Warning: Permanently added '[localhost]:3965' (ECDSA) to the list of known hosts. 2025/06/11 14:22:07 fuzzer started 2025/06/11 14:22:07 dialing manager at localhost:37235 syzkaller login: [ 115.600195] cgroup: Unknown subsys name 'net' [ 115.782289] cgroup: Unknown subsys name 'cpuset' [ 115.829126] cgroup: Unknown subsys name 'rlimit' 2025/06/11 14:22:25 syscalls: 251 2025/06/11 14:22:25 code coverage: enabled 2025/06/11 14:22:25 comparison tracing: enabled 2025/06/11 14:22:25 extra coverage: enabled 2025/06/11 14:22:25 setuid sandbox: enabled 2025/06/11 14:22:25 namespace sandbox: enabled 2025/06/11 14:22:25 Android sandbox: enabled 2025/06/11 14:22:25 fault injection: enabled 2025/06/11 14:22:25 leak checking: enabled 2025/06/11 14:22:25 net packet injection: enabled 2025/06/11 14:22:25 net device setup: enabled 2025/06/11 14:22:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 14:22:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 14:22:25 USB emulation: enabled 2025/06/11 14:22:25 hci packet injection: enabled 2025/06/11 14:22:25 wifi device emulation: enabled 2025/06/11 14:22:25 802.15.4 emulation: enabled 2025/06/11 14:22:25 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 14:22:27 starting 8 fuzzer processes 14:22:27 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd5b8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.pending_reads\x00', 0x8000, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r1, 0x4, 0xfd, 0x40, 0x2, 0x30, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x40, 0x10, 0x7ff, 0x5a}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', r5, 0x2f, 0x5, 0xf7, 0x6, 0x52, @remote, @mcast2, 0x20, 0x20, 0x8001, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', r6, 0x4, 0x1, 0xf8, 0x1000, 0x4, @mcast1, @empty, 0x0, 0x10, 0x7ced, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6_vti0\x00', r7, 0x4, 0x3, 0x76, 0x100, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x10, 0x7, 0x80}}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1204004}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c014) getpeername$packet(r4, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000009c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x64, r0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x848}, 0x20000154) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$eventfd(r8, &(0x7f0000000b80), 0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000bc0), r4) 14:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044014}, 0x40000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x50000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x465}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) syz_io_uring_setup(0x4330, &(0x7f00000006c0)={0x0, 0xe8fc, 0x0, 0x0, 0x347}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000740), &(0x7f0000000780)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r8, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000844}, 0x4040000) r9 = socket(0x1e, 0xa, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x0, 0x1, 0x7, 0x5, 0x5fc3cfc1e7ae4668, @private2, @remote, 0x40, 0x7800, 0x0, 0x200}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r7, 0x300, 0x6, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7c}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0x4e0ee78bdb1653b4) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x24}}, 0x8004000) 14:22:27 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "2a8001415c757892488d2b52d4950bc2263b65b392d592c12152af72448c27fade055eaacd1ca0b3babee580d9960136062c931ae878a534718138a855f5b7fa961205225e526ebe22cb5bee26148827"}, 0xd8) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x28282, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000280)={0x5, 0x0, &(0x7f0000000240)=[r1, r4]}, 0x2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x10000, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x6, 0x9, 0x7, 0x9, 0x40, @private2, @local, 0x700, 0x10, 0xffff511b, 0x7}}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000003c0)=[r3], 0x1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x40002, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0xa2000, 0x0) r11 = syz_io_uring_complete(0x0) r12 = socket(0x2, 0x6, 0x3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x190000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffee15}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) r13 = syz_io_uring_complete(0x0) read$ptp(r13, &(0x7f00000006c0)=""/156, 0x9c) 14:22:27 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x2, 0x5, 0x1, 'queue0\x00', 0x5}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300)="7bff", 0x2, r0}, 0x68) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24048840) r1 = openat$incfs(r0, &(0x7f00000004c0)='.log\x00', 0x101000, 0xb) io_uring_enter(r1, 0x3b56, 0x8e5a, 0x3, &(0x7f0000000500)={[0x100000001]}, 0x8) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000540)='.pending_reads\x00', 0x200, 0x11) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x4c, 0x1, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x10, 0x4, 0x4}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc3}, 0x4000010) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000880)={0x0}, &(0x7f00000008c0)=0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x0, 0x0) r9 = syz_open_procfs$namespace(r5, &(0x7f0000000a80)='ns/uts\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000b00)={0xfffffff9, 0x0, &(0x7f0000000ac0)=[r0, r1, r2, r7, r8, r9, r6, 0xffffffffffffffff]}, 0x8) [ 134.784810] audit: type=1400 audit(1749651747.248:7): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:22:27 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{0x0, 0xb4ef, 0x3f2, 0xffffffffffff0001, 0x6, 0xfffffffffffffffc, 0x100000001, 0x1, 0x7851b0ae, 0x1ff, 0x3, 0x7c68, 0x1000, 0x4600, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x410002, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000180)={r3, r4+60000000}, 0x1, 0x0, 0x1}, 0x1f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e09000/0x4000)=nil, &(0x7f0000db8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000f4a000/0x1000)=nil, &(0x7f0000000200)="efbab9f909e83f6a36f5dc3bee8e47d2bb98a0294ca72134d6d18e96b523988319620d489bda6c686836952a152eac7c8dd373ae4730e59efe8c585ed906b78beb0a9b6368e2c7d561382c20a0d87ee5bae38a35", 0x54, r0}, 0x68) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) pipe(&(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r7}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}]}, 0x84}, 0x1, 0x0, 0x0, 0x400}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000cb5000/0x1000)=nil, &(0x7f0000fd3000/0x1000)=nil, &(0x7f0000fe1000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fd4000/0x4000)=nil, &(0x7f0000ed4000/0x1000)=nil, &(0x7f0000dfe000/0x2000)=nil, &(0x7f0000faf000/0x3000)=nil, &(0x7f0000c76000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d65000/0x4000)=nil, &(0x7f0000000640)="4e2e97b9f277d74404631b757aaf484e0dec184233a603daa4b319e321b9defe531e26e93a6058311378a87e0ba93a4a99988d1f08a8eca8b43b7dc2fe19e7641365", 0x42, r2}, 0x68) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r9) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8db07aa0ee75fbe0}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4040816) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x589}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 14:22:27 executing program 5: modify_ldt$write(0x1, &(0x7f0000000000)={0x5, 0x0, 0x400, 0x1, 0x3, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8000, 0x20001000, 0x400, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x100000, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) msgget$private(0x0, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x9, 0x20000000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x10) clock_gettime(0x4, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x7fffffff, 0x20000800, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) modify_ldt$write(0x1, &(0x7f0000000440)={0x9, 0x20000800, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x1) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x44000) 14:22:27 executing program 6: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200c4080}, 0x44044800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000002c0)={r1, 0x800, 0x3}) r2 = syz_io_uring_complete(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000300)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom0\x00', 0x400, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3f}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x20040814) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000580)={0x6, 0xffff, 0x0, {0x6, 0x6}, 0x8b7c, 0x1ff}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x80, 0xff, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8000, 0x80, 0x59, 0x20}}) r6 = openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0x20000, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000800)={0x84e, 0x2, {0x2, 0x2, 0x7, 0x2}, 0xba33}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0xfe8a7d7344ccc613, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x72}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048811}, 0x400004c) 14:22:27 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48891}, 0x20000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xff, 0x81, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x80, 0x4, 0x7}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x40) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0xbcd7d9b0529276fa, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc014}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x58}}}}}, 0x20}}, 0x28000854) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000880)={0x7, 0x2, 0x3, 0x6, 0x7, 0x7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6tnl0\x00', r1, 0x29, 0x81, 0x1, 0x6a1, 0x40, @remote, @empty, 0x700, 0x20, 0x40, 0x6}}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x89}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48051) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2878}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', r1, 0x29, 0xc9, 0x1f, 0x2, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x700, 0x7800, 0x2, 0x3}}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r6, 0x8, 0x70bd29, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x200088c5}, 0x40800) [ 136.153665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.157950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.159458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.170840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.174049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.284895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.294190] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.296132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.299186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.300069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.301438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.307888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.314269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.315940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.327854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.358246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.370137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.372449] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.380724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.388864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.392037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.399068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.402120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.421296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 136.422869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.430840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.432316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.434137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.435215] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.436553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.441036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.442568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.442972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.453150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.461250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.470831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.474944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.486917] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 136.520153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.554352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.240299] Bluetooth: hci0: command tx timeout [ 138.367613] Bluetooth: hci1: command tx timeout [ 138.433899] Bluetooth: hci2: command tx timeout [ 138.559640] Bluetooth: hci5: command tx timeout [ 138.560004] Bluetooth: hci4: command tx timeout [ 138.560435] Bluetooth: hci3: command tx timeout [ 138.623836] Bluetooth: hci7: command tx timeout [ 138.624805] Bluetooth: hci6: command tx timeout [ 140.287913] Bluetooth: hci0: command tx timeout [ 140.416258] Bluetooth: hci1: command tx timeout [ 140.479599] Bluetooth: hci2: command tx timeout [ 140.609554] Bluetooth: hci3: command tx timeout [ 140.610135] Bluetooth: hci4: command tx timeout [ 140.610243] Bluetooth: hci5: command tx timeout [ 140.672401] Bluetooth: hci7: command tx timeout [ 140.673020] Bluetooth: hci6: command tx timeout [ 142.336543] Bluetooth: hci0: command tx timeout [ 142.463607] Bluetooth: hci1: command tx timeout [ 142.527862] Bluetooth: hci2: command tx timeout [ 142.656014] Bluetooth: hci3: command tx timeout [ 142.657557] Bluetooth: hci5: command tx timeout [ 142.657614] Bluetooth: hci4: command tx timeout [ 142.719894] Bluetooth: hci7: command tx timeout [ 142.720883] Bluetooth: hci6: command tx timeout [ 144.385869] Bluetooth: hci0: command tx timeout [ 144.511630] Bluetooth: hci1: command tx timeout [ 144.575949] Bluetooth: hci2: command tx timeout [ 144.703840] Bluetooth: hci4: command tx timeout [ 144.703985] Bluetooth: hci5: command tx timeout [ 144.704766] Bluetooth: hci3: command tx timeout [ 144.768082] Bluetooth: hci6: command tx timeout [ 144.769571] Bluetooth: hci7: command tx timeout [ 199.186810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.188876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.199438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.206209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.211098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.213288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.216144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.219429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.230277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.236970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.258467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.271314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.279210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.285036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.288646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.293019] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.295474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.314322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.317825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.321969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.330906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.331104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.334836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.338026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.340731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.342791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.346257] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.349376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.350342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.356910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.359696] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.368077] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.369791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.376063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.378613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.416019] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.445981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.454833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 199.462126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.501036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.279621] Bluetooth: hci0: command tx timeout [ 201.345028] Bluetooth: hci1: command tx timeout [ 201.407845] Bluetooth: hci2: command tx timeout [ 201.471627] Bluetooth: hci3: command tx timeout [ 201.535616] Bluetooth: hci7: command tx timeout [ 201.536249] Bluetooth: hci4: command tx timeout [ 201.599625] Bluetooth: hci6: command tx timeout [ 201.599673] Bluetooth: hci5: command tx timeout [ 203.328069] Bluetooth: hci0: command tx timeout [ 203.392514] Bluetooth: hci1: command tx timeout [ 203.455584] Bluetooth: hci2: command tx timeout [ 203.519593] Bluetooth: hci3: command tx timeout [ 203.584575] Bluetooth: hci7: command tx timeout [ 203.584743] Bluetooth: hci4: command tx timeout [ 203.647956] Bluetooth: hci6: command tx timeout [ 203.649677] Bluetooth: hci5: command tx timeout [ 205.377593] Bluetooth: hci0: command tx timeout [ 205.440624] Bluetooth: hci1: command tx timeout [ 205.505844] Bluetooth: hci2: command tx timeout [ 205.569011] Bluetooth: hci3: command tx timeout [ 205.631888] Bluetooth: hci4: command tx timeout [ 205.633530] Bluetooth: hci7: command tx timeout [ 205.697052] Bluetooth: hci6: command tx timeout [ 205.698527] Bluetooth: hci5: command tx timeout [ 207.423620] Bluetooth: hci0: command tx timeout [ 207.488368] Bluetooth: hci1: command tx timeout [ 207.551599] Bluetooth: hci2: command tx timeout [ 207.616308] Bluetooth: hci3: command tx timeout [ 207.680565] Bluetooth: hci7: command tx timeout [ 207.680595] Bluetooth: hci4: command tx timeout [ 207.743872] Bluetooth: hci6: command tx timeout [ 207.745314] Bluetooth: hci5: command tx timeout [ 261.712879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.731464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.732874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.746047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.749807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.030433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.036133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.036142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.039437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.041103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.045847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.050062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.055245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.062973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.074327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.182212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.184682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.186828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.195937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.200880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.285820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.285847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.292358] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.292468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.298858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.306900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.310304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.312345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.313851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.339030] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.358085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.361406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.368949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.370549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.370720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.378750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.391881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.399989] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.462108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.487673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.808895] Bluetooth: hci0: command tx timeout [ 264.127727] Bluetooth: hci2: command tx timeout [ 264.194263] Bluetooth: hci1: command tx timeout [ 264.320005] Bluetooth: hci3: command tx timeout [ 264.448129] Bluetooth: hci4: command tx timeout [ 264.511796] Bluetooth: hci5: command tx timeout [ 264.576248] Bluetooth: hci6: command tx timeout [ 264.576287] Bluetooth: hci7: command tx timeout [ 265.856958] Bluetooth: hci0: command tx timeout [ 266.175610] Bluetooth: hci2: command tx timeout [ 266.239603] Bluetooth: hci1: command tx timeout [ 266.369519] Bluetooth: hci3: command tx timeout [ 266.495762] Bluetooth: hci4: command tx timeout [ 266.559860] Bluetooth: hci5: command tx timeout [ 266.623867] Bluetooth: hci7: command tx timeout [ 266.624353] Bluetooth: hci6: command tx timeout [ 267.904710] Bluetooth: hci0: command tx timeout [ 268.224752] Bluetooth: hci2: command tx timeout [ 268.287865] Bluetooth: hci1: command tx timeout [ 268.418515] Bluetooth: hci3: command tx timeout [ 268.544571] Bluetooth: hci4: command tx timeout [ 268.608628] Bluetooth: hci5: command tx timeout [ 268.671835] Bluetooth: hci7: command tx timeout [ 268.672865] Bluetooth: hci6: command tx timeout [ 269.952570] Bluetooth: hci0: command tx timeout [ 270.271589] Bluetooth: hci2: command tx timeout [ 270.335575] Bluetooth: hci1: command tx timeout [ 270.464899] Bluetooth: hci3: command tx timeout [ 270.591966] Bluetooth: hci4: command tx timeout [ 270.657534] Bluetooth: hci5: command tx timeout [ 270.719579] Bluetooth: hci6: command tx timeout [ 270.720059] Bluetooth: hci7: command tx timeout [ 324.496288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.499350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.503677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.509239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.512287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.632938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.638699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.647962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.652969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.656530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.825084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.828099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.839993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.842167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.851876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.865307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.871224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.884614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.885950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.904422] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.957439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.977181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.987334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.987427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.998312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.002985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.005635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.010678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.012675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.019257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.024384] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.027710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.032134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.038856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.075379] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.079195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.082409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.087285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.090436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.099845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.591702] Bluetooth: hci0: command tx timeout [ 326.720688] Bluetooth: hci1: command tx timeout [ 326.976955] Bluetooth: hci2: command tx timeout [ 326.977905] Bluetooth: hci3: command tx timeout [ 327.103730] Bluetooth: hci5: command tx timeout [ 327.104893] Bluetooth: hci7: command tx timeout [ 327.105694] Bluetooth: hci6: command tx timeout [ 327.167625] Bluetooth: hci4: command tx timeout [ 328.640212] Bluetooth: hci0: command tx timeout [ 328.767670] Bluetooth: hci1: command tx timeout [ 329.024955] Bluetooth: hci2: command tx timeout [ 329.025447] Bluetooth: hci3: command tx timeout [ 329.152700] Bluetooth: hci7: command tx timeout [ 329.153179] Bluetooth: hci6: command tx timeout [ 329.154063] Bluetooth: hci5: command tx timeout [ 329.215874] Bluetooth: hci4: command tx timeout [ 330.688003] Bluetooth: hci0: command tx timeout [ 330.815624] Bluetooth: hci1: command tx timeout [ 331.071632] Bluetooth: hci3: command tx timeout [ 331.072145] Bluetooth: hci2: command tx timeout [ 331.199752] Bluetooth: hci5: command tx timeout [ 331.200013] Bluetooth: hci6: command tx timeout [ 331.200294] Bluetooth: hci7: command tx timeout [ 331.264571] Bluetooth: hci4: command tx timeout [ 332.735754] Bluetooth: hci0: command tx timeout [ 332.863626] Bluetooth: hci1: command tx timeout [ 333.119605] Bluetooth: hci2: command tx timeout [ 333.119629] Bluetooth: hci3: command tx timeout [ 333.248155] Bluetooth: hci6: command tx timeout [ 333.248676] Bluetooth: hci5: command tx timeout [ 333.249347] Bluetooth: hci7: command tx timeout [ 333.311758] Bluetooth: hci4: command tx timeout [ 387.546221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.550318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.564681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.588802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.593606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.925119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.939781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.942354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.944399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.947406] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.950954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.959653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.965758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.968731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.982014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.995058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.996448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.998099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.002745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.012822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.085113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.115907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.169812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.177136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.189920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.192359] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.193742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.198664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.211045] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.215350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.219279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.221909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.275662] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.290921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.299858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.303820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.322083] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.325969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.403023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.408835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.632606] Bluetooth: hci0: command tx timeout [ 390.016609] Bluetooth: hci1: command tx timeout [ 390.080070] Bluetooth: hci2: command tx timeout [ 390.081040] Bluetooth: hci3: command tx timeout [ 390.399883] Bluetooth: hci7: command tx timeout [ 390.399969] Bluetooth: hci5: command tx timeout [ 390.528656] Bluetooth: hci6: command tx timeout [ 390.591678] Bluetooth: hci4: command tx timeout [ 391.682082] Bluetooth: hci0: command tx timeout [ 392.064870] Bluetooth: hci1: command tx timeout [ 392.127691] Bluetooth: hci2: command tx timeout [ 392.128943] Bluetooth: hci3: command tx timeout [ 392.447797] Bluetooth: hci7: command tx timeout [ 392.448045] Bluetooth: hci5: command tx timeout [ 392.576517] Bluetooth: hci6: command tx timeout [ 392.639568] Bluetooth: hci4: command tx timeout [ 393.727851] Bluetooth: hci0: command tx timeout [ 394.111857] Bluetooth: hci1: command tx timeout [ 394.175848] Bluetooth: hci2: command tx timeout [ 394.178841] Bluetooth: hci3: command tx timeout [ 394.495591] Bluetooth: hci5: command tx timeout [ 394.495606] Bluetooth: hci7: command tx timeout [ 394.623618] Bluetooth: hci6: command tx timeout [ 394.689527] Bluetooth: hci4: command tx timeout [ 395.775725] Bluetooth: hci0: command tx timeout [ 396.159592] Bluetooth: hci1: command tx timeout [ 396.223613] Bluetooth: hci3: command tx timeout [ 396.223626] Bluetooth: hci2: command tx timeout [ 396.544222] Bluetooth: hci7: command tx timeout [ 396.545769] Bluetooth: hci5: command tx timeout [ 396.671706] Bluetooth: hci6: command tx timeout [ 396.735816] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 14:27:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81368e73 RDX=ffff888031553700 RSI=0000000000000800 RDI=0000000000000006 RBP=000000000e124c10 RSP=ffff888034f6f9d8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000080000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000800 R14=0000000000000000 R15=ffff888008c7f140 RIP=ffffffff81368eb5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561a000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fabe01636f4 CR3=0000000023734000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fabe017247000007fabe0171f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81a13654 RDX=ffff88801537b700 RSI=ffffffff81a13661 RDI=0000000000000005 RBP=ffffea0001aea0c0 RSP=ffff88802ae7faa0 R8 =00007f69e1588000 R9 =fffff9400035d418 R10=0000000000000001 R11=0000000000000001 R12=ffffea0001aea0c0 R13=000000000006ba83 R14=000000000000782d R15=ffffea0001aea0d8 RIP=ffffffff81a13661 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f69e1160540 00000000 00000000 GS =0000 ffff8880e571a000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f69e158bec3 CR3=000000000e1f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000