Warning: Permanently added '[localhost]:52022' (ECDSA) to the list of known hosts. 2024/12/18 09:21:44 fuzzer started 2024/12/18 09:21:45 dialing manager at localhost:44261 syzkaller login: [ 61.146756] cgroup: Unknown subsys name 'net' [ 61.259373] cgroup: Unknown subsys name 'cpuset' [ 61.294795] cgroup: Unknown subsys name 'rlimit' 2024/12/18 09:22:03 syscalls: 201 2024/12/18 09:22:03 code coverage: enabled 2024/12/18 09:22:03 comparison tracing: enabled 2024/12/18 09:22:03 extra coverage: enabled 2024/12/18 09:22:03 setuid sandbox: enabled 2024/12/18 09:22:03 namespace sandbox: enabled 2024/12/18 09:22:03 Android sandbox: enabled 2024/12/18 09:22:03 fault injection: enabled 2024/12/18 09:22:03 leak checking: enabled 2024/12/18 09:22:03 net packet injection: enabled 2024/12/18 09:22:03 net device setup: enabled 2024/12/18 09:22:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/18 09:22:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/18 09:22:03 USB emulation: enabled 2024/12/18 09:22:03 hci packet injection: enabled 2024/12/18 09:22:03 wifi device emulation: enabled 2024/12/18 09:22:03 802.15.4 emulation: enabled 2024/12/18 09:22:03 fetching corpus: 0, signal 0/0 (executing program) 2024/12/18 09:22:05 starting 8 fuzzer processes 09:22:06 executing program 0: syz_io_uring_setup(0x1aaa, &(0x7f0000000000)={0x0, 0x3988, 0x20, 0x2, 0x36c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x78bd, &(0x7f0000000100)={0x0, 0x150, 0x1, 0x0, 0x1dc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x4c}}, 0xc014) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) syz_io_uring_setup(0x32f6, &(0x7f0000000640)={0x0, 0x9354, 0x10, 0x0, 0x48, 0x0, r2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000740)={0x3f}) r7 = io_uring_setup(0x6fbe, &(0x7f0000000780)={0x0, 0xaaed, 0x1, 0x0, 0x2c2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r7, {r5, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3c}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x8001) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000940), 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x30000004) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000b40)='veno\x00', 0x5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}}, 0x4000000) 09:22:06 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000050}, 0x200408c0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r0, 0xa20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r0, 0x200, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x50) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000840)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xcd0bd33319296614}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x668cf048}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x8002) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r9, 0x72e, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040840}, 0x1) 09:22:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x7ee2, &(0x7f0000000040)={0x0, 0xa388, 0x2, 0x0, 0x52, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x6873, &(0x7f0000000140)={0x0, 0xd808, 0x10, 0x2, 0x26a, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="dbc05c909719eb980464a9f4917fe58ae4f0d5a730ec0fc47cd1fceadfe5a52a81bb0cfaae72d4a57d2368e4c07271b71471a8c6fc586669782fd815bee3fb658335d8093dcba570ca4aa45671", 0x4d}, {&(0x7f0000000340)="fe212250c4380ec9b2ccb356a98bbffa48", 0x11}, {&(0x7f0000000380)="78eda720c213026d70c42fc7986354fb243e", 0x12}, {&(0x7f00000003c0)="c70856deec879048a229f79efe308625309dbe94411f713bee996d274db9a46282b61708b52c327cd2f6ac3747c1a21c0634fe7b3a11f8c5d28403d789f75dd8ab9260e76624ab5facef2d4941", 0x4d}], 0x4, &(0x7f0000000480)=[{0x68, 0x6, 0xffffffff, "8ae20cb7949cb2d2d64a0db5367d95273a7daa2ec9f76a160500f12180b55f1edec1f88c13a582d8b74313b1d13a3df3ef250cadfc805e81f50395615834050cf05b1b90cac5904b7eee2071c294adeefd364c6c48"}], 0x68}, 0x0, 0x4040080}, 0xea) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000580), 0x47e2e5e763ca78c5, 0x0) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f00000005c0)={0x2, 0x20, 0x1, 0x20, 0x18, 0x3}) syz_io_uring_setup(0x49fc, &(0x7f0000001040)={0x0, 0x21f, 0x4, 0x2, 0x258}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/partitions\x00', 0x0, 0x0) ioctl$CDROMMULTISESSION(r4, 0x5310, &(0x7f0000001180)={@lba=0x5}) gettid() recvmsg$unix(r0, &(0x7f00000014c0)={&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001240)=""/38, 0x26}, {&(0x7f0000001280)=""/183, 0xb7}], 0x2, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x40000020) io_uring_setup(0x280f, &(0x7f0000001500)={0x0, 0x6907, 0x0, 0x1, 0x11, 0x0, r5}) syz_io_uring_setup(0x21bf, &(0x7f0000001580)={0x0, 0x5a6c, 0x1, 0x1, 0x8c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000001640)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) getpid() syz_io_uring_setup(0x172a, &(0x7f0000001680)={0x0, 0x8560, 0x2, 0x0, 0xfa, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001700), &(0x7f0000001740)) r8 = fsmount(r7, 0x1, 0x7) ioctl$CDROM_GET_MCN(r8, 0x5311, &(0x7f0000001780)) ioctl$CDROMGETSPINDOWN(r8, 0x531d, &(0x7f00000017c0)) 09:22:06 executing program 3: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=0xfffffffc, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4, r5}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40011) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in=@empty}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) r9 = fsmount(r7, 0x0, 0x8e) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r7) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r10, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 81.215709] audit: type=1400 audit(1734513726.127:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:22:06 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0xea) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x9, 0x2, 0x8000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/168, 0xa8}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x40002002) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000002c0)='{[{\xe4#e\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r3, r2}}, './file0\x00'}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x6, 0x80002, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ed}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000740)='{[{\xe4#e\x00', 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000780)={{0x2, 0x1, 0x8, 0x1, 0x4}}) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) ioctl$CDROMSETSPINDOWN(r9, 0x531e, &(0x7f0000000900)=0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0xfffffffffffffffd) 09:22:06 executing program 5: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@remote}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in6=@private0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f00000007c0)=0x3) socketpair(0xf, 0x4, 0x9, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000840), 0x4) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000880), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@local, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x10}, 0x20004000) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000b80)=@ccm_128={{0x303}, "fca70ec3151010de", "99491e02069ea673b433c6faeb07403b", "d47bb790", "740858f5d12b06f1"}, 0x28) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) 09:22:06 executing program 6: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x44094}, 0x800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048081}, 0x44094) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x11) syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0804}, 0x4000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000011) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8008030}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x280080c0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 09:22:06 executing program 7: r0 = socket$inet(0x2, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=0x2b) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) socket$inet(0x2, 0x696993d3ad2edc0b, 0x4) ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000280)={0x7, 0xa0, 0x8, 0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0x6e, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/168, 0xa8}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x2001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0xc000, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x10040, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20) io_uring_setup(0x285a, &(0x7f0000000800)={0x0, 0x4b20, 0x4, 0x3, 0x348, 0x0, r5}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = fsmount(r5, 0x0, 0x80) ioctl$CDROM_SELECT_DISK(r9, 0x5322, 0xaf2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a00), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/97, 0x61}, {&(0x7f0000000b00)=""/44, 0x2c}], 0x2, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x6003) [ 82.759078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.773279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.778356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.783166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.784522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.786800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.798419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.804860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.807839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.810305] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.813295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.819629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.826604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.828775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.830892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.843836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.845736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.853214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.854819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.862056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.866314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.870544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.872359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.874607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.876269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.894077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.899415] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.902239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.904105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.905614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.910353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.911043] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.913016] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.914902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.917339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.922764] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.927655] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.928045] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.930378] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.935635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.937861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.941174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.941545] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.945676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.956854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.972357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.996424] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.002712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.903577] Bluetooth: hci0: command tx timeout [ 84.905240] Bluetooth: hci1: command tx timeout [ 84.968001] Bluetooth: hci2: command tx timeout [ 85.031249] Bluetooth: hci4: command tx timeout [ 85.032387] Bluetooth: hci6: command tx timeout [ 85.033283] Bluetooth: hci5: command tx timeout [ 85.095097] Bluetooth: hci3: command tx timeout [ 85.096302] Bluetooth: hci7: command tx timeout [ 86.953064] Bluetooth: hci0: command tx timeout [ 86.953565] Bluetooth: hci1: command tx timeout [ 87.016043] Bluetooth: hci2: command tx timeout [ 87.079126] Bluetooth: hci6: command tx timeout [ 87.081976] Bluetooth: hci5: command tx timeout [ 87.082407] Bluetooth: hci4: command tx timeout [ 87.144015] Bluetooth: hci7: command tx timeout [ 87.144470] Bluetooth: hci3: command tx timeout [ 89.000028] Bluetooth: hci1: command tx timeout [ 89.000516] Bluetooth: hci0: command tx timeout [ 89.063001] Bluetooth: hci2: command tx timeout [ 89.128008] Bluetooth: hci4: command tx timeout [ 89.128476] Bluetooth: hci5: command tx timeout [ 89.128887] Bluetooth: hci6: command tx timeout [ 89.192361] Bluetooth: hci3: command tx timeout [ 89.192820] Bluetooth: hci7: command tx timeout [ 91.048095] Bluetooth: hci0: command tx timeout [ 91.048587] Bluetooth: hci1: command tx timeout [ 91.111279] Bluetooth: hci2: command tx timeout [ 91.175230] Bluetooth: hci5: command tx timeout [ 91.175692] Bluetooth: hci6: command tx timeout [ 91.176246] Bluetooth: hci4: command tx timeout [ 91.239958] Bluetooth: hci7: command tx timeout [ 91.240413] Bluetooth: hci3: command tx timeout [ 145.281214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.285361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.288647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.297988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.303395] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.307366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.330354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.345778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.348591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.356299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.358528] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.360393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.362080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.366285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.368128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.369669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.376480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.378091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.380160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.380503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.381985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.385238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.385707] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.387731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.389155] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.390423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.390684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.392536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.394343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.397307] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.398302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.400271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.401145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.403314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.405067] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.408256] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.409214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.414230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.414260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.414965] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.422457] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.433221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.439750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.441463] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.450983] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.452069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.453085] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.455200] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.367096] Bluetooth: hci0: command tx timeout [ 147.495266] Bluetooth: hci1: command tx timeout [ 147.496792] Bluetooth: hci3: command tx timeout [ 147.497424] Bluetooth: hci4: command tx timeout [ 147.497540] Bluetooth: hci2: command tx timeout [ 147.498039] Bluetooth: hci6: command tx timeout [ 147.498864] Bluetooth: hci5: command tx timeout [ 147.559004] Bluetooth: hci7: command tx timeout [ 149.416126] Bluetooth: hci0: command tx timeout [ 149.543073] Bluetooth: hci5: command tx timeout [ 149.543695] Bluetooth: hci2: command tx timeout [ 149.544226] Bluetooth: hci4: command tx timeout [ 149.544654] Bluetooth: hci1: command tx timeout [ 149.544774] Bluetooth: hci3: command tx timeout [ 149.545107] Bluetooth: hci6: command tx timeout [ 149.608064] Bluetooth: hci7: command tx timeout [ 151.463969] Bluetooth: hci0: command tx timeout [ 151.590997] Bluetooth: hci3: command tx timeout [ 151.592025] Bluetooth: hci5: command tx timeout [ 151.592092] Bluetooth: hci2: command tx timeout [ 151.592447] Bluetooth: hci6: command tx timeout [ 151.593041] Bluetooth: hci1: command tx timeout [ 151.593694] Bluetooth: hci4: command tx timeout [ 151.655038] Bluetooth: hci7: command tx timeout [ 153.511031] Bluetooth: hci0: command tx timeout [ 153.639084] Bluetooth: hci6: command tx timeout [ 153.639241] Bluetooth: hci1: command tx timeout [ 153.639667] Bluetooth: hci2: command tx timeout [ 153.640792] Bluetooth: hci5: command tx timeout [ 153.641282] Bluetooth: hci3: command tx timeout [ 153.641709] Bluetooth: hci4: command tx timeout [ 153.704068] Bluetooth: hci7: command tx timeout [ 207.667253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.670392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.673222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.679175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.682639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.685291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.803545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.810224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.812681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.820397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.833863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.835268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.836427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.838313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.839350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.844853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.851409] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.856831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.957415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.968407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.971134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.978019] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.990153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.999382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.006170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.018118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.020703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.037113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.045335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.046574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.088114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.118866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.122029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.124418] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.146456] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.150472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.152476] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.156262] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.160183] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.162084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.162347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.173081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.174169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.189593] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.200463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.232053] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.250844] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.274642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.767012] Bluetooth: hci0: command tx timeout [ 209.895020] Bluetooth: hci2: command tx timeout [ 209.895836] Bluetooth: hci1: command tx timeout [ 210.088048] Bluetooth: hci3: command tx timeout [ 210.279656] Bluetooth: hci6: command tx timeout [ 210.281068] Bluetooth: hci4: command tx timeout [ 210.281608] Bluetooth: hci5: command tx timeout [ 210.407059] Bluetooth: hci7: command tx timeout [ 211.816532] Bluetooth: hci0: command tx timeout [ 211.944073] Bluetooth: hci1: command tx timeout [ 211.944582] Bluetooth: hci2: command tx timeout [ 212.134972] Bluetooth: hci3: command tx timeout [ 212.329949] Bluetooth: hci6: command tx timeout [ 212.330462] Bluetooth: hci5: command tx timeout [ 212.331297] Bluetooth: hci4: command tx timeout [ 212.455983] Bluetooth: hci7: command tx timeout [ 213.862991] Bluetooth: hci0: command tx timeout [ 213.992148] Bluetooth: hci1: command tx timeout [ 213.992647] Bluetooth: hci2: command tx timeout [ 214.183111] Bluetooth: hci3: command tx timeout [ 214.375056] Bluetooth: hci4: command tx timeout [ 214.376164] Bluetooth: hci5: command tx timeout [ 214.377114] Bluetooth: hci6: command tx timeout [ 214.503997] Bluetooth: hci7: command tx timeout [ 215.911549] Bluetooth: hci0: command tx timeout [ 216.039056] Bluetooth: hci2: command tx timeout [ 216.039846] Bluetooth: hci1: command tx timeout [ 216.231133] Bluetooth: hci3: command tx timeout [ 216.424088] Bluetooth: hci6: command tx timeout [ 216.424816] Bluetooth: hci4: command tx timeout [ 216.425656] Bluetooth: hci5: command tx timeout [ 216.551136] Bluetooth: hci7: command tx timeout [ 269.947210] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.961628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.981169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.018756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.026255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.035379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.049699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.074385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.079288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.092115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.103395] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.108181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.170670] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.204516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.209839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.221452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.236177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.243974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.247338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.253858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.262565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.264168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.267231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.273054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.278306] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.281531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.287298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.292554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.295440] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.300802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.303705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.318459] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.331466] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.360687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.398718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.406077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.413246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.437593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.464667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.473375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.496994] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.504798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.606492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.645317] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.650642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.656722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.670302] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.678212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.104114] Bluetooth: hci0: command tx timeout [ 272.167082] Bluetooth: hci1: command tx timeout [ 272.423127] Bluetooth: hci2: command tx timeout [ 272.494592] Bluetooth: hci5: command tx timeout [ 272.555028] Bluetooth: hci3: command tx timeout [ 272.679128] Bluetooth: hci6: command tx timeout [ 272.807235] Bluetooth: hci7: command tx timeout [ 272.807317] Bluetooth: hci4: command tx timeout [ 274.151225] Bluetooth: hci0: command tx timeout [ 274.215168] Bluetooth: hci1: command tx timeout [ 274.471054] Bluetooth: hci2: command tx timeout [ 274.535115] Bluetooth: hci5: command tx timeout [ 274.599048] Bluetooth: hci3: command tx timeout [ 274.727193] Bluetooth: hci6: command tx timeout [ 274.854968] Bluetooth: hci4: command tx timeout [ 274.855164] Bluetooth: hci7: command tx timeout [ 276.201012] Bluetooth: hci0: command tx timeout [ 276.263032] Bluetooth: hci1: command tx timeout [ 276.520044] Bluetooth: hci2: command tx timeout [ 276.585949] Bluetooth: hci5: command tx timeout [ 276.647995] Bluetooth: hci3: command tx timeout [ 276.775113] Bluetooth: hci6: command tx timeout [ 276.903034] Bluetooth: hci7: command tx timeout [ 276.904627] Bluetooth: hci4: command tx timeout [ 278.247262] Bluetooth: hci0: command tx timeout [ 278.311018] Bluetooth: hci1: command tx timeout [ 278.567055] Bluetooth: hci2: command tx timeout [ 278.630982] Bluetooth: hci5: command tx timeout [ 278.694988] Bluetooth: hci3: command tx timeout [ 278.823006] Bluetooth: hci6: command tx timeout [ 278.953038] Bluetooth: hci4: command tx timeout [ 278.955027] Bluetooth: hci7: command tx timeout [ 332.246711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.256423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.270964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.280063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.285219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.285292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.287105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.288286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.293378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.304125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.306095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.307521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.355122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.368416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.376669] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.391357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.399580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.401430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.418997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.432487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.436119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.439644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.441759] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.450290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.518493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.524137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.525495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.529377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.542068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.543039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.544596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.552390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.553402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.574151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.579162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.584126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.587147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.588727] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.590076] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.610512] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.628010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.635265] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.660312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.671095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.682198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.690148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.702471] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.705191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.313148] Bluetooth: hci0: command tx timeout [ 334.375229] Bluetooth: hci1: command tx timeout [ 334.503050] Bluetooth: hci2: command tx timeout [ 334.505502] Bluetooth: hci3: command tx timeout [ 334.633784] Bluetooth: hci4: command tx timeout [ 334.635794] Bluetooth: hci6: command tx timeout [ 334.760941] Bluetooth: hci7: command tx timeout [ 334.762824] Bluetooth: hci5: command tx timeout [ 336.360043] Bluetooth: hci0: command tx timeout [ 336.423042] Bluetooth: hci1: command tx timeout [ 336.551036] Bluetooth: hci2: command tx timeout [ 336.553606] Bluetooth: hci3: command tx timeout [ 336.679938] Bluetooth: hci6: command tx timeout [ 336.681602] Bluetooth: hci4: command tx timeout [ 336.807046] Bluetooth: hci7: command tx timeout [ 336.808707] Bluetooth: hci5: command tx timeout [ 338.407002] Bluetooth: hci0: command tx timeout [ 338.470976] Bluetooth: hci1: command tx timeout [ 338.600911] Bluetooth: hci2: command tx timeout [ 338.602683] Bluetooth: hci3: command tx timeout [ 338.727001] Bluetooth: hci6: command tx timeout [ 338.728438] Bluetooth: hci4: command tx timeout [ 338.854980] Bluetooth: hci7: command tx timeout [ 338.855536] Bluetooth: hci5: command tx timeout [ 340.455007] Bluetooth: hci0: command tx timeout [ 340.519934] Bluetooth: hci1: command tx timeout [ 340.646985] Bluetooth: hci3: command tx timeout [ 340.648515] Bluetooth: hci2: command tx timeout [ 340.775941] Bluetooth: hci4: command tx timeout [ 340.776444] Bluetooth: hci6: command tx timeout [ 340.903092] Bluetooth: hci7: command tx timeout [ 340.904802] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 09:27:13 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888035d975f0 RCX=0000000000000001 RDX=1ffff11006bb2eaa RSI=ffff888035d975e0 RDI=ffff888035d97550 RBP=ffff888008c4fa00 RSP=ffff888035d97488 R8 =0000000000000001 R9 =ffff888035d97588 R10=000000000003aa6a R11=000000000000432b R12=ffff888035d975a8 R13=ffff888035d97590 R14=ffff888035d975e0 R15=ffff888035d97548 RIP=ffffffff8134b273 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fef286d859e CR3=000000000ceee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000ff00000000 XMM01=ffffffffffffffffffffff00ffffffff XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000616e69 XMM04=636e655f6362635f53454100657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806cf09b40 RCX=0000000000000001 RDX=1ffff1100d9e1369 RSI=ffffffff8100148a RDI=ffff88806cf09b48 RBP=000000000000000a RSP=ffff88806cf09a58 R8 =0000000000000001 R9 =ffff88806cf09ab8 R10=000000000003aa6a R11=00000000000c2561 R12=ffff88806cf09b40 R13=0000000000000000 R14=ffff8880137c1bc0 R15=ffff88801aad0000 RIP=ffffffff815ee5ee RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd92d010540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd92d136c50 CR3=0000000023e5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000