Warning: Permanently added '[localhost]:15306' (ECDSA) to the list of known hosts. 2025/06/25 13:42:19 fuzzer started 2025/06/25 13:42:20 dialing manager at localhost:42423 syzkaller login: [ 108.886828] cgroup: Unknown subsys name 'net' [ 109.029450] cgroup: Unknown subsys name 'cpuset' [ 109.086669] cgroup: Unknown subsys name 'rlimit' 2025/06/25 13:42:40 syscalls: 208 2025/06/25 13:42:40 code coverage: enabled 2025/06/25 13:42:40 comparison tracing: enabled 2025/06/25 13:42:40 extra coverage: enabled 2025/06/25 13:42:40 setuid sandbox: enabled 2025/06/25 13:42:40 namespace sandbox: enabled 2025/06/25 13:42:40 Android sandbox: enabled 2025/06/25 13:42:40 fault injection: enabled 2025/06/25 13:42:40 leak checking: enabled 2025/06/25 13:42:40 net packet injection: enabled 2025/06/25 13:42:40 net device setup: enabled 2025/06/25 13:42:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 13:42:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 13:42:40 USB emulation: enabled 2025/06/25 13:42:40 hci packet injection: enabled 2025/06/25 13:42:40 wifi device emulation: enabled 2025/06/25 13:42:40 802.15.4 emulation: enabled 2025/06/25 13:42:40 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 13:42:41 starting 8 fuzzer processes 13:42:41 executing program 0: r0 = shmget(0x3, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/178) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x30}}, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200c5080) r2 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000300)=""/120) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, @xdp={0x2c, 0xb, 0x0, 0x32}, @ax25={0x3, @default, 0x3}, 0x6400, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000540)='macsec0\x00', 0x4, 0x6, 0x5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x781, 0x700, 0x74, 0x5, {{0x6, 0x4, 0x3, 0x27, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x20, 0x4, 0x10, @loopback, @mcast1, 0x0, 0x10, 0x2, 0x6}}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, @nfc={0x27, 0x0, 0x1}, @can={0x1d, 0x0}, @hci={0x1f, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)='ip6gre0\x00', 0x3, 0x4, 0x1}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000800)={0x778, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2b83}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1a}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x423}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x80, 0x2, 0x800}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x778}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) r9 = accept(0xffffffffffffffff, &(0x7f0000001000)=@alg, &(0x7f0000001080)=0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40045}, 0x80) socketpair(0x28, 0x7, 0x1ff, &(0x7f00000011c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) 13:42:41 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048881}, 0x800) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x102) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x44}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair(0x22, 0x2, 0x524d8b80, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcb}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4c004) write$nbd(r1, &(0x7f0000000540)={0x67446698, 0x0, 0x0, 0x0, 0x4, "f27b231b2d254e3c7cf821ab83a9da3cae4c97dae79ac132f6825d6b596bc590fc8bed4ccab07ace686e6687b4da6249368a840f098e0b76b5c9ae8f65ae9235b796162c8291deb5e3880c463691ad1b5e4bb97c6416a1289213760017674e57232c8d1c4f7e2be8b9b672621a50373febbbc08a178a47c318c7ec4e9825620e91bbb4fcc631f95275b17b68be4b6e946551d257c5c09dcd90b83d8a37a341d9433bc88ff36441ce669c8d91e16e"}, 0xbe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x60) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000640)={0x4, 0x0, 'client1\x00', 0x2, "466a3f3ddb9f9a17", "c7934a580e32b5d0b24588894283c466d26d27d88cf75bc1ab23a58e110cfe62", 0xda, 0x40000}) syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x20002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000007c0)={0x9, 0x9, 0xdea, 0x400, 0x40, 0x5}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000840)={0x0, @loopback, @empty}, &(0x7f0000000880)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000008c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000900)={0x10000, 0x9, 0x3, 0x8, 0xa6ce, 0x8f}) 13:42:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = fsmount(r0, 0x1, 0xf2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x49e}, {0x8, 0x15, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x6, 0x2, 0x81, 0x1, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7800, 0x20, 0x9, 0x5}}) r3 = fsmount(r0, 0x0, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000002c0)={0x1f, 0x12, 0x878, 0x0, "a2cf8b972465f5bd98550dd678d5f414257f02c716a220057c6e229459bb01d9"}) r5 = fsmount(r3, 0x1, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = socket(0x2b, 0x800, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x42}, 0x44885) r7 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000400)={0xffffffffffffffff, r5, 0x7}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000440)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r8, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0x20000090) openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)) 13:42:41 executing program 3: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @vsock={0x28, 0x0, 0xffffffff}, @phonet={0x23, 0x9, 0x3, 0x3}, @nfc={0x27, 0x0, 0x1, 0x1}, 0x1000, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='macsec0\x00', 0x1, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x4e20, @broadcast}, @hci={0x1f, 0x1}, @llc={0x1a, 0x302, 0x4, 0x20, 0x8, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0xf800, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='bridge_slave_1\x00', 0x9f, 0x6, 0x5}) recvfrom$packet(0xffffffffffffffff, &(0x7f00000001c0)=""/70, 0x46, 0x10000, &(0x7f0000000240)={0x11, 0x1c, r0, 0x1, 0x7, 0x6, @multicast}, 0x14) r1 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@polexpire={0xc8, 0x1b, 0x10, 0x70bd2c, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@broadcast, 0x4e20, 0x9, 0x4e24, 0xc, 0xa, 0x20, 0x0, 0x88, r0, r1}, {0x0, 0x8, 0xffffffff, 0x5, 0x3, 0x6, 0x0, 0x689}, {0x7f, 0x4, 0x0, 0xffffffffffffff85}, 0x56, 0x6e6bb1, 0x2, 0x0, 0x1}, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x81}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = geteuid() r3 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x288, 0x35, 0x200, 0x70bd25, 0x25dfdbfe, {0x9}, [@generic="f63ce343cbd399138eeb2472af397c18f3211008d6cb6bb83da8e0a1672da9ef4317f852b36af35f42dadf236223edc30a998963a5478c0cd6bcb535fdb910ff49afa089685d58acd4f258e885a8a0fd4289ceb96ec13ee4bba51245666669c348b2ae27c4f2cbd8c39d8a24d84538d6da92fea864b8de5cf22f1149f3", @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @nested={0xfb, 0x6e, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd}, @generic="6ff117176c7678c892af1bdf9695f3d2c81b700a8388f55190b4d98b3d323c78daaf34815a1f0c6c0487b71ead1ac26683e716c1f6e1751594604a4bc79248a60cf7aca35a5ae4db6aa69f4a25810c8cedfe876d677dceea16ed1a656b58b47e16c4b69fec973a92d87063918bbc6f8839aeb34e0044f33003adda31f5dd6b52cc7713c60ec94f6c8c98b3600c9ac1fa2b64f8cda9561281c2b61d97275e3785d15addea12fad8b7b51231123ea4f04f782744ffd49d7d240785ee83815377aaaac8c24a3b9760894034b60efa7c93ccb701a061dff81d4237d35c89f0d101b5ba3cf8a65c5ec431edd8d9ee8b6936"]}, @generic="045ca7b82788e3de8a38f28aee4ea00178d03a26c6617070aa304d1c90f8e1ef6d8f6feb2139658c8e9241cbb86c6d17f68d37ed03473434b920802a608fed21cabaf7f096293206a9e45e13b31456b39d715e736e9a32d1dcbb612c42c4d607463e35aeceb6100801ecff068fb1e2af224cddbccb2d5ce492a87f95b29c07fd73b642bca4d0b033388495e4f0fa06bbdb21bfab838202d476ee28a23be77bcc50955197f25c2712e5d1f440975a5de1dbd965", @typed={0x8, 0x31, 0x0, 0x0, @pid=r3}, @generic="b05429cb901b650fdc74488fc0c3966423baa4539a0cda428d4bca7d9f7691ee1edfb7ba7a0c39eb429e65ce43a9183e25cfbbc5ba85"]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket$inet(0x2, 0x80000, 0x5) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000900)={0x0, 0x0, "82ba760a6be561b36ba6068aea0e50d63f974fe79609859354d4cc4de5484eb1efe8e3d61bdd1ca2ea4f9b9e85f8df93cb2a53435a304c800fd1e5c9ad4ca6fbd3b51b769a356ba573dd9296566a8f210a822fca33f72609dfbbca74c37ecaf59e087dfbb1f1e830f0b620f6cf4a951c1cfb1f4edf41d6b02bfff8373c81a81e71bef3c704c2dbafc6f0529ba1c45d7729525f47ee3db108e89e1db45a2cd8a6398dd87fdf1baa030c78f56af1b873cf75861b67611aa392fad7633100832baf180a1bb348b590fdc3611becdbd07775aba016a2a497a3209d7c34bcadeb7136c26607363b2f80549179a3d32065806dce9c681f997398aeb37df7bd0d847a8e", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001900)={{r6, 0x800, 0x7bbb, 0x4e, 0x80000001, 0x3, 0x3ff, 0xfff, 0x0, 0xa8, 0x3, 0x0, 0x81, 0x3895, 0xba6c}, 0x8, [0x0]}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, 0x0, 0xc33, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = accept(r4, &(0x7f0000001a80)=@l2={0x1f, 0x0, @none}, &(0x7f0000001b00)=0x80) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001b40)={0x0, @dev, @multicast2}, &(0x7f0000001b80)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c00), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x2c, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x48004) 13:42:41 executing program 5: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/3) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/4096) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000001040)=0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001080), 0x20000, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000010c0)=""/21) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000001100)={0x35add931, 0x874, 0x5, 0x8e9, 0x6}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001140)=""/126) r1 = fsmount(r0, 0x1, 0x40) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000011c0)) r2 = fsopen(&(0x7f0000001200)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001240)='/.#.-\xd9\x00', 0x0, r0) r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x74d, 0x80901) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000012c0)={0x0, 0xfffff801, 0x3f, 0xffffffff, 0x5, 0x1}) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000001300)=""/19) socket(0x2, 0x4, 0x1205783c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001340)={'batadv_slave_0\x00'}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001380)=0x9) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0), 0x20000, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000001440)={0x4, 0x32, &(0x7f0000001400)="47711e8bd6cb86a8bd9b72da63484e120387db0712517bd5e2c979ec57135cc5867bc1d04bf865dd1179cb9bb68f368d3de7"}) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xb0, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x33, 0xa8, @random="27bc1c21c5ad70af909233d013e6f3665dda56aa5d3ccecc46ae7a9b57ddd2472f3e39f3c7c45d5f5280c4b0753fdf"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x20}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x409625de395b9e1a}, 0x4850) [ 130.118164] audit: type=1400 audit(1750858961.911:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:42:41 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r1 = fsmount(r0, 0x1, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f00000002c0)={r0, r1, 0x800}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x8, 0x4}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000380)='/dev/vcs\x00', 0x0, r1) r3 = socket(0x29, 0x5, 0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0x48000) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000500)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) epoll_pwait2(r2, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000006c0), &(0x7f0000000700)={[0x22]}, 0x8) r5 = fsopen(&(0x7f0000000740)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000780)='batadv\x00', 0x0, r2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000d80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x250, r6, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'erofs\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "8be97c8561b96eaa925ff4dd5e8b4166d3f9ea2ceb243b930625ffbba50834d4da33d5d420e23929edf2e781da5f37042f2082ead396778039e9012b4acbe1f7459b4a"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13:42:41 executing program 6: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) socketpair(0x11, 0x800, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0xa8280, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x8, 0x1}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x80000001, @private0}}, 0x0, 0x0, 0x26, 0x0, "2646b49880b1673fbd30a086bc38547ed7918f489666fc9497b239ae0fd18f8b985c98583278ee9ff3e90e3e0579cc3e8888453a65348d80e7e3bd0257e8ae4cd934288c98171a4724712ad8aa8ef133"}, 0xd8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0xff, 0x80000000, 0x1d, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0xfffffffc, 0x64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', r3, 0x2f, 0x1a, 0x4, 0xffff, 0xa, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x3, 0x2}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={0x0, @qipcrtr={0x2a, 0x4, 0x8000}, @l2tp={0x2, 0x0, @local, 0x2}, @in={0x2, 0x4e23, @local}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)='virt_wifi0\x00', 0x80000000, 0x5, 0x8bdd}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000640)="46d8701abf978d9a72bb713080789805", 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000006c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000700)=[@mss={0x2, 0x1}, @timestamp, @timestamp, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x8, 0x4}], 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1ff, 0x2, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@end, @timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x5, [{@local, 0x4}, {@local}, {@multicast2, 0x1ff}]}, @end]}}}}}) 13:42:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffff8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc, 0xa8, @random="e9074350e9a55507"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0xd8}, 0x1, 0x0, 0x0, 0x889}, 0x4000000) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xc1, 0xd3, 0x8001, 0x28, @remote, @remote, 0x7, 0x8, 0x7ff, 0xfffffbff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8500}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbf4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x1) socketpair(0x1f, 0x80000, 0x7, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xcc, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x14}, 0x5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xb2cb44b6e21af2c5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8b) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r6) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r8) sendmsg$nl_generic(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x20, 0x400, 0x70bd26, 0x25dfdbfd, {0x17}, [@typed={0x11, 0x38, 0x0, 0x0, @str='0000:00:10.0\x00'}, @generic="e64af223cc7580c2e9fcf0835c43c10ab5e3bf660cb92744e345cb031621660f"]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) [ 131.491478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.497283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.499504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.511563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.517005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.568907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.572232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.575183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.579782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.583287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.623293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.626732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.629331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.633879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.637712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.699414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.703447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.707980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.737296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.740334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.752887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.754771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.756025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.759266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.761787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.764979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.768339] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.769644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.773490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.775886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.797780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.804031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.805733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.806937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.821482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.833884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.838890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.856228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.857716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.859641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.598416] Bluetooth: hci1: command tx timeout [ 133.598421] Bluetooth: hci0: command tx timeout [ 133.661020] Bluetooth: hci2: command tx timeout [ 133.789302] Bluetooth: hci3: command tx timeout [ 133.852674] Bluetooth: hci6: command tx timeout [ 133.916725] Bluetooth: hci4: command tx timeout [ 133.916885] Bluetooth: hci7: command tx timeout [ 133.981020] Bluetooth: hci5: command tx timeout [ 135.644871] Bluetooth: hci0: command tx timeout [ 135.644965] Bluetooth: hci1: command tx timeout [ 135.708823] Bluetooth: hci2: command tx timeout [ 135.836909] Bluetooth: hci3: command tx timeout [ 135.901829] Bluetooth: hci6: command tx timeout [ 135.964674] Bluetooth: hci4: command tx timeout [ 135.964943] Bluetooth: hci7: command tx timeout [ 136.028899] Bluetooth: hci5: command tx timeout [ 137.693620] Bluetooth: hci0: command tx timeout [ 137.693845] Bluetooth: hci1: command tx timeout [ 137.757012] Bluetooth: hci2: command tx timeout [ 137.884720] Bluetooth: hci3: command tx timeout [ 137.948996] Bluetooth: hci6: command tx timeout [ 138.012859] Bluetooth: hci4: command tx timeout [ 138.013601] Bluetooth: hci7: command tx timeout [ 138.077640] Bluetooth: hci5: command tx timeout [ 139.740645] Bluetooth: hci1: command tx timeout [ 139.741611] Bluetooth: hci0: command tx timeout [ 139.804807] Bluetooth: hci2: command tx timeout [ 139.932777] Bluetooth: hci3: command tx timeout [ 139.998709] Bluetooth: hci6: command tx timeout [ 140.060635] Bluetooth: hci7: command tx timeout [ 140.060662] Bluetooth: hci4: command tx timeout [ 140.124840] Bluetooth: hci5: command tx timeout [ 191.947128] syz-executor.3 (284) used greatest stack depth: 24904 bytes left [ 194.672705] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.679497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.684127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.693992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.698949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.707483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.709400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.714248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.716512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.722753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.728928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.746931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.751641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.755900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.756963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.760238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.762733] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.770938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.771948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.777296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.779482] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.791463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.801407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.807164] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.808547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.809543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.812035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.813397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.816717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.820716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.820876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.822293] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.823553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.850236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.858142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.867451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.874938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.880906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.892856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.906924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.829679] Bluetooth: hci1: command tx timeout [ 196.830505] Bluetooth: hci0: command tx timeout [ 196.892839] Bluetooth: hci2: command tx timeout [ 196.894945] Bluetooth: hci3: command tx timeout [ 196.896685] Bluetooth: hci5: command tx timeout [ 196.956684] Bluetooth: hci4: command tx timeout [ 196.958223] Bluetooth: hci6: command tx timeout [ 196.958297] Bluetooth: hci7: command tx timeout [ 198.876892] Bluetooth: hci0: command tx timeout [ 198.876941] Bluetooth: hci1: command tx timeout [ 198.941622] Bluetooth: hci2: command tx timeout [ 198.941746] Bluetooth: hci5: command tx timeout [ 198.942179] Bluetooth: hci3: command tx timeout [ 199.004719] Bluetooth: hci6: command tx timeout [ 199.005230] Bluetooth: hci4: command tx timeout [ 199.005855] Bluetooth: hci7: command tx timeout [ 200.924607] Bluetooth: hci1: command tx timeout [ 200.926012] Bluetooth: hci0: command tx timeout [ 200.988958] Bluetooth: hci5: command tx timeout [ 200.989470] Bluetooth: hci3: command tx timeout [ 200.990635] Bluetooth: hci2: command tx timeout [ 201.052704] Bluetooth: hci7: command tx timeout [ 201.053219] Bluetooth: hci4: command tx timeout [ 201.053264] Bluetooth: hci6: command tx timeout [ 202.974001] Bluetooth: hci0: command tx timeout [ 202.974030] Bluetooth: hci1: command tx timeout [ 203.038594] Bluetooth: hci3: command tx timeout [ 203.038624] Bluetooth: hci2: command tx timeout [ 203.040082] Bluetooth: hci5: command tx timeout [ 203.101014] Bluetooth: hci6: command tx timeout [ 203.101688] Bluetooth: hci4: command tx timeout [ 203.102171] Bluetooth: hci7: command tx timeout [ 257.140002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.141786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.144168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.147829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.150451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.253961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.255484] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.259444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.264414] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.266750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.393611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.398678] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.402233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.416911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.421032] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.531832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.538412] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.539977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.553906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.556120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.575134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.578714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.580753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.589393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.608351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.731120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.747863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.752827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.766872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.771491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.886282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.898399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.900497] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.938727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.965831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.973185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.010689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.012806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.047246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.086936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.164718] Bluetooth: hci0: command tx timeout [ 259.294572] Bluetooth: hci1: command tx timeout [ 259.484746] Bluetooth: hci2: command tx timeout [ 259.613946] Bluetooth: hci3: command tx timeout [ 259.677589] Bluetooth: hci5: command tx timeout [ 260.060699] Bluetooth: hci4: command tx timeout [ 260.124659] Bluetooth: hci7: command tx timeout [ 260.188780] Bluetooth: hci6: command tx timeout [ 261.214567] Bluetooth: hci0: command tx timeout [ 261.340567] Bluetooth: hci1: command tx timeout [ 261.533895] Bluetooth: hci2: command tx timeout [ 261.663123] Bluetooth: hci3: command tx timeout [ 261.725628] Bluetooth: hci5: command tx timeout [ 262.110859] Bluetooth: hci4: command tx timeout [ 262.172660] Bluetooth: hci7: command tx timeout [ 262.236680] Bluetooth: hci6: command tx timeout [ 263.260922] Bluetooth: hci0: command tx timeout [ 263.389605] Bluetooth: hci1: command tx timeout [ 263.581987] Bluetooth: hci2: command tx timeout [ 263.710570] Bluetooth: hci3: command tx timeout [ 263.772589] Bluetooth: hci5: command tx timeout [ 264.157678] Bluetooth: hci4: command tx timeout [ 264.220628] Bluetooth: hci7: command tx timeout [ 264.287707] Bluetooth: hci6: command tx timeout [ 265.308836] Bluetooth: hci0: command tx timeout [ 265.437646] Bluetooth: hci1: command tx timeout [ 265.628586] Bluetooth: hci2: command tx timeout [ 265.757629] Bluetooth: hci3: command tx timeout [ 265.821058] Bluetooth: hci5: command tx timeout [ 266.204690] Bluetooth: hci4: command tx timeout [ 266.268617] Bluetooth: hci7: command tx timeout [ 266.332676] Bluetooth: hci6: command tx timeout [ 319.765347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.771159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.774876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.781283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.783728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.984263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.986658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.989903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.001423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.012816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.056778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.060892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.064919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.075637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.088397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.196644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.198687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.206892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.209911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.211854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.214880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.228875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.233730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.250878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.275008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.283872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.290933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.303488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.321741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.325579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.335494] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.343400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.357852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.360869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.376846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.384226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.388946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.390177] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.399670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.404956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.821574] Bluetooth: hci0: command tx timeout [ 322.076691] Bluetooth: hci1: command tx timeout [ 322.140740] Bluetooth: hci2: command tx timeout [ 322.332649] Bluetooth: hci4: command tx timeout [ 322.396619] Bluetooth: hci3: command tx timeout [ 322.460633] Bluetooth: hci7: command tx timeout [ 322.462153] Bluetooth: hci6: command tx timeout [ 322.540290] Bluetooth: hci5: command tx timeout [ 323.869647] Bluetooth: hci0: command tx timeout [ 324.126571] Bluetooth: hci1: command tx timeout [ 324.189645] Bluetooth: hci2: command tx timeout [ 324.381650] Bluetooth: hci4: command tx timeout [ 324.446707] Bluetooth: hci3: command tx timeout [ 324.509660] Bluetooth: hci7: command tx timeout [ 324.510202] Bluetooth: hci6: command tx timeout [ 324.574155] Bluetooth: hci5: command tx timeout [ 325.917595] Bluetooth: hci0: command tx timeout [ 326.172782] Bluetooth: hci1: command tx timeout [ 326.236708] Bluetooth: hci2: command tx timeout [ 326.428640] Bluetooth: hci4: command tx timeout [ 326.492610] Bluetooth: hci3: command tx timeout [ 326.557554] Bluetooth: hci6: command tx timeout [ 326.558080] Bluetooth: hci7: command tx timeout [ 326.621766] Bluetooth: hci5: command tx timeout [ 327.965904] Bluetooth: hci0: command tx timeout [ 328.221942] Bluetooth: hci1: command tx timeout [ 328.285962] Bluetooth: hci2: command tx timeout [ 328.478559] Bluetooth: hci4: command tx timeout [ 328.540751] Bluetooth: hci3: command tx timeout [ 328.604651] Bluetooth: hci7: command tx timeout [ 328.605182] Bluetooth: hci6: command tx timeout [ 328.669885] Bluetooth: hci5: command tx timeout [ 382.644186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.645966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.654411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.658459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.665624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.705108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.718940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.724952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.734887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.738679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.781821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.788936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.790483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.798880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.805878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.903914] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.909334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.913824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.926291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.926958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.928364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.957193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.962010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.964194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.965941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.968088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.970921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.973167] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.976946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.981000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.984388] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.991810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.993857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.014346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.019778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.047478] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.064067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.091848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.112966] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.124463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.732632] Bluetooth: hci0: command tx timeout [ 384.796793] Bluetooth: hci1: command tx timeout [ 384.860742] Bluetooth: hci2: command tx timeout [ 385.052622] Bluetooth: hci6: command tx timeout [ 385.116633] Bluetooth: hci5: command tx timeout [ 385.117905] Bluetooth: hci3: command tx timeout [ 385.244719] Bluetooth: hci7: command tx timeout [ 385.245632] Bluetooth: hci4: command tx timeout [ 386.780704] Bluetooth: hci0: command tx timeout [ 386.846582] Bluetooth: hci1: command tx timeout [ 386.908729] Bluetooth: hci2: command tx timeout [ 387.100623] Bluetooth: hci6: command tx timeout [ 387.164762] Bluetooth: hci3: command tx timeout [ 387.165276] Bluetooth: hci5: command tx timeout [ 387.292633] Bluetooth: hci7: command tx timeout [ 387.293165] Bluetooth: hci4: command tx timeout [ 388.828694] Bluetooth: hci0: command tx timeout [ 388.893685] Bluetooth: hci1: command tx timeout [ 388.956713] Bluetooth: hci2: command tx timeout [ 389.148619] Bluetooth: hci6: command tx timeout [ 389.213117] Bluetooth: hci5: command tx timeout [ 389.214560] Bluetooth: hci3: command tx timeout [ 389.340701] Bluetooth: hci4: command tx timeout [ 389.341246] Bluetooth: hci7: command tx timeout [ 390.876881] Bluetooth: hci0: command tx timeout [ 390.940593] Bluetooth: hci1: command tx timeout [ 391.004584] Bluetooth: hci2: command tx timeout [ 391.196728] Bluetooth: hci6: command tx timeout [ 391.260932] Bluetooth: hci5: command tx timeout [ 391.261439] Bluetooth: hci3: command tx timeout [ 391.388643] Bluetooth: hci7: command tx timeout [ 391.390356] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 13:47:49 Registers: info registers vcpu 0 RAX=ffff88806ce09001 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce08b01 RSI=ffff88806ce08b38 RDI=ffff88806ce08aa8 RBP=ffff88806ce08af0 RSP=ffff88806ce089d8 R8 =ffffffff867a5ee4 R9 =ffff88806ce08ad8 R10=000000000003b53d R11=00000000000043f8 R12=ffff88806ce08af8 R13=ffff88806ce08ae0 R14=ffff88806ce08b40 R15=ffff88806ce08a98 RIP=ffffffff81354808 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f103963f260 CR3=0000000027f10000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801d64fce0 RCX=ffffffff819f6ad4 RDX=ffff888013353700 RSI=00000000000001fd RDI=0000000000000004 RBP=00000000000001fd RSP=ffff88801d64f830 R8 =0000000000000000 R9 =fffff9400036740e R10=00000000000001fd R11=0000000000000001 R12=00000000000000cf R13=0000000000000001 R14=ffff8880340f2000 R15=00000000000000ce RIP=ffffffff819f6ae0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa16d9086f4 CR3=000000000c22e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fa16d91747000007fa16d916f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000