syzkaller login: [ 63.253606] systemd-udevd (119) used greatest stack depth: 23632 bytes left Warning: Permanently added '[localhost]:37485' (ECDSA) to the list of known hosts. 2024/10/31 00:03:59 fuzzer started 2024/10/31 00:04:00 dialing manager at localhost:45639 [ 65.393517] cgroup: Unknown subsys name 'net' [ 65.464876] cgroup: Unknown subsys name 'cpuset' [ 65.483068] cgroup: Unknown subsys name 'rlimit' 2024/10/31 00:04:16 syscalls: 207 2024/10/31 00:04:16 code coverage: enabled 2024/10/31 00:04:16 comparison tracing: enabled 2024/10/31 00:04:16 extra coverage: enabled 2024/10/31 00:04:16 setuid sandbox: enabled 2024/10/31 00:04:16 namespace sandbox: enabled 2024/10/31 00:04:16 Android sandbox: enabled 2024/10/31 00:04:16 fault injection: enabled 2024/10/31 00:04:16 leak checking: enabled 2024/10/31 00:04:16 net packet injection: enabled 2024/10/31 00:04:16 net device setup: enabled 2024/10/31 00:04:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 00:04:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 00:04:16 USB emulation: enabled 2024/10/31 00:04:16 hci packet injection: enabled 2024/10/31 00:04:16 wifi device emulation: enabled 2024/10/31 00:04:16 802.15.4 emulation: enabled 2024/10/31 00:04:16 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 00:04:18 starting 8 fuzzer processes 00:04:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) setfsuid(0xee00) msgctl$IPC_RMID(0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48044) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x84010) 00:04:18 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x4000800) r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x972, 0xa000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2006c8d4}, 0x44851) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40854}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8042804}, 0x8824) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x1f, 0x280) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000580)={'mangle\x00', 0x0, [0x8, 0x7, 0x7, 0x2, 0x8]}, &(0x7f0000000600)=0x54) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) socketpair(0x26, 0x0, 0x80, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x38, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c1}, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r10, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r9, 0xd70eb575ae5b288b, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000019c0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={0xfffffffffffffffe}}, 0x0) 00:04:18 executing program 2: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r4 = syz_open_dev$mouse(&(0x7f0000000200), 0xc1, 0x28080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random='8I'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}, @NL80211_ATTR_SSID={0x17, 0x34, @random="2e1818507a99158b59fae1e96609ab581b05c4"}]}, 0x58}}, 0x40000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r4, 0x10000000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000440)=[r0], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) socketpair(0x11, 0x80000, 0x1000, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/10, 0xa}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)=""/149, 0x95}], 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 00:04:18 executing program 3: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcf}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48041) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x20, 0x8, 0xffff8000, 0x2, {{0x2d, 0x4, 0x2, 0x8, 0xb4, 0x64, 0x0, 0xb7, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1b, 0x7e, [@broadcast, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}]}, @rr={0x7, 0x1f, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @multicast2, @multicast1, @local, @private=0xa010102]}, @cipso={0x86, 0x42, 0x0, [{0x7, 0xc, "0ab9fec83dde80da1873"}, {0x0, 0x4, "5ed1"}, {0x7, 0x10, "f027b38f999d9024a7e28907b393"}, {0x1, 0x4, "1507"}, {0x7, 0xe, "1d0728914d1c6e85a96c9eba"}, {0x4, 0x5, "dccf43"}, {0x5, 0x3, 'D'}, {0x1, 0x2}]}, @noop, @cipso={0x86, 0xf, 0x0, [{0x0, 0x9, "86f005102273ef"}]}, @ssrr={0x89, 0x13, 0x24, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @loopback]}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044890}, 0x48104) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r3, 0x300, 0x2, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8415}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400}, 0x4004004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) socketpair(0x1d, 0x804, 0x1, &(0x7f0000000640)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4c014) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x50}}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xf8, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc008001}, 0x4000000) geteuid() getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000dc0)=0xe8) setfsuid(r8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000e40)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @private=0xa010102}, 0x315, 0x0, 0x0, 0x0, 0x738, &(0x7f0000000e00)='veth0_vlan\x00', 0x400, 0x7, 0x5}) 00:04:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd6a13658365c7fcc}, 0x20000004) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000002c0)={@broadcast, @remote, @dev}, &(0x7f0000000300)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400d5}, 0xc0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8811}, 0x24004015) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r4, 0x200, 0x7ff, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x3c}}, 0x4004000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x98, 0x0, 0xf00, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:getty_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) r6 = syz_open_dev$mouse(&(0x7f00000009c0), 0x5, 0x129c40) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000a00)={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0xa00, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x4040) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000c00)={0xfff, "ef0c85"}, 0x6) [ 83.267040] audit: type=1400 audit(1730333058.571:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:04:18 executing program 5: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff, 0x2, 0x9}, 0x1000, 0x40, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0x81, 0x2, 0x1}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x400) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff, 0x2}, 0xe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x300) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xfffffff7, 0x0, 0x670}) r2 = accept4$bt_l2cap(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xc) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r3 = accept4$bt_l2cap(r0, &(0x7f00000003c0), &(0x7f0000000400)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000440)={0x7, 0x0, 0x91, 0x7, 0x1, 0x1, 0x1}, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000480), 0x4) r4 = syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x115c02) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000680)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x900) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000700)) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000780)=0xd, 0x4) 00:04:18 executing program 6: socketpair(0x2, 0x80000, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x358610efe307c80d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6a}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40004) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x2, 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000300)={0x0, 'veth1_to_bridge\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x0, 'rose0\x00', 0x2}, 0x18) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x2, 0x7, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xea9f, 0x48}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x41000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}}, 0x8001) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x8, 0xa33, {{0xd, 0x4, 0x3, 0x37, 0x34, 0x65, 0x0, 0x7, 0x4, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x34, 0x3, 0x5, [{@rand_addr=0x64010102, 0x6}, {@private=0xa010100, 0x8000}, {@private=0xa010101, 0x1}]}, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1c0, r7, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40011) 00:04:18 executing program 7: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r0, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) syz_open_dev$ptys(0xc, 0x3, 0x1) socketpair(0x2, 0x6, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) r5 = syz_open_dev$mouse(&(0x7f0000000380), 0x8884, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r5) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1d0, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x81b}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xaf, 0xc5, "c7e8551fc83d6145ec2ae6e963d31c1c8f8176e48340483a2c6044a4dd8cca0a542ed7f439561c93a7f47e76a9ab227a6e8f5bcae7af2be6c826d926ac066e47442ef0463ff58642c97d6a2828566db78d883c933022261706e9020931cf011968758d16c67a2186a798ce8ead3b65bae3994c4a30aade41ee78ac757148a0ccdf1f3986ecbab415bcb214f50daba2c6c75e7848c310f02cdc57dc650cecebd5e48cafa18e6eaabfe4d069"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xde, 0xc5, "252fd114b03542bbfc515204f9096510f6af2e81a62d5a5357168b64fae830969451fd841c1ca3ed27955cafd2a2c4411ed3edcf19bf2a4b3b25570f0bd60b733ed8c6e4ae0207d4bb56643fb8c6214be592fbd7f79b49eda1169d3275fc25d6f47c6c337dd1e1a07c0e2c55b446d9ea52826a4ab83cff363ad08439e45224d7b9f513239d9ca081cb62186a147d926764038c9eb90e55bebf6f419fef28645dcc72b8b11b5304b3c3fa73b1c3868bbb42ffaa67f0996652f72c3cca56f9893d779da924603e390247f7920ff3a25f4bb3c70a3588712f488133"}]}, 0x1d0}}, 0x40400c0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x54c32439}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) r8 = io_uring_setup(0x18d6, &(0x7f0000000880)={0x0, 0x972a, 0x0, 0x1, 0x2e7, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/82, 0x52}, {&(0x7f0000000980)=""/191, 0xbf}], 0x2) io_uring_setup(0x13d5, &(0x7f0000000b00)={0x0, 0x45b3, 0x10, 0x1, 0x22a}) [ 84.683119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.684827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.686779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.688957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.690482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.694554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.697030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.700941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.702976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.705236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.707044] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.708228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.736509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.742483] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.744341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.751135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.757390] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.758939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.802333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.809991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.819734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.827985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.829218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.831103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.832847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.839913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.840719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.848666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.849418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.852817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.855814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.858195] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.859465] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.863726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.869229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.874412] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.887403] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.892833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.898022] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.902839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.907033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.952133] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.955282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.982451] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.994333] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.998087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.999869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.024269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.772227] Bluetooth: hci1: command tx timeout [ 86.773205] Bluetooth: hci0: command tx timeout [ 86.834777] Bluetooth: hci2: command tx timeout [ 86.899820] Bluetooth: hci3: command tx timeout [ 86.963830] Bluetooth: hci5: command tx timeout [ 86.963929] Bluetooth: hci4: command tx timeout [ 87.026778] Bluetooth: hci6: command tx timeout [ 87.090799] Bluetooth: hci7: command tx timeout [ 88.818882] Bluetooth: hci1: command tx timeout [ 88.819797] Bluetooth: hci0: command tx timeout [ 88.883758] Bluetooth: hci2: command tx timeout [ 88.947772] Bluetooth: hci3: command tx timeout [ 89.010799] Bluetooth: hci4: command tx timeout [ 89.011785] Bluetooth: hci5: command tx timeout [ 89.076010] Bluetooth: hci6: command tx timeout [ 89.138786] Bluetooth: hci7: command tx timeout [ 90.868447] Bluetooth: hci0: command tx timeout [ 90.868475] Bluetooth: hci1: command tx timeout [ 90.930762] Bluetooth: hci2: command tx timeout [ 90.994887] Bluetooth: hci3: command tx timeout [ 91.058772] Bluetooth: hci4: command tx timeout [ 91.061735] Bluetooth: hci5: command tx timeout [ 91.123789] Bluetooth: hci6: command tx timeout [ 91.186994] Bluetooth: hci7: command tx timeout [ 92.917745] Bluetooth: hci1: command tx timeout [ 92.917769] Bluetooth: hci0: command tx timeout [ 92.978776] Bluetooth: hci2: command tx timeout [ 93.043749] Bluetooth: hci3: command tx timeout [ 93.107787] Bluetooth: hci5: command tx timeout [ 93.107821] Bluetooth: hci4: command tx timeout [ 93.170909] Bluetooth: hci6: command tx timeout [ 93.234854] Bluetooth: hci7: command tx timeout [ 146.946049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.950875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.952616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.960544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.965009] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.967027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.005921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.010616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.017183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.024434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.035036] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.042527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.268676] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.270991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.272093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.278199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.280561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.282776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.283871] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.286891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.287616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.313961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.332462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.344511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.345282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.355276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.364465] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.365896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.372932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.373840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.384433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.389062] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.410327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.418930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.420902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.427584] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.434350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.437429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.437571] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.444888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.474082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.485179] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.486117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.511177] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.512987] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.523340] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.528328] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.530777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.042835] Bluetooth: hci0: command tx timeout [ 149.106825] Bluetooth: hci1: command tx timeout [ 149.362899] Bluetooth: hci3: command tx timeout [ 149.427803] Bluetooth: hci2: command tx timeout [ 149.490929] Bluetooth: hci4: command tx timeout [ 149.556879] Bluetooth: hci5: command tx timeout [ 149.618907] Bluetooth: hci7: command tx timeout [ 149.619199] Bluetooth: hci6: command tx timeout [ 151.091895] Bluetooth: hci0: command tx timeout [ 151.155733] Bluetooth: hci1: command tx timeout [ 151.410823] Bluetooth: hci3: command tx timeout [ 151.475856] Bluetooth: hci2: command tx timeout [ 151.538896] Bluetooth: hci4: command tx timeout [ 151.602837] Bluetooth: hci5: command tx timeout [ 151.666747] Bluetooth: hci6: command tx timeout [ 151.667732] Bluetooth: hci7: command tx timeout [ 153.138788] Bluetooth: hci0: command tx timeout [ 153.202912] Bluetooth: hci1: command tx timeout [ 153.458824] Bluetooth: hci3: command tx timeout [ 153.522740] Bluetooth: hci2: command tx timeout [ 153.587462] Bluetooth: hci4: command tx timeout [ 153.650851] Bluetooth: hci5: command tx timeout [ 153.714756] Bluetooth: hci7: command tx timeout [ 153.715230] Bluetooth: hci6: command tx timeout [ 155.188065] Bluetooth: hci0: command tx timeout [ 155.252083] Bluetooth: hci1: command tx timeout [ 155.506800] Bluetooth: hci3: command tx timeout [ 155.570838] Bluetooth: hci2: command tx timeout [ 155.636103] Bluetooth: hci4: command tx timeout [ 155.699700] Bluetooth: hci5: command tx timeout [ 155.762797] Bluetooth: hci6: command tx timeout [ 155.762833] Bluetooth: hci7: command tx timeout [ 209.409337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.411277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.416366] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.438766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.447286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.450204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.488974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.496226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.499908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.507827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.513532] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.517467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.560975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.563762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.571208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.582837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.609997] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.615907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.656968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.659356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.662934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.670699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.675934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.681878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.685207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.706300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.711786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.728777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.761633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.784988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.793049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.798061] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.802984] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.811014] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.815056] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.820946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.871096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.888058] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.910121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.913084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.916718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.920387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.923995] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.924528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.926130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.996007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.054963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.058991] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.506832] Bluetooth: hci0: command tx timeout [ 211.571803] Bluetooth: hci1: command tx timeout [ 211.699404] Bluetooth: hci2: command tx timeout [ 211.763352] Bluetooth: hci3: command tx timeout [ 211.890812] Bluetooth: hci6: command tx timeout [ 211.891561] Bluetooth: hci4: command tx timeout [ 212.083165] Bluetooth: hci5: command tx timeout [ 212.210806] Bluetooth: hci7: command tx timeout [ 213.555755] Bluetooth: hci0: command tx timeout [ 213.618739] Bluetooth: hci1: command tx timeout [ 213.746758] Bluetooth: hci2: command tx timeout [ 213.812678] Bluetooth: hci3: command tx timeout [ 213.938781] Bluetooth: hci4: command tx timeout [ 213.939257] Bluetooth: hci6: command tx timeout [ 214.130862] Bluetooth: hci5: command tx timeout [ 214.258782] Bluetooth: hci7: command tx timeout [ 215.602796] Bluetooth: hci0: command tx timeout [ 215.667685] Bluetooth: hci1: command tx timeout [ 215.794740] Bluetooth: hci2: command tx timeout [ 215.858883] Bluetooth: hci3: command tx timeout [ 215.986754] Bluetooth: hci6: command tx timeout [ 215.987232] Bluetooth: hci4: command tx timeout [ 216.178723] Bluetooth: hci5: command tx timeout [ 216.306736] Bluetooth: hci7: command tx timeout [ 217.650761] Bluetooth: hci0: command tx timeout [ 217.714765] Bluetooth: hci1: command tx timeout [ 217.842714] Bluetooth: hci2: command tx timeout [ 217.908795] Bluetooth: hci3: command tx timeout [ 218.034923] Bluetooth: hci4: command tx timeout [ 218.035406] Bluetooth: hci6: command tx timeout [ 218.226749] Bluetooth: hci5: command tx timeout [ 218.354754] Bluetooth: hci7: command tx timeout [ 271.859278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.867847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.874394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.880743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.883506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.885044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.935798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.941966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.943304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.947535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.950358] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.953750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.995333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.998914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.003178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.008930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.015175] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.019313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.110193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.113901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.123148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.127443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.132124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.135039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.136043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.142532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.147953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.153936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.174755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.178207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.184489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.186616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.189266] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.193913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.196386] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.198401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.203075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.205063] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.214667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.218340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.220795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.226797] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.243128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.245476] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.247361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.259894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.265610] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.280757] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.970766] Bluetooth: hci0: command tx timeout [ 274.036719] Bluetooth: hci1: command tx timeout [ 274.099699] Bluetooth: hci2: command tx timeout [ 274.226824] Bluetooth: hci3: command tx timeout [ 274.291795] Bluetooth: hci4: command tx timeout [ 274.293484] Bluetooth: hci5: command tx timeout [ 274.355751] Bluetooth: hci7: command tx timeout [ 274.357467] Bluetooth: hci6: command tx timeout [ 276.018798] Bluetooth: hci0: command tx timeout [ 276.082965] Bluetooth: hci1: command tx timeout [ 276.146770] Bluetooth: hci2: command tx timeout [ 276.276113] Bluetooth: hci3: command tx timeout [ 276.338954] Bluetooth: hci4: command tx timeout [ 276.339500] Bluetooth: hci5: command tx timeout [ 276.402791] Bluetooth: hci6: command tx timeout [ 276.403317] Bluetooth: hci7: command tx timeout [ 278.066759] Bluetooth: hci0: command tx timeout [ 278.130794] Bluetooth: hci1: command tx timeout [ 278.194917] Bluetooth: hci2: command tx timeout [ 278.323837] Bluetooth: hci3: command tx timeout [ 278.386878] Bluetooth: hci4: command tx timeout [ 278.387395] Bluetooth: hci5: command tx timeout [ 278.451676] Bluetooth: hci7: command tx timeout [ 278.452177] Bluetooth: hci6: command tx timeout [ 280.114743] Bluetooth: hci0: command tx timeout [ 280.178891] Bluetooth: hci1: command tx timeout [ 280.243409] Bluetooth: hci2: command tx timeout [ 280.370715] Bluetooth: hci3: command tx timeout [ 280.434766] Bluetooth: hci5: command tx timeout [ 280.436239] Bluetooth: hci4: command tx timeout [ 280.498752] Bluetooth: hci6: command tx timeout [ 280.500858] Bluetooth: hci7: command tx timeout [ 334.328930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.332522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.353491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.365689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.377482] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.382005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.455749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.459907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.465978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.472985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.486430] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.487579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.533663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.537741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.541778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.543432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.546518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.553398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.554498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.556988] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.560702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.582686] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.588308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.597865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.601686] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.602711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.605457] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.606831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.608364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.610170] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.613177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.619860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.627781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.639190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.647914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.649335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.650337] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.651242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.653515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.655095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.656092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.673852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.679543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.684144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.685731] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.686944] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.687951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.697978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.434736] Bluetooth: hci0: command tx timeout [ 336.499003] Bluetooth: hci1: command tx timeout [ 336.626741] Bluetooth: hci3: command tx timeout [ 336.626754] Bluetooth: hci2: command tx timeout [ 336.690738] Bluetooth: hci6: command tx timeout [ 336.691509] Bluetooth: hci4: command tx timeout [ 336.818876] Bluetooth: hci5: command tx timeout [ 336.819077] Bluetooth: hci7: command tx timeout [ 338.484267] Bluetooth: hci0: command tx timeout [ 338.547512] Bluetooth: hci1: command tx timeout [ 338.674712] Bluetooth: hci3: command tx timeout [ 338.674799] Bluetooth: hci2: command tx timeout [ 338.738703] Bluetooth: hci6: command tx timeout [ 338.741688] Bluetooth: hci4: command tx timeout [ 338.866750] Bluetooth: hci7: command tx timeout [ 338.867681] Bluetooth: hci5: command tx timeout [ 340.530965] Bluetooth: hci0: command tx timeout [ 340.594951] Bluetooth: hci1: command tx timeout [ 340.722799] Bluetooth: hci2: command tx timeout [ 340.724469] Bluetooth: hci3: command tx timeout [ 340.786877] Bluetooth: hci4: command tx timeout [ 340.786967] Bluetooth: hci6: command tx timeout [ 340.916685] Bluetooth: hci5: command tx timeout [ 340.916775] Bluetooth: hci7: command tx timeout [ 342.578790] Bluetooth: hci0: command tx timeout [ 342.644674] Bluetooth: hci1: command tx timeout [ 342.770883] Bluetooth: hci2: command tx timeout [ 342.771262] Bluetooth: hci3: command tx timeout [ 342.834798] Bluetooth: hci4: command tx timeout [ 342.834845] Bluetooth: hci6: command tx timeout [ 342.962746] Bluetooth: hci5: command tx timeout [ 342.962780] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:09:19 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110058daf18 RCX=ffffffff81306634 RDX=1ffff1100d9c7732 RSI=0000000000000004 RDI=ffff88806ce3b998 RBP=ffff88806ce3b980 RSP=ffff88802c6d7878 R8 =0000000000000001 R9 =ffffed10058daf02 R10=0000000000000003 R11=00000000000c2f81 R12=0000000000000000 R13=ffff88800c3ddbe0 R14=ffff88800c3dd280 R15=ffff88806ce3b998 RIP=ffffffff812eebe4 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556fdec400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdfd0359b0 CR3=000000002de22000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000004 RDX=1ffff1100670a151 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff888033850000 RSP=ffff888036527318 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=ffff88806cf41b90 R12=ffff888033850a68 R13=ffff88806cf41b90 R14=0000000000000022 R15=0000000000000002 RIP=ffffffff812fadc0 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9628adb620 CR3=000000000f124000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000