee1e18f25e3edd05d920a07f43b464df6d4ef7a773a8fd35f2fc8bb27d1fc3d3e835f3d98694f3ddb32f0a5d6917b591096c9e45f09b42544f090352ffcc55", "527e5a12801555393ef34184ec8d8a49b07cc4cb8d9602a2e6d736720716dc0d", [0x9, 0x2]}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000900)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000980)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) read$rfkill(r7, &(0x7f00000009c0), 0x8) 04:12:43 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x10000) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x440) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x56180, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x11) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf4, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6eaf08da3b4c297c, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x3, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x10400, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r8 = fsmount(r2, 0x0, 0x1) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xbc, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1fd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a40)) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0xa0000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000000ac0)={0x3, 0x8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004884) 04:12:43 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x94) r3 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x6, 0x800) bind$bt_sco(r3, &(0x7f0000000a80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) accept4$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14, 0x800) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x977}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) getpeername$netlink(r4, &(0x7f0000000cc0), &(0x7f0000000d00)=0xc) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000003c40), 0x30000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003cc0), r4) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x40084) r8 = openat$incfs(r4, &(0x7f0000003dc0)='.pending_reads\x00', 0x501000, 0x85) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003e40), r3) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000003f80)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003f40)={&(0x7f0000003e80)={0x98, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x18000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd0}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000040c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004080)={&(0x7f0000004000)={0x4c, r7, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x45}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x822) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000004140), r6) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000004240)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004200)={&(0x7f0000004180)={0x50, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="531afccab7eb"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 119.365951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.371215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.374234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.382044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.389992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.494609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.502635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.506259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.509356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.511104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.516194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.531245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.532903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.537811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.544380] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.553935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.555298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.558212] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.573208] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.574856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.577450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.579002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.589590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.594222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.597029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.600977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.611128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.617248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.617503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.618752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.630507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.637042] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.650341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.660651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.669509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.682489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.686186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.698457] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.705359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.718151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.442812] Bluetooth: hci0: command tx timeout [ 121.634108] Bluetooth: hci1: command tx timeout [ 121.696893] Bluetooth: hci2: command tx timeout [ 121.697443] Bluetooth: hci3: command tx timeout [ 121.761853] Bluetooth: hci7: command tx timeout [ 121.762507] Bluetooth: hci5: command tx timeout [ 121.763356] Bluetooth: hci6: command tx timeout [ 121.825968] Bluetooth: hci4: command tx timeout [ 123.489751] Bluetooth: hci0: command tx timeout [ 123.681753] Bluetooth: hci1: command tx timeout [ 123.744854] Bluetooth: hci3: command tx timeout [ 123.744950] Bluetooth: hci2: command tx timeout [ 123.809024] Bluetooth: hci6: command tx timeout [ 123.809509] Bluetooth: hci5: command tx timeout [ 123.809642] Bluetooth: hci7: command tx timeout [ 123.872907] Bluetooth: hci4: command tx timeout [ 125.536762] Bluetooth: hci0: command tx timeout [ 125.729920] Bluetooth: hci1: command tx timeout [ 125.792738] Bluetooth: hci2: command tx timeout [ 125.795715] Bluetooth: hci3: command tx timeout [ 125.856967] Bluetooth: hci7: command tx timeout [ 125.857104] Bluetooth: hci5: command tx timeout [ 125.857885] Bluetooth: hci6: command tx timeout [ 125.920755] Bluetooth: hci4: command tx timeout [ 127.586459] Bluetooth: hci0: command tx timeout [ 127.777818] Bluetooth: hci1: command tx timeout [ 127.841004] Bluetooth: hci3: command tx timeout [ 127.842980] Bluetooth: hci2: command tx timeout [ 127.905178] Bluetooth: hci5: command tx timeout [ 127.906570] Bluetooth: hci7: command tx timeout [ 127.907454] Bluetooth: hci6: command tx timeout [ 127.968801] Bluetooth: hci4: command tx timeout [ 181.613829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.615270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.620606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.629561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.632083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.749220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.751605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.753752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.760336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.763037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.893409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.903931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.918251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.955142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.959835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.962536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.966581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.968739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.970639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.978181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.988621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.996010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.007925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.013422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.016289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.025397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.036550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.038935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.042925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.046889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.055951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.065987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.070637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.124403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.156073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.162742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.185605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.219359] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.253155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.261052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.712805] Bluetooth: hci0: command tx timeout [ 183.840973] Bluetooth: hci1: command tx timeout [ 184.032778] Bluetooth: hci2: command tx timeout [ 184.096757] Bluetooth: hci6: command tx timeout [ 184.160758] Bluetooth: hci4: command tx timeout [ 184.224997] Bluetooth: hci3: command tx timeout [ 184.289035] Bluetooth: hci5: command tx timeout [ 184.353015] Bluetooth: hci7: command tx timeout [ 185.760960] Bluetooth: hci0: command tx timeout [ 185.888881] Bluetooth: hci1: command tx timeout [ 186.081777] Bluetooth: hci2: command tx timeout [ 186.146090] Bluetooth: hci6: command tx timeout [ 186.209146] Bluetooth: hci4: command tx timeout [ 186.273160] Bluetooth: hci3: command tx timeout [ 186.337241] Bluetooth: hci5: command tx timeout [ 186.401967] Bluetooth: hci7: command tx timeout [ 187.808730] Bluetooth: hci0: command tx timeout [ 187.937017] Bluetooth: hci1: command tx timeout [ 188.128882] Bluetooth: hci2: command tx timeout [ 188.193899] Bluetooth: hci6: command tx timeout [ 188.256867] Bluetooth: hci4: command tx timeout [ 188.321897] Bluetooth: hci3: command tx timeout [ 188.384863] Bluetooth: hci5: command tx timeout [ 188.448924] Bluetooth: hci7: command tx timeout [ 189.856837] Bluetooth: hci0: command tx timeout [ 189.984732] Bluetooth: hci1: command tx timeout [ 190.177072] Bluetooth: hci2: command tx timeout [ 190.241994] Bluetooth: hci6: command tx timeout [ 190.305587] Bluetooth: hci4: command tx timeout [ 190.368816] Bluetooth: hci3: command tx timeout [ 190.433287] Bluetooth: hci5: command tx timeout [ 190.496844] Bluetooth: hci7: command tx timeout [ 244.147504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.150976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.159316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.167384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.174487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.201894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.209166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.217383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.228932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.232585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.315633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.323802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.330422] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.344442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.345328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.356887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.361058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.364558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.371039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.375594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.376938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.398046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.398596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.411987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.431336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.444344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.449133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.454102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.477017] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.490319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.495041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.503951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.510074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.530265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.536398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.559422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.570298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.577058] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.582283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.589059] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.240788] Bluetooth: hci0: command tx timeout [ 246.305784] Bluetooth: hci1: command tx timeout [ 246.432750] Bluetooth: hci2: command tx timeout [ 246.497768] Bluetooth: hci4: command tx timeout [ 246.498484] Bluetooth: hci3: command tx timeout [ 246.560776] Bluetooth: hci5: command tx timeout [ 246.624796] Bluetooth: hci7: command tx timeout [ 246.625490] Bluetooth: hci6: command tx timeout [ 248.288997] Bluetooth: hci0: command tx timeout [ 248.353800] Bluetooth: hci1: command tx timeout [ 248.480819] Bluetooth: hci2: command tx timeout [ 248.544830] Bluetooth: hci3: command tx timeout [ 248.545297] Bluetooth: hci4: command tx timeout [ 248.608789] Bluetooth: hci5: command tx timeout [ 248.672784] Bluetooth: hci6: command tx timeout [ 248.673264] Bluetooth: hci7: command tx timeout [ 250.336745] Bluetooth: hci0: command tx timeout [ 250.400985] Bluetooth: hci1: command tx timeout [ 250.528945] Bluetooth: hci2: command tx timeout [ 250.592901] Bluetooth: hci4: command tx timeout [ 250.593383] Bluetooth: hci3: command tx timeout [ 250.657772] Bluetooth: hci5: command tx timeout [ 250.721079] Bluetooth: hci7: command tx timeout [ 250.721582] Bluetooth: hci6: command tx timeout [ 252.384749] Bluetooth: hci0: command tx timeout [ 252.448747] Bluetooth: hci1: command tx timeout [ 252.577032] Bluetooth: hci2: command tx timeout [ 252.640909] Bluetooth: hci3: command tx timeout [ 252.641416] Bluetooth: hci4: command tx timeout [ 252.706528] Bluetooth: hci5: command tx timeout [ 252.769936] Bluetooth: hci6: command tx timeout [ 252.770431] Bluetooth: hci7: command tx timeout [ 306.421042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.423856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.427616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.443330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.450482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.671313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.674224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.677391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.686912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.696240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.709831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.715348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.729954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.737412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.751427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.764805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.787446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.804307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.813549] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.843087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.878990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.887585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.892847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.906143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.914636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.917244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.919612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.938231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.949521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.968033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.979469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.983163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.985310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.000327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.003485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.038612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.045116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.055780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.062238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.076570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.513787] Bluetooth: hci0: command tx timeout [ 308.769923] Bluetooth: hci1: command tx timeout [ 308.833173] Bluetooth: hci2: command tx timeout [ 308.961865] Bluetooth: hci3: command tx timeout [ 309.088814] Bluetooth: hci4: command tx timeout [ 309.152745] Bluetooth: hci6: command tx timeout [ 309.153289] Bluetooth: hci5: command tx timeout [ 309.281751] Bluetooth: hci7: command tx timeout [ 310.560954] Bluetooth: hci0: command tx timeout [ 310.816748] Bluetooth: hci1: command tx timeout [ 310.880963] Bluetooth: hci2: command tx timeout [ 311.008952] Bluetooth: hci3: command tx timeout [ 311.136807] Bluetooth: hci4: command tx timeout [ 311.200880] Bluetooth: hci5: command tx timeout [ 311.201368] Bluetooth: hci6: command tx timeout [ 311.328725] Bluetooth: hci7: command tx timeout [ 312.610036] Bluetooth: hci0: command tx timeout [ 312.865033] Bluetooth: hci1: command tx timeout [ 312.928816] Bluetooth: hci2: command tx timeout [ 313.057158] Bluetooth: hci3: command tx timeout [ 313.185434] Bluetooth: hci4: command tx timeout [ 313.248934] Bluetooth: hci6: command tx timeout [ 313.249385] Bluetooth: hci5: command tx timeout [ 313.376777] Bluetooth: hci7: command tx timeout [ 314.656805] Bluetooth: hci0: command tx timeout [ 314.913286] Bluetooth: hci1: command tx timeout [ 314.976757] Bluetooth: hci2: command tx timeout [ 315.106857] Bluetooth: hci3: command tx timeout [ 315.232955] Bluetooth: hci4: command tx timeout [ 315.296783] Bluetooth: hci5: command tx timeout [ 315.297269] Bluetooth: hci6: command tx timeout [ 315.424894] Bluetooth: hci7: command tx timeout [ 368.710211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.714270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.718238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.721927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.724431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.728781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.742390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.751882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.762172] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.767000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.824184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.827900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.837192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.847682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.856467] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.976286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.983176] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.989242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.015095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.016447] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.017594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.020151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.021937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.057054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.062906] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.074888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.085294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.091318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.100606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.109958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.138080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.138095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.150150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.153949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.182101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.188091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.188808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.192217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.229372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.245792] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.849827] Bluetooth: hci1: command tx timeout [ 370.849859] Bluetooth: hci0: command tx timeout [ 370.912768] Bluetooth: hci2: command tx timeout [ 371.040769] Bluetooth: hci5: command tx timeout [ 371.169922] Bluetooth: hci4: command tx timeout [ 371.232767] Bluetooth: hci3: command tx timeout [ 371.297956] Bluetooth: hci6: command tx timeout [ 371.361938] Bluetooth: hci7: command tx timeout [ 372.897061] Bluetooth: hci0: command tx timeout [ 372.898191] Bluetooth: hci1: command tx timeout [ 372.961043] Bluetooth: hci2: command tx timeout [ 373.088888] Bluetooth: hci5: command tx timeout [ 373.218685] Bluetooth: hci4: command tx timeout [ 373.280907] Bluetooth: hci3: command tx timeout [ 373.344800] Bluetooth: hci6: command tx timeout [ 373.408887] Bluetooth: hci7: command tx timeout [ 374.944946] Bluetooth: hci1: command tx timeout [ 374.945420] Bluetooth: hci0: command tx timeout [ 375.008760] Bluetooth: hci2: command tx timeout [ 375.137139] Bluetooth: hci5: command tx timeout [ 375.265035] Bluetooth: hci4: command tx timeout [ 375.329378] Bluetooth: hci3: command tx timeout [ 375.394184] Bluetooth: hci6: command tx timeout [ 375.458834] Bluetooth: hci7: command tx timeout [ 376.994036] Bluetooth: hci1: command tx timeout [ 376.995017] Bluetooth: hci0: command tx timeout [ 377.057325] Bluetooth: hci2: command tx timeout [ 377.184874] Bluetooth: hci5: command tx timeout [ 377.313192] Bluetooth: hci4: command tx timeout [ 377.376893] Bluetooth: hci3: command tx timeout [ 377.441114] Bluetooth: hci6: command tx timeout [ 377.505094] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:17:44 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff812d95d1 RDX=0000000000002d95 RSI=0000000000002d95 RDI=ffffffff86c6d134 RBP=ffff888025adfa10 RSP=ffff888025adf8f8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000000001 R12=ffff888025adfa18 R13=ffff888025adfa00 R14=ffff888025adf9f9 R15=ffff888025adf9b8 RIP=ffffffff81353e52 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f722547e540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd77c58ff8 CR3=000000003107f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88806cf08968 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=000000000002325f R12=0000000000000002 R13=ffffffff81353d2d R14=0000000000000000 R15=ffff88806cf08a78 RIP=ffffffff81aefeb8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbf3c96b6f4 CR3=0000000035831000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fbf3c97a47000007fbf3c979f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000