Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:46643' (ECDSA) to the list of known hosts. 2025/01/17 00:48:44 fuzzer started 2025/01/17 00:48:45 dialing manager at localhost:45115 syzkaller login: [ 72.038793] cgroup: Unknown subsys name 'net' [ 72.118387] cgroup: Unknown subsys name 'cpuset' [ 72.153079] cgroup: Unknown subsys name 'rlimit' [ 79.648546] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 90.176339] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 00:49:04 syscalls: 202 2025/01/17 00:49:04 code coverage: enabled 2025/01/17 00:49:04 comparison tracing: enabled 2025/01/17 00:49:04 extra coverage: enabled 2025/01/17 00:49:04 setuid sandbox: enabled 2025/01/17 00:49:04 namespace sandbox: enabled 2025/01/17 00:49:04 Android sandbox: enabled 2025/01/17 00:49:04 fault injection: enabled 2025/01/17 00:49:04 leak checking: enabled 2025/01/17 00:49:04 net packet injection: enabled 2025/01/17 00:49:04 net device setup: enabled 2025/01/17 00:49:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 00:49:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 00:49:04 USB emulation: enabled 2025/01/17 00:49:04 hci packet injection: enabled 2025/01/17 00:49:04 wifi device emulation: enabled 2025/01/17 00:49:04 802.15.4 emulation: enabled 2025/01/17 00:49:04 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 00:49:06 starting 8 fuzzer processes 00:49:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0xa2753af41b90877e}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x10040014) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0xc01) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x56}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0xc405) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r11, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r12, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) 00:49:06 executing program 1: r0 = getgid() setregid(r0, 0xee00) setregid(r0, r0) getgroups(0x0, &(0x7f0000000000)) getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, r0]) getgroups(0x2, &(0x7f00000001c0)=[r0, r0]) r4 = getgid() r5 = getgid() getgroups(0x8, &(0x7f0000000200)=[r2, r0, r0, r3, r0, r4, r0, r5]) r11 = getegid() getresgid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) getgroups(0xa, &(0x7f0000000340)=[r11, r2, r12, r6, r7, r4, 0xee01, r10, r1, r9]) pselect6(0x40, &(0x7f0000000380)={0x6, 0x7, 0x0, 0x2, 0xd812, 0xdb, 0x0, 0x349a}, &(0x7f00000003c0)={0x1ff, 0x3, 0x101, 0x80, 0x0, 0x7ff, 0x9, 0x80000000}, &(0x7f0000000400)={0x6, 0x0, 0x62e1, 0x6, 0x7, 0x7fffffff, 0x7, 0x8001}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100000001]}, 0x8}) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) getgroups(0x6, &(0x7f00000005c0)=[r17, r14, 0x0, r15, r16, r6]) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) r18 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/kprobe', 0x288000, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r18, 0x5411, &(0x7f0000000700)) setregid(r8, r13) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'gretap0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7, 0x10, 0x7, 0x40, {{0x6, 0x4, 0x1, 0x24, 0x18, 0x65, 0x0, 0xf8, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) 00:49:06 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x40, 0x1f, 0x1f, {{0x21, 0x4, 0x3, 0x0, 0x84, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @multicast2, {[@generic={0x94, 0x8, "472190321329"}, @cipso={0x86, 0x65, 0x3, [{0x1, 0x11, "2f452e9644f720ad3aea748258d06b"}, {0x6, 0x6, "7aadb8ff"}, {0x2, 0x5, "a035ea"}, {0x0, 0x9, "bec0e8a97d0909"}, {0x0, 0x11, "b9ab26ec62984c3c178af56f3a4296"}, {0x1, 0x2}, {0x2, 0xf, "c456f8e05b7a0b1afcbf325b4f"}, {0x6, 0xe, "b6c2c04600da92626dc3afed"}, {0x0, 0xa, "52412d5b0116e8f5"}]}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffc00}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc01}, 0x45) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2002c084}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20008800) r7 = fsmount(r5, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'sit0\x00', r3, 0x4, 0x8, 0x3, 0x80000000, 0x8, @private0, @local, 0x0, 0x20, 0x68, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x40, 0x80, 0x3f, 0x7, {{0x38, 0x4, 0x2, 0x6, 0xe0, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x27, 0xcb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100]}, @end, @cipso={0x86, 0x49, 0x0, [{0x0, 0xd, "edc2309a4ce442cefdf604"}, {0x6, 0x11, "ab7b0a15b837ffb83ee481190e48c9"}, {0x5, 0xd, "75c88f8221e91451ce4d14"}, {0x7, 0x8, "bd72fc1c1e3c"}, {0x0, 0x10, "66b80c47ca0db564b5a1cef9675d"}]}, @ssrr={0x89, 0x17, 0x77, [@multicast1, @loopback, @local, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x44, 0xcc, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xefb}, {@private=0xa010101, 0x7}, {@remote, 0x2}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x326}, {@local, 0xdf}, {@local, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', r1, 0x8, 0x8058, 0x6, 0x9, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x66, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@rr={0x7, 0x13, 0xc2, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @rr={0x7, 0xb, 0x23, [@multicast2, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a80)={'syztnl0\x00', r3, 0x40, 0x7, 0x67e, 0x174302aa, {{0xd, 0x4, 0x3, 0x37, 0x34, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @generic={0x88, 0x11, "5ee17c6d02c5d1f2b872d2aa2d139e"}, @generic={0x83, 0xc, "1f7328678a95470bcf9b"}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x138, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x20080801) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000000e40)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) 00:49:06 executing program 3: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x20}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xcbe, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x8001, 0x178df78e, 0x0, 0x3}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x28080) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000140)={0x8bb1, 0x8}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/leds', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x800, 0x5, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x20}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1f}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000300)=0x7) ioctl$LOOP_CLR_FD(r0, 0x4c01) r4 = syz_open_dev$loop(&(0x7f0000000340), 0xbf00, 0x40080) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000380)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000440)) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000480)={0xd12f, 0x1ff}) r5 = syz_open_dev$loop(&(0x7f00000004c0), 0x101, 0x482480) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x3) socketpair(0xb, 0x6, 0x3, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6) ioctl$sock_ifreq(r2, 0x891f, &(0x7f0000000580)={'veth0_to_hsr\x00', @ifru_mtu}) [ 92.451178] audit: type=1400 audit(1737074946.374:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:49:06 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x4, 0x5, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@end, @ssrr={0x89, 0x7, 0x57, [@private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x290, 0x0, 0x0, 0x70bd28, 0x80, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x230, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x73, 0x5, "85688f445fe4d7c90a70b2b19731a3366c87aab37fb8320e91fc48079ef49beb97e46368c37890b554764f11f154c4685d5a6b2c3719e60eecea0ac886013a94ed8b851bc2af947b3cbc823025fa8d89e79b57185fa666ae8df126ea917c5a4d238ec0600f751eddb994575968621d"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1da00000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',$(,$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&^%$:$)\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e07}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/.-{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'++-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-%,+\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-:{],$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf55}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x320}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!,[@-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:]\xab+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xdf\a\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}]}]}]}, 0x290}}, 0x8020) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x80, 0x8, 0xd867, 0x7fff, {{0x19, 0x4, 0x3, 0xe, 0x64, 0x65, 0x0, 0x95, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@end, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x0, 0x5, "526dfd"}, {0x0, 0x5, "2c28b5"}, {0x1, 0x3, '#'}, {0x5, 0x7, "b791caf5ae"}, {0x0, 0x11, "2e59b3e8d6a8b7f756f52e4b607023"}, {0x5, 0x9, "24afca55235d2d"}, {0x1, 0x4, 'Xr'}]}, @end, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x5, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x7fff}]}, @noop, @noop]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000850}, 0x80) socketpair(0x1e, 0xa, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x8000) socketpair(0x1a, 0xa, 0xfffffffe, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3f}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) bind(r7, &(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @private=0xa010102}, 0x1, 0x4, 0x0, 0x4}}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000082}, 0x44020800) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000cc0)={'tunl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', r0, 0x20, 0x700, 0x5, 0x673f, {{0x35, 0x4, 0x2, 0x8, 0xd4, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, {[@cipso={0x86, 0x3e, 0x3, [{0x1, 0x3, 'A'}, {0x6, 0x10, "51e56459bfd412c14fbc02d8b272"}, {0x2, 0x4, "33b7"}, {0x5, 0x3, "a3"}, {0x1, 0x9, "4e1533f64ddd81"}, {0x7, 0xc, "604509db4372d3a0d749"}, {0x6, 0x9, "27bc9363b34bce"}]}, @timestamp={0x44, 0x18, 0x5f, 0x0, 0x3, [0x1, 0x8001, 0x8, 0x101, 0x2]}, @cipso={0x86, 0x6a, 0x1, [{0x5, 0x10, "fb8853a7061d139380897c386c60"}, {0x6, 0x12, "0a5f1202fc1e90827fc9cea75f9a83ef"}, {0x2, 0x2}, {0x0, 0xc, "540a88d0b7b12880eed0"}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x11, "71377b0044ddce24214f3c7fdc65ec"}, {0x5, 0x3, 'g'}, {0x7, 0x10, "539c0fd128d938b5d6e7bf87018e"}, {0x0, 0xc, "7da7ff97dc70d11414c1"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xe4, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1120}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r5, 0x900, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r8, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000013c0)={&(0x7f0000001100), 0xc, &(0x7f0000001380)={&(0x7f0000001200)={0x154, r10, 0x10, 0xda58, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEATURES_WANTED={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "28e0a39dd51b59fa14da7f3ce126bf19a1675de6aa7f8d54377225114fb06b02f67017bdcb8b65d2c019d4b925241b0207e3c8df41abda1fb4d616e84728cce010"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000040}, 0x14001) 00:49:06 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x142e5b1e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4000001) sendto$packet(r2, &(0x7f00000001c0)="f166eb2cc886582c58665228cceb1f560fa9d21387d032a2c2089487af6a77b055db0f46e55c0eeedb43ec4d927d3efb330afc4f1170121d0e39230afc6cc0ff9f2bd8ca5c6db70a0fa3bb80dd7f4299881c802dd68a9980db3daffd12b0cf056c0d0b108805e8f6b7e7abaaf81d4ff4a49b388b8d83bf9fb791b920108391e9011fc2881ef65de5f99e3ae25a09e2b6ac9b1080d00b2ca7647de216886191acf55597dc604ba09349855f51d985cc9afaca6884629f57c9180a2f4c3d51a62d9d7976ba4f146f05dcb2524a8f4d747e", 0xd0, 0x0, &(0x7f00000002c0)={0x11, 0xf8, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x80) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_open_dev$sg(&(0x7f0000000580), 0x6, 0x8000) r5 = fsopen(&(0x7f00000005c0)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000600)='*\x00', 0x0, r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r6, 0x15, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000000) accept$packet(r2, 0x0, &(0x7f0000000780)) socketpair(0x2, 0x3, 0x10001, &(0x7f00000007c0)) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/class/misc', 0x109002, 0x116) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x810) 00:49:06 executing program 5: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0xff, 0x7ff, 0x5, 0xffff41c9}) socketpair(0x15, 0xa, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0xf9, 0x20, 0x7ff, 0x49, @dev={0xfe, 0x80, '\x00', 0xd}, @private0, 0x20, 0x8, 0x834b, 0x81}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7800, 0x120, 0x80000000, 0xfffffffd, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x65, 0x0, 0x1f, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x0, [{@multicast2, 0xbac9}, {@broadcast, 0xffff}]}, @lsrr={0x83, 0x1f, 0x61, [@multicast2, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}]}, @generic={0x88, 0xb, "8e3e03c2a5dfd1d625"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x3d, 0x5, {{0x23, 0x4, 0x0, 0x5, 0x8c, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x24, 0xf5, 0x1, 0xd, [{@multicast1, 0x8}, {@loopback, 0x5}, {@multicast2, 0xf7d}, {@multicast1}]}, @lsrr={0x83, 0x17, 0x3e, [@private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xb4, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x19c0}, {@remote, 0x5}]}, @generic={0x83, 0xe, "153e72057b627d4659a7afca"}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)={0x5a0, r1, 0x400, 0x8, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x2a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xfffc, 0x80, 0xfd, 0x1d4}, {0x3, 0x40, 0x1, 0x20}, {0xc740, 0xff, 0x7f, 0x4}, {0x5, 0x1f, 0x6, 0x1f}, {0x6, 0x1f, 0x80, 0x1e1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r6}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x4}}]}, 0x5a0}}, 0x48000) r7 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000e40)={'gre0\x00', 0x0, 0x8000, 0x80, 0x8, 0xa3, {{0x3a, 0x4, 0x3, 0x5, 0xe8, 0x67, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x3, 0x57}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x7, [0x8, 0xfffffffd, 0x0]}, @timestamp={0x44, 0x24, 0x62, 0x0, 0x0, [0x9, 0x2, 0x1, 0x9, 0x5, 0x8001, 0x1, 0x573]}, @noop, @timestamp_addr={0x44, 0x3c, 0xd3, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x2}, {@rand_addr=0x64010101, 0x3}, {@loopback, 0x3}, {@empty, 0x1}, {@loopback, 0x6d}]}, @end, @timestamp={0x44, 0x1c, 0xc5, 0x0, 0x9, [0x7ff, 0x3, 0x2, 0x7f, 0x3ff, 0x2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@multicast2, 0xffff}, {@remote, 0xd25}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x28101010}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x253}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xa737427e03242ea9}, 0x20000801) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f00000010c0)={0x6}) socketpair(0xf, 0xa, 0x2, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000001240)={&(0x7f0000001140), 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x7c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x45001) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000001280)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @xdp={0x2c, 0x74eccbc58942d324, r3, 0xd}, @hci={0x1f, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x0, 0x7}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000001300)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x120, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x14048080}, 0x20040000) 00:49:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x1, 0xfe, 0x0, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x65, 0x0, 0x76, 0x29, 0x0, @broadcast, @multicast2, {[@generic={0x83, 0x10, "4875e242dc0c4651c4b64e0b88be"}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@mcast2, 0x56, r1}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0xb103, 0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x8081) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, @nl=@unspec, @vsock={0x28, 0x0, 0x0, @hyper}, @qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x2, 0x0, 0x0, 0x0, 0xdee8, 0x0, 0x9, 0x0, 0x3ff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_print_times', 0x540, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'tunl0\x00', r1, 0x40, 0x8000, 0x1e10, 0x5, {{0x22, 0x4, 0x0, 0x11, 0x88, 0x66, 0x0, 0x2, 0x2f, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x1c, 0xad, 0x0, 0x0, [0x1, 0x3, 0x8000, 0xe, 0x5, 0x20]}, @ssrr={0x89, 0xb, 0x3e, [@remote, @loopback]}, @ssrr={0x89, 0x17, 0xd2, [@broadcast, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x86, 0xb, "e326b1370cfb5c6b2b"}, @timestamp_addr={0x44, 0x14, 0xc1, 0x1, 0xd, [{@loopback, 0xbf9a}, {@multicast1, 0x80}]}, @timestamp_prespec={0x44, 0x14, 0x58, 0x3, 0xa, [{@local, 0x5}, {@multicast1, 0x7}]}]}}}}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x120, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfe000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8f47}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 93.712672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.714340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.715653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.719472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.724153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.725452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.976750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.981634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.984987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.994079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.996405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.997911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.002020] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.004674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.006772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.008190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.024079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.034819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.059077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.085003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.090002] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.091761] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.092965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.095331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.100405] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.102274] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.103549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.144089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.147174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.153048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.153064] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.158864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.159147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.165740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.168361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.171281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.173716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.175130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.176434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.182926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.185962] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.187664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.227325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.228791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.232918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.240414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.242803] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.243825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.800032] Bluetooth: hci0: command tx timeout [ 96.053724] Bluetooth: hci1: command tx timeout [ 96.117739] Bluetooth: hci2: command tx timeout [ 96.181982] Bluetooth: hci6: command tx timeout [ 96.247602] Bluetooth: hci3: command tx timeout [ 96.247793] Bluetooth: hci5: command tx timeout [ 96.309648] Bluetooth: hci7: command tx timeout [ 96.310094] Bluetooth: hci4: command tx timeout [ 97.845623] Bluetooth: hci0: command tx timeout [ 98.101620] Bluetooth: hci1: command tx timeout [ 98.166853] Bluetooth: hci2: command tx timeout [ 98.229763] Bluetooth: hci6: command tx timeout [ 98.293630] Bluetooth: hci3: command tx timeout [ 98.293690] Bluetooth: hci5: command tx timeout [ 98.357745] Bluetooth: hci7: command tx timeout [ 98.357790] Bluetooth: hci4: command tx timeout [ 99.894593] Bluetooth: hci0: command tx timeout [ 100.149638] Bluetooth: hci1: command tx timeout [ 100.213583] Bluetooth: hci2: command tx timeout [ 100.277773] Bluetooth: hci6: command tx timeout [ 100.341635] Bluetooth: hci3: command tx timeout [ 100.341725] Bluetooth: hci5: command tx timeout [ 100.405753] Bluetooth: hci4: command tx timeout [ 100.407683] Bluetooth: hci7: command tx timeout [ 101.942656] Bluetooth: hci0: command tx timeout [ 102.197704] Bluetooth: hci1: command tx timeout [ 102.263625] Bluetooth: hci2: command tx timeout [ 102.325665] Bluetooth: hci6: command tx timeout [ 102.389819] Bluetooth: hci3: command tx timeout [ 102.389905] Bluetooth: hci5: command tx timeout [ 102.454296] Bluetooth: hci7: command tx timeout [ 102.454380] Bluetooth: hci4: command tx timeout [ 156.758079] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.763981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.766170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.773898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.777218] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.783343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.839165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.844084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.847799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.850217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.851641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.857171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.865883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.868765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.874723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.877245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.877821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.881325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.950796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.956745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.959542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.961156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.962398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.963676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.965035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.967170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.969444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.973089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.976881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.985958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.994446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.998231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.999295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.010748] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.013816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.021779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.177353] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.249128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.251164] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.255251] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.274429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.317374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.318201] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.337161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.353846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.356047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.357923] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.360848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.838016] Bluetooth: hci0: command tx timeout [ 158.901713] Bluetooth: hci1: command tx timeout [ 159.030214] Bluetooth: hci2: command tx timeout [ 159.093807] Bluetooth: hci4: command tx timeout [ 159.094688] Bluetooth: hci3: command tx timeout [ 159.221811] Bluetooth: hci5: command tx timeout [ 159.477833] Bluetooth: hci6: command tx timeout [ 159.541664] Bluetooth: hci7: command tx timeout [ 160.885609] Bluetooth: hci0: command tx timeout [ 160.949748] Bluetooth: hci1: command tx timeout [ 161.077593] Bluetooth: hci2: command tx timeout [ 161.142410] Bluetooth: hci3: command tx timeout [ 161.142674] Bluetooth: hci4: command tx timeout [ 161.269853] Bluetooth: hci5: command tx timeout [ 161.525627] Bluetooth: hci6: command tx timeout [ 161.589617] Bluetooth: hci7: command tx timeout [ 162.933552] Bluetooth: hci0: command tx timeout [ 162.997850] Bluetooth: hci1: command tx timeout [ 163.125913] Bluetooth: hci2: command tx timeout [ 163.189598] Bluetooth: hci4: command tx timeout [ 163.189684] Bluetooth: hci3: command tx timeout [ 163.318525] Bluetooth: hci5: command tx timeout [ 163.573681] Bluetooth: hci6: command tx timeout [ 163.637629] Bluetooth: hci7: command tx timeout [ 164.981664] Bluetooth: hci0: command tx timeout [ 165.047622] Bluetooth: hci1: command tx timeout [ 165.173639] Bluetooth: hci2: command tx timeout [ 165.237710] Bluetooth: hci3: command tx timeout [ 165.237926] Bluetooth: hci4: command tx timeout [ 165.366030] Bluetooth: hci5: command tx timeout [ 165.621672] Bluetooth: hci6: command tx timeout [ 165.685778] Bluetooth: hci7: command tx timeout [ 215.110758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.110870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.117852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.120186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.121713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.126053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.128372] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.129741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.253306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.256977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.259005] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.270438] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.276025] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.277061] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.397450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.400021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.404155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.404802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.409892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.411961] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.414118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.427219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.439840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.453417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.468005] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.476310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.523209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.532756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.553835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.558427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.577416] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.582783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.627945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.641711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.647918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.650792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.656386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.667889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.668978] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.671608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.673374] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.673974] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.675645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.689015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.699640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.704421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.714081] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.759963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.775156] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.779823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.149581] Bluetooth: hci0: command tx timeout [ 220.341843] Bluetooth: hci1: command tx timeout [ 220.469614] Bluetooth: hci3: command tx timeout [ 220.534667] Bluetooth: hci2: command tx timeout [ 220.661857] Bluetooth: hci4: command tx timeout [ 220.789627] Bluetooth: hci6: command tx timeout [ 220.790753] Bluetooth: hci5: command tx timeout [ 220.918115] Bluetooth: hci7: command tx timeout [ 222.198816] Bluetooth: hci0: command tx timeout [ 222.390600] Bluetooth: hci1: command tx timeout [ 222.517612] Bluetooth: hci3: command tx timeout [ 222.582170] Bluetooth: hci2: command tx timeout [ 222.709764] Bluetooth: hci4: command tx timeout [ 222.837984] Bluetooth: hci6: command tx timeout [ 222.838150] Bluetooth: hci5: command tx timeout [ 222.966546] Bluetooth: hci7: command tx timeout [ 224.246576] Bluetooth: hci0: command tx timeout [ 224.438706] Bluetooth: hci1: command tx timeout [ 224.565852] Bluetooth: hci3: command tx timeout [ 224.629680] Bluetooth: hci2: command tx timeout [ 224.759892] Bluetooth: hci4: command tx timeout [ 224.885627] Bluetooth: hci6: command tx timeout [ 224.886689] Bluetooth: hci5: command tx timeout [ 225.013853] Bluetooth: hci7: command tx timeout [ 226.296209] Bluetooth: hci0: command tx timeout [ 226.485966] Bluetooth: hci1: command tx timeout [ 226.613644] Bluetooth: hci3: command tx timeout [ 226.677649] Bluetooth: hci2: command tx timeout [ 226.807550] Bluetooth: hci4: command tx timeout [ 226.933840] Bluetooth: hci6: command tx timeout [ 226.934602] Bluetooth: hci5: command tx timeout [ 227.061640] Bluetooth: hci7: command tx timeout [ 280.329031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.331979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.339024] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.350062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.356043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.360761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.401242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.406994] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.416604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.422012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.426318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.427310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.477918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.484666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.493162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.506940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.524976] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.526970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.535368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.541915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.549618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.556621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.594714] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.606232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.615284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.621730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.625090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.633386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.640988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.645940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.694274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.712887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.726819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.756324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.786184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.805697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.810648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.812683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.813083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.820012] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.823739] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.825814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.828392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.839878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.850986] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.855701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.857912] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.863700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.421691] Bluetooth: hci0: command tx timeout [ 282.486584] Bluetooth: hci1: command tx timeout [ 282.614637] Bluetooth: hci2: command tx timeout [ 282.741709] Bluetooth: hci4: command tx timeout [ 282.742169] Bluetooth: hci3: command tx timeout [ 282.933991] Bluetooth: hci6: command tx timeout [ 282.935126] Bluetooth: hci7: command tx timeout [ 282.935390] Bluetooth: hci5: command tx timeout [ 284.470655] Bluetooth: hci0: command tx timeout [ 284.533523] Bluetooth: hci1: command tx timeout [ 284.661619] Bluetooth: hci2: command tx timeout [ 284.789707] Bluetooth: hci4: command tx timeout [ 284.789829] Bluetooth: hci3: command tx timeout [ 284.981636] Bluetooth: hci7: command tx timeout [ 284.982104] Bluetooth: hci6: command tx timeout [ 284.982199] Bluetooth: hci5: command tx timeout [ 286.517748] Bluetooth: hci0: command tx timeout [ 286.581588] Bluetooth: hci1: command tx timeout [ 286.709564] Bluetooth: hci2: command tx timeout [ 286.837572] Bluetooth: hci4: command tx timeout [ 286.837613] Bluetooth: hci3: command tx timeout [ 287.029583] Bluetooth: hci7: command tx timeout [ 287.029613] Bluetooth: hci5: command tx timeout [ 287.029698] Bluetooth: hci6: command tx timeout [ 288.566685] Bluetooth: hci0: command tx timeout [ 288.630611] Bluetooth: hci1: command tx timeout [ 288.760535] Bluetooth: hci2: command tx timeout [ 288.885558] Bluetooth: hci4: command tx timeout [ 288.885643] Bluetooth: hci3: command tx timeout [ 289.077533] Bluetooth: hci6: command tx timeout [ 289.078532] Bluetooth: hci7: command tx timeout [ 289.078611] Bluetooth: hci5: command tx timeout [ 342.469596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.474904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.477321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.488033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.492714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.497027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.728092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.730371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.732798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.750858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.751018] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.755721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.758278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.761324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.762717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.765255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.771125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.775721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.777762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.799899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.799929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.812298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.819035] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.821333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.865427] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.886895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.889049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.895046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.897169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.909828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.914760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.918555] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.929536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.949306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.958892] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.963234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.132120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.139357] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.156864] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.169911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.172214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.175744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.187913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.190839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.197802] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.212865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.215341] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.216212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.566598] Bluetooth: hci0: command tx timeout [ 344.823605] Bluetooth: hci1: command tx timeout [ 344.886590] Bluetooth: hci3: command tx timeout [ 344.886996] Bluetooth: hci2: command tx timeout [ 345.013591] Bluetooth: hci4: command tx timeout [ 345.014047] Bluetooth: hci5: command tx timeout [ 345.333682] Bluetooth: hci6: command tx timeout [ 345.334768] Bluetooth: hci7: command tx timeout [ 346.613571] Bluetooth: hci0: command tx timeout [ 346.869594] Bluetooth: hci1: command tx timeout [ 346.933627] Bluetooth: hci2: command tx timeout [ 346.934858] Bluetooth: hci3: command tx timeout [ 347.063486] Bluetooth: hci5: command tx timeout [ 347.063572] Bluetooth: hci4: command tx timeout [ 347.381559] Bluetooth: hci7: command tx timeout [ 347.381651] Bluetooth: hci6: command tx timeout [ 348.661610] Bluetooth: hci0: command tx timeout [ 348.917632] Bluetooth: hci1: command tx timeout [ 348.981560] Bluetooth: hci3: command tx timeout [ 348.981657] Bluetooth: hci2: command tx timeout [ 349.109847] Bluetooth: hci4: command tx timeout [ 349.109943] Bluetooth: hci5: command tx timeout [ 349.429684] Bluetooth: hci6: command tx timeout [ 349.429933] Bluetooth: hci7: command tx timeout [ 350.711542] Bluetooth: hci0: command tx timeout [ 350.965742] Bluetooth: hci1: command tx timeout [ 351.029875] Bluetooth: hci2: command tx timeout [ 351.029978] Bluetooth: hci3: command tx timeout [ 351.157718] Bluetooth: hci5: command tx timeout [ 351.157944] Bluetooth: hci4: command tx timeout [ 351.478638] Bluetooth: hci7: command tx timeout [ 351.478740] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:54:13 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=00007fbcda57d000 RDX=00007fbcda3e7000 RSI=ffff888013672000 RDI=ffff88802766fe18 RBP=0000000000000071 RSP=ffff88802766fc08 R8 =0000000000000000 R9 =ffffed1001250e48 R10=0000000000000000 R11=0000000000000000 R12=ffff888013672000 R13=0000000000000070 R14=ffff88801367202c R15=000000000000003b RIP=ffffffff819cf5f4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffddb3dbf90 CR3=000000001aabe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff815ec430 RCX=0000000000000001 RDX=1ffff1100d9e135a RSI=ffffffff8100148a RDI=ffff88806cf09b40 RBP=ffff88806cf09b10 RSP=ffff88806cf09a68 R8 =0000000000000001 R9 =ffff88806cf09ab8 R10=000000000003ab8d R11=00000000000c2bb7 R12=ffff88806cf09b40 R13=0000000000000000 R14=ffff8880283c5340 R15=ffff88800d817378 RIP=ffffffff815ec43f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564fc37289a0 CR3=0000000018f7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000