Warning: Permanently added '[localhost]:31828' (ECDSA) to the list of known hosts. 2025/05/25 00:29:35 fuzzer started 2025/05/25 00:29:36 dialing manager at localhost:46087 syzkaller login: [ 95.543574] cgroup: Unknown subsys name 'net' [ 95.688988] cgroup: Unknown subsys name 'cpuset' [ 95.739975] cgroup: Unknown subsys name 'rlimit' 2025/05/25 00:29:52 syscalls: 203 2025/05/25 00:29:52 code coverage: enabled 2025/05/25 00:29:52 comparison tracing: enabled 2025/05/25 00:29:52 extra coverage: enabled 2025/05/25 00:29:52 setuid sandbox: enabled 2025/05/25 00:29:52 namespace sandbox: enabled 2025/05/25 00:29:52 Android sandbox: enabled 2025/05/25 00:29:52 fault injection: enabled 2025/05/25 00:29:52 leak checking: enabled 2025/05/25 00:29:52 net packet injection: enabled 2025/05/25 00:29:52 net device setup: enabled 2025/05/25 00:29:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 00:29:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 00:29:52 USB emulation: enabled 2025/05/25 00:29:52 hci packet injection: enabled 2025/05/25 00:29:52 wifi device emulation: enabled 2025/05/25 00:29:52 802.15.4 emulation: enabled 2025/05/25 00:29:52 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 00:29:54 starting 8 fuzzer processes 00:29:54 executing program 0: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x7f, 0x101, 0x4, 0x8, 0xb22, 0x9}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0xea60}, 0x11, 0x37, 0xffffffff}, {{r0, r1/1000+10000}, 0x5, 0x40, 0x1}, {{r2, r3/1000+10000}, 0x1f, 0x1, 0x6}, {{}, 0x5}, {{r4, r5/1000+10000}, 0x16, 0x0, 0xffffffff}, {{0x0, 0xea60}, 0x3, 0xfd5e, 0x40}, {{r6, r7/1000+10000}, 0x11, 0x1000, 0x6}, {{}, 0x1, 0x2, 0xdbc}], 0xc0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000200)=""/113) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x442, 0x0) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000300)=""/183) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd25, 0x800, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008086}, 0x10) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000500)=""/91) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1a9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="abf5d10b7b52"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20010}, 0x1) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f0000000680)=[0x3, 0xbd]) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) syz_io_uring_setup(0x11c, &(0x7f0000000700)={0x0, 0x2460, 0x10, 0x2, 0x373, 0x0, r8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) syz_io_uring_submit(r10, 0x0, &(0x7f0000000880)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000800)={0x400000, 0x131}, &(0x7f0000000840)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8000) clock_nanosleep(0x1, 0x1, &(0x7f00000008c0), &(0x7f0000000900)) 00:29:54 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x9fa70be8c673f1a}, 0x8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x103, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48181) syz_usb_connect$cdc_ncm(0x4, 0x79, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xef, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0xc1, 0x80, 0xa9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "e8806f0e3e3d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1f, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x8001, 0x10}, [@obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1f, 0x6d, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1d, 0x54}}, {{0x9, 0x5, 0x3, 0x2, 0x7ff, 0xa7, 0x5, 0xfb}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x7f, 0x76, 0x3, 0x10}, 0x40, &(0x7f0000000480)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x1ff, 0x1100, 0x4, [0xc000, 0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x3, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x3, 0xf, 0x9, [0xc007, 0xc00f, 0xf0, 0xff0000, 0xfff0]}]}, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x446}}, {0xdd, &(0x7f0000000500)=@string={0xdd, 0x3, "64a87880368aeb657070dc8545196183994906e01745e7685f8682aa6152b43c079543d752d10ca437e6ad81e363abd1e7c376e9424baeaabfb6a876f9386c0024512b12904b338c89c53683bd303696214653b548c9aca36a3ac6c065c86ae4392ddd8a18595be21b97f60e044cc8e5129d570b1e4aec1a57b36ff770d5a5f4a5f7fa3555b6dd61cd63aa7964075ff8e0f487865dcaf5b661339fd543583de8b2ffba84d2322fe5a01e02d1e0e9478ca49e3d6d60956e498ce90ddcbdba751c139b5e91d119c2d093c5bfe66d9637c9805bf164565bb543a12dd0"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1809}}]}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8401}, 0x14) pipe2(&(0x7f0000000880), 0x4800) r5 = accept4(r0, &(0x7f00000008c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000940)=0x80, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7744}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) r7 = timerfd_create(0x4, 0x800) timerfd_gettime(r7, &(0x7f0000000ac0)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x500000e, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x230f, &(0x7f0000000b00)={0x0, 0x972c, 0x0, 0x2, 0x1d0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000c00)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) request_key(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={'syz', 0x1}, &(0x7f0000000cc0)='\x00', 0xfffffffffffffff8) 00:29:54 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5150}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x404c090}, 0x10) r0 = socket(0xb, 0x6, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044004) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2bc, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x284, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x5f}, 0x1f, 0x1f, @device_b, 0xff, 0x8eda, 0x9}}, @fast_bss_trans={0x37, 0x62, {0x1f, 0x2, "30359de9c2fa81f7d9dd3a006f2dcf74", "5f72dbcdb30370c9834c50ee2822e2fdddc18207dc6b067fc645cba1ffb6e588", "f4505497b5968d838c346cdb8b1a79b25bbd3bf1cde3e81ca05b4aa2e924316a", [{0x4, 0x9, "21fdc42f4b25534666"}, {0x1, 0x3, "a084e2"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x0, @device_b, 0x5, "", 0x2, 0x3ff, @device_a, 0x6}}, @perr={0x84, 0xcf, {0x0, 0xd, [@not_ext={{}, @device_b, 0x8, "", 0xf}, @not_ext={{}, @device_b, 0x4, "", 0x10}, @not_ext={{}, @device_b, 0xc9, "", 0x12}, @ext={{}, @broadcast, 0x0, @device_a, 0x1a}, @ext={{}, @broadcast, 0x7, @device_b, 0x30}, @not_ext={{}, @device_a, 0x448, "", 0x1c}, @not_ext={{}, @broadcast, 0x10000, "", 0x1f}, @not_ext={{}, @broadcast, 0xfffffc9f, "", 0x33}, @ext={{}, @device_b, 0x3}, @ext={{}, @device_a, 0x80000001, @device_a, 0x12}, @ext={{}, @broadcast, 0xfffffffb, @device_a, 0xb}, @not_ext={{}, @device_b, 0x3, "", 0xe}, @ext={{}, @broadcast, 0x3, @device_b, 0x8}]}}, @challenge={0x10, 0x1, 0xd}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @measure_req={0x26, 0xe7, {0x91, 0x1f, 0xff, "cea103c21576997070c44fced4079c45898bde3e0561c48a38c0764876396ec515d590a6d61a71739bf4551c8b9760ce47cf9e2486a4f464a43b8736c0c18d4d5d591621541c73ff7b01a813a8025bbcc95b438396642b13ade6a51e1ac3e53748b7daf8ddc0f5a4e7f83273cd2e7a8c037096de5e12d71079ddacab68338dde7447f47cf2b4ca9176f6a824b90b007f7add03c1a7b7962f2308bf02431423916e9ac7e123b5250855865cf02e972ef96564c88274f170416b1fc0bb125133fd0eec52fd0d3a2525f1fce1d379c89c90604eeba0650f5daa4f855dc7b511b66c628cf403"}}, @peer_mgmt={0x75, 0x6, {0x0, 0xa7, @void, @val=0x1c, @void}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x34}}, 0x20004004) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x8000000) r3 = accept4(r0, 0x0, &(0x7f0000000940), 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000009c0)={@private0, 0x0}, &(0x7f0000000a00)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0xc50ade747110e31c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r0, &(0x7f0000000b80)=0x80, &(0x7f0000000bc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x0, 0x80000}, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r6, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r7, 0x20, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 00:29:54 executing program 3: keyctl$negate(0xd, 0x0, 0x7fff, 0xfffffffffffffffa) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @auto=[0x39, 0x2f, 0x10, 0x38, 0x32, 0x2e, 0x37, 0x40]}, 0x10, 0xfffffffffffffffd) r1 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="82cad6eb7179f02c1cc4c447f9ceb627e6c74cd3f14603fc4509e75c32ac3ec6c29208be049a281c98635ded53e0809a6ff360b0d6fd0e59eae6c40e4768b30f215d54d21f494de406185a8982a33fc09e273b4009ee3c9d20", 0x59, 0xffffffffffffffff) keyctl$reject(0x13, r0, 0x0, 0x8, r1) keyctl$search(0xa, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, r1) r2 = request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='syzkaller\x00', r1) keyctl$invalidate(0x15, r2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff9) r4 = request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='-@))\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) keyctl$get_security(0x11, r2, &(0x7f0000000480)=""/39, 0x27) r5 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000540)={0x0, "24902367b0d010cdb4b15a2241bb0ff6e9e97a13d37d430e05fb2f64ca887f73e341faeab7a309cb09dbda94ba6c94a4138f0908e648c2e8fa7e350031603a73", 0x35}, 0x48, 0xfffffffffffffffb) r6 = request_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='^!\xc7}\x00', r5) keyctl$get_keyring_id(0x0, 0x0, 0x800) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f00000006c0)={0x3, 0xd, 0x20, 0x2a, "143610c1448f067759828384f80c14473eb8b24d7c8cdfefe9142a38f9b3f672"}) r8 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x42) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f0000000740)=""/20) r9 = add_key(&(0x7f0000000780)='rxrpc_s\x00', &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)="bfb18809bf02db71c00e982adf4caabe012023803e1673881adf2211d0f2daa2bca71f744549a88ce995ea73aa2bd02a6e507bd8f8d61fd7a041be38112c2b7d41ba7b6625e3820bb07c84c787ee54", 0x4f, r6) keyctl$reject(0x13, r9, 0x7, 0xffffffffffffffc0, 0x0) 00:29:54 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004010) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x80) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000004}, 0x50) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20008050) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) add_key(&(0x7f0000000700)='blacklist\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="f3263df00ab2a724c08b4e5f220611531d68671ca99555eba1abc203c7fd345503668730b505d1a05c9cc6c01fffe8fa48c17e08be759b8321b50fe2f817a11e8c1fbe9e887844001d26968b397e0ab6a4ca840403e47aa31cd8d3a214145321df75e463397e1d67f3cdea634edfe55f9e7240bbe2aa05cbca034acd629936ffd754f24a6d1e0799f8ddb2ecd18a", 0x8e, 0xfffffffffffffffa) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2410001}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xc5a4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x8010) r3 = accept4(r2, &(0x7f0000000940)=@tipc, &(0x7f00000009c0)=0x80, 0xc0000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r2) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5e79}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x10) r5 = accept4(r3, &(0x7f0000000b80)=@ethernet={0x0, @multicast}, &(0x7f0000000c00)=0x80, 0x80800) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}]}, 0x28}, 0x1, 0x0, 0x0, 0x448c0}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x81008d3}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x51b4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4040010) [ 113.639636] audit: type=1400 audit(1748132994.662:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:29:54 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4041, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8344}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa71}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000025}, 0x8034) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x90c0}, 0x4004051) r2 = socket(0x26, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}}, 0x40d8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@caif=@util, &(0x7f00000006c0)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00'}) r5 = accept4(r2, &(0x7f0000000740)=@alg, &(0x7f00000007c0)=0x80, 0x80000) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000900)=@buf={0xfe, &(0x7f0000000800)="9fda92f0662d00a4ef7c8923babd72d2812c46ce38cbf9771e0aa74ceecf90a540606066a92ccd02a8887fe51bd669c12d7bf7db54a00dd36aa4dfd46d11f46ef3b170cb36f64774fa222f28948bfbebc9ca5365c060036d3a97ab3804135e2b2b0b5de8b7cabfbcd9376606db9126625ef2ba68e5d350edc86a9ef5713411658efc98a72d17cb4bd0e9dcaf6c85d2b7e1a5bdc6571bc158c519dcfcd19f0ddcd01b5be2ebc9962c2e3b3c2a3e96375728e267a4ca156ef62b513a5dde3163457922a8121f780b327a7d97a88e86efd4ffcce98f85c34355cbe8b1734df6b0b9686cfc2bd916d72add02805fc7623a60ac6df5c3be55379f6b7d78f2048e"}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x200, r3, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x75}}}}, [@NL80211_ATTR_IE={0x163, 0x2a, [@cf={0x4, 0x6, {0x3, 0x7, 0x2, 0x6}}, @prep={0x83, 0x25, @ext={{}, 0x4, 0xad, @broadcast, 0x3, @device_a, 0x4, 0x8, @broadcast, 0x9}}, @chsw_timing={0x68, 0x4, {0x575f}}, @mesh_chsw={0x76, 0x6, {0x9, 0x7, 0x2, 0x3}}, @measure_req={0x26, 0xef, {0x3, 0x9, 0x9, "c59931f34908e0f7e53e5d03ca4ec5251eecb800aba94f3b756ac7b19a5925c7853b1c00fae2ca78434fee85ab1bbddb07c2d83a06ef4e9250288001b833a8ad95a4043f6979340d1be614a6465421986f3ffd619f3692b93de72a7fb9f4e1862c5940147bf6fca7c9370017dc1386f002dfeba32c9444aa86c59625731aa60853dd308345d0cddd1644b0b6f44f1ba933e7c56d6efb31463cbd31ea2a26aea000a05381925f11c61ee7303f2a2d71fe42b6e134dd031e533019ea15057c510a89970aec0ee9eb915ef52964ab1b5030ba4a84ceb2e4a2187542af0dbb29e45fb7a5bb2189977e192c5ac6da"}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x40, 0x0, @broadcast, 0x4ad0a64b, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x7f, 0x1f, @broadcast, 0x0, 0x1, 0x9}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0x64, 0x2a, [@cf={0x4, 0x6, {0x9, 0x4, 0x4}}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0xd1}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x7, @device_a, 0x80, @device_a, 0x1ff, 0x6, @device_b, 0x1}}, @cf={0x4, 0x6, {0x3, 0x81, 0x0, 0xfffb}}, @mesh_chsw={0x76, 0x6, {0x7, 0x1, 0x1, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x20, 0x40}}, @channel_switch={0x25, 0x3, {0x1, 0x4, 0x12}}, @mesh_chsw={0x76, 0x6, {0x80, 0x7, 0xd, 0x758}}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x200}, 0x1, 0x0, 0x0, 0x1002}, 0x40) connect$802154_dgram(r2, &(0x7f0000000c00)={0x24, @none={0x0, 0xffff}}, 0x14) getrusage(0x0, &(0x7f0000000c40)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r4) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000dc0)={@initdev, 0x0}, &(0x7f0000000e00)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffbff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc4d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x14) getpeername(r5, &(0x7f0000000f40)=@x25, &(0x7f0000000fc0)=0x80) 00:29:54 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/231) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) r6 = socket(0x2, 0x80000, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40002808}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r7 = socket(0x26, 0x3, 0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r8 = accept4(r1, &(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x80, 0x80800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x48}}, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000640)=""/219) r9 = syz_open_dev$sg(&(0x7f0000000740), 0x9abf, 0x412000) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000000780)) ioctl$SG_EMULATED_HOST(r9, 0x2203, &(0x7f0000000900)) r10 = syz_open_dev$sg(&(0x7f0000000940), 0x8001, 0x8081) ioctl$SCSI_IOCTL_DOORUNLOCK(r10, 0x5381) 00:29:54 executing program 7: connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000), 0x14) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x80000) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), 0x4) r1 = socket(0x20, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @long}, 0x14) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/249, 0xf9}], 0x2, &(0x7f0000000480)=""/184, 0xb8}, 0x0, 0x2000, 0x1}, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000680), 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000007c0)={0x7ca60141b5f1bfda, 0xd9, &(0x7f00000006c0)="c5ef1e1840cfc07c3ecbe72917d9654f581e55de994890a2aeedfd76d6703d3ca40dba465b1abc646494e2c54755910e1b3ec243ed90f0e92bae6db6ec25ee502268486695cc784cfe1b61886d9e3fa4f6d59190132f13aef4aa746f72c7b81a3ad0d6442e96328b22bbf4d1d8db63b143d6ca0bb678115f82380b1eec8e0b5d221221350a928079846be0fda9446607f354bd8e45bc337a5efcf175067ba272e47dd6d0e9ce1e667b187c7adbde82a784cdfe34c777dc84d01c622878de4611fa756503991c3f57455929510f18071fa34e79f3cb929762b2"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000940)=""/197) keyctl$update(0x2, 0x0, &(0x7f0000000a40)="83557a1f01444c294285e1d2b8050eb3c6a8a71b0e0b108f2da07da8a664c8114d6970502d7b91590591f08d5eadc5278de24cab08eebbb72539b150e3aebe784a11456e6063a7ff45f6519f9eea61d22c4cf310bebf4a2cf97b7230a218d6cc9518195ebbd5b1d37dd0ee614998a5e25d4c5894b183f8a6cde41e0b5263da", 0x7f) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4001) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xdc, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9d}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 115.100111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.102124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.107585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.113747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.116383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.124202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.129262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.133688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.144775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.147610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.149195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.150649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.155198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.160541] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.165188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.172572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.177382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.179189] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.184632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.188396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.241986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.248507] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.250084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.261477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.277711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.292410] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.298287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.303258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.319155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.323687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.368721] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.387177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.394310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.414820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.419452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.427277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.434618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.440626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.494458] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.500672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.185500] Bluetooth: hci0: command tx timeout [ 117.186731] Bluetooth: hci1: command tx timeout [ 117.249232] Bluetooth: hci3: command tx timeout [ 117.249849] Bluetooth: hci2: command tx timeout [ 117.376979] Bluetooth: hci5: command tx timeout [ 117.377570] Bluetooth: hci4: command tx timeout [ 117.505211] Bluetooth: hci6: command tx timeout [ 117.569022] Bluetooth: hci7: command tx timeout [ 119.233650] Bluetooth: hci1: command tx timeout [ 119.234362] Bluetooth: hci0: command tx timeout [ 119.298313] Bluetooth: hci3: command tx timeout [ 119.298789] Bluetooth: hci2: command tx timeout [ 119.425278] Bluetooth: hci4: command tx timeout [ 119.425780] Bluetooth: hci5: command tx timeout [ 119.554024] Bluetooth: hci6: command tx timeout [ 119.618144] Bluetooth: hci7: command tx timeout [ 121.280994] Bluetooth: hci0: command tx timeout [ 121.281500] Bluetooth: hci1: command tx timeout [ 121.345512] Bluetooth: hci2: command tx timeout [ 121.346016] Bluetooth: hci3: command tx timeout [ 121.473986] Bluetooth: hci5: command tx timeout [ 121.474462] Bluetooth: hci4: command tx timeout [ 121.601913] Bluetooth: hci6: command tx timeout [ 121.664982] Bluetooth: hci7: command tx timeout [ 123.330239] Bluetooth: hci1: command tx timeout [ 123.332276] Bluetooth: hci0: command tx timeout [ 123.393048] Bluetooth: hci3: command tx timeout [ 123.393850] Bluetooth: hci2: command tx timeout [ 123.521120] Bluetooth: hci4: command tx timeout [ 123.521987] Bluetooth: hci5: command tx timeout [ 123.648997] Bluetooth: hci6: command tx timeout [ 123.713089] Bluetooth: hci7: command tx timeout [ 177.810601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.816107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.820636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.825317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.829562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.872414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.875679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.876950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.877310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.881930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.884685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.887653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.893973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.896132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.897569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.111110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.125702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.127485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.131102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.135208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.141404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.145532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.150710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.159593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.159609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.160861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.164307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.166725] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.167717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.174860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.177112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.179676] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.180804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.197154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.210241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.214155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.259321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.260552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.278241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.279389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.905025] Bluetooth: hci0: command tx timeout [ 179.968984] Bluetooth: hci1: command tx timeout [ 179.969724] Bluetooth: hci2: command tx timeout [ 180.225032] Bluetooth: hci3: command tx timeout [ 180.288965] Bluetooth: hci6: command tx timeout [ 180.289567] Bluetooth: hci7: command tx timeout [ 180.353992] Bluetooth: hci5: command tx timeout [ 180.417964] Bluetooth: hci4: command tx timeout [ 181.955092] Bluetooth: hci0: command tx timeout [ 182.018038] Bluetooth: hci1: command tx timeout [ 182.018483] Bluetooth: hci2: command tx timeout [ 182.274218] Bluetooth: hci3: command tx timeout [ 182.337996] Bluetooth: hci7: command tx timeout [ 182.338450] Bluetooth: hci6: command tx timeout [ 182.401014] Bluetooth: hci5: command tx timeout [ 182.465955] Bluetooth: hci4: command tx timeout [ 184.001001] Bluetooth: hci0: command tx timeout [ 184.065025] Bluetooth: hci2: command tx timeout [ 184.065484] Bluetooth: hci1: command tx timeout [ 184.321999] Bluetooth: hci3: command tx timeout [ 184.385451] Bluetooth: hci7: command tx timeout [ 184.387135] Bluetooth: hci6: command tx timeout [ 184.450089] Bluetooth: hci5: command tx timeout [ 184.514941] Bluetooth: hci4: command tx timeout [ 186.049550] Bluetooth: hci0: command tx timeout [ 186.114305] Bluetooth: hci1: command tx timeout [ 186.115645] Bluetooth: hci2: command tx timeout [ 186.369257] Bluetooth: hci3: command tx timeout [ 186.433271] Bluetooth: hci6: command tx timeout [ 186.434243] Bluetooth: hci7: command tx timeout [ 186.498033] Bluetooth: hci5: command tx timeout [ 186.561367] Bluetooth: hci4: command tx timeout [ 240.164261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.168653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.172219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.176756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.189754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.192842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.195705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.205353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.214010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.229486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.352687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.355758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.356854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.359196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.364779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.366412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.369073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.382389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.396388] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.404242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.438272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.445652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.448038] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.451942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.454454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.458048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.460388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.474854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.479215] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.482512] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.487157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.487385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.493614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.508465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.514546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.539378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.542576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.557411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.563770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.594558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.241733] Bluetooth: hci0: command tx timeout [ 242.304996] Bluetooth: hci1: command tx timeout [ 242.434973] Bluetooth: hci3: command tx timeout [ 242.497023] Bluetooth: hci2: command tx timeout [ 242.561296] Bluetooth: hci6: command tx timeout [ 242.561983] Bluetooth: hci5: command tx timeout [ 242.625574] Bluetooth: hci4: command tx timeout [ 242.688965] Bluetooth: hci7: command tx timeout [ 244.290214] Bluetooth: hci0: command tx timeout [ 244.354005] Bluetooth: hci1: command tx timeout [ 244.481136] Bluetooth: hci3: command tx timeout [ 244.545314] Bluetooth: hci2: command tx timeout [ 244.608967] Bluetooth: hci6: command tx timeout [ 244.610190] Bluetooth: hci5: command tx timeout [ 244.673027] Bluetooth: hci4: command tx timeout [ 244.738133] Bluetooth: hci7: command tx timeout [ 246.337505] Bluetooth: hci0: command tx timeout [ 246.402123] Bluetooth: hci1: command tx timeout [ 246.529941] Bluetooth: hci3: command tx timeout [ 246.593358] Bluetooth: hci2: command tx timeout [ 246.656995] Bluetooth: hci5: command tx timeout [ 246.657481] Bluetooth: hci6: command tx timeout [ 246.721032] Bluetooth: hci4: command tx timeout [ 246.785944] Bluetooth: hci7: command tx timeout [ 248.385422] Bluetooth: hci0: command tx timeout [ 248.449302] Bluetooth: hci1: command tx timeout [ 248.577118] Bluetooth: hci3: command tx timeout [ 248.641055] Bluetooth: hci2: command tx timeout [ 248.705496] Bluetooth: hci6: command tx timeout [ 248.706683] Bluetooth: hci5: command tx timeout [ 248.769714] Bluetooth: hci4: command tx timeout [ 248.833088] Bluetooth: hci7: command tx timeout [ 302.562820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.566861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.572749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.583545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.589565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.692129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.698551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.705180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.720719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.724502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.889465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.894434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.905241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.914701] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.923388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.032374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.044581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.059481] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.068240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.072857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.083351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.094594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.101097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.102280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.117115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.122267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.125833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.128921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.136198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.139559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.144221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.183513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.198313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.200578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.212614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.224224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.250266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.268559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.287456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.346639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.641157] Bluetooth: hci0: command tx timeout [ 304.769988] Bluetooth: hci1: command tx timeout [ 305.025279] Bluetooth: hci2: command tx timeout [ 305.282004] Bluetooth: hci4: command tx timeout [ 305.282040] Bluetooth: hci3: command tx timeout [ 305.345957] Bluetooth: hci7: command tx timeout [ 305.409930] Bluetooth: hci5: command tx timeout [ 305.536958] Bluetooth: hci6: command tx timeout [ 306.688970] Bluetooth: hci0: command tx timeout [ 306.816947] Bluetooth: hci1: command tx timeout [ 307.073128] Bluetooth: hci2: command tx timeout [ 307.329930] Bluetooth: hci4: command tx timeout [ 307.329999] Bluetooth: hci3: command tx timeout [ 307.394908] Bluetooth: hci7: command tx timeout [ 307.457949] Bluetooth: hci5: command tx timeout [ 307.585363] Bluetooth: hci6: command tx timeout [ 308.737384] Bluetooth: hci0: command tx timeout [ 308.864998] Bluetooth: hci1: command tx timeout [ 309.123926] Bluetooth: hci2: command tx timeout [ 309.377006] Bluetooth: hci3: command tx timeout [ 309.377497] Bluetooth: hci4: command tx timeout [ 309.441112] Bluetooth: hci7: command tx timeout [ 309.504944] Bluetooth: hci5: command tx timeout [ 309.632972] Bluetooth: hci6: command tx timeout [ 310.784986] Bluetooth: hci0: command tx timeout [ 310.912976] Bluetooth: hci1: command tx timeout [ 311.169091] Bluetooth: hci2: command tx timeout [ 311.426148] Bluetooth: hci4: command tx timeout [ 311.426372] Bluetooth: hci3: command tx timeout [ 311.489209] Bluetooth: hci7: command tx timeout [ 311.552997] Bluetooth: hci5: command tx timeout [ 311.681032] Bluetooth: hci6: command tx timeout [ 364.953094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.958041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.961574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.969510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.975286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.084711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.108497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.112674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.126951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.130780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.150689] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.154153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.162373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.168452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.173032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.277534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.296474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.298956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.329598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.331271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.336536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.343808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.350707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.355384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.379416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.384010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.393409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.397448] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.415973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.428454] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.447148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.467351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.482656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.482845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.492451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.493485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.500572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.520524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.562057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.575565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.041266] Bluetooth: hci0: command tx timeout [ 367.171036] Bluetooth: hci2: command tx timeout [ 367.234336] Bluetooth: hci1: command tx timeout [ 367.425209] Bluetooth: hci3: command tx timeout [ 367.489134] Bluetooth: hci4: command tx timeout [ 367.553158] Bluetooth: hci7: command tx timeout [ 367.554231] Bluetooth: hci5: command tx timeout [ 367.681646] Bluetooth: hci6: command tx timeout [ 369.089061] Bluetooth: hci0: command tx timeout [ 369.217306] Bluetooth: hci2: command tx timeout [ 369.281023] Bluetooth: hci1: command tx timeout [ 369.473129] Bluetooth: hci3: command tx timeout [ 369.537382] Bluetooth: hci4: command tx timeout [ 369.601308] Bluetooth: hci5: command tx timeout [ 369.602102] Bluetooth: hci7: command tx timeout [ 369.729081] Bluetooth: hci6: command tx timeout [ 371.137140] Bluetooth: hci0: command tx timeout [ 371.266211] Bluetooth: hci2: command tx timeout [ 371.329710] Bluetooth: hci1: command tx timeout [ 371.521907] Bluetooth: hci3: command tx timeout [ 371.585027] Bluetooth: hci4: command tx timeout [ 371.648979] Bluetooth: hci7: command tx timeout [ 371.649486] Bluetooth: hci5: command tx timeout [ 371.777431] Bluetooth: hci6: command tx timeout [ 373.184973] Bluetooth: hci0: command tx timeout [ 373.313943] Bluetooth: hci2: command tx timeout [ 373.377188] Bluetooth: hci1: command tx timeout [ 373.570932] Bluetooth: hci3: command tx timeout [ 373.633201] Bluetooth: hci4: command tx timeout [ 373.696969] Bluetooth: hci5: command tx timeout [ 373.697489] Bluetooth: hci7: command tx timeout [ 373.825216] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:35:04 Registers: info registers vcpu 0 RAX=c19e04076c274800 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffffffff85c1d1c0 RSP=ffff88806ce08990 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=00000000000233f7 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce08a78 RIP=ffffffff8151af42 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1b64d4b028 CR3=000000002b5ad000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000a68f07d2 RBX=00000000cce729a5 RCX=000000003990dd1f RDX=000000000000000d RSI=ffff8880244ff5e0 RDI=0000000000000002 RBP=0000000000000001 RSP=ffff8880244ff518 R8 =00000000fcfa7d4c R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000cc0 R14=ffff8880244ff580 R15=000000000000000d RIP=ffffffff825d9b37 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f548178e1f0 CR3=000000000cb69000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000