Warning: Permanently added '[localhost]:38780' (ECDSA) to the list of known hosts. 2025/06/08 06:36:33 fuzzer started 2025/06/08 06:36:34 dialing manager at localhost:40003 syzkaller login: [ 98.079632] cgroup: Unknown subsys name 'net' [ 98.221508] cgroup: Unknown subsys name 'cpuset' [ 98.295181] cgroup: Unknown subsys name 'rlimit' 2025/06/08 06:36:49 syscalls: 200 2025/06/08 06:36:49 code coverage: enabled 2025/06/08 06:36:49 comparison tracing: enabled 2025/06/08 06:36:49 extra coverage: enabled 2025/06/08 06:36:49 setuid sandbox: enabled 2025/06/08 06:36:49 namespace sandbox: enabled 2025/06/08 06:36:49 Android sandbox: enabled 2025/06/08 06:36:49 fault injection: enabled 2025/06/08 06:36:49 leak checking: enabled 2025/06/08 06:36:49 net packet injection: enabled 2025/06/08 06:36:49 net device setup: enabled 2025/06/08 06:36:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 06:36:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 06:36:49 USB emulation: enabled 2025/06/08 06:36:49 hci packet injection: enabled 2025/06/08 06:36:49 wifi device emulation: enabled 2025/06/08 06:36:49 802.15.4 emulation: enabled 2025/06/08 06:36:49 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 06:36:50 starting 8 fuzzer processes 06:36:50 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x2, 0x7f, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x388, 0x2}}) r3 = pidfd_getfd(r0, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x4, 0x4, 0x20, 0x9, 0x0, @remote, @local, 0x40, 0x700, 0x2, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', r2, 0x4, 0x0, 0x1f, 0x0, 0x4, @local, @remote, 0x1, 0x40, 0x3c000000, 0x4}}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0xec, {{0xa, 0x4, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}}}, 0x88) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0xa20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x24004000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x94}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0xc4) r6 = pidfd_getfd(r3, r0, 0x0) r7 = accept4$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14, 0x80000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_devices(r3, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000780)=[r3, r7, r7, r8, r7, r3, r9, r6], 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f00000007c0)={0x0, 0x0, 0x7f}) r10 = syz_open_dev$mouse(&(0x7f0000000800), 0xffffffffffff7fff, 0x484842) openat$cgroup_freezer_state(r10, &(0x7f0000000840), 0x2, 0x0) 06:36:50 executing program 1: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x29, 0x5, 0xfc, 0xc3c1, 0x40, @private2, @local, 0x40, 0x8, 0x40}}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)=""/231, &(0x7f0000000280)=0xe7) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@loopback, r2}, 0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2b, 0x200, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) r3 = fork() sched_rr_get_interval(r3, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/77, 0x4d}], 0x5) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ba2c536f8bce"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8854) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff) fork() socketpair(0x26, 0x4, 0xffffffff, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008082}, 0x810) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000b40), &(0x7f0000000b80)=0x10) r7 = syz_io_uring_setup(0x9e8, &(0x7f0000000bc0)={0x0, 0x9e1d, 0x4, 0x1, 0x287}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000c40), &(0x7f0000000c80)) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f0000000cc0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x40}, 0x1, 0x0, 0x0, 0xebae2d4032c53451}, 0x8001) 06:36:50 executing program 2: r0 = clone3(&(0x7f0000001280)={0x1000000, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, {0x2d}, &(0x7f0000000200)=""/2, 0x2, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) r3 = clone3(&(0x7f0000002440)={0x80004100, &(0x7f0000001300)=0xffffffffffffffff, &(0x7f0000001340)=0x0, &(0x7f0000001380)=0x0, {0xe}, &(0x7f00000013c0)=""/4096, 0x1000, &(0x7f00000023c0)=""/18, &(0x7f0000002400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) clone3(&(0x7f0000002500)={0x4000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3a}, &(0x7f00000000c0)=""/2, 0x2, &(0x7f0000000100), &(0x7f00000024c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], 0x5}, 0x58) waitid$P_PIDFD(0x3, r4, &(0x7f0000002580), 0x8, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x200, 0x0) io_cancel(0x0, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000002640)="06", 0x1, 0x1, 0x0, 0x3}, &(0x7f00000026c0)) io_setup(0x1, &(0x7f0000002700)=0x0) io_submit(r8, 0x1, &(0x7f0000002840)=[&(0x7f0000002800)={0x0, 0x0, 0x0, 0x3, 0x7fff, r7, &(0x7f0000002740)="9a5f12a5bb379e8d9a50d150d2cadac0d3223610882ea26662044e7acd799343929907d4653d667d45e51cc02c3883ceb4836e518cdac4778080809435015ca0786d1c118270acb2d003b7ae157462643e8d0fe52e0ee4c545edb5a40bf35a79ec59f05c97365f25bb88a11726cdd577c99085c21ff11d9320ad1f12c6e59537c64923", 0x83, 0x7, 0x0, 0x1}]) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000002880)=""/216) clone3(&(0x7f0000002b80)={0x100000800, &(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00), {0x38}, &(0x7f0000002a40)=""/11, 0xb, &(0x7f0000002a80)=""/185, &(0x7f0000002b40)=[r6, r2, r5, r0, 0xffffffffffffffff, r3, r3], 0x7}, 0x58) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002c00), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002c40)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002d00)={'syztnl2\x00', &(0x7f0000002c80)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x9, 0x626, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x6, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000002dc0)={'syztnl1\x00', &(0x7f0000002d40)={'sit0\x00', r9, 0x29, 0x3f, 0x7, 0x7fff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x1, 0x1}}) socketpair(0x8, 0x6, 0x3, &(0x7f0000002e00)={0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r10, 0x29, 0x2d, &(0x7f0000002e40)={0x3, {{0xa, 0x4e24, 0x1, @empty, 0x57}}}, 0x88) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000002f00), 0x2, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '.\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x31}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44814}, 0x7d2f236f9594b8f8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003040)='devices.allow\x00', 0x2, 0x0) getrusage(0x1, &(0x7f0000003080)) 06:36:50 executing program 3: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x426, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffa0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb219}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x40004) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x120, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r0, 0x2f, 0x1, 0x7, 0x73, 0x20, @empty, @rand_addr=' \x01\x00', 0x20, 0x8, 0x8, 0x2}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6tnl0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x8c0) r4 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x400000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/mnt\x00') sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r4, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000009c0)={@loopback, 0xfffffffd, 0x2, 0x2, 0x2, 0x4, 0x101}, &(0x7f0000000a00)=0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040008}, 0x24040002) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000cc0)) 06:36:50 executing program 4: io_getevents(0x0, 0xffffffff, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x91, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8, 0x0, 0xe24d, 0x6d}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r0, 0x29, 0x2, 0x6, 0x15, 0x10, @mcast1, @private1, 0x7800, 0x8, 0xffffffff}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0xb09, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x44050) r2 = fork() io_pgetevents(0x0, 0x5, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x7fffffff]}, 0x8}) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040020}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000005c0)={@remote, 0x50}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008000) clone3(&(0x7f0000000a40)={0x1e8049080, &(0x7f0000000780)=0xffffffffffffffff, &(0x7f00000007c0)=0x0, &(0x7f0000000800), {0x3d}, &(0x7f0000000840)=""/204, 0xcc, &(0x7f0000000940)=""/150, &(0x7f0000000a00)=[r2, r2, r2, 0xffffffffffffffff, 0x0], 0x5}, 0x58) r7 = pidfd_open(r6, 0x0) io_setup(0x7ff, &(0x7f0000000ac0)=0x0) r9 = pidfd_getfd(r7, r7, 0x0) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) r11 = eventfd2(0x4, 0x40800) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000e80), 0x1, 0x0) io_submit(r8, 0xa, &(0x7f00000014c0)=[&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x8, 0xd9f, r7, &(0x7f0000000b00)="a155467eab7496666cc2f33263cb3a7059602be6d224f790e55884bf3bb34f0a69301d00bfacfa4e38ec22360c93085fdf5d819f58eae1789bac14b6eb5885a8ab6dccfe", 0x44, 0x9, 0x0, 0x1}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x0, r5, &(0x7f0000000bc0)="814eb437b8d02fbbf1f8a34efdbdcebfeff9c19e88e7c203715f27db529ca7a664340ae93e83e47d007ce42e5b4259a23ade037de0f989b4159c2fdd52fd871c0e904ce0a4cf1a822341aa49a59498764e001f5c146da1e73bf4a4726578a2c2d1046926678ae75d64cc87ca1cb1cc9ae8a0d51d9c495098f72e913f299bbf62cb8419ffa662493f1dfdc482815c83f41999deeeea383d96bd5e8b19616a235617ac0be67bd92eea5876d04796107053efec15c8c69a0c56039b0ed87bf643ead721d6f7", 0xc4, 0x8001, 0x0, 0x0, r9}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000d40)="490ec8e2b42a9138fc407051ba13b2b5140ee5e893a0303bb2d18fde46b78d2ea82d21b97a2a6c0993953eaa30b21c1c126a25346c33624585b33b35887aff6afe91566a902bcbd1bd0fad6260c8c8ad8d96db7a7a0e2ebb75cd252ca39172659e892d8c15b7412919d540a2f8408fe740833f00899673fbf1059b738e60c9ebbce5a86dc15ae03d", 0x88, 0x57520c4a, 0x0, 0x3, r11}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000e40)="d1cd3b07d4d44f", 0x7, 0x2, 0x0, 0x1, r12}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x9, r7, &(0x7f0000000f00)="4b31d2de1c95477fdaf320667465448807a9a16ebbd35eb06246d20bc9adc44312b1ed60e50f770f21c8cece3116c48f3b41ac762ede6c950386a342436d5d3b695159fc854ffd3947d0c99ab1b10b27dba92fec6a5c2575fa5cb0803f8f7c70ac86f65c5e826a08ec87eb5bd5a63bebb75d2764fbb2ee0f1bd5dba82ffaa805da441e580b6045d0eb40eac66395bf416d9b6924d1ecfc120c3289e22b7154d609415f963166ceab0ac6edcc048005b412348658fccaccc88ce5fa88b2b2bf575b36e3f272137c8fcf5ed92c7a92", 0xce, 0xff, 0x0, 0x2}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x1, r5, &(0x7f0000001040)="0b28ffa1736dcc6156eea4fa0517a9f7d8044a9612ccde342030555855ea64514c861b8082ec01881cbb23fefd918c9d82ac3acacc0fc78355e8ce67f73e871c93c9b7d76cc178d54be6060bb43d58acd64836ad1c871b1f0d980c022985f32ceaad", 0x62, 0x100000000, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, &(0x7f0000001140)="7f7a92ee87ad9710e7e722fc36e5f008960557d896dba40d2e99daf5b52dc6e7e40a4f078c6e90fcada3c5f2cec443bb5dd061373c1f340cb88162753b16ed7329b99247507fa7ee1dfbf377b75c79ab8f7045ed73706d835fc54ce00ef566322905e8b5d5bc22cb4f40f757ab881c7b685b2fcb5ae6c1af275b611659bf5e635ed577fec286f1361e878def54d17e2858da1c03f7d3851f86eba3d9e73a3dd22b2c53a5540232030f4ec24c75e3bfefa9fd550e44582670e1a4946880fba4b1678c72002290fa587172b5f4399c1f16fdd0d3792eeeb9fe75be5400edebb1bd619c4d60f875332c8c6d7512", 0xec, 0x2}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x8, 0x100, r5, &(0x7f0000001280)="ef9e08ec268d5793a8f2924373739ef2dfc3f1b14b491950381d192878d6f32624e3359e8ba4b37d091127cfa3012dbba2220283caccf9effddf5fe7da703bc6c5d032aa1942f40534d74e8de07a3a7a0cdb4075ed8814d8816666f130fff191cdb05e6fd48aa79c2d3a9efa30f8f72a8ea5876053", 0x75, 0x25f}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000001340)="283b5f1c20e664643d2c0ff035ba414516de4df85b25ed50ff752b3aa6345f2fc4e1bce4c8ea86e146df8cf238e03b243cd221ced00bbb8b3caaaf88200fb4", 0x3f, 0x8, 0x0, 0x2}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000001400)="69db571e759f7cd09f0ac898e1dab98f841a44b2c6f79b403d30277566f23f120c00f48dd6aa7e4502d95411743893b91d9ae8bef9114c6655022a4d726843910065f03b19c85723e5d11311e8804ea38763098dae2d4ed53b4ff91e3c405a1d77509a6af27d59", 0x67, 0xffffffffffffffc1, 0x0, 0x2}]) [ 114.221465] audit: type=1400 audit(1749364610.839:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:36:50 executing program 5: socketpair(0x2a, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x168}}, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}}, 0x4008014) setsockopt$inet6_mreq(r2, 0x29, 0xf, &(0x7f0000000400)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x8d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x600d860}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5ffb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x57}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020040}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x10) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2628}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4014) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/pid_for_children\x00') r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x111042, 0x0) pidfd_send_signal(r7, 0x22, &(0x7f00000008c0)={0x2e, 0x200, 0xc68}, 0x0) r8 = pidfd_getfd(r2, r5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x0, 0x15, 0x3f, 0x10000, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7, 0x0, 0x4}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}}, 0x4081) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2005850}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe00000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 06:36:50 executing program 6: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb10}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8095}, 0x80) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44884}, 0x4008815) r0 = socket(0xb, 0x6, 0x7) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x811) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000500)={0xfffffff9}, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x64, 0x6, 0x1, @local, @empty, 0x20, 0x1, 0xfffffffa, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x47, 0x20, 0x28, @private1, @local, 0x8000, 0x8000, 0x82, 0x81}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000007c0)={&(0x7f0000000540), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x900, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44050}, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000800)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3b}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000840)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', r5, 0x4, 0x80, 0x8, 0x8, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8000, 0x7, 0xffff, 0x9}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000940)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x52, r6}) socketpair(0x22, 0x2, 0x7, &(0x7f0000000980)) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6tnl0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000b00)={0x0, 0xdd, 0x9}) 06:36:50 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40b00, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x18, 0x1f, 0x1f8, &(0x7f0000000040)="f19019846e8346c36e720b6993d08bc1e6e7f377413c1af322e3a2721165e4e2f3ce51a05a9c448c872646acbe040d1b37ac06b4aa50ef2a3a41e27e9a3ebbba3a61292181a30230978f5340e21f7f8a2063fa6dbb48aadd3449fb23ceac355c76e5ba6f0a15ccf43033b31b8bffab3696b3b23f1f9fe84d0ef53f0d181f210fb6b0fa56c6734c79e31712871c1f5a0ca0fcc809287627f60915c9b088cefaaa0c62009942ecabb14818710ed9b609a50410773078ead14c6be513b0df9caf5d70c7e24057f27f89855b8da59f1cee67a336f2b89d20d1bbdd06585e5c59c7322a2374becf0b93fcaabaf2044e25fc94f0f4f957fa469e95b142a45e22917a460878b20ded3a076e0899b5dcf0879e5253a7e01ee366d85555935608bd92dbea52e8be25115e8d5a37154b965d391c5a44bbd1adfea5ca35b1d994b6836ac52be2cd196b0caf6d5988969a7991bdc74be36a48aa62b624f4a808dbbf0b3cdb5d8340c617bbc3a1514192e7fe50fe5c05195724ae636b7fd4ba80276bf8fd3030636b521a473bfee17f4ba4387874b0773443fa62389d241e5af335d424e4fd94325a4d2dbb5cba7ad71199b0f3466a43d219af268af8ed1d717908e627182399baaf9cd4c6a403c822ea7f65de2ad83064155788bd4a26ba5f3387054d150fb761843d0ce23ca2f5f74a7b0586154ac6ac513863a223f734ccbf72fe87441c58761f37b06242db233ba88801f2198dc5c31021d8a53c71dd494142c7f8b4d964b429793b1305cbc2a1bfbcdc5e7ba9bbd7cdd2a61ddd9bb0c05feddd91ffb7004554aeb8ea9cd2dd7effbe560c05e7a0a0d2136748eabad34e659daf04960cb9dcfdefb62da8799266b3716f9096fec24476b80853d6b6c435e404f96434e150d36af87e4ba8f706fb002de66f061868dc6a20fd6a3665392262ca3e77332eebd85e647c053bcdbbadad3418f3a36e1ef82dc70975663aefc3d235685c28a2e0288c89b93b57ed1d51259594e5d24eb94d6ceebb73aff212be61f89784ff3a8ee15e6b1efb09c40ad171baa425a722afb42a8e66830933ab0ac0fa03d380c05729acea7a504dd4404d3dce4bb591e92069ee50b09a338e47084f58679da176fd8da55078cb25c6f739d6e7e2e4e61c7d9ba7e2165be5c0a9c9fa1e193625aed3de4b8ca1b1b1d9466ab2643b028d93a8f43faca8fe89328420235de1e7864bf01853e001a25059c26d03418e37a3e86060bc1cd31d05fecf26bdbc2e016b8150aa039cca66e130edda807a6232818f260ca518f62415dda9e090b7b0503531fb35f5d52dacd790eecfbddc5cfc3f7f12562008c7332a2f75c4896d3f55cf00f15fbe4483cd17b87b81abd18566b92ebc374c3bec25bb2ba79e79908d911602b2259f8636f67290725d629a700b35776ed2dcc0a4bc1f281efe0746de89223c54"}) socketpair(0x29, 0x6, 0xde1, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000004c0)={0x2, 'caif0\x00'}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000500)) io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x200, r1, &(0x7f0000000540)="5a2416af2ec5a8e5a506ddb1eb801fe60ac82bef0eebdaac6e2ca8244ffa744b0e00392c863d132ea204b0cb394310089d89d9f730d8e8c8a08ee2991aaaab26581e7daab9a70291f14dc75e0b61ea81d47bba5d0293f7f35ca89fe6c3b538d5d2cd495d1e1766abde536c6ce1f209f85b1046d73670adbc962936f8fdd65391456817c6985984dced6085a436b9480a01262fcb86951dc227a7cb5f0093a97ede1d459cf16c5cabb3d528a112a43a214fcd3658c6df8adbd6cb321f3a82f7403482d10bcdb0fc2c47def20cce16ec1eec1ffa920fcb605bbd6b4eea09c8b2927710bfc136c747afba132a", 0xeb, 0x2, 0x0, 0x0, r0}, &(0x7f0000000680)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000006c0)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0xc400, 0x0) r5 = socket(0x15, 0x6, 0x3) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000740)=[r1, r4, r2, 0xffffffffffffffff, r5, r2, r0, r2], 0x8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000780), 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f00000007c0)={{0xc9, 0x2}, 'port1\x00', 0x840456e2545d53c8, 0x80000, 0x401, 0x1, 0x0, 0x3, 0x8, 0x0, 0x1, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x6, 0xc, @loopback, @local, 0x8000, 0x80, 0x400, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x300, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000a80)=r0, 0x1) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001f00)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x129, 0x1}, 0x0, 0x0, 0x2, 0x1f, 0xffffffffffffffc8, 0xa98d, 0x5, 0x5, 0x44f, 0x3c5d}) [ 115.758066] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.763424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.769087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.781796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.786669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.892408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.895353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.899447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.904057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.907741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.910477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.914229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.930433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.941245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.947802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.958281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.960793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.966661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.012771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.024190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.026067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.028994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.034511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.035679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.038253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.040211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.053283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.056269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.057121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.069593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.164534] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.193601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.250286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.286399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.300840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.302441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.312603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.319565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.341765] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.363252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.836802] Bluetooth: hci0: command tx timeout [ 117.963471] Bluetooth: hci1: command tx timeout [ 118.091051] Bluetooth: hci4: command tx timeout [ 118.092006] Bluetooth: hci2: command tx timeout [ 118.155453] Bluetooth: hci3: command tx timeout [ 118.157299] Bluetooth: hci6: command tx timeout [ 118.411334] Bluetooth: hci5: command tx timeout [ 118.539379] Bluetooth: hci7: command tx timeout [ 119.883147] Bluetooth: hci0: command tx timeout [ 120.011332] Bluetooth: hci1: command tx timeout [ 120.139240] Bluetooth: hci2: command tx timeout [ 120.139749] Bluetooth: hci4: command tx timeout [ 120.203334] Bluetooth: hci3: command tx timeout [ 120.203843] Bluetooth: hci6: command tx timeout [ 120.459195] Bluetooth: hci5: command tx timeout [ 120.586960] Bluetooth: hci7: command tx timeout [ 121.931254] Bluetooth: hci0: command tx timeout [ 122.058976] Bluetooth: hci1: command tx timeout [ 122.187176] Bluetooth: hci4: command tx timeout [ 122.187694] Bluetooth: hci2: command tx timeout [ 122.251274] Bluetooth: hci3: command tx timeout [ 122.251783] Bluetooth: hci6: command tx timeout [ 122.507753] Bluetooth: hci5: command tx timeout [ 122.635095] Bluetooth: hci7: command tx timeout [ 123.979224] Bluetooth: hci0: command tx timeout [ 124.107006] Bluetooth: hci1: command tx timeout [ 124.235162] Bluetooth: hci2: command tx timeout [ 124.235689] Bluetooth: hci4: command tx timeout [ 124.300095] Bluetooth: hci6: command tx timeout [ 124.300616] Bluetooth: hci3: command tx timeout [ 124.554967] Bluetooth: hci5: command tx timeout [ 124.683136] Bluetooth: hci7: command tx timeout [ 178.611369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.615283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.622722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.627125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.650457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.655810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.657312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.687562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.695246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.696994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.704838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.731125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.733269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.737930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.742327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.748489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.761606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.771307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.771546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.778447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.783533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.787335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.789339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.795455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.795676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.799258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.817080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.820272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.825422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.828563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.829152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.835733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.841342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.846376] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.855742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.886387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.894278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.936305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.952388] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.962339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.811431] Bluetooth: hci1: command tx timeout [ 180.811655] Bluetooth: hci0: command tx timeout [ 180.875731] Bluetooth: hci4: command tx timeout [ 180.875844] Bluetooth: hci3: command tx timeout [ 180.941190] Bluetooth: hci5: command tx timeout [ 180.941337] Bluetooth: hci2: command tx timeout [ 181.003186] Bluetooth: hci7: command tx timeout [ 181.068550] Bluetooth: hci6: command tx timeout [ 182.859313] Bluetooth: hci0: command tx timeout [ 182.859367] Bluetooth: hci1: command tx timeout [ 182.923332] Bluetooth: hci4: command tx timeout [ 182.924281] Bluetooth: hci3: command tx timeout [ 182.987076] Bluetooth: hci2: command tx timeout [ 182.987190] Bluetooth: hci5: command tx timeout [ 183.051295] Bluetooth: hci7: command tx timeout [ 183.114965] Bluetooth: hci6: command tx timeout [ 184.907109] Bluetooth: hci1: command tx timeout [ 184.907316] Bluetooth: hci0: command tx timeout [ 184.971497] Bluetooth: hci4: command tx timeout [ 184.972033] Bluetooth: hci3: command tx timeout [ 185.035961] Bluetooth: hci5: command tx timeout [ 185.036060] Bluetooth: hci2: command tx timeout [ 185.098930] Bluetooth: hci7: command tx timeout [ 185.163910] Bluetooth: hci6: command tx timeout [ 186.955759] Bluetooth: hci1: command tx timeout [ 186.956654] Bluetooth: hci0: command tx timeout [ 187.019070] Bluetooth: hci4: command tx timeout [ 187.020165] Bluetooth: hci3: command tx timeout [ 187.083017] Bluetooth: hci2: command tx timeout [ 187.083942] Bluetooth: hci5: command tx timeout [ 187.147036] Bluetooth: hci7: command tx timeout [ 187.211053] Bluetooth: hci6: command tx timeout [ 240.487109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.491610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.494266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.508530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.519820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.570413] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.573465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.575698] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.580939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.585001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.674059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.679370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.681690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.689369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.695840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.698661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.708526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.712836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.716365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.734532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.743255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.759470] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.760857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.774387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.782785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.836629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.861901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.869276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.870366] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.872099] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.875336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.895781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.898985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.944345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.952295] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.972946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.981640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.017167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.060620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.064113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.572015] Bluetooth: hci0: command tx timeout [ 242.634975] Bluetooth: hci1: command tx timeout [ 242.763323] Bluetooth: hci3: command tx timeout [ 242.826952] Bluetooth: hci4: command tx timeout [ 242.828024] Bluetooth: hci2: command tx timeout [ 243.020258] Bluetooth: hci7: command tx timeout [ 243.082965] Bluetooth: hci5: command tx timeout [ 243.147212] Bluetooth: hci6: command tx timeout [ 244.619282] Bluetooth: hci0: command tx timeout [ 244.683974] Bluetooth: hci1: command tx timeout [ 244.810969] Bluetooth: hci3: command tx timeout [ 244.876257] Bluetooth: hci2: command tx timeout [ 244.876712] Bluetooth: hci4: command tx timeout [ 245.068015] Bluetooth: hci7: command tx timeout [ 245.131956] Bluetooth: hci5: command tx timeout [ 245.195382] Bluetooth: hci6: command tx timeout [ 246.667003] Bluetooth: hci0: command tx timeout [ 246.731950] Bluetooth: hci1: command tx timeout [ 246.859352] Bluetooth: hci3: command tx timeout [ 246.923258] Bluetooth: hci4: command tx timeout [ 246.923710] Bluetooth: hci2: command tx timeout [ 247.116688] Bluetooth: hci7: command tx timeout [ 247.180328] Bluetooth: hci5: command tx timeout [ 247.242982] Bluetooth: hci6: command tx timeout [ 248.715640] Bluetooth: hci0: command tx timeout [ 248.780017] Bluetooth: hci1: command tx timeout [ 248.907584] Bluetooth: hci3: command tx timeout [ 248.971025] Bluetooth: hci2: command tx timeout [ 248.971870] Bluetooth: hci4: command tx timeout [ 249.163478] Bluetooth: hci7: command tx timeout [ 249.227436] Bluetooth: hci5: command tx timeout [ 249.291004] Bluetooth: hci6: command tx timeout [ 303.260317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.264384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.267171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.276585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.283416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.409101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.412790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.415519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.423216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.427186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.530651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.536431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.543028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.556357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.560583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.606582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.619588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.631685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.667609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.675448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.681617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.690602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.692267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.740461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.761347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.768121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.773390] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.776380] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.784618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.817469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.915830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.920829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.933640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.983158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.002368] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.160805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.165389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.168740] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.189123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.196430] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.355206] Bluetooth: hci0: command tx timeout [ 305.482987] Bluetooth: hci1: command tx timeout [ 305.611336] Bluetooth: hci2: command tx timeout [ 305.803312] Bluetooth: hci3: command tx timeout [ 305.867031] Bluetooth: hci4: command tx timeout [ 305.995186] Bluetooth: hci5: command tx timeout [ 306.507012] Bluetooth: hci6: command tx timeout [ 306.507236] Bluetooth: hci7: command tx timeout [ 307.403082] Bluetooth: hci0: command tx timeout [ 307.530963] Bluetooth: hci1: command tx timeout [ 307.659953] Bluetooth: hci2: command tx timeout [ 307.850995] Bluetooth: hci3: command tx timeout [ 307.916225] Bluetooth: hci4: command tx timeout [ 308.042952] Bluetooth: hci5: command tx timeout [ 308.555050] Bluetooth: hci6: command tx timeout [ 308.556224] Bluetooth: hci7: command tx timeout [ 309.452130] Bluetooth: hci0: command tx timeout [ 309.579229] Bluetooth: hci1: command tx timeout [ 309.706966] Bluetooth: hci2: command tx timeout [ 309.899965] Bluetooth: hci3: command tx timeout [ 309.963964] Bluetooth: hci4: command tx timeout [ 310.091058] Bluetooth: hci5: command tx timeout [ 310.603947] Bluetooth: hci7: command tx timeout [ 310.603980] Bluetooth: hci6: command tx timeout [ 311.499968] Bluetooth: hci0: command tx timeout [ 311.628112] Bluetooth: hci1: command tx timeout [ 311.755004] Bluetooth: hci2: command tx timeout [ 311.948015] Bluetooth: hci3: command tx timeout [ 312.011967] Bluetooth: hci4: command tx timeout [ 312.139172] Bluetooth: hci5: command tx timeout [ 312.651320] Bluetooth: hci6: command tx timeout [ 312.651395] Bluetooth: hci7: command tx timeout [ 365.735791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.742458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.748515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.761274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.770488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.980128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.984499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.987275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.996099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.999966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.052304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.058097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.061727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.073663] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.080261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.084674] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.116244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.145203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.148809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.150578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.157171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.171522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.178702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.182789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.187004] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.189593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.196645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.196704] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.209152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.218715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.234225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.242845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.248528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.257010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.257747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.267104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.276400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.323392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.330621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.345654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.819822] Bluetooth: hci0: command tx timeout [ 368.074952] Bluetooth: hci1: command tx timeout [ 368.203170] Bluetooth: hci2: command tx timeout [ 368.266996] Bluetooth: hci4: command tx timeout [ 368.331921] Bluetooth: hci7: command tx timeout [ 368.332674] Bluetooth: hci3: command tx timeout [ 368.458968] Bluetooth: hci5: command tx timeout [ 368.522982] Bluetooth: hci6: command tx timeout [ 369.867963] Bluetooth: hci0: command tx timeout [ 370.123396] Bluetooth: hci1: command tx timeout [ 370.251112] Bluetooth: hci2: command tx timeout [ 370.315052] Bluetooth: hci4: command tx timeout [ 370.379714] Bluetooth: hci3: command tx timeout [ 370.380921] Bluetooth: hci7: command tx timeout [ 370.507284] Bluetooth: hci5: command tx timeout [ 370.570989] Bluetooth: hci6: command tx timeout [ 371.917020] Bluetooth: hci0: command tx timeout [ 372.171141] Bluetooth: hci1: command tx timeout [ 372.299149] Bluetooth: hci2: command tx timeout [ 372.363068] Bluetooth: hci4: command tx timeout [ 372.426980] Bluetooth: hci3: command tx timeout [ 372.427938] Bluetooth: hci7: command tx timeout [ 372.554967] Bluetooth: hci5: command tx timeout [ 372.619917] Bluetooth: hci6: command tx timeout [ 373.963002] Bluetooth: hci0: command tx timeout [ 374.219533] Bluetooth: hci1: command tx timeout [ 374.348931] Bluetooth: hci2: command tx timeout [ 374.411005] Bluetooth: hci4: command tx timeout [ 374.475074] Bluetooth: hci7: command tx timeout [ 374.475853] Bluetooth: hci3: command tx timeout [ 374.602997] Bluetooth: hci5: command tx timeout [ 374.668685] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:41:52 Registers: info registers vcpu 0 RAX=0000000000000400 RBX=ffff88800d9b8040 RCX=ffffffff81e2bb2a RDX=000000000000000c RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88800c44d7d0 RSP=ffff88802ad7f918 R8 =ffff88800d9b8040 R9 =ffff88800c4b5740 R10=0000000000000400 R11=0000000000000000 R12=0000000000000ff4 R13=0000000000000fb4 R14=0000000000000000 R15=ffff88800d596400 RIP=ffffffff81738af0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f54dcced540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e3a0ebd4c8 CR3=00000000289c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000001100c3d2780 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000110 RSI=ffff88806cf238c0 RDI=0000000000050bb9 RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000e7193 R11=0000000000000001 R12=0000000000050bb9 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080 RIP=ffffffff813276b5 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe122ae689 CR3=000000000ec98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000