Warning: Permanently added '[localhost]:26384' (ECDSA) to the list of known hosts. 2025/06/17 11:38:59 fuzzer started 2025/06/17 11:39:00 dialing manager at localhost:32817 syzkaller login: [ 110.026851] cgroup: Unknown subsys name 'net' [ 110.254449] cgroup: Unknown subsys name 'cpuset' [ 110.282775] cgroup: Unknown subsys name 'rlimit' 2025/06/17 11:39:18 syscalls: 200 2025/06/17 11:39:18 code coverage: enabled 2025/06/17 11:39:18 comparison tracing: enabled 2025/06/17 11:39:18 extra coverage: enabled 2025/06/17 11:39:18 setuid sandbox: enabled 2025/06/17 11:39:18 namespace sandbox: enabled 2025/06/17 11:39:18 Android sandbox: enabled 2025/06/17 11:39:18 fault injection: enabled 2025/06/17 11:39:18 leak checking: enabled 2025/06/17 11:39:18 net packet injection: enabled 2025/06/17 11:39:18 net device setup: enabled 2025/06/17 11:39:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/17 11:39:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/17 11:39:18 USB emulation: enabled 2025/06/17 11:39:18 hci packet injection: enabled 2025/06/17 11:39:18 wifi device emulation: enabled 2025/06/17 11:39:18 802.15.4 emulation: enabled 2025/06/17 11:39:18 fetching corpus: 0, signal 0/0 (executing program) 2025/06/17 11:39:19 starting 8 fuzzer processes 11:39:19 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x24}}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004050}, 0x24000000) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x1f, 0x2, 0x3f, 0x5a, 0x0, 0x3, 0x90224, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffdb6b, 0x0, @perf_config_ext={0x7fffffff, 0x2}, 0x181, 0x9, 0x81, 0x1, 0x1, 0x101, 0xbbc, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4c040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xb81cbeaea2cda06a}, 0x0) geteuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe4, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x800) io_setup(0x9, &(0x7f0000000b40)=0x0) io_cancel(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r1, &(0x7f0000000b80)="daeb74fa4a77f1d596049aa7", 0xc, 0x6}, &(0x7f0000000c00)) io_setup(0x1, &(0x7f0000000c40)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) 11:39:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80000001, 0x200800) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/16) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x1, 0x204e00) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/78) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x801, 0x40400) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000180)) ioctl$RTC_PIE_ON(r0, 0x7005) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000200)={{0x2, 0x40}, 'port1\x00', 0x44, 0x41000, 0x2, 0x4f, 0x100, 0x5, 0x2, 0x0, 0x3, 0x7}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000300)=""/77) read$usbmon(r2, &(0x7f0000000380)=""/250, 0xfa) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000480)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x305, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000005c0)) io_uring_setup(0x68b4, &(0x7f0000000600)={0x0, 0xec4b, 0x10, 0x2, 0x15a}) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000680)) 11:39:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2091}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000026c0)=0x7ff, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000002700), 0x8, 0x200942) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000002740)={0x57, 0x0, 0x7, {0x3f, 0x46e}, {0x8000, 0x5}, @rumble={0xd8a}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000027c0)={&(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0], 0x4}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x28, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002980), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000029c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x34, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002ac0), 0x149600, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000002b40)={&(0x7f0000002b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup/syz1\x00', 0x200002, 0x0) write$bt_hci(r6, &(0x7f0000002bc0)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@none, 0x400, 0x8, 0x6, 0x0, 0xb5}}}, 0x19) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000002c00)={0x3, 0x6, 0x200, 0x5, 0x4, 0x1ff}) openat$cgroup_freezer_state(r6, &(0x7f0000002c80), 0x2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}}, 0x48000) syz_genetlink_get_family_id$batadv(&(0x7f0000002dc0), r1) 11:39:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x100, 0x3, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x401, 0x5, 0x1, 0x0, 0x7a2e, 0x80000001}) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xadad2549177058ea) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) io_setup(0xcdf, &(0x7f0000000180)=0x0) io_getevents(r2, 0x67, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000240)={0x77359400}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x101000) syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x56280) r4 = syz_open_dev$loop(&(0x7f0000000300), 0xfffffffffffffffe, 0x400000) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000340)) io_setup(0x9, &(0x7f0000000400)=0x0) io_getevents(r5, 0x5, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x989680}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000500)={0x200, 0x6ca, 0x7ff, 0x3, 0x6}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) io_cancel(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000580)="7f453e101f531ca96668ca1ea2d7ea196e320d9aed275d186d491f1e86", 0x1d, 0x7ff, 0x0, 0x1}, &(0x7f0000000600)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x4102c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000680)={0x1000000, 0x0, {0x1, 0x2, 0xffff, 0x0, 0x4}, 0x80000000}) io_setup(0x7f, &(0x7f0000000700)=0x0) io_destroy(r7) 11:39:19 executing program 4: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x20}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x3c}}, 0x400c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c0}, 0x400c044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x94, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa8, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x32c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xa8}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x20000004) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000dc0)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000001000)={&(0x7f0000000f00), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7918aab51fe9c98b}, 0x8000) [ 129.697651] audit: type=1400 audit(1750160359.889:7): avc: denied { execmem } for pid=281 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:39:19 executing program 5: ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffff7, 0x200000) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x7fffffff) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x8, "33d3d79ca77850a4ec8c98b384330c9ef3e10175d54686104dd01e583284a1"}}}, 0x24) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x412080) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0xfff, 0x4840) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=""/49, 0x31}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000280)={0x52, 0x8, 0x3429, {0xfc01, 0x6}, {0x7}, @period={0x5d, 0x8, 0xac4, 0x7f, 0x8, {0x2, 0x3, 0x4, 0x3ff}, 0x3, &(0x7f0000000240)=[0x2, 0x4, 0x0]}}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r3 = syz_open_dev$loop(&(0x7f0000000300), 0xffff, 0x0) r4 = syz_io_uring_setup(0x347a, &(0x7f0000000340)={0x0, 0xb6f8, 0x4, 0x1, 0x11f, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) socketpair(0x22, 0x1, 0xf8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2a, 0x3, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=[r3, 0xffffffffffffffff, r2, r4, r5, r6, r2]}, 0x7) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000540)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x1}}}, 0x5) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r0, 0x1) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000005c0)=""/122) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) 11:39:19 executing program 6: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x24048001) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x138, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xb8387855afa75a2f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xc120}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8890}, 0x20008000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4040801) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0x40000, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x71a0713630646713}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x48010) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000b40)={0x0, @isdn={0x22, 0xfa, 0x86, 0x1, 0x5}, @llc={0x1a, 0x336, 0x0, 0x10, 0x7, 0x5b}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x401, 0x0, 0x0, 0x0, 0x61c, &(0x7f0000000b00)='vlan0\x00', 0x5, 0x428, 0x3}) r5 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x800, 0x94000) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000c00)=0x7) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x90, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x801) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x20000010) 11:39:19 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7c, 0x4100) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r3, 0x2, r1, 0x8, 0x80000}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000380)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x6) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) socketpair(0x11, 0x5, 0x800, &(0x7f00000004c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x8080) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) [ 130.989394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.991396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.993353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.000401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.005501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.047582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.050179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.053498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.059797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.063195] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.130300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.133407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.145252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.153348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.162360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.180758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.195330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.196952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.234622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.242616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.259850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.269291] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.271771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.273826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.284246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.292394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.304808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.309585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.313610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.316842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.323208] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.328793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.335379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.335562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.353289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.354859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.372790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.374652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.380285] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.382317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.076406] Bluetooth: hci0: command tx timeout [ 133.140322] Bluetooth: hci1: command tx timeout [ 133.203118] Bluetooth: hci2: command tx timeout [ 133.332122] Bluetooth: hci3: command tx timeout [ 133.396051] Bluetooth: hci4: command tx timeout [ 133.396162] Bluetooth: hci6: command tx timeout [ 133.459301] Bluetooth: hci5: command tx timeout [ 133.459353] Bluetooth: hci7: command tx timeout [ 135.124139] Bluetooth: hci0: command tx timeout [ 135.187049] Bluetooth: hci1: command tx timeout [ 135.251174] Bluetooth: hci2: command tx timeout [ 135.381044] Bluetooth: hci3: command tx timeout [ 135.443119] Bluetooth: hci4: command tx timeout [ 135.443171] Bluetooth: hci6: command tx timeout [ 135.509367] Bluetooth: hci5: command tx timeout [ 135.509832] Bluetooth: hci7: command tx timeout [ 137.171194] Bluetooth: hci0: command tx timeout [ 137.235791] Bluetooth: hci1: command tx timeout [ 137.300189] Bluetooth: hci2: command tx timeout [ 137.427429] Bluetooth: hci3: command tx timeout [ 137.491188] Bluetooth: hci6: command tx timeout [ 137.492849] Bluetooth: hci4: command tx timeout [ 137.555580] Bluetooth: hci7: command tx timeout [ 137.555615] Bluetooth: hci5: command tx timeout [ 139.220114] Bluetooth: hci0: command tx timeout [ 139.284451] Bluetooth: hci1: command tx timeout [ 139.347066] Bluetooth: hci2: command tx timeout [ 139.476138] Bluetooth: hci3: command tx timeout [ 139.540083] Bluetooth: hci4: command tx timeout [ 139.540546] Bluetooth: hci6: command tx timeout [ 139.603090] Bluetooth: hci5: command tx timeout [ 139.604115] Bluetooth: hci7: command tx timeout [ 194.024752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.029708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.031449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.042614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.062422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.216915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.221298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.222687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.227791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.235604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.315862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.317192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.321640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.323779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.327382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.328326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.329761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.334523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.335778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.340130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.347404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.348335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.351241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.361372] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.365018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.367455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.370309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.379463] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.381518] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.385762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.388086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.389553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.395674] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.414731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.420897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.423579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.487490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.503313] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.534594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.542341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.115141] Bluetooth: hci0: command tx timeout [ 196.308273] Bluetooth: hci1: command tx timeout [ 196.371435] Bluetooth: hci5: command tx timeout [ 196.435149] Bluetooth: hci3: command tx timeout [ 196.499389] Bluetooth: hci6: command tx timeout [ 196.499498] Bluetooth: hci2: command tx timeout [ 196.501337] Bluetooth: hci4: command tx timeout [ 196.627081] Bluetooth: hci7: command tx timeout [ 198.166400] Bluetooth: hci0: command tx timeout [ 198.355427] Bluetooth: hci1: command tx timeout [ 198.420287] Bluetooth: hci5: command tx timeout [ 198.483452] Bluetooth: hci3: command tx timeout [ 198.547086] Bluetooth: hci2: command tx timeout [ 198.548307] Bluetooth: hci4: command tx timeout [ 198.548774] Bluetooth: hci6: command tx timeout [ 198.675555] Bluetooth: hci7: command tx timeout [ 200.211520] Bluetooth: hci0: command tx timeout [ 200.405015] Bluetooth: hci1: command tx timeout [ 200.467087] Bluetooth: hci5: command tx timeout [ 200.532075] Bluetooth: hci3: command tx timeout [ 200.596154] Bluetooth: hci6: command tx timeout [ 200.597780] Bluetooth: hci4: command tx timeout [ 200.599245] Bluetooth: hci2: command tx timeout [ 200.724406] Bluetooth: hci7: command tx timeout [ 202.259103] Bluetooth: hci0: command tx timeout [ 202.451237] Bluetooth: hci1: command tx timeout [ 202.516515] Bluetooth: hci5: command tx timeout [ 202.580102] Bluetooth: hci3: command tx timeout [ 202.645051] Bluetooth: hci6: command tx timeout [ 202.645536] Bluetooth: hci4: command tx timeout [ 202.646056] Bluetooth: hci2: command tx timeout [ 202.771181] Bluetooth: hci7: command tx timeout [ 256.625856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.660304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.667172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.673737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.677891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.927460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.931116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.934339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.941157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.946359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.011862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.017376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.031467] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.045398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.082693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.087962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.092839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.098178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.099706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.131194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.133494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.136526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.139809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.147446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.151351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.156905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.162395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.166841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.176337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.195217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.331891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.349681] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.350861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.355652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.361316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.367503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.398519] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.403143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.411145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.416514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.771932] Bluetooth: hci0: command tx timeout [ 258.966725] Bluetooth: hci1: command tx timeout [ 259.219547] Bluetooth: hci2: command tx timeout [ 259.220172] Bluetooth: hci4: command tx timeout [ 259.347087] Bluetooth: hci5: command tx timeout [ 259.347175] Bluetooth: hci3: command tx timeout [ 259.539408] Bluetooth: hci6: command tx timeout [ 259.603057] Bluetooth: hci7: command tx timeout [ 260.819099] Bluetooth: hci0: command tx timeout [ 261.011210] Bluetooth: hci1: command tx timeout [ 261.268433] Bluetooth: hci2: command tx timeout [ 261.268475] Bluetooth: hci4: command tx timeout [ 261.395433] Bluetooth: hci3: command tx timeout [ 261.396315] Bluetooth: hci5: command tx timeout [ 261.587495] Bluetooth: hci6: command tx timeout [ 261.651844] Bluetooth: hci7: command tx timeout [ 262.867065] Bluetooth: hci0: command tx timeout [ 263.059167] Bluetooth: hci1: command tx timeout [ 263.316036] Bluetooth: hci4: command tx timeout [ 263.316533] Bluetooth: hci2: command tx timeout [ 263.443079] Bluetooth: hci5: command tx timeout [ 263.443131] Bluetooth: hci3: command tx timeout [ 263.635262] Bluetooth: hci6: command tx timeout [ 263.700129] Bluetooth: hci7: command tx timeout [ 264.917052] Bluetooth: hci0: command tx timeout [ 265.107053] Bluetooth: hci1: command tx timeout [ 265.363189] Bluetooth: hci2: command tx timeout [ 265.363627] Bluetooth: hci4: command tx timeout [ 265.491068] Bluetooth: hci5: command tx timeout [ 265.491288] Bluetooth: hci3: command tx timeout [ 265.684656] Bluetooth: hci6: command tx timeout [ 265.748168] Bluetooth: hci7: command tx timeout [ 319.408694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.413288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.415665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.423360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.426620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.594157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.603295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.608730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.616735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.620683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.851364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.861691] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.865623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.875668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.882408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.929646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.942413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.954956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.962521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.965229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.970166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.973210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.974622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.015607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.019434] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.024796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.029954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.035287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.038232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.041508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.067686] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.079472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.088753] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.130323] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.140414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.205872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.258491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.298580] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.318513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.334359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.492391] Bluetooth: hci0: command tx timeout [ 321.684112] Bluetooth: hci1: command tx timeout [ 321.940318] Bluetooth: hci2: command tx timeout [ 322.067090] Bluetooth: hci5: command tx timeout [ 322.068902] Bluetooth: hci3: command tx timeout [ 322.131215] Bluetooth: hci4: command tx timeout [ 322.197035] Bluetooth: hci7: command tx timeout [ 322.516379] Bluetooth: hci6: command tx timeout [ 323.539348] Bluetooth: hci0: command tx timeout [ 323.732063] Bluetooth: hci1: command tx timeout [ 323.988263] Bluetooth: hci2: command tx timeout [ 324.118045] Bluetooth: hci5: command tx timeout [ 324.119654] Bluetooth: hci3: command tx timeout [ 324.179397] Bluetooth: hci4: command tx timeout [ 324.244166] Bluetooth: hci7: command tx timeout [ 324.564261] Bluetooth: hci6: command tx timeout [ 325.588425] Bluetooth: hci0: command tx timeout [ 325.780048] Bluetooth: hci1: command tx timeout [ 326.035368] Bluetooth: hci2: command tx timeout [ 326.163399] Bluetooth: hci3: command tx timeout [ 326.165151] Bluetooth: hci5: command tx timeout [ 326.228124] Bluetooth: hci4: command tx timeout [ 326.292451] Bluetooth: hci7: command tx timeout [ 326.611053] Bluetooth: hci6: command tx timeout [ 327.636082] Bluetooth: hci0: command tx timeout [ 327.827818] Bluetooth: hci1: command tx timeout [ 328.084056] Bluetooth: hci2: command tx timeout [ 328.212267] Bluetooth: hci3: command tx timeout [ 328.212836] Bluetooth: hci5: command tx timeout [ 328.276329] Bluetooth: hci4: command tx timeout [ 328.339296] Bluetooth: hci7: command tx timeout [ 328.660088] Bluetooth: hci6: command tx timeout [ 382.210334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.215536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.223341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.233803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.235916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.534014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.535459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.539885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.547151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.551189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.575608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.581417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.585391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.591423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.595472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.639538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.660600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.664401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.672657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.682168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.722500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.723676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.727689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.728813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.729714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.731861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.737223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.738897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.743114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.744588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.745555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.748294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.754786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.765451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.768399] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.771125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.773659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.775389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.797197] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.799863] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.275134] Bluetooth: hci0: command tx timeout [ 384.660194] Bluetooth: hci2: command tx timeout [ 384.662172] Bluetooth: hci1: command tx timeout [ 384.723280] Bluetooth: hci3: command tx timeout [ 384.787527] Bluetooth: hci4: command tx timeout [ 384.788157] Bluetooth: hci6: command tx timeout [ 384.851174] Bluetooth: hci7: command tx timeout [ 384.851756] Bluetooth: hci5: command tx timeout [ 386.323526] Bluetooth: hci0: command tx timeout [ 386.707365] Bluetooth: hci1: command tx timeout [ 386.707894] Bluetooth: hci2: command tx timeout [ 386.771542] Bluetooth: hci3: command tx timeout [ 386.835473] Bluetooth: hci6: command tx timeout [ 386.835947] Bluetooth: hci4: command tx timeout [ 386.900420] Bluetooth: hci5: command tx timeout [ 386.900899] Bluetooth: hci7: command tx timeout [ 388.371360] Bluetooth: hci0: command tx timeout [ 388.756119] Bluetooth: hci2: command tx timeout [ 388.756657] Bluetooth: hci1: command tx timeout [ 388.819059] Bluetooth: hci3: command tx timeout [ 388.883819] Bluetooth: hci6: command tx timeout [ 388.885589] Bluetooth: hci4: command tx timeout [ 388.947140] Bluetooth: hci7: command tx timeout [ 388.947674] Bluetooth: hci5: command tx timeout [ 390.419144] Bluetooth: hci0: command tx timeout [ 390.803144] Bluetooth: hci1: command tx timeout [ 390.803671] Bluetooth: hci2: command tx timeout [ 390.868051] Bluetooth: hci3: command tx timeout [ 390.931150] Bluetooth: hci4: command tx timeout [ 390.931629] Bluetooth: hci6: command tx timeout [ 390.995118] Bluetooth: hci5: command tx timeout [ 390.995598] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:44:29 Registers: info registers vcpu 0 RAX=ffff88800e77dc80 RBX=0000000000000255 RCX=dd865ac9ae4bf61f RDX=ffff888030b68000 RSI=ffffffff819b76c6 RDI=ffff888030b683fc RBP=ffff8880159cff58 RSP=ffff8880159cfec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000006 R13=00007f24a6736000 R14=00007f24a6736000 R15=ffff88802d2a6680 RIP=ffffffff84b4ec40 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f24a6281540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f24a6736000 CR3=000000000e2e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e5730000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81354012 RDI=ffff88806cf31850 RBP=ffffffff85c1cc40 RSP=ffff8880269a7500 R8 =0000000000000001 R9 =ffff8880269a7608 R10=000000000003b53d R11=00000000000248e5 R12=ffffffff81354012 R13=ffff8880269a7610 R14=ffff8880269a7930 R15=ffff8880269a75c8 RIP=ffffffff815ab920 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcc9cdf2540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff5dee9ed0 CR3=000000000e979000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000