Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:52170' (ECDSA) to the list of known hosts. 2024/12/06 13:30:43 fuzzer started 2024/12/06 13:30:44 dialing manager at localhost:46119 syzkaller login: [ 54.312662] cgroup: Unknown subsys name 'net' [ 54.434750] cgroup: Unknown subsys name 'cpuset' [ 54.457094] cgroup: Unknown subsys name 'rlimit' 2024/12/06 13:31:04 syscalls: 201 2024/12/06 13:31:04 code coverage: enabled 2024/12/06 13:31:04 comparison tracing: enabled 2024/12/06 13:31:04 extra coverage: enabled 2024/12/06 13:31:04 setuid sandbox: enabled 2024/12/06 13:31:04 namespace sandbox: enabled 2024/12/06 13:31:04 Android sandbox: enabled 2024/12/06 13:31:04 fault injection: enabled 2024/12/06 13:31:04 leak checking: enabled 2024/12/06 13:31:04 net packet injection: enabled 2024/12/06 13:31:04 net device setup: enabled 2024/12/06 13:31:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/06 13:31:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/06 13:31:04 USB emulation: enabled 2024/12/06 13:31:04 hci packet injection: enabled 2024/12/06 13:31:04 wifi device emulation: enabled 2024/12/06 13:31:04 802.15.4 emulation: enabled 2024/12/06 13:31:04 fetching corpus: 0, signal 0/0 (executing program) 2024/12/06 13:31:06 starting 8 fuzzer processes 13:31:06 executing program 0: socketpair(0x6, 0x6, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x3, 0x6, 0x7fff, 0x9, 0x9, 0x401]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1382}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4004050) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0xd14, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x20040010) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x8000, 0x7800, 0x1434310f, 0x200}}) r4 = accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14, 0x800) r6 = accept4$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14, 0xc00) accept$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000a40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x2ac, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3f, 0xc5, 0xe2, 0x7fff}, {0x1000, 0xfc, 0x9, 0x2}, {0xfffc, 0xff, 0xd2, 0xff}, {0x401, 0x1, 0x40, 0x10001}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r9 = socket$packet(0x11, 0x0, 0x300) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) r10 = socket$packet(0x11, 0x3, 0x300) accept$packet(r9, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000cc0)=0x14) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000d00)={r11, 0x1, 0x6, @random="22238b1f127a"}, 0x10) r12 = accept$packet(r6, 0x0, &(0x7f0000000d40)) setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000e00)={0xa, &(0x7f0000000d80)=[{0x800, 0x81, 0x40, 0x4}, {0x5, 0xb0, 0x8, 0xaa2}, {0x6, 0x8, 0x3, 0x7f}, {0x5, 0xff, 0x2, 0x918}, {0x1f, 0x1, 0x10, 0x5}, {0x7, 0xe2, 0x5, 0x8}, {0x3, 0x8, 0x1}, {0x7, 0x2, 0x4, 0x200}, {0x7673, 0x4, 0x1, 0xff}, {0x5e6, 0x9, 0x3, 0x41db}]}, 0x10) getsockname$packet(r4, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14) 13:31:06 executing program 1: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4061005}, 0x4000000) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x464, 0x100, 0x70bd27, 0x25dfdbfc, "f1e5c9abae606c93984e09547153951b07d7b23a462d654c343d938fb2f263340a9f858749c9e775a6af1aca432e255c43b77596b854c7e6762261301c11627471eb6adf073eefe5f268408507c4f11a44e33ff51e0202fde079ee0edf951bb0ac8bd7e80a5ad2f65d3ce1", ["", "", "", "", "", ""]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000010}, 0x4000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x56}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfc}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x841) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20008841) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x29, 0x2, 0x81, 0x40, 0x60, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0x20, 0xf8}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40c5) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc000884) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004014) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000055}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x2c}}, 0x4000010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 13:31:06 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40001) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x611}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440}, 0x8000) socketpair(0x26, 0x3, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}}, 0xc000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x884}, 0x40) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='/(@\'[\\@}\x00', &(0x7f0000000840)=']\\[-#:*\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r8 = syz_io_uring_complete(0x0) r9 = syz_io_uring_setup(0x22cb, &(0x7f00000009c0)={0x0, 0x24e3, 0x2, 0x3, 0x2ae, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000980)='$\x00', 0x0, r9) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4004080) 13:31:06 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000000)="49ce883cf65be529dd1e193efc665d25c73160882c5017fe823a7d4835b8b3281c9d212c19c8c73c473115bb7098af120a5fc288d7a85501d8fc2b93ce6eb99b727064fa0d10f04069e16f208e82f778e078ed2159da9898db5694f301ac9f274f106844d57a904c36a04edb01aeb652a06c461c72f16f97eb7a15508e048104235a7e0bde4a135c02c20aa0c177e60de7cadd4dd033a9e3b85e1851e1902bf058737ae3cdbc8ce52cf6c189f738e6ea4ea2052de06a5964", 0xb8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x32c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r2}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x237}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r6}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r7 = accept$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) getsockopt$packet_int(r7, 0x107, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000008c0)) r8 = socket(0xb, 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000980)={r9, 0x1, 0x6}, 0x10) add_key$user(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, &(0x7f0000000a40)="fa2b1c1fef9bdbedf32ce6f70f61b57f908eba74cb378c4e7d20f8118995ac732f20a297d8d63886b7b4dde5614e1c7221da19d250d9721dc04abf6367d45bf1354a4029bb638f347cdb694a0080e57ae1af7ccb965d509569bb9cde324f5d82f6a1bf70b6fd060873618f01cce55533717bfb8550", 0x75, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00), 0x125c00, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r10) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80400, 0x0) mount$9p_fd(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x800400, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@posixacl}, {@aname={'aname', 0x3d, '\x1e/@%('}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^$[-'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x64, 0x34, 0x38, 0x35, 0x37, 0x38], 0x2d, [0x32, 0x32, 0x33, 0x61], 0x2d, [0x37, 0x34, 0x36, 0x61], 0x2d, [0x35, 0x34, 0x36, 0x32], 0x2d, [0x35, 0x63, 0x38, 0x35, 0x61, 0x39, 0x32, 0x64]}}}, {@dont_measure}]}}) [ 75.151934] audit: type=1400 audit(1733491866.293:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:31:06 executing program 4: r0 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) r1 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x200, 0x9}, 0x800, 0x200, 0x20, 0x9, 0x0, 0xffffffffffffffff, 0x7bc}) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/116) geteuid() shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/205) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000200)=""/118) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0xc000) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) write$nbd(0xffffffffffffffff, &(0x7f0000000340)={0x67446698, 0x1, 0x2, 0x4, 0x1, "b2969869804b6ab1a3d9461a51acaf2df97b959a7447ac54599221015e520f9294220d984d5bb0fef7bf525d471848b5787fa4a60b8ed7ba69d1157ae9972dfeae2b4aa865f188503a95615218a98d756f8bef98dcd8061184a1da6c65a5d8814640c133bc5d1c16ab50662e3f4c1e29cce03a4d1465a64ab927a2b48558910c57d842e61d236aa16af16d5cebdefa7f9f6a6314e538f71c1c289d99cd5a21f4710872829a2e47ba84e0038220f4d2"}, 0xbf) r4 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ff9000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000480)={{0x1, r1, r3, r2, r5, 0x1, 0xf801}, 0xfb3, 0x0, 0x200, 0x6, 0x0, 0x0, 0x7}) accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}}, 0x4040010) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\xf6,\\)\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x60040010) 13:31:06 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x50e}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000094) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x18, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x3, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1}, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x120, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x6b7581130cf011a6) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x153}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x124, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff001}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x31}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r2, 0x18, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x1) socketpair(0x6, 0x6, 0x3ff, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x3c}}, 0x4000000) 13:31:06 executing program 6: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r0 = memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x54}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000080) r2 = accept$packet(r0, 0x0, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x801) write$char_usb(r0, &(0x7f0000000300)="7b1e762ec4a55b17cd5ebd752f435cbd572af33a9172a5cd4528032732a3dfa00668f342117f2d8929e551a8b0723fb656b093d115e60747eb11e16a7a3197d2d3802b9f19a51e68d9ca39781095b006ea0fa6356ea31dd7e325f9afc0bf58556a8182020b718686f05177d1805806ef97eca9f336391b0c789f62f4e9c45f03a0e264497d5370c2772cff4d746f336b1cc8013ead7ab456f5b9b79cf22684a6a4afd6727fed356b94de3bc0", 0xac) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000440)={{0x2, 0x3, 0x9, 0x3, 0x9}}) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4040894) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000005c0)=0x1) r3 = socket(0x2, 0x80000, 0x0) accept4$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14, 0x800) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r5 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x850) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000008c0)=""/4096) 13:31:06 executing program 7: shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/224) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000) r0 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r1 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x1, 0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0x82, 0x7}, 0x10001, 0x401, 0xd0, 0x3, 0x0, r1}) r2 = shmget(0x2, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000180)=""/110) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r6 = getpid() shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, r5, 0x6, 0x6}, 0x570, 0x5, 0x0, 0x4, r6, r1}) r7 = geteuid() getgroups(0x8, &(0x7f0000000340)=[r4, r5, r4, r4, r4, r4, r5, r5]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getgroups(0x7, &(0x7f0000000400)=[0xee00, r4, r5, r3, r5, r4, r3]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0x0, r7, r8, r9, r10, 0x140, 0x9}, 0x51c64ddf, 0xcee, 0x8, 0x1000, r11, r12, 0x1}) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000005c0)=""/202) r13 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r13, 0xc) [ 76.625283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.628142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.630483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.636317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.641494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.645536] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.692178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.704015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.708227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.711472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.717395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.718150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.721685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.722145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.726037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.727254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.729056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.736572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.740319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.742301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.743214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.743949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.750963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.751305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.755339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.760163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.765976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.769281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.769552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 76.772184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.781246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.787555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.792274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.799976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.810712] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.812517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.822495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.824211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.846854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.860216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.862535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.864572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.864886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.871304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.887030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.894442] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 76.896433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.905137] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.707465] Bluetooth: hci0: command tx timeout [ 78.834943] Bluetooth: hci3: command tx timeout [ 78.898967] Bluetooth: hci1: command tx timeout [ 78.898995] Bluetooth: hci5: command tx timeout [ 78.962897] Bluetooth: hci7: command tx timeout [ 78.962962] Bluetooth: hci2: command tx timeout [ 78.964087] Bluetooth: hci4: command tx timeout [ 79.026915] Bluetooth: hci6: command tx timeout [ 80.755068] Bluetooth: hci0: command tx timeout [ 80.884989] Bluetooth: hci3: command tx timeout [ 80.946889] Bluetooth: hci1: command tx timeout [ 80.947896] Bluetooth: hci5: command tx timeout [ 81.011176] Bluetooth: hci4: command tx timeout [ 81.012204] Bluetooth: hci2: command tx timeout [ 81.013106] Bluetooth: hci7: command tx timeout [ 81.074995] Bluetooth: hci6: command tx timeout [ 82.803492] Bluetooth: hci0: command tx timeout [ 82.930872] Bluetooth: hci3: command tx timeout [ 82.996828] Bluetooth: hci5: command tx timeout [ 82.997326] Bluetooth: hci1: command tx timeout [ 83.059106] Bluetooth: hci7: command tx timeout [ 83.059601] Bluetooth: hci4: command tx timeout [ 83.060083] Bluetooth: hci2: command tx timeout [ 83.122841] Bluetooth: hci6: command tx timeout [ 84.850883] Bluetooth: hci0: command tx timeout [ 84.978901] Bluetooth: hci3: command tx timeout [ 85.043059] Bluetooth: hci5: command tx timeout [ 85.043263] Bluetooth: hci1: command tx timeout [ 85.106874] Bluetooth: hci7: command tx timeout [ 85.106962] Bluetooth: hci2: command tx timeout [ 85.107311] Bluetooth: hci4: command tx timeout [ 85.170958] Bluetooth: hci6: command tx timeout [ 138.688380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.692655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.694385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.702467] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.705085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.714337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.841162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.844180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.846028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.850313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.853295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.855361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.873731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.886960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.890439] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.913260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.923330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.926923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.987207] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.989872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.991700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.016960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.019064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.022115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.028089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.030066] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.040116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.058122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.066268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.073308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.076067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.083385] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 139.084413] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.087129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.090970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.093324] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.094770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.103584] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.104992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.106145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.107486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.108367] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 139.120121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.135076] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.137088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.146060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.159095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 139.160216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.786864] Bluetooth: hci0: command tx timeout [ 140.914917] Bluetooth: hci1: command tx timeout [ 140.978872] Bluetooth: hci2: command tx timeout [ 141.107079] Bluetooth: hci3: command tx timeout [ 141.170872] Bluetooth: hci7: command tx timeout [ 141.171517] Bluetooth: hci5: command tx timeout [ 141.234852] Bluetooth: hci6: command tx timeout [ 141.235447] Bluetooth: hci4: command tx timeout [ 142.835178] Bluetooth: hci0: command tx timeout [ 142.962845] Bluetooth: hci1: command tx timeout [ 143.026845] Bluetooth: hci2: command tx timeout [ 143.155103] Bluetooth: hci3: command tx timeout [ 143.219875] Bluetooth: hci5: command tx timeout [ 143.220330] Bluetooth: hci7: command tx timeout [ 143.282856] Bluetooth: hci4: command tx timeout [ 143.283301] Bluetooth: hci6: command tx timeout [ 144.882869] Bluetooth: hci0: command tx timeout [ 145.010840] Bluetooth: hci1: command tx timeout [ 145.075013] Bluetooth: hci2: command tx timeout [ 145.202816] Bluetooth: hci3: command tx timeout [ 145.268860] Bluetooth: hci7: command tx timeout [ 145.269306] Bluetooth: hci5: command tx timeout [ 145.331794] Bluetooth: hci4: command tx timeout [ 145.332248] Bluetooth: hci6: command tx timeout [ 146.930836] Bluetooth: hci0: command tx timeout [ 147.058843] Bluetooth: hci1: command tx timeout [ 147.122854] Bluetooth: hci2: command tx timeout [ 147.250941] Bluetooth: hci3: command tx timeout [ 147.314858] Bluetooth: hci5: command tx timeout [ 147.315301] Bluetooth: hci7: command tx timeout [ 147.379935] Bluetooth: hci6: command tx timeout [ 147.380390] Bluetooth: hci4: command tx timeout [ 196.967556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.968265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.251336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.252051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.510472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.512438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.513947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.517517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.519633] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 201.521060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.536231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.562472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.564109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.568456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.570717] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.572235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.713555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.715315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.717777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.721013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.723042] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.724362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.753997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.756261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.789135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.924757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.927098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.928341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.108563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.126078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.136076] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.219014] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.222385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.223955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.879274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.880802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.881717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.896759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.900955] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.906062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.907183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.912369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.090973] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.100880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.101542] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 203.178045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 203.463358] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 203.474410] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 203.493986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 203.518691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 203.527379] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 203.532079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.634961] Bluetooth: hci1: command tx timeout [ 203.699881] Bluetooth: hci0: command tx timeout [ 203.762990] Bluetooth: hci2: command tx timeout [ 204.083141] Bluetooth: hci3: command tx timeout [ 204.339432] Bluetooth: hci4: command tx timeout [ 205.299981] Bluetooth: hci6: command tx timeout [ 205.363879] Bluetooth: hci5: command tx timeout [ 205.555888] Bluetooth: hci7: command tx timeout [ 205.683084] Bluetooth: hci1: command tx timeout [ 205.748027] Bluetooth: hci0: command tx timeout [ 205.810782] Bluetooth: hci2: command tx timeout [ 206.130905] Bluetooth: hci3: command tx timeout [ 206.387791] Bluetooth: hci4: command tx timeout [ 207.347356] Bluetooth: hci6: command tx timeout [ 207.411795] Bluetooth: hci5: command tx timeout [ 207.603399] Bluetooth: hci7: command tx timeout [ 207.731180] Bluetooth: hci1: command tx timeout [ 207.795150] Bluetooth: hci0: command tx timeout [ 207.858803] Bluetooth: hci2: command tx timeout [ 208.179944] Bluetooth: hci3: command tx timeout [ 208.435953] Bluetooth: hci4: command tx timeout [ 209.395837] Bluetooth: hci6: command tx timeout [ 209.459860] Bluetooth: hci5: command tx timeout [ 209.654351] Bluetooth: hci7: command tx timeout [ 209.778838] Bluetooth: hci1: command tx timeout [ 209.842934] Bluetooth: hci0: command tx timeout [ 209.908105] Bluetooth: hci2: command tx timeout [ 210.227859] Bluetooth: hci3: command tx timeout [ 210.483912] Bluetooth: hci4: command tx timeout [ 211.442822] Bluetooth: hci6: command tx timeout [ 211.508504] Bluetooth: hci5: command tx timeout [ 211.698793] Bluetooth: hci7: command tx timeout [ 264.067294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.073190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.074418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.080265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.082301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.084170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.377135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.378450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.380413] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.382974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.384438] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.385905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.518973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.523120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.527085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.533573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.538165] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.540497] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.601141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.605090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.609821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.618564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.627457] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 264.631087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.715949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.720158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.724298] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.732112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.733969] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.736410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.985060] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.994454] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 265.007134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.021782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.054225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 265.070526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 265.088536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.095130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.111378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 265.112704] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.135805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 265.155547] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.157125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 265.187112] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 265.192490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.192595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 265.230051] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 265.237478] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 266.100787] Bluetooth: hci0: command tx timeout [ 266.419244] Bluetooth: hci1: command tx timeout [ 266.610831] Bluetooth: hci2: command tx timeout [ 266.676823] Bluetooth: hci3: command tx timeout [ 266.805795] Bluetooth: hci4: command tx timeout [ 267.122851] Bluetooth: hci5: command tx timeout [ 267.250910] Bluetooth: hci6: command tx timeout [ 267.314951] Bluetooth: hci7: command tx timeout [ 268.147821] Bluetooth: hci0: command tx timeout [ 268.466919] Bluetooth: hci1: command tx timeout [ 268.660757] Bluetooth: hci2: command tx timeout [ 268.722804] Bluetooth: hci3: command tx timeout [ 268.851070] Bluetooth: hci4: command tx timeout [ 269.170981] Bluetooth: hci5: command tx timeout [ 269.298992] Bluetooth: hci6: command tx timeout [ 269.363222] Bluetooth: hci7: command tx timeout [ 270.194938] Bluetooth: hci0: command tx timeout [ 270.515793] Bluetooth: hci1: command tx timeout [ 270.706920] Bluetooth: hci2: command tx timeout [ 270.770852] Bluetooth: hci3: command tx timeout [ 270.899029] Bluetooth: hci4: command tx timeout [ 271.219089] Bluetooth: hci5: command tx timeout [ 271.347785] Bluetooth: hci6: command tx timeout [ 271.410820] Bluetooth: hci7: command tx timeout [ 272.242805] Bluetooth: hci0: command tx timeout [ 272.562793] Bluetooth: hci1: command tx timeout [ 272.755195] Bluetooth: hci2: command tx timeout [ 272.819764] Bluetooth: hci3: command tx timeout [ 272.947093] Bluetooth: hci4: command tx timeout [ 273.268198] Bluetooth: hci5: command tx timeout [ 273.394821] Bluetooth: hci6: command tx timeout [ 273.458894] Bluetooth: hci7: command tx timeout [ 326.463404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.468955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.471610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.476388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.479496] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.484203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.978879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.984606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.988681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.996947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.001344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.005601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.168332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.172049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.173518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.176437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.178164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.179355] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.302126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.303845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.305061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.307568] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.309177] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.310439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.353921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.384933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.389595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.394309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.397360] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.401408] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.404653] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 327.406673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.425335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.426962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.427108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.438488] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.448179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.448244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.459922] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.461285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.489566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.491146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.496289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.513185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.534632] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 327.539093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.543055] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.547080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 328.500760] Bluetooth: hci0: command tx timeout [ 329.074873] Bluetooth: hci1: command tx timeout [ 329.203198] Bluetooth: hci2: command tx timeout [ 329.330923] Bluetooth: hci4: command tx timeout [ 329.522876] Bluetooth: hci5: command tx timeout [ 329.524249] Bluetooth: hci3: command tx timeout [ 329.586937] Bluetooth: hci6: command tx timeout [ 329.651109] Bluetooth: hci7: command tx timeout [ 330.546896] Bluetooth: hci0: command tx timeout [ 331.122785] Bluetooth: hci1: command tx timeout [ 331.250924] Bluetooth: hci2: command tx timeout [ 331.379787] Bluetooth: hci4: command tx timeout [ 331.571765] Bluetooth: hci5: command tx timeout [ 331.572250] Bluetooth: hci3: command tx timeout [ 331.635964] Bluetooth: hci6: command tx timeout [ 331.700356] Bluetooth: hci7: command tx timeout [ 332.594895] Bluetooth: hci0: command tx timeout [ 333.170987] Bluetooth: hci1: command tx timeout [ 333.298830] Bluetooth: hci2: command tx timeout [ 333.426937] Bluetooth: hci4: command tx timeout [ 333.619160] Bluetooth: hci5: command tx timeout [ 333.620055] Bluetooth: hci3: command tx timeout [ 333.682848] Bluetooth: hci6: command tx timeout [ 333.747775] Bluetooth: hci7: command tx timeout [ 334.642970] Bluetooth: hci0: command tx timeout [ 335.218933] Bluetooth: hci1: command tx timeout [ 335.348766] Bluetooth: hci2: command tx timeout [ 335.474794] Bluetooth: hci4: command tx timeout [ 335.667806] Bluetooth: hci5: command tx timeout [ 335.668314] Bluetooth: hci3: command tx timeout [ 335.732726] Bluetooth: hci6: command tx timeout [ 335.794801] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:36:13 Registers: info registers vcpu 0 RAX=ffffffff8184b3ce RBX=ffffffff813f0480 RCX=0000000000000001 RDX=1ffff1100d9c135a RSI=ffffffff8184b3ce RDI=ffff88806ce09b40 RBP=ffff88806ce09b10 RSP=ffff88806ce09a70 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=0000000000024edc R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff888034d2d340 R15=ffff88800c543de0 RIP=ffffffff848720e0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f03f02fc710 CR3=000000002d990000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff86797032 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88806cf09ad0 RSP=ffff88806cf09a08 R8 =ffffffff86797036 R9 =ffff88806cf09ab8 R10=000000000003c001 R11=0000000000008037 R12=ffff88806cf09ad8 R13=ffff88806cf09ac0 R14=ffff88806cf09ff0 R15=ffff88806cf09a78 RIP=ffffffff8114abe7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5981d46090 CR3=000000002a842000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000