Warning: Permanently added '[localhost]:31080' (ECDSA) to the list of known hosts. 2024/10/23 18:24:16 fuzzer started 2024/10/23 18:24:17 dialing manager at localhost:45639 syzkaller login: [ 77.782742] cgroup: Unknown subsys name 'net' [ 77.908851] cgroup: Unknown subsys name 'cpuset' [ 77.924245] cgroup: Unknown subsys name 'rlimit' 2024/10/23 18:24:41 syscalls: 210 2024/10/23 18:24:41 code coverage: enabled 2024/10/23 18:24:41 comparison tracing: enabled 2024/10/23 18:24:41 extra coverage: enabled 2024/10/23 18:24:41 setuid sandbox: enabled 2024/10/23 18:24:41 namespace sandbox: enabled 2024/10/23 18:24:41 Android sandbox: enabled 2024/10/23 18:24:41 fault injection: enabled 2024/10/23 18:24:41 leak checking: enabled 2024/10/23 18:24:41 net packet injection: enabled 2024/10/23 18:24:41 net device setup: enabled 2024/10/23 18:24:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/23 18:24:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/23 18:24:41 USB emulation: enabled 2024/10/23 18:24:41 hci packet injection: enabled 2024/10/23 18:24:41 wifi device emulation: enabled 2024/10/23 18:24:41 802.15.4 emulation: enabled 2024/10/23 18:24:41 fetching corpus: 0, signal 0/0 (executing program) 2024/10/23 18:24:43 starting 8 fuzzer processes 18:24:43 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x10) r0 = socket(0x25, 0xa, 0xdd8e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008081) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x21}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5ea}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048000}, 0x20000000) r4 = accept(r0, &(0x7f0000000640)=@hci, &(0x7f00000006c0)=0x80) getsockname(r4, &(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000900)=0x80) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x4000845) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x59, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x81) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r4) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r9, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40020}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xb0, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x64, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x8}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40854}, 0x20004011) 18:24:43 executing program 1: r0 = socket(0x1f, 0x80801, 0x8061) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x40, 0xd0, 0x5, @mcast2, @remote, 0x20, 0x80, 0x7f, 0x3}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x44000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x44010) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r3, 0x670a1f75eb496ca1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8e}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x44080}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getuid() sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x19c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x17}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x755d0504a3c54628}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x58c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000cc0)={'gretap0\x00', &(0x7f0000000c40)={'gretap0\x00', 0x0, 0x1, 0x20, 0x6, 0x80000000, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x67, 0x0, 0x81, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xcc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6_vti0\x00', r5, 0x29, 0x20, 0x20, 0x8, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x20, 0x4, 0x4}}) getsockname$packet(r0, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000010c0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x208, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1749bbc292a5f84b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004) 18:24:43 executing program 2: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x21000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74bc}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x118, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x439}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x32}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000805}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x2, 0xb01, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000540)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20000041) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xde9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe0, 0x2, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xf357}, [@NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008881) r4 = socket(0x6, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x57}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r5, 0x200, 0x70bd2a, 0x4, {{}, {}, {0x14, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000f00), r4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f40), 0x20000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) 18:24:43 executing program 3: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x4, 0xc0000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x322d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x38}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2f}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000640), 0x2, 0x2a4000) ioctl$TIOCGPTPEER(r2, 0x5441, 0x10001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x102, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbfe0db145ff7dad6}, 0x800) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe8, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xad94}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000b40)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c40), 0x101001, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x823}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1692}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x11) 18:24:43 executing program 4: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x200000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x17c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x45}, 0x40010) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000440)) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000480)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@rand_addr=' \x01\x00', @local, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x10001, 0x40, 0x9, 0x200, 0xfffffffffffffc32, 0x80000000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000540)={0x0, 0x3, r0, 0x7, 0x80000}) r2 = syz_open_dev$sg(&(0x7f0000000580), 0xfffffffffffffffb, 0x400841) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000005c0)) r3 = syz_open_dev$sg(&(0x7f0000000600), 0x5, 0x500001) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000640)={0x2, 0x1e, 0x7, 0x200, 0x15, "3b668792dab4121c"}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) r5 = syz_open_dev$vcsn(&(0x7f00000007c0), 0x40, 0x880) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000800)) r6 = syz_open_dev$vcsn(&(0x7f0000000840), 0x200, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000880)) [ 103.205692] audit: type=1400 audit(1729707883.371:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:24:43 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000180)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x5f3e, {{0xa, 0x4e22, 0xfc, @dev={0xfe, 0x80, '\x00', 0x44}}}}, 0x88) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x8, 0x101041) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x145a00, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x225}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x400040, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000004c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) getpeername(r2, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000005c0)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xca08}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x40080c0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xff75469bb5c9a631}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x85}, 0x44090) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}}, 0x4000000) 18:24:43 executing program 6: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000180)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x75, 0x1, @buffer={0x0, 0x47, &(0x7f00000001c0)=""/71}, &(0x7f0000000240)="3c163d8b2b93cce1f7771632f5e0944b337bb5aa8d54f1bfb8e96949cdaca7ae949e42c8bc998303d1b048cb7ab3b120b2f5c44e91a0f9926fb333b2b5816b1b26e1e5af4cc989f39487dfe8003dbe3bff7caccb951647ae49e76a3ba4add2e0dda273731621f15cf1cb789d3d21cfe6519dc933e8", &(0x7f00000002c0)=""/27, 0x10000, 0x10001, 0x2, &(0x7f0000000300)}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000003c0)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)={0xb4, 0x7, 0x1, "6c695306fa0689fe64661572a9b5b5cbdb94cc62b7247b0d76cc9b50b13a166319d8edc501dafc544a998b3be4d4c52e3fb97c40d5ee99e8e370ed9a006b0373239e19b211b600bacc6b6298b3db0ac6fd0a28a2ca64d4176f2bf7be1e6579329afa7af4e3cbea6c0c169f6a39bf96828374692bebd0af7e8d0880f73597d0520ebf0bdd092cf7f7552b2850296bf94f2d3b8bb52a745203c444e0bdbd6abbf27c3756b7a6fb7f547d2ed767f72cf5265ef13624"}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000500)) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x3850c0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000580)={0x1, 0xd}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000005c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000680)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffc00}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd1a}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd5b8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000080) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x3ff) r3 = socket(0x27, 0x1, 0x9) recvfrom$packet(r3, &(0x7f0000000a00)=""/133, 0x85, 0x40010000, 0x0, 0x0) 18:24:43 executing program 7: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x1100) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44) r1 = socket$inet6(0xa, 0x1, 0x5) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x48}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2c}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x84) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r4 = socket(0x11, 0xa, 0xffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x70bd9ace2c5decb3}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r4) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'syztnl2\x00', r5, 0x29, 0x2, 0x20, 0x3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x8, 0x9713, 0x4ed}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', r5, 0x4, 0x9, 0x8, 0x33982837, 0x0, @remote, @loopback, 0x40, 0x1, 0x2, 0x1}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000001000)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xe0, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x104, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x59}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xedc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7d704063}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x104}}, 0x4000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0x5, 0x7f}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) [ 104.601130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.602259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.611783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.612882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.616126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.616928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.625309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.626119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.639527] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.672798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.674069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.677223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.678469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.679989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.680906] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.682534] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.684814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.686522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.690303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.692079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.694856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.696017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.697141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.713765] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.714542] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.719956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.721039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.723386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.724928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.725989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.727516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.730572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.736102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.738314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.740742] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.742803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.745408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.747113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.748264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.753905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.764820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.777011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.810375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.819752] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.826727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.830037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.841887] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 104.850286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.743731] Bluetooth: hci1: command tx timeout [ 106.806011] Bluetooth: hci4: command tx timeout [ 106.806725] Bluetooth: hci2: command tx timeout [ 106.807337] Bluetooth: hci3: command tx timeout [ 106.871080] Bluetooth: hci7: command tx timeout [ 106.871112] Bluetooth: hci5: command tx timeout [ 106.871821] Bluetooth: hci0: command tx timeout [ 106.999422] Bluetooth: hci6: command tx timeout [ 108.791709] Bluetooth: hci1: command tx timeout [ 108.853687] Bluetooth: hci2: command tx timeout [ 108.854912] Bluetooth: hci3: command tx timeout [ 108.855406] Bluetooth: hci4: command tx timeout [ 108.917923] Bluetooth: hci5: command tx timeout [ 108.919818] Bluetooth: hci7: command tx timeout [ 108.919870] Bluetooth: hci0: command tx timeout [ 109.046941] Bluetooth: hci6: command tx timeout [ 110.840997] Bluetooth: hci1: command tx timeout [ 110.919669] Bluetooth: hci3: command tx timeout [ 110.920223] Bluetooth: hci4: command tx timeout [ 110.921233] Bluetooth: hci2: command tx timeout [ 110.965743] Bluetooth: hci0: command tx timeout [ 110.966862] Bluetooth: hci5: command tx timeout [ 110.968393] Bluetooth: hci7: command tx timeout [ 111.095678] Bluetooth: hci6: command tx timeout [ 112.886051] Bluetooth: hci1: command tx timeout [ 112.950194] Bluetooth: hci4: command tx timeout [ 112.950390] Bluetooth: hci2: command tx timeout [ 112.951706] Bluetooth: hci3: command tx timeout [ 113.014739] Bluetooth: hci7: command tx timeout [ 113.031696] Bluetooth: hci5: command tx timeout [ 113.032153] Bluetooth: hci0: command tx timeout [ 113.142700] Bluetooth: hci6: command tx timeout [ 167.178295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.185535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.187019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.192081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.196257] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.197664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.198895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.200187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.219357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.223437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.238270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.239874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.252528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.256832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.258245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.259703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.261270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.265366] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.267631] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.268966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.273917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.283789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.286787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.291818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.322744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.326280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.330830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.356234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.371872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.373202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.410498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.416028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.419003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.444239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.466304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.480489] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.481344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.503117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.522655] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.540904] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.580286] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 167.584986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.659301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.660989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.662969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.670076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.676665] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.677958] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.269699] Bluetooth: hci1: command tx timeout [ 169.270450] Bluetooth: hci0: command tx timeout [ 169.333953] Bluetooth: hci2: command tx timeout [ 169.334871] Bluetooth: hci3: command tx timeout [ 169.719247] Bluetooth: hci4: command tx timeout [ 169.783774] Bluetooth: hci6: command tx timeout [ 169.845769] Bluetooth: hci7: command tx timeout [ 170.166731] Bluetooth: hci5: command tx timeout [ 171.317702] Bluetooth: hci1: command tx timeout [ 171.318839] Bluetooth: hci0: command tx timeout [ 171.381812] Bluetooth: hci2: command tx timeout [ 171.382818] Bluetooth: hci3: command tx timeout [ 171.766708] Bluetooth: hci4: command tx timeout [ 171.829667] Bluetooth: hci6: command tx timeout [ 171.894674] Bluetooth: hci7: command tx timeout [ 172.213688] Bluetooth: hci5: command tx timeout [ 173.365910] Bluetooth: hci0: command tx timeout [ 173.365927] Bluetooth: hci1: command tx timeout [ 173.430230] Bluetooth: hci3: command tx timeout [ 173.430492] Bluetooth: hci2: command tx timeout [ 173.814774] Bluetooth: hci4: command tx timeout [ 173.880631] Bluetooth: hci6: command tx timeout [ 173.942757] Bluetooth: hci7: command tx timeout [ 174.262759] Bluetooth: hci5: command tx timeout [ 175.413710] Bluetooth: hci0: command tx timeout [ 175.415658] Bluetooth: hci1: command tx timeout [ 175.477725] Bluetooth: hci3: command tx timeout [ 175.479079] Bluetooth: hci2: command tx timeout [ 175.862688] Bluetooth: hci4: command tx timeout [ 175.927718] Bluetooth: hci6: command tx timeout [ 175.990971] Bluetooth: hci7: command tx timeout [ 176.310702] Bluetooth: hci5: command tx timeout [ 229.383660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.385821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.387045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.389864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.391817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.393033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.443316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.446743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.453513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.460091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.463319] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.468876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.573338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.575755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.577111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.580382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.583818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.598944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.637218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.659955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.668119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.706126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.709556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.710694] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.716892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.718646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.721217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.727795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.736691] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.741425] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.750371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.762126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.764882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.766227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.776367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.789493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.792841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.798943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.801953] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.803076] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.819785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.826299] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.826748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.832299] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.834328] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.837788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.840744] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.843865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.413760] Bluetooth: hci0: command tx timeout [ 231.541763] Bluetooth: hci1: command tx timeout [ 231.669777] Bluetooth: hci2: command tx timeout [ 231.733832] Bluetooth: hci4: command tx timeout [ 231.861696] Bluetooth: hci6: command tx timeout [ 231.926762] Bluetooth: hci7: command tx timeout [ 231.990729] Bluetooth: hci5: command tx timeout [ 231.990827] Bluetooth: hci3: command tx timeout [ 233.464660] Bluetooth: hci0: command tx timeout [ 233.589655] Bluetooth: hci1: command tx timeout [ 233.718799] Bluetooth: hci2: command tx timeout [ 233.783647] Bluetooth: hci4: command tx timeout [ 233.910981] Bluetooth: hci6: command tx timeout [ 233.974760] Bluetooth: hci7: command tx timeout [ 234.037687] Bluetooth: hci3: command tx timeout [ 234.039710] Bluetooth: hci5: command tx timeout [ 235.509919] Bluetooth: hci0: command tx timeout [ 235.637901] Bluetooth: hci1: command tx timeout [ 235.765687] Bluetooth: hci2: command tx timeout [ 235.829655] Bluetooth: hci4: command tx timeout [ 235.957751] Bluetooth: hci6: command tx timeout [ 236.021906] Bluetooth: hci7: command tx timeout [ 236.085689] Bluetooth: hci5: command tx timeout [ 236.085720] Bluetooth: hci3: command tx timeout [ 237.557738] Bluetooth: hci0: command tx timeout [ 237.685677] Bluetooth: hci1: command tx timeout [ 237.815639] Bluetooth: hci2: command tx timeout [ 237.877657] Bluetooth: hci4: command tx timeout [ 238.005902] Bluetooth: hci6: command tx timeout [ 238.070662] Bluetooth: hci7: command tx timeout [ 238.133996] Bluetooth: hci3: command tx timeout [ 238.134388] Bluetooth: hci5: command tx timeout [ 291.859191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.863221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.864359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.875011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.877514] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.878885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.909517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.913496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.915054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.919872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.921302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.922893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.041301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.045480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.046862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.061213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.063325] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.067681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.108237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.134804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.142162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.147778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.158861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.172404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.177847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 292.178983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.196847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.197348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.215535] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.220318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.222396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.225218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.229196] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 292.235010] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 292.236969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.241713] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.254220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.277776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.283021] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.287682] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.317273] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.337541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.346400] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.348230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.373524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.399310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.442802] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 292.471067] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 293.941729] Bluetooth: hci1: command tx timeout [ 293.943208] Bluetooth: hci0: command tx timeout [ 294.133898] Bluetooth: hci2: command tx timeout [ 294.263772] Bluetooth: hci3: command tx timeout [ 294.327628] Bluetooth: hci4: command tx timeout [ 294.329420] Bluetooth: hci5: command tx timeout [ 294.518800] Bluetooth: hci7: command tx timeout [ 294.520831] Bluetooth: hci6: command tx timeout [ 295.989673] Bluetooth: hci1: command tx timeout [ 295.990260] Bluetooth: hci0: command tx timeout [ 296.181766] Bluetooth: hci2: command tx timeout [ 296.311374] Bluetooth: hci3: command tx timeout [ 296.375760] Bluetooth: hci4: command tx timeout [ 296.377635] Bluetooth: hci5: command tx timeout [ 296.566885] Bluetooth: hci6: command tx timeout [ 296.568597] Bluetooth: hci7: command tx timeout [ 298.038650] Bluetooth: hci0: command tx timeout [ 298.039239] Bluetooth: hci1: command tx timeout [ 298.230638] Bluetooth: hci2: command tx timeout [ 298.359023] Bluetooth: hci3: command tx timeout [ 298.422738] Bluetooth: hci4: command tx timeout [ 298.423248] Bluetooth: hci5: command tx timeout [ 298.616690] Bluetooth: hci7: command tx timeout [ 298.617241] Bluetooth: hci6: command tx timeout [ 300.085681] Bluetooth: hci0: command tx timeout [ 300.086210] Bluetooth: hci1: command tx timeout [ 300.277741] Bluetooth: hci2: command tx timeout [ 300.406607] Bluetooth: hci3: command tx timeout [ 300.469683] Bluetooth: hci5: command tx timeout [ 300.470175] Bluetooth: hci4: command tx timeout [ 300.662683] Bluetooth: hci6: command tx timeout [ 300.663221] Bluetooth: hci7: command tx timeout [ 354.119446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.123659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.125138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.136132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.138215] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.143732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.306119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.308066] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.309384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.311843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.315232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.316647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.366267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.373815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.375191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.379414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.380503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.383763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.387282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.389747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.393149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.397702] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.399523] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.400153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.400477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.403777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.415356] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.416897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.430479] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 354.449656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.550242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.553766] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.556706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.562298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.565230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.567232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.571798] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 354.573867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.580786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.586733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.596807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.639768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.664977] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.690234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 354.736825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 354.739109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.768514] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 354.797368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.213679] Bluetooth: hci0: command tx timeout [ 356.341873] Bluetooth: hci1: command tx timeout [ 356.469727] Bluetooth: hci3: command tx timeout [ 356.469890] Bluetooth: hci2: command tx timeout [ 356.533724] Bluetooth: hci4: command tx timeout [ 356.661812] Bluetooth: hci6: command tx timeout [ 356.853661] Bluetooth: hci7: command tx timeout [ 356.917789] Bluetooth: hci5: command tx timeout [ 358.262743] Bluetooth: hci0: command tx timeout [ 358.390645] Bluetooth: hci1: command tx timeout [ 358.518707] Bluetooth: hci2: command tx timeout [ 358.518807] Bluetooth: hci3: command tx timeout [ 358.582628] Bluetooth: hci4: command tx timeout [ 358.709616] Bluetooth: hci6: command tx timeout [ 358.903598] Bluetooth: hci7: command tx timeout [ 358.966226] Bluetooth: hci5: command tx timeout [ 360.309767] Bluetooth: hci0: command tx timeout [ 360.437800] Bluetooth: hci1: command tx timeout [ 360.566778] Bluetooth: hci2: command tx timeout [ 360.567298] Bluetooth: hci3: command tx timeout [ 360.631830] Bluetooth: hci4: command tx timeout [ 360.757698] Bluetooth: hci6: command tx timeout [ 360.949638] Bluetooth: hci7: command tx timeout [ 361.014629] Bluetooth: hci5: command tx timeout [ 362.358626] Bluetooth: hci0: command tx timeout [ 362.486619] Bluetooth: hci1: command tx timeout [ 362.614749] Bluetooth: hci3: command tx timeout [ 362.615253] Bluetooth: hci2: command tx timeout [ 362.679373] Bluetooth: hci4: command tx timeout [ 362.806576] Bluetooth: hci6: command tx timeout [ 362.998786] Bluetooth: hci7: command tx timeout [ 363.062822] Bluetooth: hci5: command tx timeout [ 367.326905] modprobe (14102) used greatest stack depth: 23536 bytes left VM DIAGNOSIS: 18:29:46 Registers: info registers vcpu 0 RAX=ffffffff87ee8118 RBX=0000000000000002 RCX=ffffffff812ef5ee RDX=fffffbfff0fda9db RSI=0000000000000008 RDI=ffffffff87ee8158 RBP=ffff888016310000 RSP=ffff8880314765f8 R8 =0000000000000000 R9 =fffffbfff0fda9da R10=ffffffff87ed4ed7 R11=00000000000c2f81 R12=ffff888016310a90 R13=0000000000000000 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812fbdcc RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b0ea307080 CR3=000000002e426000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800924b182 RBX=ffff88802832fc58 RCX=ffffffff84806ff8 RDX=ffff88800b5d9b80 RSI=ffffffff84806f8e RDI=0000000000000007 RBP=00000000000000fc RSP=ffff88802832fa10 R8 =0000000000000001 R9 =fffffbfff0fda9d4 R10=0000000000000003 R11=0000000000000001 R12=ffff88800924b182 R13=dffffc0000000000 R14=ffff88802832fc58 R15=ffff88802832fd98 RIP=ffffffff8480758f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9451c2b540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9451d5f570 CR3=000000002b174000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000