Warning: Permanently added '[localhost]:10278' (ECDSA) to the list of known hosts. 2025/01/19 05:42:42 fuzzer started 2025/01/19 05:42:42 dialing manager at localhost:44245 syzkaller login: [ 70.251950] cgroup: Unknown subsys name 'net' [ 70.367202] cgroup: Unknown subsys name 'cpuset' [ 70.400379] cgroup: Unknown subsys name 'rlimit' [ 76.622178] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 05:43:01 syscalls: 218 2025/01/19 05:43:01 code coverage: enabled 2025/01/19 05:43:01 comparison tracing: enabled 2025/01/19 05:43:01 extra coverage: enabled 2025/01/19 05:43:01 setuid sandbox: enabled 2025/01/19 05:43:01 namespace sandbox: enabled 2025/01/19 05:43:01 Android sandbox: enabled 2025/01/19 05:43:01 fault injection: enabled 2025/01/19 05:43:01 leak checking: enabled 2025/01/19 05:43:01 net packet injection: enabled 2025/01/19 05:43:01 net device setup: enabled 2025/01/19 05:43:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 05:43:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 05:43:01 USB emulation: enabled 2025/01/19 05:43:01 hci packet injection: enabled 2025/01/19 05:43:01 wifi device emulation: enabled 2025/01/19 05:43:01 802.15.4 emulation: enabled 2025/01/19 05:43:01 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 05:43:03 starting 8 fuzzer processes 05:43:03 executing program 0: sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xa7aa84395d4f47ee) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffff7f, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40001) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2e8, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x24044800}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000000f40)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r11, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002008c}, 0x8810) 05:43:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x214, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x491ecd24637d7e38}, 0x11) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x2c}}, 0x1) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x4400, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8b7}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x20000800) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000740), 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r0) r8 = syz_open_dev$mouse(&(0x7f00000007c0), 0x4, 0x210c00) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x44050) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/igmp\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x80, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 05:43:03 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000c08}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000000}, 0x2401c001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc054}, 0x20008080) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000005c0)) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000600)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2f2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40854}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = getpgid(0x0) pidfd_open(r6, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000740)={0x81}, 0x4) r7 = gettid() sched_rr_get_interval(r7, &(0x7f0000000780)) syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0) 05:43:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x740, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/248}) openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r1 = socket(0x5, 0x5, 0x80000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_vs_stats\x00') openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000440), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x9cfa, 0x400, 0xc, 0xc392, 0x20]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x2}, {0x60}, {0xb}, {0x4, 0x1}, {0x24}, {0x3, 0x1}, {0xb}, {0x1, 0x1}, {0x30, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0x1b}, {0x9}, {0x6c}, {0x20, 0x1}, {0x12}, {0x18}, {0x5, 0x1}, {0x6c, 0x1}, {0x12, 0x1}, {0x4}, {0x48}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8, 0xbe, "dca9db2d"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1ff}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40081}, 0x81) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8841) gettid() r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x338, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1247}, @NL80211_ATTR_FRAME={0x27f, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x2, 0x7f}}, @ver_80211n={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0xc029, 0x33, @default, @void, @void, [{0xdd, 0xfd, "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"}, {0xdd, 0x7b, "9a264ffa1cd2a3c749f247b7dac88e20be055e3900cdeddbed708763b855a9f1883d14f56d1627faeced1c1b4d3bdd3a66ae4f11b4060b6197ec5a761c7398440cce43ff719e23fef9373cca52c87beb54576a5132b0e7cada935f97b1a8bcc6d57485c5a56b6c6cb17bfda226de1445988676f3b79f59c9191dcb"}, {0xdd, 0x31, "f92761cbe7ea10517561c606f841202a04a658800e3458a78d4fd442756143bab0d6a6f8df220fc81b832ce973477c0324"}, {0xdd, 0x46, "fb57cd6da740fced56a3322dd83297ff82dbee8848e6cb9e876b12f0c86298aa8fe26dd9de9c0a35e4f2b6c1843c2e6d35eee05c56b404f8621d08962ea5b986cb1e33c15b17"}, {0xdd, 0x60, "4cb01ae2ba173f51973b66241c4c7c45f5e1a4501715fa3ef3cfafb26c4273a5a2de8e83869788adfc5d90926ffc7dfe3a83590dde451fcd57ef89ac68b409aa3a802061d0adc540e55280903feaf7747538a5a23be2cc0e6b783f4746944261"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe296}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa0d}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4f]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x175}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xa3b}]]}, 0x338}, 0x1, 0x0, 0x0, 0x40}, 0x20042890) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8014) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xfc, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0xc0) [ 90.458086] audit: type=1400 audit(1737265383.540:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:43:03 executing program 4: ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1, 0x20, 0xffff}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000000c0)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) ioctl$TIOCCBRK(r0, 0x5428) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000180)={0x7fff, 0x6, 0x1}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$TIOCNXCL(r4, 0x540d) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r3, 0x4b34, 0xfffffffffffffffe) 05:43:03 executing program 5: ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x8}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x20, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d6285f33347c"}]}, 0x58}}, 0x20000090) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg2\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0x4, 0x2}, 0x6) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x7aa2303b4192538f}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x62}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4044804) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x39}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000008c0), 0x60180, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r7) sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x38e2222726c3d118}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x4) 05:43:03 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbf6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004801}, 0x20000804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20004001}, 0x4080) r4 = socket(0x23, 0x800, 0x11) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'veth1\x00'}}}, [""]}, 0x2c}}, 0xc8800) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)={0x354, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x340, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e65101f60808c3065d28cf158455718f1f7f2cc359f4c7970246819c4eb391e"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9fb6}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3f7, @mcast1, 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc86e}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e2fc7ac55eadd415eb2eb5f5ce6b6a9013c1c7df85e07b9ad637961db101ca06"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @remote, 0xff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0704c45dd8d3b612df3139040f22eacc41ac309d5564d0784be1e447ec3dc513"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x148, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x104, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x11010}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xabe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000e00)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xa0, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40805) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8051}, 0x840) 05:43:03 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x34}}, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100c308}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '},-\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '+*[\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '},-\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '},-\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x84) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), r0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3f}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x24000810) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c00)=0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x8800) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x78, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '&\'[\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x11\x00'}]}, 0x78}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) [ 91.775394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.776988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.779195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.779867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.783043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.786251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.793110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.797265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.799439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.802107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.806399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.811283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.896411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.899441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.905084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.908990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.913210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.915284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.919004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.920752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.934097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.953081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.977052] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.982453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.055236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.071513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.078186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.088081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.088437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.096844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.104796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.111813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.114394] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.119263] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.126409] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.130763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.144197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.148199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.149498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.152163] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.154030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.156226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.158547] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.165051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.178858] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.190761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.208230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.214904] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.848369] Bluetooth: hci1: command tx timeout [ 93.848376] Bluetooth: hci0: command tx timeout [ 93.975902] Bluetooth: hci3: command tx timeout [ 94.103831] Bluetooth: hci2: command tx timeout [ 94.232094] Bluetooth: hci6: command tx timeout [ 94.232236] Bluetooth: hci5: command tx timeout [ 94.232518] Bluetooth: hci4: command tx timeout [ 94.296623] Bluetooth: hci7: command tx timeout [ 95.895682] Bluetooth: hci0: command tx timeout [ 95.897140] Bluetooth: hci1: command tx timeout [ 96.024684] Bluetooth: hci3: command tx timeout [ 96.152671] Bluetooth: hci2: command tx timeout [ 96.279946] Bluetooth: hci6: command tx timeout [ 96.279986] Bluetooth: hci4: command tx timeout [ 96.280122] Bluetooth: hci5: command tx timeout [ 96.343972] Bluetooth: hci7: command tx timeout [ 97.944663] Bluetooth: hci0: command tx timeout [ 97.944917] Bluetooth: hci1: command tx timeout [ 98.071791] Bluetooth: hci3: command tx timeout [ 98.200679] Bluetooth: hci2: command tx timeout [ 98.328645] Bluetooth: hci6: command tx timeout [ 98.328728] Bluetooth: hci4: command tx timeout [ 98.328811] Bluetooth: hci5: command tx timeout [ 98.391678] Bluetooth: hci7: command tx timeout [ 99.991687] Bluetooth: hci1: command tx timeout [ 99.991728] Bluetooth: hci0: command tx timeout [ 100.119820] Bluetooth: hci3: command tx timeout [ 100.247782] Bluetooth: hci2: command tx timeout [ 100.375783] Bluetooth: hci5: command tx timeout [ 100.375809] Bluetooth: hci4: command tx timeout [ 100.375887] Bluetooth: hci6: command tx timeout [ 100.440850] Bluetooth: hci7: command tx timeout [ 152.060433] syz-executor.0 (279) used greatest stack depth: 23520 bytes left [ 154.226039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.231658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.237181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.241274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.246537] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.249192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.352020] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.354868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.356946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.370951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.373777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.375839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.476548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.480137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.483983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.488482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.492073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.493123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.670973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.678355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.694708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.723092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.731799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.738401] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.747952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.759146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.761138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.776986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.791298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.795064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.796512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.797845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.801593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.801853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.804717] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.806198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.827904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.827911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.834085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.886024] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.886262] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.888981] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.895805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.919977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.930691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.942334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.953003] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.957899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.312803] Bluetooth: hci0: command tx timeout [ 156.440125] Bluetooth: hci1: command tx timeout [ 156.567726] Bluetooth: hci2: command tx timeout [ 156.825012] Bluetooth: hci5: command tx timeout [ 156.825882] Bluetooth: hci3: command tx timeout [ 156.889609] Bluetooth: hci4: command tx timeout [ 157.015793] Bluetooth: hci7: command tx timeout [ 157.016290] Bluetooth: hci6: command tx timeout [ 158.361612] Bluetooth: hci0: command tx timeout [ 158.488687] Bluetooth: hci1: command tx timeout [ 158.616623] Bluetooth: hci2: command tx timeout [ 158.872871] Bluetooth: hci5: command tx timeout [ 158.872976] Bluetooth: hci3: command tx timeout [ 158.935630] Bluetooth: hci4: command tx timeout [ 159.064649] Bluetooth: hci7: command tx timeout [ 159.064757] Bluetooth: hci6: command tx timeout [ 160.408047] Bluetooth: hci0: command tx timeout [ 160.536386] Bluetooth: hci1: command tx timeout [ 160.664018] Bluetooth: hci2: command tx timeout [ 160.920060] Bluetooth: hci5: command tx timeout [ 160.920460] Bluetooth: hci3: command tx timeout [ 160.983681] Bluetooth: hci4: command tx timeout [ 161.111768] Bluetooth: hci7: command tx timeout [ 161.111959] Bluetooth: hci6: command tx timeout [ 162.455918] Bluetooth: hci0: command tx timeout [ 162.584766] Bluetooth: hci1: command tx timeout [ 162.712689] Bluetooth: hci2: command tx timeout [ 162.968659] Bluetooth: hci5: command tx timeout [ 162.968758] Bluetooth: hci3: command tx timeout [ 163.032715] Bluetooth: hci4: command tx timeout [ 163.159818] Bluetooth: hci7: command tx timeout [ 163.160413] Bluetooth: hci6: command tx timeout [ 216.753853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.759619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.764992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.776762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.784158] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.789003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.805256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.809819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.811801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.822849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.831150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.836040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.996044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.999765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.001935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.010809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.016289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.020820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.062187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.068824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.074762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.082236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.085660] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.086354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.127284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.133349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.133910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.139709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.143786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.145829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.168707] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.178704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.182498] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.187653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.190481] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.194656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.287735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.338394] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.356213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.378844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.396130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.400893] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.435881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.436506] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.449466] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.453953] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.472819] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.474705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.840730] Bluetooth: hci0: command tx timeout [ 218.903639] Bluetooth: hci1: command tx timeout [ 219.095684] Bluetooth: hci2: command tx timeout [ 219.160671] Bluetooth: hci3: command tx timeout [ 219.289638] Bluetooth: hci5: command tx timeout [ 219.290059] Bluetooth: hci4: command tx timeout [ 219.543712] Bluetooth: hci7: command tx timeout [ 219.544058] Bluetooth: hci6: command tx timeout [ 220.887717] Bluetooth: hci0: command tx timeout [ 220.951609] Bluetooth: hci1: command tx timeout [ 221.143737] Bluetooth: hci2: command tx timeout [ 221.207638] Bluetooth: hci3: command tx timeout [ 221.336386] Bluetooth: hci4: command tx timeout [ 221.336487] Bluetooth: hci5: command tx timeout [ 221.591644] Bluetooth: hci6: command tx timeout [ 221.591748] Bluetooth: hci7: command tx timeout [ 222.935627] Bluetooth: hci0: command tx timeout [ 222.999637] Bluetooth: hci1: command tx timeout [ 223.191653] Bluetooth: hci2: command tx timeout [ 223.255620] Bluetooth: hci3: command tx timeout [ 223.385616] Bluetooth: hci4: command tx timeout [ 223.385715] Bluetooth: hci5: command tx timeout [ 223.639701] Bluetooth: hci6: command tx timeout [ 223.639809] Bluetooth: hci7: command tx timeout [ 224.983849] Bluetooth: hci0: command tx timeout [ 225.047716] Bluetooth: hci1: command tx timeout [ 225.239618] Bluetooth: hci2: command tx timeout [ 225.303654] Bluetooth: hci3: command tx timeout [ 225.431842] Bluetooth: hci5: command tx timeout [ 225.431968] Bluetooth: hci4: command tx timeout [ 225.687723] Bluetooth: hci7: command tx timeout [ 225.687895] Bluetooth: hci6: command tx timeout [ 279.206122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.208027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.219814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.229458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.232123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.233237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.339110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.350099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.354008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.360071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.362815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.366677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.368868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.371744] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.379841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.389910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.394958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.396667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.397015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.401307] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.402795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.406226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.413108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.416446] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.421678] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.430947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.433844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.450085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.452143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.456766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.537954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.540173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.543219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.545323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.551492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.554447] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.556747] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.558708] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.566932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.572090] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.572123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.574750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.621704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.631276] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.632467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.634651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.642146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.644088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.239704] Bluetooth: hci0: command tx timeout [ 281.431725] Bluetooth: hci1: command tx timeout [ 281.432716] Bluetooth: hci2: command tx timeout [ 281.496815] Bluetooth: hci4: command tx timeout [ 281.497180] Bluetooth: hci3: command tx timeout [ 281.689594] Bluetooth: hci5: command tx timeout [ 281.751718] Bluetooth: hci7: command tx timeout [ 281.752058] Bluetooth: hci6: command tx timeout [ 283.288015] Bluetooth: hci0: command tx timeout [ 283.479818] Bluetooth: hci1: command tx timeout [ 283.482265] Bluetooth: hci2: command tx timeout [ 283.544039] Bluetooth: hci4: command tx timeout [ 283.545698] Bluetooth: hci3: command tx timeout [ 283.736680] Bluetooth: hci5: command tx timeout [ 283.800609] Bluetooth: hci6: command tx timeout [ 283.800691] Bluetooth: hci7: command tx timeout [ 285.335986] Bluetooth: hci0: command tx timeout [ 285.528588] Bluetooth: hci2: command tx timeout [ 285.528618] Bluetooth: hci1: command tx timeout [ 285.591636] Bluetooth: hci3: command tx timeout [ 285.591718] Bluetooth: hci4: command tx timeout [ 285.783617] Bluetooth: hci5: command tx timeout [ 285.848246] Bluetooth: hci6: command tx timeout [ 285.849631] Bluetooth: hci7: command tx timeout [ 287.383680] Bluetooth: hci0: command tx timeout [ 287.575752] Bluetooth: hci1: command tx timeout [ 287.577035] Bluetooth: hci2: command tx timeout [ 287.639662] Bluetooth: hci4: command tx timeout [ 287.639763] Bluetooth: hci3: command tx timeout [ 287.831645] Bluetooth: hci5: command tx timeout [ 287.896560] Bluetooth: hci6: command tx timeout [ 287.897139] Bluetooth: hci7: command tx timeout [ 341.731655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.733210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.734633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.739929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.742771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.744225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.992658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.995205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.008069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.012296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.014008] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.015044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.257704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.262666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.265952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.277818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.280004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.286156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.287887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.290542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.293911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.380710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.385930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.390140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.392765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.395236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.411394] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.415973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.416358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.422745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.433271] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.433993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.443934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.461207] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.469389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.472148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.475248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.480709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.483968] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.487996] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.492383] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.493654] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.496967] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.498648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.501744] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.502445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.503199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.528040] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.767712] Bluetooth: hci0: command tx timeout [ 344.088694] Bluetooth: hci1: command tx timeout [ 344.343950] Bluetooth: hci2: command tx timeout [ 344.471740] Bluetooth: hci3: command tx timeout [ 344.599630] Bluetooth: hci7: command tx timeout [ 344.599943] Bluetooth: hci6: command tx timeout [ 344.663809] Bluetooth: hci5: command tx timeout [ 344.664118] Bluetooth: hci4: command tx timeout [ 345.815647] Bluetooth: hci0: command tx timeout [ 346.136614] Bluetooth: hci1: command tx timeout [ 346.391835] Bluetooth: hci2: command tx timeout [ 346.519957] Bluetooth: hci3: command tx timeout [ 346.649589] Bluetooth: hci6: command tx timeout [ 346.649754] Bluetooth: hci7: command tx timeout [ 346.711762] Bluetooth: hci4: command tx timeout [ 346.711913] Bluetooth: hci5: command tx timeout [ 347.863843] Bluetooth: hci0: command tx timeout [ 348.183634] Bluetooth: hci1: command tx timeout [ 348.439655] Bluetooth: hci2: command tx timeout [ 348.567981] Bluetooth: hci3: command tx timeout [ 348.695784] Bluetooth: hci7: command tx timeout [ 348.695952] Bluetooth: hci6: command tx timeout [ 348.759661] Bluetooth: hci4: command tx timeout [ 348.759798] Bluetooth: hci5: command tx timeout [ 349.912547] Bluetooth: hci0: command tx timeout [ 350.231607] Bluetooth: hci1: command tx timeout [ 350.487715] Bluetooth: hci2: command tx timeout [ 350.615840] Bluetooth: hci3: command tx timeout [ 350.743640] Bluetooth: hci7: command tx timeout [ 350.743740] Bluetooth: hci6: command tx timeout [ 350.807699] Bluetooth: hci5: command tx timeout [ 350.808050] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 05:48:11 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86836b64 RDX=1ffff11005720e9e RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88802b907500 RSP=ffff88802b907438 R8 =ffffffff86836b68 R9 =ffff88802b9074e8 R10=000000000003ab4d R11=000000000002102a R12=ffff88802b907508 R13=ffff88802b9074f0 R14=0000000000000005 R15=ffff88802b9074a8 RIP=ffffffff813493da RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007effedd25008 CR3=000000002c9bc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c18ca0 RDI=ffff88800959dd90 RBP=ffffffff857806af RSP=ffff8880343675b8 R8 =0000000000000000 R9 =ffff88800959dd88 R10=ffffffff864021d7 R11=0000000000000001 R12=0000000000000141 R13=0000000000092cc0 R14=00000000000000e8 R15=ffffffff81aed65f RIP=ffffffff84a8b0d6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d55b57f080 CR3=0000000026dd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000