Warning: Permanently added '[localhost]:8809' (ECDSA) to the list of known hosts. 2025/06/21 16:52:17 fuzzer started 2025/06/21 16:52:18 dialing manager at localhost:33119 syzkaller login: [ 101.922422] cgroup: Unknown subsys name 'net' [ 102.047893] cgroup: Unknown subsys name 'cpuset' [ 102.083458] cgroup: Unknown subsys name 'rlimit' 2025/06/21 16:52:31 syscalls: 200 2025/06/21 16:52:31 code coverage: enabled 2025/06/21 16:52:31 comparison tracing: enabled 2025/06/21 16:52:31 extra coverage: enabled 2025/06/21 16:52:31 setuid sandbox: enabled 2025/06/21 16:52:31 namespace sandbox: enabled 2025/06/21 16:52:31 Android sandbox: enabled 2025/06/21 16:52:31 fault injection: enabled 2025/06/21 16:52:31 leak checking: enabled 2025/06/21 16:52:31 net packet injection: enabled 2025/06/21 16:52:31 net device setup: enabled 2025/06/21 16:52:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 16:52:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 16:52:31 USB emulation: enabled 2025/06/21 16:52:31 hci packet injection: enabled 2025/06/21 16:52:31 wifi device emulation: enabled 2025/06/21 16:52:31 802.15.4 emulation: enabled 2025/06/21 16:52:31 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 16:52:33 starting 8 fuzzer processes 16:52:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002340)={'ip6gre0\x00', &(0x7f00000022c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xff, 0x80, 0x6f, @mcast2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000, 0x8, 0x5, 0x7ff}}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000002380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000023c0)=0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000002400)={0x3, 0x3}, 0x4) getsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000002440), &(0x7f0000002480)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002540)={'sit0\x00', &(0x7f00000024c0)={'ip6_vti0\x00', r1, 0x29, 0x4, 0x7, 0xc2cd, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x8000, 0x10, 0x9e, 0x76bca06a}}) bind$packet(0xffffffffffffffff, &(0x7f0000002580)={0x11, 0xf5, r3, 0x1, 0x81, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f00000025c0), 0x80000, 0x0) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) syz_genetlink_get_family_id$mptcp(&(0x7f0000002600), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002640)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f0000002740)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x1c, r4, 0x1, 0x5, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000027c0)) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000002800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002840)=0x14) socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 16:52:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x84, 0x8, 0x0, 0x9, 0x0, 0x11, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x807a, 0x0, @perf_config_ext={0x5, 0x4}, 0x420, 0x800, 0x200, 0x6, 0xa7, 0x5e, 0x1000, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) mq_timedreceive(r0, &(0x7f00000000c0)=""/203, 0xcb, 0x20, &(0x7f00000001c0)={0x77359400}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/254, 0xfe, 0x1, &(0x7f0000000300)=""/251, 0xfb}, &(0x7f0000000440)=0x40) r1 = perf_event_open$cgroup(&(0x7f0000000480)={0x3, 0x80, 0x3, 0x1, 0x6, 0x3f, 0x0, 0x9, 0x810, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_config_ext={0x1, 0xda10000000000000}, 0x5d40, 0x80000000, 0x0, 0x9, 0x120, 0x5, 0xffff, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r0, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x30, r1, 0x3ba) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x3, 0x9, 0x1}, {0x85, 0x6, 0x4, 0xfffffff7}, {0xa000, 0x7f, 0x66, 0x10000}]}, 0x10) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000580)={0x7, 0x7f, 0x4, 0x2, 0x0, 0x6}) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f00000005c0)) r2 = perf_event_open$cgroup(&(0x7f0000000640)={0x2, 0x80, 0x4, 0x1, 0x5, 0x5, 0x0, 0x1, 0x2112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000600), 0x8}, 0x1500, 0x0, 0x401, 0x7, 0x0, 0x8, 0xfff8, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0xb, r1, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000006c0)={0x0, 0x80, 0x2, 0x80, 0x0, 0x0, 0x0, 0x6, 0x8400, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x1ff80000000, 0x8}, 0x11584, 0xe, 0x3c43, 0x0, 0x9, 0x6, 0xdcd5, 0x0, 0x8001, 0x0, 0x7b}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20020015) clock_gettime(0x6, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000008c0)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x41, 0x0, "a1bad1b9d27ddeb74bfe18d552669c1d147efdb5f56dad83b9dee8d8e754b14023b7f048b13b2ff849d59ee23ba46f908c85261a3c38463ab3c8b66e12b4c1a22cbb4ea34a40c2e7b5a9dbeee1068388"}, 0xd8) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000a00), &(0x7f0000000a40)) 16:52:33 executing program 2: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) connect$packet(r0, &(0x7f0000000080)={0x11, 0x7, 0x0, 0x1, 0x5d, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x20, 0x1000, 0xffffffff, 0x2, 0x8, 0x0, 0x1be57835}, 0x1c) socketpair(0x1e, 0x1, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80020004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044050}, 0x44014) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x80010, 0xffffffffffffffff, 0x6de) connect$packet(r2, &(0x7f00000002c0)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r5 = accept4(r1, 0x0, &(0x7f0000000300), 0x0) getpeername$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) r6 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x7f, 0x7, 0x1f, 0x38, 0x0, 0x80000001, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000003c0), 0xc}, 0x42008, 0x7f, 0x4, 0x1, 0x6, 0x5, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x932, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x401}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7b}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x85}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4080) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000005c0)={0x2, 0x80, 0x7, 0x7f, 0x7, 0x3, 0x0, 0x0, 0x2020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x5}, 0x45002, 0x7, 0x5, 0x5, 0x9, 0x6, 0x30b, 0x0, 0x3, 0x0, 0x81}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x20008085) 16:52:33 executing program 3: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x82, 0x3, 0x7, 0x0, 0xf56c, 0x6002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf62208316454af31, @perf_bp={&(0x7f0000000000), 0x2}, 0x42, 0x400, 0x4, 0x7, 0x8, 0x7, 0x0, 0x0, 0x20, 0x0, 0xd}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x2, 0x2, 0x40, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x7f, 0x9}, 0x1000, 0xfffffffffffff17b, 0x7, 0x3, 0x9, 0x5, 0x1f, 0x0, 0x3bbd, 0x0, 0x2e23}, 0xffffffffffffffff, 0x1, r0, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x3, 0x8d, 0x7, 0xa1, 0x0, 0x5d6, 0x40000, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x10020, 0x1, 0x8, 0x6, 0x36, 0x5, 0x4, 0x0, 0x8, 0x0, 0xa41}, 0xffffffffffffffff, 0x0, r0, 0xc) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7f, 0x80, 0x3, 0x0, 0x0, 0xb3de, 0x1c15, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x4828, 0x8, 0x5b8b, 0x6, 0x6, 0x35a0, 0x80, 0x0, 0x10000, 0x0, 0x4a17}, 0x0, 0x1, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000440)=0x9c) r5 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x5, 0x2, 0x3, @local, @empty, 0x10, 0x20, 0x5de, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000840)={0x628, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x1, 0x3, 0x7}, {0x0, 0x3, 0x7f, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6fd0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xee4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x628}, 0x1, 0x0, 0x0, 0x4080}, 0x48081) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000003400)="151f94882a4c72caa93382a8ac5daea2b63c98cb8b9b6310e0d6913cb4635d67a442aa21b33ad7e3d2879f307e953c27f7fa2a84772ef7c2780425ec79017d016eadfc006316495b062a5204a1eec83b127283033194d7c4ec7927d9faf59900aa76058d4511dd56", 0x68, 0x240c0815, &(0x7f0000003540)={0x11, 0x5, 0x0, 0x1, 0xd7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 16:52:33 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r1 = accept4$packet(r0, 0x0, &(0x7f0000000080), 0x81800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)=r3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c32}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x80) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000340), 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000004c0)=r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)) r7 = accept4(r6, &(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x80, 0x80000) accept4$packet(r7, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r7) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0x41) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000800), 0x107002, 0x0) ioctl$CDROMREADAUDIO(r9, 0x530e, &(0x7f0000000880)={@lba=0x10000, 0x0, 0x1f, &(0x7f0000000840)=""/31}) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000900)={0x5, 0x40, 0x57, 0x80}) [ 117.371363] audit: type=1400 audit(1750524753.864:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:52:33 executing program 6: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d0) socketpair(0x28, 0x400, 0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x40}}, 0x80c1) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000480)={0xfffffffffffffffb, 0x2, 0x1, 0x3}, &(0x7f00000004c0)) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$inet6(r1, &(0x7f0000001280)={&(0x7f0000001100)={0xa, 0x4e20, 0xa07, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000001140)="bcd671d698bbe04243062088528a9b78f0889e5c6b571d3f411a54f9f502208ccc6389bdbe17dbe1c1f70a2a19ab0089df43052019a5076aa3fb6e30424b0613f7e48317c06446c37289cb07fdb304f8ae870cfc1c785638ff6950b3f6acbe58168beeef21d6e72f2193b328f00e80a8657a982144b4d350731766fc6e62", 0x7e}], 0x1, &(0x7f0000001200)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffff000}}, @hopopts_2292={{0x50, 0x29, 0x36, {0xfb, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7f}]}}}], 0x68}, 0x0) r6 = accept4(r2, &(0x7f00000012c0)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000001340)=0x80, 0x180000) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) getsockopt(r3, 0x1, 0x9, &(0x7f00000013c0)=""/6, &(0x7f0000001400)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001480), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000014c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x58, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44080}, 0x4040000) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001700)=@ccm_128={{0x304}, "cd31fe0d6b0a5a7d", "b417316a331cd8aace2f63e9fea844b7", "152c04b5", "0c1c13769b7e6b01"}, 0x28) 16:52:33 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x1f, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x20, 0x80, 0x5, 0xfff}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@local}, 0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, @rc={0x1f, @any, 0xa1}, @ethernet={0x306}, @sco={0x1f, @none}, 0x40, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='syzkaller0\x00', 0x3ff, 0xfffffffffffff000, 0xb7}) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x80, 0x800) r3 = socket(0xb, 0x3, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x32}, r0}, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000002c0)={0x7, 'veth0_to_hsr\x00', {0x8}, 0x7}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r0, 0x2f, 0x6, 0x20, 0x7fff, 0x66, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0x4, 0xa3}}) socketpair(0x23, 0x1, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000400)={r4, @broadcast, @local}, 0xc) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8051}, 0x400c005) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', r0, 0x4, 0x3f, 0x9, 0x8, 0x71, @loopback, @mcast2, 0x1, 0x700, 0x8, 0x80000001}}) getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000001680)=0x1000) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000016c0)={r0, 0x1, 0x6}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x60, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xed}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x28, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040004}, 0x4800) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000001a00)={'syztnl1\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x8e, 0x9, 0x12, @private0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8, 0x700, 0x1f4, 0x3}}) 16:52:34 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='wg0\x00') getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)=""/23, &(0x7f0000000080)=0x17) r1 = socket(0xc1bbbcf5fb6c95a2, 0xa, 0x6) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='syz_tun\x00') socketpair(0xa, 0x5, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r2) recvmmsg(r1, &(0x7f0000009100)=[{{&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000240)=""/6, 0x6}], 0x2, &(0x7f00000002c0)=""/224, 0xe0}, 0x4}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000002740)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001580)=""/97, 0x61}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/38, 0x26}, {&(0x7f0000002640)=""/212, 0xd4}], 0x7, &(0x7f00000027c0)=""/178, 0xb2}, 0xfb8}, {{&(0x7f0000002880)=@ieee802154, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002900)}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/96, 0x60}, {&(0x7f00000039c0)=""/190, 0xbe}, {&(0x7f0000003a80)=""/165, 0xa5}], 0x5, &(0x7f0000003bc0)=""/48, 0x30}, 0x2}, {{&(0x7f0000003c00)=@generic, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000003c80)=""/72, 0x48}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/44, 0x2c}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/73, 0x49}], 0x6, &(0x7f0000006e40)=""/236, 0xec}, 0x20e}, {{&(0x7f0000006f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000007240)=[{&(0x7f0000006fc0)=""/103, 0x67}, {&(0x7f0000007040)=""/98, 0x62}, {&(0x7f00000070c0)=""/160, 0xa0}, {&(0x7f0000007180)=""/130, 0x82}], 0x4, &(0x7f0000007280)=""/31, 0x1f}, 0x1}, {{&(0x7f00000072c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000008680)=[{&(0x7f0000007340)=""/239, 0xef}, {&(0x7f0000007440)=""/196, 0xc4}, {&(0x7f0000007540)=""/135, 0x87}, {&(0x7f0000007600)=""/4096, 0x1000}, {&(0x7f0000008600)=""/104, 0x68}], 0x5, &(0x7f0000008700)=""/33, 0x21}, 0x80000001}, {{&(0x7f0000008740)=@nfc, 0x80, &(0x7f0000008980)=[{&(0x7f00000087c0)=""/106, 0x6a}, {&(0x7f0000008840)=""/116, 0x74}, {&(0x7f00000088c0)=""/159, 0x9f}], 0x3, &(0x7f00000089c0)=""/207, 0xcf}}, {{&(0x7f0000008ac0)=@isdn, 0x80, &(0x7f0000009040)=[{&(0x7f0000008b40)=""/30, 0x1e}, {&(0x7f0000008b80)=""/133, 0x85}, {&(0x7f0000008c40)=""/99, 0x63}, {&(0x7f0000008cc0)=""/159, 0x9f}, {&(0x7f0000008d80)=""/71, 0x47}, {&(0x7f0000008e00)=""/171, 0xab}, {&(0x7f0000008ec0)=""/107, 0x6b}, {&(0x7f0000008f40)=""/194, 0xc2}], 0x8, &(0x7f00000090c0)=""/18, 0x12}, 0x9}], 0x8, 0x40, 0x0) getsockopt(r0, 0x9, 0x7f, &(0x7f0000009300)=""/74, &(0x7f0000009380)=0x4a) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000093c0)="66493ba29a41d34410dd9ca6e62e1934", 0x10) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000009400)=""/181, &(0x7f00000094c0)=0xb5) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000009500), 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000009540)=@req={0x10001, 0x4, 0x0, 0x8000}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000009580), 0x111100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000095c0)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000096c0)=0xe8) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000009700)=r5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000009740)=@req3={0x8, 0x2, 0xad, 0x7, 0x8, 0x9, 0x7ff}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000009780)={'ip6_vti0\x00'}) perf_event_open$cgroup(&(0x7f0000009800)={0x4, 0x80, 0x9, 0x6, 0x1f, 0x6, 0x0, 0xfdb, 0x200, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000097c0), 0x1e}, 0x18010, 0xfffffffffffffff9, 0x9, 0x7, 0x8b, 0x2, 0x260b, 0x0, 0x7, 0x0, 0x51e}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x7) [ 118.980081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.982391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.983554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.986926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.988651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.017688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.025149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.035483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.049299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.050654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.054098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.055257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.056158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.057935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.059579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.061158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.063412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.064722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.068088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.069097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.069918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.075854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.079678] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.081172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.082228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.083221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.084072] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.092104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.100625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.102477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.162538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.173070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.174283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.179047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.182031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.189656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.194530] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.198432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.208932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.229641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.012644] Bluetooth: hci0: command tx timeout [ 121.140831] Bluetooth: hci4: command tx timeout [ 121.141421] Bluetooth: hci5: command tx timeout [ 121.142878] Bluetooth: hci1: command tx timeout [ 121.204180] Bluetooth: hci2: command tx timeout [ 121.204724] Bluetooth: hci3: command tx timeout [ 121.267958] Bluetooth: hci6: command tx timeout [ 121.331870] Bluetooth: hci7: command tx timeout [ 123.060320] Bluetooth: hci0: command tx timeout [ 123.188166] Bluetooth: hci5: command tx timeout [ 123.188634] Bluetooth: hci1: command tx timeout [ 123.189313] Bluetooth: hci4: command tx timeout [ 123.251939] Bluetooth: hci2: command tx timeout [ 123.252378] Bluetooth: hci3: command tx timeout [ 123.315998] Bluetooth: hci6: command tx timeout [ 123.380211] Bluetooth: hci7: command tx timeout [ 125.108250] Bluetooth: hci0: command tx timeout [ 125.237940] Bluetooth: hci5: command tx timeout [ 125.238665] Bluetooth: hci1: command tx timeout [ 125.239432] Bluetooth: hci4: command tx timeout [ 125.300023] Bluetooth: hci3: command tx timeout [ 125.300702] Bluetooth: hci2: command tx timeout [ 125.364498] Bluetooth: hci6: command tx timeout [ 125.428132] Bluetooth: hci7: command tx timeout [ 127.156526] Bluetooth: hci0: command tx timeout [ 127.283947] Bluetooth: hci1: command tx timeout [ 127.284932] Bluetooth: hci4: command tx timeout [ 127.284993] Bluetooth: hci5: command tx timeout [ 127.348044] Bluetooth: hci2: command tx timeout [ 127.348519] Bluetooth: hci3: command tx timeout [ 127.412457] Bluetooth: hci6: command tx timeout [ 127.475957] Bluetooth: hci7: command tx timeout [ 181.287714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.293898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.298729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.306110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.310680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.380730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.385270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.392499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.398638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.402320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.404128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.405489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.412170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.416184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.436402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.448561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.459203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.479093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.486558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.491479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.623631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.650032] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.653984] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.673475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.711299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.729038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.730255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.745056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.752078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.752373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.778866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.783252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.785410] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.786192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.797351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.807293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.827103] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.828469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.830403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.833940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.347887] Bluetooth: hci0: command tx timeout [ 183.476050] Bluetooth: hci1: command tx timeout [ 183.540533] Bluetooth: hci2: command tx timeout [ 183.668196] Bluetooth: hci3: command tx timeout [ 183.859977] Bluetooth: hci4: command tx timeout [ 183.923881] Bluetooth: hci6: command tx timeout [ 183.923980] Bluetooth: hci5: command tx timeout [ 183.924764] Bluetooth: hci7: command tx timeout [ 185.396547] Bluetooth: hci0: command tx timeout [ 185.525976] Bluetooth: hci1: command tx timeout [ 185.588200] Bluetooth: hci2: command tx timeout [ 185.715968] Bluetooth: hci3: command tx timeout [ 185.908251] Bluetooth: hci4: command tx timeout [ 185.972992] Bluetooth: hci5: command tx timeout [ 185.973940] Bluetooth: hci6: command tx timeout [ 185.974198] Bluetooth: hci7: command tx timeout [ 187.445838] Bluetooth: hci0: command tx timeout [ 187.572899] Bluetooth: hci1: command tx timeout [ 187.636097] Bluetooth: hci2: command tx timeout [ 187.765141] Bluetooth: hci3: command tx timeout [ 187.959026] Bluetooth: hci4: command tx timeout [ 188.020149] Bluetooth: hci5: command tx timeout [ 188.020253] Bluetooth: hci7: command tx timeout [ 188.020582] Bluetooth: hci6: command tx timeout [ 189.491980] Bluetooth: hci0: command tx timeout [ 189.620067] Bluetooth: hci1: command tx timeout [ 189.684437] Bluetooth: hci2: command tx timeout [ 189.812026] Bluetooth: hci3: command tx timeout [ 190.003935] Bluetooth: hci4: command tx timeout [ 190.068866] Bluetooth: hci6: command tx timeout [ 190.068937] Bluetooth: hci5: command tx timeout [ 190.069699] Bluetooth: hci7: command tx timeout [ 243.591906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.600286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.604025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.616386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.623052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.734160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.737470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.739662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.747281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.752542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.818563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.822498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.831884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.845487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.852323] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.952104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.953752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.963329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.968821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.988398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.990700] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.996980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.002191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.007378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.009151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.021848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.028740] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.040001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.041685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.041980] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.055292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.055594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.064677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.094465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.111001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.111613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.164234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.165854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.168720] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.245919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.685005] Bluetooth: hci0: command tx timeout [ 245.875980] Bluetooth: hci2: command tx timeout [ 245.876754] Bluetooth: hci1: command tx timeout [ 246.133213] Bluetooth: hci5: command tx timeout [ 246.195856] Bluetooth: hci3: command tx timeout [ 246.259851] Bluetooth: hci6: command tx timeout [ 246.324899] Bluetooth: hci4: command tx timeout [ 246.324926] Bluetooth: hci7: command tx timeout [ 247.734123] Bluetooth: hci0: command tx timeout [ 247.924822] Bluetooth: hci1: command tx timeout [ 247.924844] Bluetooth: hci2: command tx timeout [ 248.179909] Bluetooth: hci5: command tx timeout [ 248.245075] Bluetooth: hci3: command tx timeout [ 248.309216] Bluetooth: hci6: command tx timeout [ 248.373519] Bluetooth: hci7: command tx timeout [ 248.373747] Bluetooth: hci4: command tx timeout [ 249.780058] Bluetooth: hci0: command tx timeout [ 249.971952] Bluetooth: hci1: command tx timeout [ 249.973171] Bluetooth: hci2: command tx timeout [ 250.228966] Bluetooth: hci5: command tx timeout [ 250.292982] Bluetooth: hci3: command tx timeout [ 250.356986] Bluetooth: hci6: command tx timeout [ 250.420130] Bluetooth: hci4: command tx timeout [ 250.420558] Bluetooth: hci7: command tx timeout [ 251.829017] Bluetooth: hci0: command tx timeout [ 252.021142] Bluetooth: hci2: command tx timeout [ 252.021417] Bluetooth: hci1: command tx timeout [ 252.276994] Bluetooth: hci5: command tx timeout [ 252.341914] Bluetooth: hci3: command tx timeout [ 252.405186] Bluetooth: hci6: command tx timeout [ 252.468863] Bluetooth: hci4: command tx timeout [ 252.468910] Bluetooth: hci7: command tx timeout [ 306.250465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.253954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.258670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.266279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.273199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.445120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.448566] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.453279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.463561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.470471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.584047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.594079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.598281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.609412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.614485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.665893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.673089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.676493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.684521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.690756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.738125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.770402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.778304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.813403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.821603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.995611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.999018] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.002414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.074265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.078191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.086079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.103478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.106510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.120080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.153170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.190449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.202347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.206548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.249640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.256568] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.340224] Bluetooth: hci0: command tx timeout [ 308.531996] Bluetooth: hci1: command tx timeout [ 308.662004] Bluetooth: hci2: command tx timeout [ 308.725073] Bluetooth: hci4: command tx timeout [ 308.916666] Bluetooth: hci3: command tx timeout [ 309.235857] Bluetooth: hci5: command tx timeout [ 309.300085] Bluetooth: hci6: command tx timeout [ 309.363870] Bluetooth: hci7: command tx timeout [ 310.387904] Bluetooth: hci0: command tx timeout [ 310.580588] Bluetooth: hci1: command tx timeout [ 310.708139] Bluetooth: hci2: command tx timeout [ 310.774300] Bluetooth: hci4: command tx timeout [ 310.964404] Bluetooth: hci3: command tx timeout [ 311.285078] Bluetooth: hci5: command tx timeout [ 311.348979] Bluetooth: hci6: command tx timeout [ 311.413117] Bluetooth: hci7: command tx timeout [ 312.435835] Bluetooth: hci0: command tx timeout [ 312.627849] Bluetooth: hci1: command tx timeout [ 312.757789] Bluetooth: hci2: command tx timeout [ 312.820820] Bluetooth: hci4: command tx timeout [ 313.011881] Bluetooth: hci3: command tx timeout [ 313.333837] Bluetooth: hci5: command tx timeout [ 313.397109] Bluetooth: hci6: command tx timeout [ 313.459823] Bluetooth: hci7: command tx timeout [ 314.484899] Bluetooth: hci0: command tx timeout [ 314.676989] Bluetooth: hci1: command tx timeout [ 314.803993] Bluetooth: hci2: command tx timeout [ 314.870019] Bluetooth: hci4: command tx timeout [ 315.060140] Bluetooth: hci3: command tx timeout [ 315.380844] Bluetooth: hci5: command tx timeout [ 315.444911] Bluetooth: hci6: command tx timeout [ 315.508496] Bluetooth: hci7: command tx timeout [ 368.393030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.396051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.399840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.409321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.413836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.589407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.597320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.602071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.610160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.616348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.742293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.757106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.766275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.793560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.809081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.821747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.829050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.834669] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.859416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.877084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.878751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.897667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.900331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.908713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.931295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.934522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.937346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.948243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.955627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.957351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.961611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.977184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.982457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.001161] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.007502] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.017500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.025979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.029987] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.043144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.048472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.486189] Bluetooth: hci0: command tx timeout [ 370.675862] Bluetooth: hci1: command tx timeout [ 370.932133] Bluetooth: hci2: command tx timeout [ 371.060888] Bluetooth: hci3: command tx timeout [ 371.125048] Bluetooth: hci5: command tx timeout [ 371.188135] Bluetooth: hci7: command tx timeout [ 371.188749] Bluetooth: hci6: command tx timeout [ 371.189631] Bluetooth: hci4: command tx timeout [ 372.531950] Bluetooth: hci0: command tx timeout [ 372.724851] Bluetooth: hci1: command tx timeout [ 372.981073] Bluetooth: hci2: command tx timeout [ 373.107971] Bluetooth: hci3: command tx timeout [ 373.172625] Bluetooth: hci5: command tx timeout [ 373.237121] Bluetooth: hci7: command tx timeout [ 373.238120] Bluetooth: hci4: command tx timeout [ 373.238573] Bluetooth: hci6: command tx timeout [ 374.579831] Bluetooth: hci0: command tx timeout [ 374.772813] Bluetooth: hci1: command tx timeout [ 375.028138] Bluetooth: hci2: command tx timeout [ 375.157233] Bluetooth: hci3: command tx timeout [ 375.219826] Bluetooth: hci5: command tx timeout [ 375.284990] Bluetooth: hci7: command tx timeout [ 375.285415] Bluetooth: hci4: command tx timeout [ 375.286875] Bluetooth: hci6: command tx timeout [ 376.627875] Bluetooth: hci0: command tx timeout [ 376.820829] Bluetooth: hci1: command tx timeout [ 377.078886] Bluetooth: hci2: command tx timeout [ 377.204064] Bluetooth: hci3: command tx timeout [ 377.269815] Bluetooth: hci5: command tx timeout [ 377.333035] Bluetooth: hci7: command tx timeout [ 377.333465] Bluetooth: hci4: command tx timeout [ 377.334390] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 16:57:36 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffffffff85c1cc40 RSP=ffff88802f54f0c0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=00000000000231b3 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88802f54f1a8 RIP=ffffffff8151b08e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f53591a9b70 CR3=000000000b79a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff816049e0 RCX=ffff888028f977f4 RDX=0000000000000000 RSI=ffffffff85c1cc40 RDI=ffff88802f1a83fc RBP=ffff888028f97938 RSP=ffff888028f978a0 R8 =0000000000000001 R9 =ffff888028f978e0 R10=000000000003b53d R11=00000000000083e3 R12=ffff888028f97968 R13=0000000000000000 R14=ffff88802f1a8000 R15=ffff88800f9501e0 RIP=ffffffff812d95fc RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b55b5f368 CR3=000000002ceec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000