syzkaller login: [ 72.372233] hrtimer: interrupt took 3848566 ns Warning: Permanently added '[localhost]:52949' (ECDSA) to the list of known hosts. 2025/01/07 15:37:08 fuzzer started 2025/01/07 15:37:09 dialing manager at localhost:41745 [ 81.807950] cgroup: Unknown subsys name 'net' [ 81.992495] cgroup: Unknown subsys name 'cpuset' [ 82.067495] cgroup: Unknown subsys name 'rlimit' [ 87.326559] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 99.732477] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/07 15:37:33 syscalls: 203 2025/01/07 15:37:33 code coverage: enabled 2025/01/07 15:37:33 comparison tracing: enabled 2025/01/07 15:37:33 extra coverage: enabled 2025/01/07 15:37:33 setuid sandbox: enabled 2025/01/07 15:37:33 namespace sandbox: enabled 2025/01/07 15:37:33 Android sandbox: enabled 2025/01/07 15:37:33 fault injection: enabled 2025/01/07 15:37:33 leak checking: enabled 2025/01/07 15:37:33 net packet injection: enabled 2025/01/07 15:37:33 net device setup: enabled 2025/01/07 15:37:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/07 15:37:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/07 15:37:33 USB emulation: enabled 2025/01/07 15:37:33 hci packet injection: enabled 2025/01/07 15:37:33 wifi device emulation: enabled 2025/01/07 15:37:33 802.15.4 emulation: enabled 2025/01/07 15:37:33 fetching corpus: 0, signal 0/0 (executing program) 2025/01/07 15:37:35 starting 8 fuzzer processes 15:37:35 executing program 0: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1849}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20006041}, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x24810) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20002051) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000400)={'wg0\x00'}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x10, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000480)={r4, r5+10000000}, 0x1, 0x1, 0x0, {0x0, r6}}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x810, r1, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x14000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8841) r9 = syz_open_dev$loop(&(0x7f0000000680), 0x3, 0xfa200) ioctl$IOC_PR_PREEMPT(r9, 0x401870cb, &(0x7f00000006c0)={0x401, 0xffffffffffffffe1, 0xfffffff9, 0x4}) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f0000000700)) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000740)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15:37:35 executing program 1: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x408c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x12e, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x90c9db3b21132ef}, 0x11) r4 = io_uring_setup(0x6448, &(0x7f0000000300)={0x0, 0x7813, 0x2, 0x2, 0x2c9}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r4, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x4010, r4, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4004, @fd=r4, 0x8000, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x7) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5393}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x44890}, 0x4008004) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000008c0)) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000900), 0x280800, 0x0) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000940)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x600, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x40000) 15:37:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80c0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x7ff) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x10000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/183) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000180)=[0x2]) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x7, 0x3, 0x0, 0x5, 0x0, 0x1000, 0x32e0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1a6, 0x2, @perf_config_ext={0x6, 0x8001}, 0x4ed10, 0x9, 0x2, 0x0, 0x5, 0x10001, 0xffff, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x7, 0xa9, 0x8, 0x41, 0x0, 0x1, 0x80000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x40008, 0x401, 0xffffffff, 0x7, 0x5, 0x6, 0x23, 0x0, 0x1, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x3f, 0x2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000340)=[0x10000, 0x3]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x819}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000640)={0x17, 0x4a, &(0x7f00000005c0)="cf9cc861b48821180279326e109ab13ea39b807de14c50bab7ad6347cb6e40cc5cb1c8862eb4161c410becea5fc24a59a5855cb90f6a72ecf11470de38c1358c363a46a577b1edbc6cd7"}) clone3(&(0x7f0000000b00)={0x0, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0, {0xf}, &(0x7f0000000940)=""/113, 0x71, &(0x7f00000009c0)=""/238, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) r6 = getpid() r7 = getpid() clone3(&(0x7f0000000bc0)={0x20000000, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700), {0x2c}, &(0x7f0000000740)=""/232, 0xe8, &(0x7f0000000840)=""/46, &(0x7f0000000b80)=[0x0, r5, r6, 0x0, 0x0, r7], 0x6}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) pipe2(&(0x7f0000000c80)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000d40)={0x12, 0x6e, &(0x7f0000000cc0)="17c4bed96aa366a0ad9046e542d8a1a1e1b6a176cdf723f59944187782cdfe798efec0b0379a6e97a45a0ad34a86272787cffaac4764e36033fe45bc5c4326a3d33d289d448b1f0668ee1b28d4ee92e2714a087a3ebafee8647084ea7b97709ac91223569cd3827f8b2efebbb418"}) 15:37:35 executing program 2: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000040)=0x5, 0x0, 0x4) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) write$char_usb(r0, &(0x7f0000000080)="ed0add619a92afae2486ffdd0740f2eba0af0ac99fc21a1509265c01cf6d87c1252e25fd0e36a91471db9424ef801096cce2ae8b59448ce51515b82d338841956dc59169372c541e87c3f4fe91e8e28a57947ddf17523bb612b3d8dc22ab0c", 0x5f) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000) write$char_usb(r1, &(0x7f0000000100)="5eac6d32470c77fd8e24f4164c0aff8bc4699e5361b193a8900353846b7a77481209df12c2d344034a95635fc99678fd08b19472c3a1f11a4824ebaf1b3dcf40b259beed670579db3cce0f12390fd0feb5744b608c4447de70", 0x59) sysinfo(&(0x7f0000000180)=""/19) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) read$char_usb(r2, &(0x7f0000000240)=""/52, 0x34) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4004010, 0xffffffffffffffff, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000002c0)=0x43) write$char_usb(r1, &(0x7f0000000300)="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", 0x1000) r3 = syz_io_uring_setup(0x3a60, &(0x7f0000001300)={0x0, 0xb12d, 0x10, 0x1, 0x63}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), &(0x7f00000013c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) pipe2(&(0x7f0000001400)={0xffffffffffffffff}, 0x84800) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000001440)) mount_setattr(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0, &(0x7f0000001500)={0x100004, 0x70}, 0x20) 15:37:35 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5d}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000880) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000740)={0x54, 0x0, &(0x7f0000000600)=[@acquire_done, @decrefs, @acquire, @increfs_done={0x40106308, 0x1}, @increfs_done={0x40106308, 0x3}, @release], 0x83, 0x0, &(0x7f0000000680)="1e279d1abc2cb094b07d9fa8a746184fabdac501521a4e462e106dc136bf4efa62df799c2010be69a3e539961bbed5e44e082add498a2af17b2735ae8d7bd9e93e35544b59829694fd3e101f6a6ee73b207dcf23e60d1b9e01ca9e55c67cc89d01dd22a8d179f825dfbf25f7f163d0ceaf249c20d308f7eab2e1fb18b695ee0aa3c7ea"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, r7, 0x302, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x10) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0xf2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x8000) [ 107.187178] audit: type=1400 audit(1736264255.220:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:37:35 executing program 5: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004085}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80010}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x40001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'ip_vti0\x00', r1, 0x1, 0x8, 0x8000, 0x400, {{0x9, 0x4, 0x0, 0xa, 0x24, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @generic={0x82, 0x5, 'Pr2, 0x8000, 0x1, 0x3, 0x416, {{0x29, 0x4, 0x2, 0x0, 0xa4, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x84, 0x0, 0x4, [0xfffffff8, 0x3f, 0x6, 0x2, 0x0, 0x20, 0x285d]}, @end, @noop, @generic={0x86, 0x12, "f1a2fb0e6406b8c93547dab2a1fde5fc"}, @ssrr={0x89, 0xf, 0x72, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @cipso={0x86, 0x17, 0x2, [{0x1, 0x11, "8bd75ec6e1e00a821bb1fea2b9b0b1"}]}, @lsrr={0x83, 0x7, 0x4c, [@empty]}, @rr={0x7, 0x2b, 0xdb, [@local, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000ec0)={'ip_vti0\x00', r8, 0x8, 0x10, 0x9, 0x5, {{0x11, 0x4, 0x2, 0x14, 0x44, 0x66, 0x0, 0x84, 0x2b, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x5, [{@local, 0x9f6}, {@empty, 0x40}, {@loopback, 0xde6}]}, @ssrr={0x89, 0xf, 0x41, [@broadcast, @local, @private=0xa010100]}]}}}}}) execveat(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001040)=[&(0x7f0000001000)='\x00'], &(0x7f00000011c0)=[&(0x7f0000001080)='fou\x00', &(0x7f00000010c0)='mptcp_pm\x00', &(0x7f0000001100)='smackfstransmute', &(0x7f0000001140)='-\xf3\x00', &(0x7f0000001180)='.!%#!/\x9d\\\x1c$$*,)*/\x00'], 0x400) 15:37:35 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x46a, 0x1c9801) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000200)={0x7, 0x5}) r3 = syz_io_uring_setup(0x7386, &(0x7f0000000240)={0x0, 0xde3f, 0x20, 0x3, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000340)={0x1, 0x5, 0x80, 0x10001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r3, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000500)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x65, 0x0, {0x0, r8}}, 0xa3) r9 = syz_open_dev$loop(&(0x7f0000000540), 0x1, 0x204381) ioctl$BLKSECTGET(r9, 0x1267, &(0x7f0000000580)) 15:37:35 executing program 7: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x4000045) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x97}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', r1, 0x29, 0x7, 0x80, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8000, 0x8, 0x0, 0x2}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc70, 0x77}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x10) [ 108.618035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.623841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.631290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.633613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.635887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.647310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.648860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.651733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.653176] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.655409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.657399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.658293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.659722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.662211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.666545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.669863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.674285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.677020] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.679052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.683989] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.694947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.698503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.698532] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.701506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.708505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.712363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.714829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.728249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.733220] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.742577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.748414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.758352] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.762364] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.765027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.768697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.776865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.785321] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.786185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.787562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.790542] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.792714] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.796398] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.796399] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.801311] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.803715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.803784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.814230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.831897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.731695] Bluetooth: hci1: command tx timeout [ 110.795291] Bluetooth: hci5: command tx timeout [ 110.796989] Bluetooth: hci3: command tx timeout [ 110.798498] Bluetooth: hci2: command tx timeout [ 110.799957] Bluetooth: hci0: command tx timeout [ 110.859696] Bluetooth: hci4: command tx timeout [ 110.861256] Bluetooth: hci7: command tx timeout [ 110.924335] Bluetooth: hci6: command tx timeout [ 112.780161] Bluetooth: hci1: command tx timeout [ 112.843190] Bluetooth: hci2: command tx timeout [ 112.844779] Bluetooth: hci0: command tx timeout [ 112.846163] Bluetooth: hci3: command tx timeout [ 112.847516] Bluetooth: hci5: command tx timeout [ 112.910331] Bluetooth: hci4: command tx timeout [ 112.912468] Bluetooth: hci7: command tx timeout [ 112.972325] Bluetooth: hci6: command tx timeout [ 114.828184] Bluetooth: hci1: command tx timeout [ 114.891167] Bluetooth: hci3: command tx timeout [ 114.892650] Bluetooth: hci5: command tx timeout [ 114.892732] Bluetooth: hci0: command tx timeout [ 114.893881] Bluetooth: hci2: command tx timeout [ 114.956320] Bluetooth: hci7: command tx timeout [ 114.958121] Bluetooth: hci4: command tx timeout [ 115.020347] Bluetooth: hci6: command tx timeout [ 116.877240] Bluetooth: hci1: command tx timeout [ 116.939538] Bluetooth: hci0: command tx timeout [ 116.941245] Bluetooth: hci2: command tx timeout [ 116.942877] Bluetooth: hci5: command tx timeout [ 116.944516] Bluetooth: hci3: command tx timeout [ 117.003224] Bluetooth: hci4: command tx timeout [ 117.004779] Bluetooth: hci7: command tx timeout [ 117.069228] Bluetooth: hci6: command tx timeout [ 171.186418] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.188790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.189936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.192785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.196977] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.209551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.352976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.357524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.359641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.382180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.390762] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.398381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.420652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.421924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.436053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.438599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.440467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.444521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.467387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.472245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.479304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.493454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.496206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.532794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.538639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.573638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.574929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.576392] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.585250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.591940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.592958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.595248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.602333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.609219] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.619258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.621438] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.623291] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.626901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.629334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.632975] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.640353] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.644315] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.646698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.647670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.658796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.673832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.683322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.686364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.259456] Bluetooth: hci0: command tx timeout [ 173.451186] Bluetooth: hci1: command tx timeout [ 173.584850] Bluetooth: hci3: command tx timeout [ 173.644253] Bluetooth: hci2: command tx timeout [ 173.707187] Bluetooth: hci4: command tx timeout [ 173.707846] Bluetooth: hci6: command tx timeout [ 173.774346] Bluetooth: hci5: command tx timeout [ 173.774370] Bluetooth: hci7: command tx timeout [ 175.308347] Bluetooth: hci0: command tx timeout [ 175.499243] Bluetooth: hci1: command tx timeout [ 175.628185] Bluetooth: hci3: command tx timeout [ 175.692310] Bluetooth: hci2: command tx timeout [ 175.756327] Bluetooth: hci6: command tx timeout [ 175.756387] Bluetooth: hci4: command tx timeout [ 175.819455] Bluetooth: hci7: command tx timeout [ 175.819658] Bluetooth: hci5: command tx timeout [ 177.355252] Bluetooth: hci0: command tx timeout [ 177.547231] Bluetooth: hci1: command tx timeout [ 177.675236] Bluetooth: hci3: command tx timeout [ 177.740451] Bluetooth: hci2: command tx timeout [ 177.803211] Bluetooth: hci4: command tx timeout [ 177.803472] Bluetooth: hci6: command tx timeout [ 177.867193] Bluetooth: hci5: command tx timeout [ 177.870146] Bluetooth: hci7: command tx timeout [ 179.403251] Bluetooth: hci0: command tx timeout [ 179.595160] Bluetooth: hci1: command tx timeout [ 179.725228] Bluetooth: hci3: command tx timeout [ 179.787582] Bluetooth: hci2: command tx timeout [ 179.851193] Bluetooth: hci4: command tx timeout [ 179.852216] Bluetooth: hci6: command tx timeout [ 179.915366] Bluetooth: hci7: command tx timeout [ 179.915880] Bluetooth: hci5: command tx timeout [ 233.799498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.802650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.803324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.812537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.815036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.817138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.818312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.820100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.825230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.826276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.827701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.827826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.828595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.830514] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.831707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.837150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.846356] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.848126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.889804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.893367] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.898541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.908562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.912919] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.929892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.948847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.955022] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.959243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.994911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.009185] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.010515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.018168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.035373] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.038203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.064499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.069556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.074937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.086173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.091792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 234.103132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.118360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 234.123997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 234.128014] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.139508] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 234.152439] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.153333] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 234.165149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.166641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 234.183483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.919332] Bluetooth: hci2: command tx timeout [ 235.919390] Bluetooth: hci1: command tx timeout [ 235.919789] Bluetooth: hci0: command tx timeout [ 235.979386] Bluetooth: hci3: command tx timeout [ 236.108121] Bluetooth: hci4: command tx timeout [ 236.172266] Bluetooth: hci5: command tx timeout [ 236.235168] Bluetooth: hci7: command tx timeout [ 236.236004] Bluetooth: hci6: command tx timeout [ 237.963314] Bluetooth: hci2: command tx timeout [ 237.963423] Bluetooth: hci0: command tx timeout [ 237.963992] Bluetooth: hci1: command tx timeout [ 238.027206] Bluetooth: hci3: command tx timeout [ 238.155135] Bluetooth: hci4: command tx timeout [ 238.219153] Bluetooth: hci5: command tx timeout [ 238.284124] Bluetooth: hci6: command tx timeout [ 238.284144] Bluetooth: hci7: command tx timeout [ 240.011240] Bluetooth: hci1: command tx timeout [ 240.011291] Bluetooth: hci0: command tx timeout [ 240.012726] Bluetooth: hci2: command tx timeout [ 240.075163] Bluetooth: hci3: command tx timeout [ 240.203593] Bluetooth: hci4: command tx timeout [ 240.267406] Bluetooth: hci5: command tx timeout [ 240.331222] Bluetooth: hci6: command tx timeout [ 240.331241] Bluetooth: hci7: command tx timeout [ 242.059187] Bluetooth: hci0: command tx timeout [ 242.059230] Bluetooth: hci2: command tx timeout [ 242.060442] Bluetooth: hci1: command tx timeout [ 242.123368] Bluetooth: hci3: command tx timeout [ 242.252106] Bluetooth: hci4: command tx timeout [ 242.316597] Bluetooth: hci5: command tx timeout [ 242.379186] Bluetooth: hci7: command tx timeout [ 242.379251] Bluetooth: hci6: command tx timeout [ 296.286572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.291611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.296489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.302251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.308334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.311127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.362525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.364983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.372234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.377523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.380251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.386441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.391456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.401464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.408491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.409922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.412301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.414994] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.417632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.439289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.441621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.442838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.445357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.450315] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.451948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.455007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.456871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.467410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.470536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.470955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.482449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.486390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.498368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.499668] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.506618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.510226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.534365] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.534491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.544554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.548536] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.548651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.558242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.564421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.566001] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.566611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.570121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.572365] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.573871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.379500] Bluetooth: hci0: command tx timeout [ 298.508188] Bluetooth: hci1: command tx timeout [ 298.571277] Bluetooth: hci3: command tx timeout [ 298.572518] Bluetooth: hci4: command tx timeout [ 298.573610] Bluetooth: hci2: command tx timeout [ 298.636428] Bluetooth: hci7: command tx timeout [ 298.637588] Bluetooth: hci6: command tx timeout [ 298.700155] Bluetooth: hci5: command tx timeout [ 300.429083] Bluetooth: hci0: command tx timeout [ 300.556205] Bluetooth: hci1: command tx timeout [ 300.620349] Bluetooth: hci4: command tx timeout [ 300.620946] Bluetooth: hci2: command tx timeout [ 300.621686] Bluetooth: hci3: command tx timeout [ 300.683192] Bluetooth: hci6: command tx timeout [ 300.683668] Bluetooth: hci7: command tx timeout [ 300.748171] Bluetooth: hci5: command tx timeout [ 302.475167] Bluetooth: hci0: command tx timeout [ 302.603322] Bluetooth: hci1: command tx timeout [ 302.667674] Bluetooth: hci4: command tx timeout [ 302.669787] Bluetooth: hci3: command tx timeout [ 302.670591] Bluetooth: hci2: command tx timeout [ 302.731897] Bluetooth: hci6: command tx timeout [ 302.732924] Bluetooth: hci7: command tx timeout [ 302.795173] Bluetooth: hci5: command tx timeout [ 304.524367] Bluetooth: hci0: command tx timeout [ 304.653149] Bluetooth: hci1: command tx timeout [ 304.716222] Bluetooth: hci3: command tx timeout [ 304.717593] Bluetooth: hci2: command tx timeout [ 304.719321] Bluetooth: hci4: command tx timeout [ 304.779150] Bluetooth: hci6: command tx timeout [ 304.779718] Bluetooth: hci7: command tx timeout [ 304.843197] Bluetooth: hci5: command tx timeout [ 358.629532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.634956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.640405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.650620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.661710] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 358.664838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.807357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.810861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.812871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.818383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.820721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.822310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.951286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.967264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.968553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.975950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.977673] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.988585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.073279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.076090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.079497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.084619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.089442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.091361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.101357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.108873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.109356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.113241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.119579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.122689] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.128369] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.134476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.145134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.150309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.156803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.165914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.167902] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 359.169988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.178470] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.194403] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.205562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.208485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.212712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.221943] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.226519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.233421] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 359.237736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.283141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.715111] Bluetooth: hci0: command tx timeout [ 360.843818] Bluetooth: hci1: command tx timeout [ 361.037175] Bluetooth: hci2: command tx timeout [ 361.227285] Bluetooth: hci4: command tx timeout [ 361.228630] Bluetooth: hci3: command tx timeout [ 361.291225] Bluetooth: hci7: command tx timeout [ 361.291914] Bluetooth: hci5: command tx timeout [ 361.356957] Bluetooth: hci6: command tx timeout [ 362.763218] Bluetooth: hci0: command tx timeout [ 362.891236] Bluetooth: hci1: command tx timeout [ 363.085104] Bluetooth: hci2: command tx timeout [ 363.275359] Bluetooth: hci3: command tx timeout [ 363.278172] Bluetooth: hci4: command tx timeout [ 363.339648] Bluetooth: hci7: command tx timeout [ 363.342601] Bluetooth: hci5: command tx timeout [ 363.403156] Bluetooth: hci6: command tx timeout [ 364.811151] Bluetooth: hci0: command tx timeout [ 364.939127] Bluetooth: hci1: command tx timeout [ 365.132279] Bluetooth: hci2: command tx timeout [ 365.323156] Bluetooth: hci4: command tx timeout [ 365.323705] Bluetooth: hci3: command tx timeout [ 365.387151] Bluetooth: hci5: command tx timeout [ 365.387741] Bluetooth: hci7: command tx timeout [ 365.451128] Bluetooth: hci6: command tx timeout [ 366.859313] Bluetooth: hci0: command tx timeout [ 366.987155] Bluetooth: hci1: command tx timeout [ 367.181089] Bluetooth: hci2: command tx timeout [ 367.371211] Bluetooth: hci3: command tx timeout [ 367.371788] Bluetooth: hci4: command tx timeout [ 367.435241] Bluetooth: hci7: command tx timeout [ 367.435821] Bluetooth: hci5: command tx timeout [ 367.499160] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 15:42:38 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000000aa RCX=ffffffff815f73e5 RDX=ffff8880095e3780 RSI=0000000000000003 RDI=0000000000000009 RBP=00000000008000d6 RSP=ffff888009607be8 R8 =00000000000000aa R9 =ffffed100d9c54b4 R10=0000000000000002 R11=0000000000000001 R12=00000000000000aa R13=0000000000000003 R14=0000000000000100 R15=0000000000000002 RIP=ffffffff81719b88 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e9688a7080 CR3=000000001d58c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0c7fae9 RBX=0000000000000001 RCX=ffffffff819e489d RDX=dffffc0000000000 RSI=ffffffff819e48af RDI=0000000000000005 RBP=ffffea0000226c00 RSP=ffff88802cf3f808 R8 =0000000000000000 R9 =fffff94000044d80 R10=0000000000000000 R11=0000000000000001 R12=ffffea0000226c00 R13=00000000000089b0 R14=ffff8880132f0280 R15=ffff88802cf3f9d0 RIP=ffffffff819e48f5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fefae837570 CR3=0000000027586000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000007600676f6c XMM04=68747000343674726f736e6f69737265 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000