Warning: Permanently added '[localhost]:63678' (ECDSA) to the list of known hosts. 2024/10/27 00:28:26 fuzzer started 2024/10/27 00:28:27 dialing manager at localhost:45639 syzkaller login: [ 72.876367] cgroup: Unknown subsys name 'net' [ 72.981048] cgroup: Unknown subsys name 'cpuset' [ 73.020652] cgroup: Unknown subsys name 'rlimit' 2024/10/27 00:28:44 syscalls: 204 2024/10/27 00:28:44 code coverage: enabled 2024/10/27 00:28:44 comparison tracing: enabled 2024/10/27 00:28:44 extra coverage: enabled 2024/10/27 00:28:44 setuid sandbox: enabled 2024/10/27 00:28:44 namespace sandbox: enabled 2024/10/27 00:28:44 Android sandbox: enabled 2024/10/27 00:28:44 fault injection: enabled 2024/10/27 00:28:44 leak checking: enabled 2024/10/27 00:28:44 net packet injection: enabled 2024/10/27 00:28:44 net device setup: enabled 2024/10/27 00:28:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/27 00:28:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/27 00:28:44 USB emulation: enabled 2024/10/27 00:28:44 hci packet injection: enabled 2024/10/27 00:28:44 wifi device emulation: enabled 2024/10/27 00:28:44 802.15.4 emulation: enabled 2024/10/27 00:28:44 fetching corpus: 0, signal 0/0 (executing program) 2024/10/27 00:28:46 starting 8 fuzzer processes 00:28:46 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4840) socketpair(0x2b, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0x4000001) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x8480}, 0x40001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40a0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xdf8e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8800) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x950b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4408bf82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f445136}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xace4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53c33d4d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebeacf3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc73d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c030a89}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68e93c05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6379dc10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b16}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1790056e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bb187d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41df8d88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a64d23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a7a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8088}, 0x4084) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000b80)={'syztnl2\x00', r6, 0x1, 0x40, 0x1, 0x6, {{0x38, 0x4, 0x2, 0x0, 0xe0, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@ssrr={0x89, 0x13, 0xa5, [@broadcast, @empty, @empty, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0xa8, [@multicast2, @private=0xa010101, @rand_addr=0x64010102, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2]}, @lsrr={0x83, 0x27, 0xf0, [@remote, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @private=0xa010100, @loopback]}, @timestamp={0x44, 0x1c, 0x3e, 0x0, 0x0, [0x7, 0x2, 0x7ff, 0x7fffffff, 0x3, 0x6c5]}, @rr={0x7, 0x17, 0x29, [@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @loopback, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x28, 0x3, 0x5, [{@loopback, 0xeeb}, {@rand_addr=0x64010100, 0xff}, {@remote, 0xf22}, {@rand_addr=0x64010100, 0x4}, {@multicast1, 0x2}]}, @ssrr={0x89, 0xb, 0x15, [@remote, @broadcast]}, @generic={0x93, 0x6, "7a288bce"}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x404c0d1) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000000dc0)) 00:28:46 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xb0680, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/91) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x443, 0x81, 0x0, 0x2, 0xc, 0x0, "63dff07482443672341720a454df62320942649498c93563839c89aefdbdd531c88ef39b0895722d5f4b068c8c1d276ed24b9fa7bab889f5a6e222713e9eff89", "6a7e93fd7d767e09e28757402bb7c605602a1611065248c0a308cc8224ac31c4f1449ee2326d8601bd4913446999fca67fd2f0daa663a00c0c91b63ebceed27e", "d29f1fa92258d75e2838d76d9904a3eb2ee83ae90a21b6798994a7d0675f6301", [0x2, 0xfffffffffffffff7]}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000003c0)) r1 = syz_open_dev$mouse(&(0x7f0000000480), 0x7ff, 0x200) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x100000001) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = getpid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x440, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000540)={'dummy0\x00'}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) bind$bt_sco(r1, &(0x7f0000000580)={0x1f, @none}, 0x8) r5 = getpid() getpgrp(r5) setpriority(0x0, r2, 0x13) 00:28:46 executing program 2: syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @empty, @void, {@arp={0x806, @generic={0x5, 0xa01, 0x6, 0x3, 0x2, @remote, "b17a00", @empty, "0daf590c5cdce89936e4"}}}}, &(0x7f0000000040)={0x0, 0x2, [0xa3c, 0x75c, 0x6e1, 0xf58]}) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x428, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x394, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8b5d9e292daac059f31a312a38795ffd7e8e795548e7f48ae98f268d7e79fe36"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8725ab73c9bd325fb9a077275320c7f22e1e35e76c49899bc1ea974a6f114845"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}]}, {0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @remote, 0x9}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x428}, 0x1, 0x0, 0x0, 0x44000884}, 0x40000) r2 = eventfd2(0x101, 0x80000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="202106aa5b93"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcb}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc845}, 0x48050) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe584}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x11) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200840}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040880) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e00), 0xc0200) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000e40)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000e80)=0xffffffffffffffff, 0x12) 00:28:46 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xf16, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x4, 0x17, 0x7fff, 0x10000, "ababe5172e8c43dfa2c34b6bf50ef044f800a302fc605df37f4c384b8ee83142"}) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x1c082) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xec79) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x80}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r6) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40008001) 00:28:46 executing program 4: r0 = shmget(0x2, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/209) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/1) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/145) r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000200)=""/125) shmctl$IPC_RMID(r0, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000280)=""/81) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000300)=""/43) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000340)=""/166) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = shmget(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000440)=""/218) r5 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000540)=""/226) 00:28:46 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x80000001, 0x8002) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2267e87b952a"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x24000040) io_uring_setup(0x245, &(0x7f0000000180)={0x0, 0xbc3e, 0x10, 0x0, 0x172}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/206) io_uring_setup(0x34a5, &(0x7f0000000300)={0x0, 0x8398, 0x4, 0x1, 0x155}) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) openat$cgroup_freezer_state(r0, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0xc200, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_subtree(r0, &(0x7f0000000540), 0x2, 0x0) io_uring_setup(0x65a3, &(0x7f0000000580)={0x0, 0xdfb4, 0x10, 0x1, 0xbc, 0x0, r0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0xe0, 0x20, 0x9, 0x8, {{0x1f, 0x4, 0x1, 0x20, 0x7c, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, {[@cipso={0x86, 0x27, 0x1, [{0x7, 0x6, "9d642085"}, {0x1, 0x11, "f1fe35f80889ab815049914dbd6f99"}, {0x5, 0xa, "166a5ce626475d16"}]}, @ssrr={0x89, 0x17, 0xb2, [@initdev={0xac, 0x1e, 0x5, 0x0}, @loopback, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x7a, 0x0, 0x1, [0x7, 0x8, 0x8df0ff3, 0x0]}, @generic={0x7, 0x9, "fa59cfcaf5dd2b"}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x2, [0x8, 0x5]}]}}}}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x81}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7f}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7f}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x60}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000980)=""/4096) openat$zero(0xffffffffffffff9c, &(0x7f0000001980), 0x200800, 0x0) [ 91.374085] audit: type=1400 audit(1729988926.271:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:28:46 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x253125aeb5feffbd, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x400003) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x44800) mq_open(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x40, 0x1, &(0x7f0000000400)={0x9, 0x5, 0x7, 0x8}) socketpair(0x25, 0xa, 0xfffffffe, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2a4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x22}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x274, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "850fd360ca4888699081b3c60ed34916507c1a74048bff18dca93bd38e8b672beb01df85109afcc62e3d79ba6ba68107994ae5b0e8631260bc6ca655cf8280c4458063e0fed7497b5977cd3e0a11a57682ee34a128352125f90b86900eafe32f6d821ac00bdb9011f7ec8ccb82e642e2a7c1a7820ae4e2ded7ebe6dbb3dd440c1914d58608a0e59a20b9dd09bbfd698960f256fa22b6b86c829e028e453ece98568cced049"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x95, 0x3, "29d7bdec8fdd75b2fd933d4d01d7c4901dabde1309c924f20b5939e2b6e96002b489fb60942faa3e511846c4bec94fb20cce48da4c5400143a460dc0958b83c16314a3dc2ef6e25d2a0dbe36282ced2d93853cd8e3f496b2ca8001e8b878ffe398dcbdf212fdf39dce61dc12ed1a69fb113d0376f464195dc6a971449eff353830b69a28273cdd3fa975820859a4eced18"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "ba0117cbc056ebb6a0d1d94411b885f02f1c746f31ab615867e174c43f876f62f352"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d18}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "28cceb38e91c3001bebb70f3337e4b7feac478e1679f68404c83a3127fac66061ba77fdde0ef021b66c59e4949a72dfcb2e5b6f79e4b73a0207325e372c55a64818352b4a7de0ebe56a77129f112336547bc7fc2b2da8fee3abf970780702af67d6e4a070715512e7278cf7c718d3666c202c3b6ded8355b27449f11056612451cc22a924b99cff710fe2956ba00183d54d9b6ec2ae0cd76f980086620e3f74e655f1c4b648155b429a049f02b1f8d7e123f623195d3c389be5eaf34748393ad4ed965af538c9e877c"}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000085) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) mq_open(&(0x7f0000000a00)='\x00', 0x80, 0x20, &(0x7f0000000a40)={0x3f, 0x5, 0x2, 0x1}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000a80)={'bridge0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x800) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x41a482, 0x0) mq_getsetattr(r5, &(0x7f0000000c80)={0x7, 0x100, 0xffff, 0x2}, &(0x7f0000000cc0)) 00:28:46 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000054) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0xffff, 0x410800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008805) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040010) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) socketpair(0xb, 0x3, 0x7, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0xa, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000640)={[{0x2d, 'rdma'}, {0x2b, 'cpuset'}, {0x2b, 'memory'}, {0x2b, 'devices'}]}, 0x1f) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2881}, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc46}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) write$cgroup_pid(r1, &(0x7f0000000900), 0x12) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000940)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), 0xffffffffffffffff) inotify_add_watch(r4, &(0x7f00000009c0)='./file0\x00', 0x108) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x804) [ 92.934844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.937179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.939074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.944136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.951547] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.952700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.953933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.955823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.957446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.963199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.970717] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.971865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.991681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.997343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.000768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.004360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.005577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.008611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.012737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.017975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.019210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.019604] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.023369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.025946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.027222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.035634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.036515] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.037420] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.038173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.048316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.050041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.057617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.059526] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.060796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.062127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.065226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.067427] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.069066] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.070925] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.072766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.073590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.077293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.101299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.102553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.111901] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.113122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.116776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.125275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.026151] Bluetooth: hci1: command tx timeout [ 95.026875] Bluetooth: hci0: command tx timeout [ 95.088377] Bluetooth: hci2: command tx timeout [ 95.152225] Bluetooth: hci5: command tx timeout [ 95.153523] Bluetooth: hci4: command tx timeout [ 95.153591] Bluetooth: hci3: command tx timeout [ 95.154175] Bluetooth: hci6: command tx timeout [ 95.154694] Bluetooth: hci7: command tx timeout [ 97.072168] Bluetooth: hci0: command tx timeout [ 97.072739] Bluetooth: hci1: command tx timeout [ 97.136125] Bluetooth: hci2: command tx timeout [ 97.200112] Bluetooth: hci3: command tx timeout [ 97.200695] Bluetooth: hci5: command tx timeout [ 97.201321] Bluetooth: hci7: command tx timeout [ 97.201775] Bluetooth: hci6: command tx timeout [ 97.202431] Bluetooth: hci4: command tx timeout [ 99.120412] Bluetooth: hci0: command tx timeout [ 99.120963] Bluetooth: hci1: command tx timeout [ 99.185176] Bluetooth: hci2: command tx timeout [ 99.249060] Bluetooth: hci3: command tx timeout [ 99.249575] Bluetooth: hci4: command tx timeout [ 99.250111] Bluetooth: hci5: command tx timeout [ 99.250559] Bluetooth: hci6: command tx timeout [ 99.251192] Bluetooth: hci7: command tx timeout [ 101.169301] Bluetooth: hci0: command tx timeout [ 101.170812] Bluetooth: hci1: command tx timeout [ 101.232807] Bluetooth: hci2: command tx timeout [ 101.296231] Bluetooth: hci6: command tx timeout [ 101.296868] Bluetooth: hci7: command tx timeout [ 101.298210] Bluetooth: hci5: command tx timeout [ 101.298659] Bluetooth: hci4: command tx timeout [ 101.299326] Bluetooth: hci3: command tx timeout [ 152.924970] syz-executor.2 (283) used greatest stack depth: 23568 bytes left [ 155.774515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.777201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.786518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.787281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.788346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.789264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.798327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.806442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.809114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.810374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.813936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.824760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.878582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.889285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.896488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.898222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.900322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.908661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.910142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.914376] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.917630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.919538] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.920685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.924312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.932695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.948100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.954308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.964837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.966859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.968920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.971348] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.976588] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.979077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.981652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.991906] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.997339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.006574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.011896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.018860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.020730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.043467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.044862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.057534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.076195] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.080197] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.106516] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.112210] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.124681] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.872140] Bluetooth: hci0: command tx timeout [ 157.937071] Bluetooth: hci1: command tx timeout [ 158.001061] Bluetooth: hci2: command tx timeout [ 158.066537] Bluetooth: hci3: command tx timeout [ 158.128121] Bluetooth: hci5: command tx timeout [ 158.130129] Bluetooth: hci4: command tx timeout [ 158.193228] Bluetooth: hci6: command tx timeout [ 158.194882] Bluetooth: hci7: command tx timeout [ 159.921040] Bluetooth: hci0: command tx timeout [ 159.985073] Bluetooth: hci1: command tx timeout [ 160.050065] Bluetooth: hci2: command tx timeout [ 160.112128] Bluetooth: hci3: command tx timeout [ 160.176153] Bluetooth: hci5: command tx timeout [ 160.176633] Bluetooth: hci4: command tx timeout [ 160.240118] Bluetooth: hci7: command tx timeout [ 160.240594] Bluetooth: hci6: command tx timeout [ 161.969052] Bluetooth: hci0: command tx timeout [ 162.033142] Bluetooth: hci1: command tx timeout [ 162.097248] Bluetooth: hci2: command tx timeout [ 162.161057] Bluetooth: hci3: command tx timeout [ 162.225219] Bluetooth: hci5: command tx timeout [ 162.225703] Bluetooth: hci4: command tx timeout [ 162.288077] Bluetooth: hci7: command tx timeout [ 162.288592] Bluetooth: hci6: command tx timeout [ 164.017169] Bluetooth: hci0: command tx timeout [ 164.080092] Bluetooth: hci1: command tx timeout [ 164.146027] Bluetooth: hci2: command tx timeout [ 164.209065] Bluetooth: hci3: command tx timeout [ 164.273067] Bluetooth: hci5: command tx timeout [ 164.273552] Bluetooth: hci4: command tx timeout [ 164.337154] Bluetooth: hci7: command tx timeout [ 164.337635] Bluetooth: hci6: command tx timeout [ 217.954652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.957916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.959912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.962321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.965270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.966733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.968284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.973401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.974512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.982783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.984988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.986191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.051360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.055016] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.058625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.061262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.063101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.064345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.115640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.121258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.124588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.142894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.147604] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.153100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.181778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.183534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.196280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.206416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.215865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.216768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.222771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.227412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.244348] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.245584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.248601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.256806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.261177] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.263265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.264572] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.267198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.270260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.274085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.285641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.298748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.301868] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.303699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.383128] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.393496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.016071] Bluetooth: hci0: command tx timeout [ 220.017091] Bluetooth: hci1: command tx timeout [ 220.144730] Bluetooth: hci2: command tx timeout [ 220.208141] Bluetooth: hci3: command tx timeout [ 220.337038] Bluetooth: hci5: command tx timeout [ 220.464155] Bluetooth: hci6: command tx timeout [ 220.528098] Bluetooth: hci4: command tx timeout [ 220.848087] Bluetooth: hci7: command tx timeout [ 222.064137] Bluetooth: hci1: command tx timeout [ 222.065576] Bluetooth: hci0: command tx timeout [ 222.193206] Bluetooth: hci2: command tx timeout [ 222.256146] Bluetooth: hci3: command tx timeout [ 222.384063] Bluetooth: hci5: command tx timeout [ 222.513110] Bluetooth: hci6: command tx timeout [ 222.577045] Bluetooth: hci4: command tx timeout [ 222.896081] Bluetooth: hci7: command tx timeout [ 224.112134] Bluetooth: hci1: command tx timeout [ 224.112670] Bluetooth: hci0: command tx timeout [ 224.240043] Bluetooth: hci2: command tx timeout [ 224.306182] Bluetooth: hci3: command tx timeout [ 224.432140] Bluetooth: hci5: command tx timeout [ 224.560093] Bluetooth: hci6: command tx timeout [ 224.625131] Bluetooth: hci4: command tx timeout [ 224.944058] Bluetooth: hci7: command tx timeout [ 226.160218] Bluetooth: hci1: command tx timeout [ 226.160743] Bluetooth: hci0: command tx timeout [ 226.288056] Bluetooth: hci2: command tx timeout [ 226.352653] Bluetooth: hci3: command tx timeout [ 226.480219] Bluetooth: hci5: command tx timeout [ 226.608052] Bluetooth: hci6: command tx timeout [ 226.673675] Bluetooth: hci4: command tx timeout [ 226.992416] Bluetooth: hci7: command tx timeout [ 280.282607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.288480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.290891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.299084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.301837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.303842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.311282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.313572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.315434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.318413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.325719] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.339261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.457817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.469412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.473487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.474631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.489539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.494833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.504582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.506558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.513411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.518474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.526251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.527138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.531203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.532059] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.533494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.535362] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.536823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.545674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.554670] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.562084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.562887] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.572605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.577416] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.580446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.584995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.586743] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.588229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.597346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.605283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.610294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.628931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.630668] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.632501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.635565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.655226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.658426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.354033] Bluetooth: hci0: command tx timeout [ 282.354143] Bluetooth: hci1: command tx timeout [ 282.608347] Bluetooth: hci7: command tx timeout [ 282.608495] Bluetooth: hci2: command tx timeout [ 282.609191] Bluetooth: hci3: command tx timeout [ 282.674021] Bluetooth: hci4: command tx timeout [ 282.800103] Bluetooth: hci6: command tx timeout [ 282.800145] Bluetooth: hci5: command tx timeout [ 284.400278] Bluetooth: hci0: command tx timeout [ 284.400376] Bluetooth: hci1: command tx timeout [ 284.658008] Bluetooth: hci7: command tx timeout [ 284.658995] Bluetooth: hci3: command tx timeout [ 284.659471] Bluetooth: hci2: command tx timeout [ 284.720133] Bluetooth: hci4: command tx timeout [ 284.848051] Bluetooth: hci6: command tx timeout [ 284.848183] Bluetooth: hci5: command tx timeout [ 286.448209] Bluetooth: hci1: command tx timeout [ 286.448269] Bluetooth: hci0: command tx timeout [ 286.704180] Bluetooth: hci2: command tx timeout [ 286.706007] Bluetooth: hci3: command tx timeout [ 286.706074] Bluetooth: hci7: command tx timeout [ 286.768168] Bluetooth: hci4: command tx timeout [ 286.896134] Bluetooth: hci6: command tx timeout [ 286.896274] Bluetooth: hci5: command tx timeout [ 288.496099] Bluetooth: hci0: command tx timeout [ 288.497550] Bluetooth: hci1: command tx timeout [ 288.753005] Bluetooth: hci2: command tx timeout [ 288.754474] Bluetooth: hci3: command tx timeout [ 288.756188] Bluetooth: hci7: command tx timeout [ 288.816029] Bluetooth: hci4: command tx timeout [ 288.944221] Bluetooth: hci5: command tx timeout [ 288.944824] Bluetooth: hci6: command tx timeout [ 342.476442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.483540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.494262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.501332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.525502] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.528496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.539309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.542281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.544129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.546994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.549289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.550566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.662480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.664257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.670349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.679543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.691214] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.692832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.795517] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.796766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.800392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.802672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.809628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.811803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.847088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.858239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.859740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.875234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.879823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.887192] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.892605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.898444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.898824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.906363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.926675] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.928504] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.939684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.953695] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.955060] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.956725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.969291] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.972424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.973805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.978757] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.004265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.006438] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.052257] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.060352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.624178] Bluetooth: hci1: command tx timeout [ 344.625295] Bluetooth: hci0: command tx timeout [ 344.754184] Bluetooth: hci2: command tx timeout [ 344.944195] Bluetooth: hci3: command tx timeout [ 344.944249] Bluetooth: hci4: command tx timeout [ 345.136378] Bluetooth: hci5: command tx timeout [ 345.138222] Bluetooth: hci7: command tx timeout [ 345.200121] Bluetooth: hci6: command tx timeout [ 346.674008] Bluetooth: hci1: command tx timeout [ 346.674048] Bluetooth: hci0: command tx timeout [ 346.800282] Bluetooth: hci2: command tx timeout [ 346.992204] Bluetooth: hci4: command tx timeout [ 346.992259] Bluetooth: hci3: command tx timeout [ 347.184026] Bluetooth: hci5: command tx timeout [ 347.184302] Bluetooth: hci7: command tx timeout [ 347.249047] Bluetooth: hci6: command tx timeout [ 348.720156] Bluetooth: hci1: command tx timeout [ 348.721322] Bluetooth: hci0: command tx timeout [ 348.849983] Bluetooth: hci2: command tx timeout [ 349.040117] Bluetooth: hci3: command tx timeout [ 349.040608] Bluetooth: hci4: command tx timeout [ 349.232098] Bluetooth: hci5: command tx timeout [ 349.233337] Bluetooth: hci7: command tx timeout [ 349.296213] Bluetooth: hci6: command tx timeout [ 350.768051] Bluetooth: hci0: command tx timeout [ 350.768567] Bluetooth: hci1: command tx timeout [ 350.896101] Bluetooth: hci2: command tx timeout [ 351.088249] Bluetooth: hci4: command tx timeout [ 351.090017] Bluetooth: hci3: command tx timeout [ 351.281104] Bluetooth: hci7: command tx timeout [ 351.282591] Bluetooth: hci5: command tx timeout [ 351.344243] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:33:56 Registers: info registers vcpu 0 RAX=0000000000020b93 RBX=0000000000000001 RCX=ffffffff817c613b RDX=0000000000020b93 RSI=0000000000007c61 RDI=00000000000622b9 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a08 R8 =0000000000000000 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=0000000000020b93 R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff88806ce09ab9 R15=ffff88806ce09a78 RIP=ffffffff81149101 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec439e3260 CR3=000000003069e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880280d0001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880280cfd01 RSI=ffff8880280cfd10 RDI=ffff8880280cf418 RBP=ffff8880280cf460 RSP=ffff8880280cf398 R8 =0000000000000001 R9 =ffff8880280cf448 R10=000000000003c001 R11=0000000000020b7a R12=ffff8880280cf468 R13=ffff8880280cf450 R14=ffff8880280cfd10 R15=ffff8880280cf408 RIP=ffffffff81149aea RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056257b0181b0 CR3=0000000030724000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000