Warning: Permanently added '[localhost]:29612' (ECDSA) to the list of known hosts. 2025/01/16 15:28:13 fuzzer started 2025/01/16 15:28:14 dialing manager at localhost:37863 syzkaller login: [ 72.878816] cgroup: Unknown subsys name 'net' [ 72.975622] cgroup: Unknown subsys name 'cpuset' [ 73.005332] cgroup: Unknown subsys name 'rlimit' [ 78.722279] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 89.247999] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/16 15:28:31 syscalls: 203 2025/01/16 15:28:31 code coverage: enabled 2025/01/16 15:28:31 comparison tracing: enabled 2025/01/16 15:28:31 extra coverage: enabled 2025/01/16 15:28:31 setuid sandbox: enabled 2025/01/16 15:28:31 namespace sandbox: enabled 2025/01/16 15:28:31 Android sandbox: enabled 2025/01/16 15:28:31 fault injection: enabled 2025/01/16 15:28:31 leak checking: enabled 2025/01/16 15:28:31 net packet injection: enabled 2025/01/16 15:28:31 net device setup: enabled 2025/01/16 15:28:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/16 15:28:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/16 15:28:31 USB emulation: enabled 2025/01/16 15:28:31 hci packet injection: enabled 2025/01/16 15:28:31 wifi device emulation: enabled 2025/01/16 15:28:31 802.15.4 emulation: enabled 2025/01/16 15:28:31 fetching corpus: 0, signal 0/0 (executing program) 2025/01/16 15:28:33 starting 8 fuzzer processes 15:28:33 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x800) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x2044013) socketpair(0x3, 0x6, 0x3, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd34f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x990f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff4d1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x484c0) r6 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000800), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000840)={'vlan1', 0x32, 0x36}, 0x8) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4635}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x2, 0x1000, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair(0x2, 0x800, 0x1, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000d40)={&(0x7f0000000b40), 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x144, 0x0, 0x204, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000061}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xca}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 15:28:33 executing program 1: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x804c000}, 0x8040) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xab}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x48804) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4814}, 0x40) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/psched\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}}, 0x880) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000940)={@private1, 0x0}, &(0x7f0000000980)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x5) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a80)='devices.allow\x00', 0x2, 0x0) r8 = pidfd_getfd(r1, r3, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) 15:28:33 executing program 2: r0 = socket(0x18, 0x80000, 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xe3, 0x800, 0x1}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2000) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x7fffffff, 0x942, 0xce6, 0x401}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @window={0x3, 0x9, 0x2}], 0x2) socket$inet6(0xa, 0x4, 0x80000001) r4 = pidfd_getfd(r1, r1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/110, 0x6e, 0x0, &(0x7f0000000200)=""/146, 0x92}, &(0x7f0000000300)=0x40) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) syz_io_uring_setup(0x399b, &(0x7f0000000380)={0x0, 0x6ef1, 0x1, 0x1, 0x56, 0x0, r4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x7, 0x0, 0xffffff7f, 0x1, 0x1}, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000004c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip_vs\x00') ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000540)) 15:28:33 executing program 3: r0 = clone3(&(0x7f0000000240)={0x346812880, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x9}, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/236, &(0x7f0000000200)=[0x0], 0x1}, 0x58) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000002c0)="b7c5264bda2ba5e0f6c627b845475d7ff34cfca25fca277cb4419adb544de486dbbd466740a430ae5c599233b4ab7b0c6fffd6bc5d93476f29093ce62f71c6da0c42dbf883b520251d52e5e976597934fb34087a8a0a946f9bb524c2912cc4b61dfc2c1a1d33c154a6e750a869d42651ac274d28ce8a746b7781e958e5a0ca5d107a4ac57eee8e29e15bafb8a00dfc3cce70ea40d8191882c443b043572844ff41408749e62616048cf0b2b8328d221a9d34f135fd6270c5efa0ebb662512a4d51d42cfedf1f62fade93e6954c7aadae281b66a0fb0a8e64ea6c187108b1b0d51f212490aa5ed503dc537314264077dfcc", 0xf1}, {&(0x7f00000003c0)="db6bb1a4f5172883d3cd6fb234c24c12c0346b6de7ba9776c6086bdb90b0478d080e3f86e97355698e107a0aecdb5a6c6d00648347fd0fbfbc47ccb16e5dcdeb1b1a5d17eddea387304c16b7276405f7deb639b4802a93b83bc575a3e133ee2dcc156ca0032860ce61bcaf12f46e9c6b3bf8d5bf20411f560d4e57f7da8ce2fc187b415e9d553cf9b6b9165c137618fab498555714035986770fba3f93c8", 0x9e}], 0x2, 0xc, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = fork() r5 = pidfd_open(r4, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r7 = syz_open_procfs$userns(r0, &(0x7f0000000540)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r6, 0x10, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb1986bf7d625202f}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) pidfd_send_signal(r5, 0x35, &(0x7f0000000680)={0x29, 0x81, 0x807}, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000700)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) clone3(&(0x7f0000000a00)={0x100000, &(0x7f0000000780)=0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800), {0x12}, &(0x7f0000000840)=""/95, 0x5f, &(0x7f00000008c0)=""/251, &(0x7f00000009c0)=[r4, r2], 0x2, {r3}}, 0x58) waitid$P_PIDFD(0x3, r8, &(0x7f0000000a80), 0x8, &(0x7f0000000b00)) fork() syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) r9 = getegid() r10 = getegid() r11 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000c00)={{0x2, 0x0, r9, 0xffffffffffffffff, r10, 0x4, 0x8}, 0x1000, 0x0, 0x1, 0x0, 0x0, r11, 0x100}) 15:28:33 executing program 4: socketpair(0x1, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0xfffffffffffffffe}) r2 = epoll_create(0x15dd) epoll_pwait2(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2]}, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000280), 0x4) r5 = socket$inet6(0xa, 0x5, 0x8001) accept4$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x42, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@cache_loose}, {@afid={'afid', 0x3d, 0x78}}, {@posixacl}, {@access_client}, {@cache_mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x33, 0x5f, 0x52, 0x61, 0x61, 0x38], 0x2d, [0x35, 0x38, 0x0, 0x32], 0x2d, [0x61, 0x31, 0x35, 0x4a], 0x2d, [0x0, 0x36, 0x39, 0x6], 0x2d, [0x30, 0x62, 0x38, 0x35, 0x35, 0x62, 0x64, 0x39]}}}, {@euid_lt={'euid<', 0xee01}}, {@audit}, {@appraise_type}, {@fowner_gt={'fowner>', 0xee01}}]}}) syz_io_uring_setup(0x7cfb, &(0x7f0000000500)={0x0, 0x1baa, 0x2, 0x3, 0x264}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r6 = socket(0xa, 0x6, 0x3) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000740)={'icmp6\x00'}, &(0x7f0000000780)=0x1e) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000800)) [ 91.577686] audit: type=1400 audit(1737041313.888:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:28:33 executing program 5: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2c800) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd2d, 0xfff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048081}, 0x24044000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c081}, 0x40) process_mrelease(0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x40) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001740)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000, 0x0, &(0x7f00000016c0)=""/101, 0x65}, &(0x7f0000001780)=0x40) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) write$vga_arbiter(r3, &(0x7f00000017c0)=@target={'target ', {'PCI:', '9', ':', '19', ':', '5', '.', '1b'}}, 0x15) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xba}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8091}, 0x8800) r4 = syz_open_procfs(0x0, &(0x7f0000001940)='oom_score_adj\x00') sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x26}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) 15:28:33 executing program 6: r0 = semget(0x1, 0x0, 0x484) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000000)=""/176) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x40, 0x7fff, 0x4f, {{0x26, 0x4, 0x1, 0x20, 0x98, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @broadcast, {[@noop, @ssrr={0x89, 0x1f, 0xa1, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}, @local, @empty, @remote, @loopback, @broadcast]}, @cipso={0x86, 0xa, 0x2, [{0x7, 0x4, "74b9"}]}, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0x6, [{@rand_addr=0x64010102, 0x8001}, {@remote, 0xfffffffd}, {@private=0xa010101, 0x5}, {@broadcast, 0x1}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x7}]}, @ssrr={0x89, 0x7, 0xd, [@private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r1, 0x2f, 0x40, 0x3, 0x1, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x20, 0xc0000000, 0xf1f}}) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200480}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}}, 0x20050000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', r2, 0x40, 0x7800, 0x3ff, 0x797b, {{0x13, 0x4, 0x0, 0x31, 0x4c, 0x64, 0x0, 0x6, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x22, 0x3, [{0x7, 0x2}, {0x6, 0xa, "933aa04d6b778ec4"}, {0x7, 0x10, "4ed3a0e555b00e6cc127b4cdc1f4"}]}, @rr={0x7, 0xf, 0x98, [@private=0xa010101, @empty, @broadcast]}]}}}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x110, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x94}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) semget$private(0x0, 0x0, 0x129) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='uid_map\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x7a, 0x5, 0x2, 0x8, @empty, @private0, 0x7820, 0x10, 0x0, 0x1ff}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x40}]}, 0x60}}, 0x48004) clock_getres(0x3, &(0x7f0000000880)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000814) r7 = semget(0x2, 0x0, 0x2) semctl$GETZCNT(r7, 0x1, 0xf, &(0x7f00000009c0)=""/194) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', r1, 0x29, 0xf1, 0x3, 0x9, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, 0x10, 0x40, 0x800, 0x4b2}}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000b80)={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x7f}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x18) 15:28:34 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000091) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000010) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x415d7bc3f0db6cf}, 0x4004040) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='projid_map\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x118, r3, 0x502, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r0, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) setns(r5, 0x8000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x90) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x48810) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000d40)={'ip6gre0\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x1, 0x9, 0x983e010c61e903a6, @private2, @remote, 0x700, 0x0, 0x3, 0x4}}) [ 93.050854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.051659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.051969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.057000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.061972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.062354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.069695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.071953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.072896] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.073362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.088763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.090559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.091605] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.092131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.099680] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.100349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.103687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.104156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.106384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.115691] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.116156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.122351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.127210] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.129383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.150111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.151990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.153207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.217917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.226979] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.231128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.232804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.236665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.244793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.246822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.250715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.254966] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.255145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.256754] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.256801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.257818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.264208] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.267195] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.268412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.271583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.274897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.280620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.290848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.321862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.108916] Bluetooth: hci2: command tx timeout [ 95.109169] Bluetooth: hci0: command tx timeout [ 95.171597] Bluetooth: hci3: command tx timeout [ 95.306759] Bluetooth: hci7: command tx timeout [ 95.364542] Bluetooth: hci5: command tx timeout [ 95.364559] Bluetooth: hci4: command tx timeout [ 95.364896] Bluetooth: hci1: command tx timeout [ 95.365110] Bluetooth: hci6: command tx timeout [ 97.155642] Bluetooth: hci0: command tx timeout [ 97.155711] Bluetooth: hci2: command tx timeout [ 97.219551] Bluetooth: hci3: command tx timeout [ 97.349619] Bluetooth: hci7: command tx timeout [ 97.412729] Bluetooth: hci1: command tx timeout [ 97.412903] Bluetooth: hci6: command tx timeout [ 97.412932] Bluetooth: hci4: command tx timeout [ 97.413018] Bluetooth: hci5: command tx timeout [ 99.203740] Bluetooth: hci0: command tx timeout [ 99.204276] Bluetooth: hci2: command tx timeout [ 99.270594] Bluetooth: hci3: command tx timeout [ 99.396707] Bluetooth: hci7: command tx timeout [ 99.460610] Bluetooth: hci1: command tx timeout [ 99.461077] Bluetooth: hci5: command tx timeout [ 99.461178] Bluetooth: hci4: command tx timeout [ 99.461289] Bluetooth: hci6: command tx timeout [ 101.251914] Bluetooth: hci2: command tx timeout [ 101.252034] Bluetooth: hci0: command tx timeout [ 101.316573] Bluetooth: hci3: command tx timeout [ 101.444608] Bluetooth: hci7: command tx timeout [ 101.508770] Bluetooth: hci6: command tx timeout [ 101.508899] Bluetooth: hci4: command tx timeout [ 101.508967] Bluetooth: hci5: command tx timeout [ 101.509029] Bluetooth: hci1: command tx timeout [ 155.879654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.885804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.888667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.890250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.893110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.896795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.903113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.905390] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.907580] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.912005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.914053] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.917537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.937611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.954805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.001075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.002848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.008322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.019708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.061975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.067600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.070964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.077306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.084817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.085933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.087087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.088320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.136827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.165419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.171942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.173054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.174250] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.176751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.178289] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.179503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.194661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.227933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.229184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.283643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.304028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.307751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.333949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.335614] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.336824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.343681] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.351847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.401658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.411926] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.436994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.956609] Bluetooth: hci0: command tx timeout [ 157.956642] Bluetooth: hci1: command tx timeout [ 158.147964] Bluetooth: hci3: command tx timeout [ 158.148056] Bluetooth: hci4: command tx timeout [ 158.277050] Bluetooth: hci7: command tx timeout [ 158.467601] Bluetooth: hci5: command tx timeout [ 158.467675] Bluetooth: hci6: command tx timeout [ 158.531796] Bluetooth: hci2: command tx timeout [ 160.004525] Bluetooth: hci0: command tx timeout [ 160.004660] Bluetooth: hci1: command tx timeout [ 160.211850] Bluetooth: hci4: command tx timeout [ 160.212714] Bluetooth: hci3: command tx timeout [ 160.324044] Bluetooth: hci7: command tx timeout [ 160.517514] Bluetooth: hci5: command tx timeout [ 160.517638] Bluetooth: hci6: command tx timeout [ 160.593347] Bluetooth: hci2: command tx timeout [ 162.051616] Bluetooth: hci0: command tx timeout [ 162.052514] Bluetooth: hci1: command tx timeout [ 162.244753] Bluetooth: hci3: command tx timeout [ 162.244916] Bluetooth: hci4: command tx timeout [ 162.372719] Bluetooth: hci7: command tx timeout [ 162.564552] Bluetooth: hci6: command tx timeout [ 162.564670] Bluetooth: hci5: command tx timeout [ 162.628510] Bluetooth: hci2: command tx timeout [ 164.103861] Bluetooth: hci1: command tx timeout [ 164.103984] Bluetooth: hci0: command tx timeout [ 164.292537] Bluetooth: hci4: command tx timeout [ 164.292647] Bluetooth: hci3: command tx timeout [ 164.422510] Bluetooth: hci7: command tx timeout [ 164.612631] Bluetooth: hci5: command tx timeout [ 164.612739] Bluetooth: hci6: command tx timeout [ 164.676696] Bluetooth: hci2: command tx timeout [ 218.523916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.525525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.530932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.534914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.539001] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.540110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.583876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.584675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.587005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.587248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.593861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.595540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.611073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.614784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.616533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.630179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.635207] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.640043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.674871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.676007] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.689970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.694627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.694851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.698766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.702963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.704489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.708690] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.714005] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.715170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.775395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.811643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.818088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.829559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.833626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.839041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.849788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.859200] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.860385] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.873813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.874787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.879580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.882952] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.884554] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.885499] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.886015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.929905] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.930804] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.931237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.611853] Bluetooth: hci0: command tx timeout [ 220.676532] Bluetooth: hci2: command tx timeout [ 220.740555] Bluetooth: hci1: command tx timeout [ 220.804520] Bluetooth: hci4: command tx timeout [ 220.867608] Bluetooth: hci3: command tx timeout [ 220.931582] Bluetooth: hci6: command tx timeout [ 221.059747] Bluetooth: hci7: command tx timeout [ 221.187655] Bluetooth: hci5: command tx timeout [ 222.659698] Bluetooth: hci0: command tx timeout [ 222.723513] Bluetooth: hci2: command tx timeout [ 222.787590] Bluetooth: hci1: command tx timeout [ 222.851515] Bluetooth: hci4: command tx timeout [ 222.915770] Bluetooth: hci3: command tx timeout [ 222.979508] Bluetooth: hci6: command tx timeout [ 223.107717] Bluetooth: hci7: command tx timeout [ 223.239462] Bluetooth: hci5: command tx timeout [ 224.708024] Bluetooth: hci0: command tx timeout [ 224.772047] Bluetooth: hci2: command tx timeout [ 224.835526] Bluetooth: hci1: command tx timeout [ 224.899612] Bluetooth: hci4: command tx timeout [ 224.963515] Bluetooth: hci3: command tx timeout [ 225.027630] Bluetooth: hci6: command tx timeout [ 225.155522] Bluetooth: hci7: command tx timeout [ 225.283603] Bluetooth: hci5: command tx timeout [ 226.755512] Bluetooth: hci0: command tx timeout [ 226.819525] Bluetooth: hci2: command tx timeout [ 226.883564] Bluetooth: hci1: command tx timeout [ 226.948873] Bluetooth: hci4: command tx timeout [ 227.011818] Bluetooth: hci3: command tx timeout [ 227.075608] Bluetooth: hci6: command tx timeout [ 227.221850] Bluetooth: hci7: command tx timeout [ 227.331547] Bluetooth: hci5: command tx timeout [ 281.041863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.050880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.058801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.064686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.066322] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.072223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.192175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.195326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.197174] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.216090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.218465] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.309163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.311666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.317267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.327644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.336677] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.338807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.349455] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.512251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.520032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.523722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.524115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.527323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.533345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.535933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.559923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.573604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.576169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.580086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.583335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.705018] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.706789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.746540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.747377] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.748154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.769612] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.774216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.788375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.809327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.812494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.814503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.814837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.825048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.828746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.829053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.835505] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.835699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.846751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.204515] Bluetooth: hci0: command tx timeout [ 283.396815] Bluetooth: hci2: command tx timeout [ 283.397277] Bluetooth: hci1: command tx timeout [ 283.651497] Bluetooth: hci3: command tx timeout [ 283.843619] Bluetooth: hci5: command tx timeout [ 283.843632] Bluetooth: hci4: command tx timeout [ 283.907619] Bluetooth: hci6: command tx timeout [ 283.908564] Bluetooth: hci7: command tx timeout [ 285.253440] Bluetooth: hci0: command tx timeout [ 285.444525] Bluetooth: hci1: command tx timeout [ 285.444632] Bluetooth: hci2: command tx timeout [ 285.700630] Bluetooth: hci3: command tx timeout [ 285.891540] Bluetooth: hci4: command tx timeout [ 285.892480] Bluetooth: hci5: command tx timeout [ 285.955496] Bluetooth: hci7: command tx timeout [ 285.956625] Bluetooth: hci6: command tx timeout [ 287.300647] Bluetooth: hci0: command tx timeout [ 287.492707] Bluetooth: hci2: command tx timeout [ 287.492982] Bluetooth: hci1: command tx timeout [ 287.748445] Bluetooth: hci3: command tx timeout [ 287.941507] Bluetooth: hci5: command tx timeout [ 287.941543] Bluetooth: hci4: command tx timeout [ 288.004494] Bluetooth: hci6: command tx timeout [ 288.004515] Bluetooth: hci7: command tx timeout [ 289.365748] Bluetooth: hci0: command tx timeout [ 289.540281] Bluetooth: hci1: command tx timeout [ 289.540300] Bluetooth: hci2: command tx timeout [ 289.795571] Bluetooth: hci3: command tx timeout [ 289.987556] Bluetooth: hci4: command tx timeout [ 289.992823] Bluetooth: hci5: command tx timeout [ 290.051491] Bluetooth: hci7: command tx timeout [ 290.054435] Bluetooth: hci6: command tx timeout [ 343.957855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.959310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.963693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.978174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.983436] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.985757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.023160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.024473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.025571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.028265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.029984] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.031206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.235033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.236608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.242290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.247649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.254654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.258806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.277908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.288912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.296851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.302664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.306254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.312695] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.431319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.439801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.441798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.456640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.465136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.465898] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.470713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.475664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.485785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.507067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.509634] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.510838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.540674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.544433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.545714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.548971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.553222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.555737] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.600937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.605729] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.615603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.620068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.624604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.625865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.051500] Bluetooth: hci1: command tx timeout [ 346.051968] Bluetooth: hci0: command tx timeout [ 346.307562] Bluetooth: hci2: command tx timeout [ 346.374981] Bluetooth: hci3: command tx timeout [ 346.499476] Bluetooth: hci4: command tx timeout [ 346.630559] Bluetooth: hci5: command tx timeout [ 346.694217] Bluetooth: hci6: command tx timeout [ 346.694655] Bluetooth: hci7: command tx timeout [ 348.099650] Bluetooth: hci0: command tx timeout [ 348.100443] Bluetooth: hci1: command tx timeout [ 348.357657] Bluetooth: hci2: command tx timeout [ 348.419457] Bluetooth: hci3: command tx timeout [ 348.547503] Bluetooth: hci4: command tx timeout [ 348.675599] Bluetooth: hci5: command tx timeout [ 348.739492] Bluetooth: hci6: command tx timeout [ 348.740629] Bluetooth: hci7: command tx timeout [ 350.147455] Bluetooth: hci1: command tx timeout [ 350.150338] Bluetooth: hci0: command tx timeout [ 350.408437] Bluetooth: hci2: command tx timeout [ 350.467453] Bluetooth: hci3: command tx timeout [ 350.595495] Bluetooth: hci4: command tx timeout [ 350.723650] Bluetooth: hci5: command tx timeout [ 350.787536] Bluetooth: hci7: command tx timeout [ 350.787556] Bluetooth: hci6: command tx timeout [ 352.195482] Bluetooth: hci0: command tx timeout [ 352.195527] Bluetooth: hci1: command tx timeout [ 352.451675] Bluetooth: hci2: command tx timeout [ 352.515560] Bluetooth: hci3: command tx timeout [ 352.643536] Bluetooth: hci4: command tx timeout [ 352.771470] Bluetooth: hci5: command tx timeout [ 352.835615] Bluetooth: hci7: command tx timeout [ 352.838423] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 15:33:43 Registers: info registers vcpu 0 RAX=80000000058b1025 RBX=ffffea0000162c40 RCX=ffffffff81998efa RDX=ffff888033c3b780 RSI=ffffffff81998f08 RDI=0000000000000007 RBP=0000000000000079 RSP=ffff88802adbf870 R8 =0000000000000000 R9 =fffff9400002c588 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f613cc52000 R14=ffff88802adbfce8 R15=ffff88802a69a290 RIP=ffffffff81998f0c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbecebfc9f8 CR3=0000000027d6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81a1c593 RBX=ffffffff815ec480 RCX=0000000000000001 RDX=1ffff11006b50e80 RSI=ffffffff81a1c593 RDI=ffff888035a87470 RBP=ffff888035a87440 RSP=ffff888035a873a0 R8 =0000000000000001 R9 =ffff888035a873e8 R10=000000000003ab7d R11=0000000000021e92 R12=ffff888035a87470 R13=0000000000000000 R14=ffff888015515340 R15=ffff8880134c9c00 RIP=ffffffff84ab2a40 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbeaf8dc8e0 CR3=00000000348f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000