Warning: Permanently added '[localhost]:3032' (ECDSA) to the list of known hosts. 2025/01/22 02:58:43 fuzzer started 2025/01/22 02:58:44 dialing manager at localhost:44689 syzkaller login: [ 77.352637] cgroup: Unknown subsys name 'net' [ 77.447230] cgroup: Unknown subsys name 'cpuset' [ 77.486474] cgroup: Unknown subsys name 'rlimit' [ 84.101594] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 95.130451] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 02:59:11 syscalls: 215 2025/01/22 02:59:11 code coverage: enabled 2025/01/22 02:59:11 comparison tracing: enabled 2025/01/22 02:59:11 extra coverage: enabled 2025/01/22 02:59:11 setuid sandbox: enabled 2025/01/22 02:59:11 namespace sandbox: enabled 2025/01/22 02:59:11 Android sandbox: enabled 2025/01/22 02:59:11 fault injection: enabled 2025/01/22 02:59:11 leak checking: enabled 2025/01/22 02:59:11 net packet injection: enabled 2025/01/22 02:59:11 net device setup: enabled 2025/01/22 02:59:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 02:59:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 02:59:11 USB emulation: enabled 2025/01/22 02:59:11 hci packet injection: enabled 2025/01/22 02:59:11 wifi device emulation: enabled 2025/01/22 02:59:11 802.15.4 emulation: enabled 2025/01/22 02:59:11 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 02:59:13 starting 8 fuzzer processes 02:59:13 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@mcast2, 0x4e21, 0x3f, 0x4e23, 0x65d, 0xa, 0xa0, 0xa0, 0x2c, 0x0, r2}, {0x2, 0x7c7, 0x7fff, 0x7ff, 0x6, 0x81, 0xfffffffffffffffb, 0x7}, {0x4, 0x80000001, 0x1, 0x8}, 0x6f9d901e, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x4, 0x1, 0x4, 0x3, 0x8, 0x80}}, 0xe8) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) setns(0xffffffffffffffff, 0x54000000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x0, 0x0, '\x00', [@pad1, @pad1]}, 0x10) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000240)=""/226) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, &(0x7f0000000380)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/pci_express', 0x4400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', r1, 0xf21fdc11d515b9e3, 0x58, 0x6, 0x7, 0x14, @remote, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x10, 0x6, 0x9}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000500)=0x1c, 0x47f18e3d508ea0f0) syz_usb_connect$cdc_ecm(0x2, 0xbe, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x1, 0x0, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x20, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6d1, 0x3, 0xffff}, [@mdlm_detail={0x4d, 0x24, 0x13, 0x5, "cb404eb46ae46bf5937e8c0c601cd79208351d7b5425aaac0dabcf9ae424bd769be0050e92ed41ac5688e6f6c69dba31b88d238b8c6437d2313a1582c893218d320596e1d3afb53fac"}, @mdlm={0x15, 0x24, 0x12, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x30}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x7, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3f, 0x6, 0x1f}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0xd3, 0x2, 0x5, 0x10, 0x81}, 0x19, &(0x7f0000000640)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf8, "ea01f813382e8cc75e80802e60112922"}]}, 0xa, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x240a}}, {0x8a, &(0x7f00000006c0)=@string={0x8a, 0x3, "5d28bafa121bfae513a8bef42d3aef81ac2abb648ccc7d9fcd1944f5da492c0056762455c8f121beb53819b86c01a0cf8a22ddebe9de1e77d952ef036fb4d0797b06550ab3fd9f186113bab24adcba2250d76b942cc12f2c4972417086f49068c5e1a7d6abc4ca80e2e04ec0ba4c46a8897c16d0ed56b8e5e717dcb81fa6461e3c7ffe79d9090e49"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c01}}, {0x9, &(0x7f00000007c0)=@string={0x9, 0x3, "5851c6616174a3"}}, {0x97, &(0x7f0000000800)=@string={0x97, 0x3, "17108e2a6a1660bccb4f5d923fea6b9930eb079cdbb6b96dddcf2ff55a9187514721d50ab40c8d7f43d3a2d9b28e736ec91b4ed4d05eb25452ed49704b5b6d779804d802e895718ab39bbd07a8c81e51c27504e1a07a43b8b64f8ca698df664113bc77da247994c71dde9847990accbea90c67a4171059f059a46d4370d4a183a3b5563462b93fc9b4c766d80f062a8eeb1dc0f1ea"}}, {0x4c, &(0x7f00000008c0)=@string={0x4c, 0x3, "46e365a2c178b9950108eb82bdf593425d93cd27f83634e861d176adee33a82710fb89ef15f589a211ceb75b53301e6baa4291d8293db638fab3faa8f8626596d5b11a010901b08cf571"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x440a}}]}) r5 = syz_open_dev$loop(&(0x7f0000000b00), 0x7ff, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) 02:59:13 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x7e) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x80, 0x0, 0x8, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x1, 0x101, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x59, r1}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x1, {{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4, r2}) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000340)={'lo\x00', @ifru_data=&(0x7f0000000300)="62de245b9e294d87233606f2eb5a059f8cc017a16898b1b9efc4294ec292643a"}) getpeername(r0, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/hid', 0x4800, 0x80) r4 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x7, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x40}, @remote, 0x8000, 0x8000, 0x1, 0x3}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000780)={0x994, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7ff, 0x9, 0x2, 0x6}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r1}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x41d}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r1}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdad}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x42}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r1}, {0x198, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x97e4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}, {0x8}}}]}}]}, 0x994}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'sit0\x00', r7, 0x29, 0x0, 0x8, 0x40, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x80, 0x8000, 0x81, 0xabc6}}) 02:59:13 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'veth0\x00', @ifru_map}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_loaded', 0x90002, 0x1) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000100)) r4 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6=@empty}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8) inotify_init1(0x80000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000300)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xe, r2}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', r5, 0x29, 0x9, 0x7b, 0x5, 0x50, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x8, 0x7, 0x4023}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x4, 0x5, 0xfb, 0x3, 0x9, @local, @loopback, 0x7800, 0x80, 0xfffffffa, 0x80000000}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x410440, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000780)={0x0, 0x5, [@multicast, @broadcast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty]}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0x5, 0x300) ioctl$EVIOCGABS0(r9, 0x80184540, &(0x7f0000000800)=""/229) 02:59:13 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000004) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x20, 0xffffff3e, 0x7b, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0x2, 0x10000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x47}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xec}, {0xc, 0x90, 0x1ccf}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x10000}}]}, 0x108}}, 0x4002000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000800) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000ec0)=0x1, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/firmware/dmi', 0x8002, 0x100) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, r8, 0x100, 0x4, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x80) syz_io_uring_setup(0x38ef, &(0x7f0000001140)={0x0, 0x6148, 0x0, 0x1, 0x14c, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000011c0), &(0x7f0000001200)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x40c5) [ 106.359294] audit: type=1400 audit(1737514753.567:7): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:59:13 executing program 4: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000001c0)=""/224) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300), 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0x8, 0x8040) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x32}, @local, @empty, 0x2, 0x3, 0x87, 0x500, 0x2, 0x810104, r4}) socketpair(0x38, 0x4, 0x2, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xca}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x400c084) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000800)={0x7fffffff, 0x7fffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000980)=0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000001400)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x1c0, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x184}, 0x2000c844) 02:59:13 executing program 5: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000180)=0xe8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0xd0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x103002, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x44}}, 0x2b8fa05b9c78bd80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', r1, 0x4, 0x8, 0x8, 0x7fffffff, 0x40, @empty, @mcast1, 0x700, 0x7, 0x0, 0x7fff}}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6b7e}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) bind(r2, &(0x7f0000000700)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80) r7 = accept$inet6(r4, &(0x7f0000000780), &(0x7f00000007c0)=0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'sit0\x00', r3, 0x29, 0x9, 0x1, 0x81, 0x1c, @mcast1, @private0, 0x8000, 0x700, 0x5, 0xfffff352}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44c45f87}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}]}, 0x38}}, 0x40091) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r8) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xc4, r10, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044800}, 0x4004001) 02:59:13 executing program 6: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x1f, 0x1b, 0x8, 0x5, "25ffefdbac83017fc7801ac79a62db771ae0b502741c62d22435c2fda60da775"}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/154) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x3, 0x8, 0x9, 0x49, 0x55, 0x3}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x401) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x100000000, 0x1018c0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000200)=""/240) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000300)=""/131) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000003c0)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x103) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000480)) r4 = syz_open_dev$evdev(&(0x7f00000004c0), 0x80000000, 0x40) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000500)=""/13) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000540)=[0x101, 0x9]) bind(r2, &(0x7f0000000580)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x29, 0x1, 0x1, 0x38b9, 0x0, @loopback, @empty, 0x1, 0x20, 0x3, 0x6}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000006c0)={@ipv4={'\x00', '\xff\xff', @local}, 0xc, r5}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000700)=""/152) 02:59:13 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/168, 0xa8, 0x40000002, &(0x7f0000000100)={0xa, 0x4e24, 0x9a00000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xd8e}, 0x1c) r1 = io_uring_setup(0x4c72, &(0x7f0000000140)={0x0, 0xe1b3, 0x10, 0x1, 0xe4, 0x0, r0}) io_uring_setup(0x1e9c, &(0x7f00000001c0)={0x0, 0x11a5, 0x2, 0x2, 0x356, 0x0, r1}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/mdio_bus', 0x44200, 0x131) r3 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in=@multicast2, 0x4e24, 0x7, 0x4e21, 0x0, 0x2, 0xa0, 0x80, 0x62, 0x0, r3}, {0x10001, 0x1, 0x8, 0x1, 0x10001, 0x3, 0x63, 0x3ff}, {0x5, 0x2b8, 0xffffffff, 0x1}, 0x0, 0x6e6bba, 0x2, 0x1, 0x3}, {{@in=@local, 0x4d2, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x2, 0x9, 0xff, 0x2967, 0xffffffc1}}, 0xe8) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e20, 0x7, @mcast1, 0x7fffffff}, {0xa, 0x4e20, 0x3, @mcast2, 0x61}, 0x7ff, [0x2, 0x476f, 0xfffffff9, 0x6419, 0x5, 0x7, 0x8, 0x1]}, 0x5c) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x7, 0x80000) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000440)=""/226) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000540)="900ad6aa4fa0807d50488393f5c3ff2890b84c23c55f4d3e47e85b9f49377a7b23c780eb1f1f2554d25d70c68c03f1e798b4af3f5ff4d4931260310ef8c8349dd423737d15bd7f27243436b70b62d1117881c849d9ffe33fcb5884d1561d2cd598e71771af2d49b5c9315ed2825cedb39cb669f947ab92ea8d00277840453c62a1091ecf3b57942384b65df2336df172429312805844648ecdd952048ebff9ff6b3898b8e6fabee290316be9046c463ce9f0fe19f2cb335b6589956de08f1cdf384e7aef89d21cb0e26b", 0xca, 0x20000001, &(0x7f0000000640)={0xa, 0x4e20, 0xdc3c, @private2, 0x2}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x5d, 0x7, 0xffffff00, 0x44, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x20, 0x6, 0x7f}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x8000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x429}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x51) socketpair(0xa, 0x80000, 0x1, &(0x7f0000000bc0)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000c00)={'icmp\x00'}, &(0x7f0000000c40)=0x1e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'sit0\x00', r6, 0x4, 0x2, 0xff, 0x3, 0x29, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x1}}) [ 107.983540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.992107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.995866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.004983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.012163] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.014589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.052177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.054480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.057188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.062545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.069583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.071658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.109027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.119179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.123456] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.126457] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.128009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.129874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.130877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.132337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.134347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.139904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.143114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.143993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.145564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.146392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.147605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.163982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.173239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.175647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.217774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.223156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.226796] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.229832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.231810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.235169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.240529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.242301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.243998] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.245012] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.257324] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.259496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.262561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.267057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.284396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.286208] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.287470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.297158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.071814] Bluetooth: hci0: command tx timeout [ 110.133179] Bluetooth: hci1: command tx timeout [ 110.196921] Bluetooth: hci3: command tx timeout [ 110.260954] Bluetooth: hci2: command tx timeout [ 110.262344] Bluetooth: hci4: command tx timeout [ 110.324864] Bluetooth: hci5: command tx timeout [ 110.325300] Bluetooth: hci6: command tx timeout [ 110.325536] Bluetooth: hci7: command tx timeout [ 112.117931] Bluetooth: hci0: command tx timeout [ 112.180805] Bluetooth: hci1: command tx timeout [ 112.245802] Bluetooth: hci3: command tx timeout [ 112.310026] Bluetooth: hci4: command tx timeout [ 112.310217] Bluetooth: hci2: command tx timeout [ 112.372898] Bluetooth: hci5: command tx timeout [ 112.373036] Bluetooth: hci7: command tx timeout [ 112.373145] Bluetooth: hci6: command tx timeout [ 114.165798] Bluetooth: hci0: command tx timeout [ 114.230086] Bluetooth: hci1: command tx timeout [ 114.294483] Bluetooth: hci3: command tx timeout [ 114.357880] Bluetooth: hci4: command tx timeout [ 114.358426] Bluetooth: hci2: command tx timeout [ 114.421856] Bluetooth: hci6: command tx timeout [ 114.422880] Bluetooth: hci7: command tx timeout [ 114.422930] Bluetooth: hci5: command tx timeout [ 116.212839] Bluetooth: hci0: command tx timeout [ 116.277751] Bluetooth: hci1: command tx timeout [ 116.343248] Bluetooth: hci3: command tx timeout [ 116.405897] Bluetooth: hci2: command tx timeout [ 116.406053] Bluetooth: hci4: command tx timeout [ 116.468943] Bluetooth: hci5: command tx timeout [ 116.469107] Bluetooth: hci7: command tx timeout [ 116.469202] Bluetooth: hci6: command tx timeout [ 170.179840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.189061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.193537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.201415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.205569] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.212279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.320038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.327237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.356144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.357562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.373905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.395993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.398345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.405035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.415067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.416576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.417347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.424964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.425881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.427299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.430482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.433989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.437473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.449013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.450352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.457082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.462536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.465118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.466079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.473345] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.485225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.488609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.491456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.495429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.502351] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.505311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.511014] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.512214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.529039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.531558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.534964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.543245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.547093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.549230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.551324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.554021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.576955] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.579200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.278810] Bluetooth: hci0: command tx timeout [ 172.532955] Bluetooth: hci3: command tx timeout [ 172.533002] Bluetooth: hci1: command tx timeout [ 172.597014] Bluetooth: hci7: command tx timeout [ 172.597148] Bluetooth: hci6: command tx timeout [ 172.597329] Bluetooth: hci2: command tx timeout [ 172.660780] Bluetooth: hci4: command tx timeout [ 172.661058] Bluetooth: hci5: command tx timeout [ 174.325857] Bluetooth: hci0: command tx timeout [ 174.580913] Bluetooth: hci3: command tx timeout [ 174.593572] Bluetooth: hci1: command tx timeout [ 174.644907] Bluetooth: hci2: command tx timeout [ 174.645022] Bluetooth: hci7: command tx timeout [ 174.645039] Bluetooth: hci6: command tx timeout [ 174.708860] Bluetooth: hci5: command tx timeout [ 174.708900] Bluetooth: hci4: command tx timeout [ 176.372824] Bluetooth: hci0: command tx timeout [ 176.628767] Bluetooth: hci1: command tx timeout [ 176.628795] Bluetooth: hci3: command tx timeout [ 176.692971] Bluetooth: hci2: command tx timeout [ 176.693529] Bluetooth: hci6: command tx timeout [ 176.693622] Bluetooth: hci7: command tx timeout [ 176.756941] Bluetooth: hci4: command tx timeout [ 176.756968] Bluetooth: hci5: command tx timeout [ 178.421972] Bluetooth: hci0: command tx timeout [ 178.677875] Bluetooth: hci1: command tx timeout [ 178.678065] Bluetooth: hci3: command tx timeout [ 178.740833] Bluetooth: hci7: command tx timeout [ 178.741824] Bluetooth: hci2: command tx timeout [ 178.742075] Bluetooth: hci6: command tx timeout [ 178.804837] Bluetooth: hci5: command tx timeout [ 178.804985] Bluetooth: hci4: command tx timeout [ 232.262288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.269428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.273299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.280288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.285395] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.288373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.454245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.468248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.475897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.483900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.485931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.491178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.491615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.498261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.500522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.519111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.521254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.522438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.548379] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.549833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.562817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.578993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.586339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.588999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.603434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.606082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.625151] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.627442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.630306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.637366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.657053] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.657520] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.662915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.668393] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.669482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.674239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.677596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.691334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.695017] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.698710] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.705067] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.712054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.737160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.738613] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 232.739376] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.741868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.744031] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.746080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.357016] Bluetooth: hci0: command tx timeout [ 234.548757] Bluetooth: hci1: command tx timeout [ 234.612728] Bluetooth: hci2: command tx timeout [ 234.741729] Bluetooth: hci4: command tx timeout [ 234.742053] Bluetooth: hci3: command tx timeout [ 234.806710] Bluetooth: hci5: command tx timeout [ 234.806938] Bluetooth: hci6: command tx timeout [ 234.868824] Bluetooth: hci7: command tx timeout [ 236.404841] Bluetooth: hci0: command tx timeout [ 236.597010] Bluetooth: hci1: command tx timeout [ 236.660833] Bluetooth: hci2: command tx timeout [ 236.789190] Bluetooth: hci4: command tx timeout [ 236.789901] Bluetooth: hci3: command tx timeout [ 236.852911] Bluetooth: hci6: command tx timeout [ 236.853093] Bluetooth: hci5: command tx timeout [ 236.916897] Bluetooth: hci7: command tx timeout [ 238.452743] Bluetooth: hci0: command tx timeout [ 238.644767] Bluetooth: hci1: command tx timeout [ 238.708749] Bluetooth: hci2: command tx timeout [ 238.836802] Bluetooth: hci4: command tx timeout [ 238.836901] Bluetooth: hci3: command tx timeout [ 238.900736] Bluetooth: hci5: command tx timeout [ 238.900821] Bluetooth: hci6: command tx timeout [ 238.964767] Bluetooth: hci7: command tx timeout [ 240.501467] Bluetooth: hci0: command tx timeout [ 240.693068] Bluetooth: hci1: command tx timeout [ 240.756775] Bluetooth: hci2: command tx timeout [ 240.884793] Bluetooth: hci3: command tx timeout [ 240.884901] Bluetooth: hci4: command tx timeout [ 240.948735] Bluetooth: hci5: command tx timeout [ 240.948831] Bluetooth: hci6: command tx timeout [ 241.013686] Bluetooth: hci7: command tx timeout [ 294.729889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.732400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.735502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.738303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.741322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.748131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.751967] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.754126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.760108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.767204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.782167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.787085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.798576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.804296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.806909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.807327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.814923] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.819344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.848356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.869207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.871119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.874960] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.877125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.881914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.882340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.885536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.885914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.887897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.888420] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.894366] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.897942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.898309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.899479] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.900535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.902966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.909463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.928285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.928914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.929889] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.935162] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.935542] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.936377] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.936751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.945038] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.945917] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.968944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.976069] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.984854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.884866] Bluetooth: hci2: command tx timeout [ 296.884953] Bluetooth: hci0: command tx timeout [ 296.885106] Bluetooth: hci1: command tx timeout [ 296.949080] Bluetooth: hci4: command tx timeout [ 297.013044] Bluetooth: hci5: command tx timeout [ 297.013360] Bluetooth: hci3: command tx timeout [ 297.013536] Bluetooth: hci6: command tx timeout [ 297.078161] Bluetooth: hci7: command tx timeout [ 298.933907] Bluetooth: hci1: command tx timeout [ 298.933988] Bluetooth: hci2: command tx timeout [ 298.934287] Bluetooth: hci0: command tx timeout [ 298.996915] Bluetooth: hci4: command tx timeout [ 299.060873] Bluetooth: hci3: command tx timeout [ 299.062455] Bluetooth: hci5: command tx timeout [ 299.062592] Bluetooth: hci6: command tx timeout [ 299.124839] Bluetooth: hci7: command tx timeout [ 300.980756] Bluetooth: hci1: command tx timeout [ 300.981755] Bluetooth: hci0: command tx timeout [ 300.981860] Bluetooth: hci2: command tx timeout [ 301.044734] Bluetooth: hci4: command tx timeout [ 301.109019] Bluetooth: hci6: command tx timeout [ 301.110530] Bluetooth: hci5: command tx timeout [ 301.110673] Bluetooth: hci3: command tx timeout [ 301.173834] Bluetooth: hci7: command tx timeout [ 303.028886] Bluetooth: hci2: command tx timeout [ 303.029764] Bluetooth: hci1: command tx timeout [ 303.029914] Bluetooth: hci0: command tx timeout [ 303.092731] Bluetooth: hci4: command tx timeout [ 303.157199] Bluetooth: hci3: command tx timeout [ 303.157237] Bluetooth: hci6: command tx timeout [ 303.157341] Bluetooth: hci5: command tx timeout [ 303.220787] Bluetooth: hci7: command tx timeout [ 356.677545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.683881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.688441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.695324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.701151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.705134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.746035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.748718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.754047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.764491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.767293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.769279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.808861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.820083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.823284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.840218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.844190] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.847006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.888582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.890938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.894069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.907062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.910595] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.918044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.932484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.934956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.938519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.956110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.974829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.980975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.019126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.031074] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.067159] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.075931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.097274] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.105057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.200500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 357.204577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.219973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 357.227137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 357.269045] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.279525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.283570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.304079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.306113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 357.322529] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 357.325242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.326852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.774408] Bluetooth: hci0: command tx timeout [ 358.837769] Bluetooth: hci1: command tx timeout [ 358.966134] Bluetooth: hci2: command tx timeout [ 358.966155] Bluetooth: hci3: command tx timeout [ 359.157711] Bluetooth: hci4: command tx timeout [ 359.221843] Bluetooth: hci6: command tx timeout [ 359.414180] Bluetooth: hci7: command tx timeout [ 359.476881] Bluetooth: hci5: command tx timeout [ 360.820748] Bluetooth: hci0: command tx timeout [ 360.884697] Bluetooth: hci1: command tx timeout [ 361.012816] Bluetooth: hci2: command tx timeout [ 361.012840] Bluetooth: hci3: command tx timeout [ 361.204831] Bluetooth: hci4: command tx timeout [ 361.270853] Bluetooth: hci6: command tx timeout [ 361.462701] Bluetooth: hci7: command tx timeout [ 361.525009] Bluetooth: hci5: command tx timeout [ 362.871698] Bluetooth: hci0: command tx timeout [ 362.933681] Bluetooth: hci1: command tx timeout [ 363.060723] Bluetooth: hci3: command tx timeout [ 363.062683] Bluetooth: hci2: command tx timeout [ 363.253774] Bluetooth: hci4: command tx timeout [ 363.316679] Bluetooth: hci6: command tx timeout [ 363.509669] Bluetooth: hci7: command tx timeout [ 363.572670] Bluetooth: hci5: command tx timeout [ 364.916788] Bluetooth: hci0: command tx timeout [ 364.980820] Bluetooth: hci1: command tx timeout [ 365.109804] Bluetooth: hci2: command tx timeout [ 365.109839] Bluetooth: hci3: command tx timeout [ 365.301057] Bluetooth: hci4: command tx timeout [ 365.364694] Bluetooth: hci6: command tx timeout [ 365.558646] Bluetooth: hci7: command tx timeout [ 365.620858] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 03:04:23 Registers: info registers vcpu 0 RAX=ffffea00008f2940 RBX=ffffea00008f2940 RCX=ffffffff8199b0fc RDX=fffff9400011e529 RSI=0000000000000008 RDI=ffffea00008f2940 RBP=0000000000000000 RSP=ffff8880281b7660 R8 =0000000000000000 R9 =fffff9400011e528 R10=ffffea00008f2947 R11=0000000000000001 R12=8000000023ca5027 R13=00007f42f20e2000 R14=ffff8880281b7ad8 R15=ffff8880281b77c0 RIP=ffffffff8199b0ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005566bb98b4c8 CR3=000000002a000000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff8684cbf4 RBX=0000000000000001 RCX=ffffffff8684cbf4 RDX=dffffc0000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff8880356f7390 RSP=ffff8880356f72c8 R8 =ffffffff8684cbf8 R9 =ffff8880356f7378 R10=000000000003ab7c R11=000000000002419b R12=ffff8880356f7398 R13=ffff8880356f7380 R14=ffff8880356f7470 R15=ffff8880356f7338 RIP=ffffffff813493f1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbab7736540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbab77f38b0 CR3=0000000015ef2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000