Warning: Permanently added '[localhost]:46744' (ECDSA) to the list of known hosts. 2024/10/25 03:05:50 fuzzer started 2024/10/25 03:05:51 dialing manager at localhost:45639 syzkaller login: [ 67.877627] cgroup: Unknown subsys name 'net' [ 68.016435] cgroup: Unknown subsys name 'cpuset' [ 68.046154] cgroup: Unknown subsys name 'rlimit' 2024/10/25 03:06:09 syscalls: 200 2024/10/25 03:06:09 code coverage: enabled 2024/10/25 03:06:09 comparison tracing: enabled 2024/10/25 03:06:09 extra coverage: enabled 2024/10/25 03:06:09 setuid sandbox: enabled 2024/10/25 03:06:09 namespace sandbox: enabled 2024/10/25 03:06:09 Android sandbox: enabled 2024/10/25 03:06:09 fault injection: enabled 2024/10/25 03:06:09 leak checking: enabled 2024/10/25 03:06:09 net packet injection: enabled 2024/10/25 03:06:09 net device setup: enabled 2024/10/25 03:06:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/25 03:06:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/25 03:06:09 USB emulation: enabled 2024/10/25 03:06:09 hci packet injection: enabled 2024/10/25 03:06:09 wifi device emulation: enabled 2024/10/25 03:06:09 802.15.4 emulation: enabled 2024/10/25 03:06:09 fetching corpus: 0, signal 0/0 (executing program) 2024/10/25 03:06:10 starting 8 fuzzer processes 03:06:10 executing program 0: r0 = socket(0x1f, 0x1, 0x26e3) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "b3cb43f6af1f08d8", "4bb9113d2636d4b85851b43b650b1560c406c280ecc0b80a79c4bdda857e69a6", "139fe3f6", "c0c4cc51044ac391"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socketpair(0x29, 0xa, 0x7f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x20, 0xc0, 0x18, 0x200, {{0x52, 0x4, 0x1, 0x4, 0x148, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x89}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x5, 0xb, "484098d8a8cdbe36aa"}, {0x7, 0x8, "7a008a7b7496"}]}, @timestamp_prespec={0x44, 0x3c, 0x77, 0x3, 0x2, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xca2}, {@local, 0x7}, {@local, 0xffffffff}, {@empty, 0x7}, {@broadcast}, {@empty, 0x7fff}]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x6, 0x8, "22068168733c"}, {0x4, 0xb, "9de721530290cb2c5d"}, {0x7, 0xc, "3b299a1d1abb8076571b"}, {0x6, 0x10, "125c672c494651d0aaeddede6482"}]}, @lsrr={0x83, 0x13, 0x3f, [@multicast2, @remote, @multicast1, @empty]}, @rr={0x7, 0x7, 0x5a, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x5, [{@broadcast, 0x9}, {@remote, 0x7}, {@local, 0x498}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x8, 0x1, 0x3, [{@multicast1, 0x7ff}, {@local, 0x2}, {@multicast2}, {@local, 0x3}, {@empty, 0x2}]}, @cipso={0x86, 0x12, 0x1, [{0x1, 0xc, "5166e0c887ac02993dc5"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) set_mempolicy(0x3, &(0x7f0000000380)=0x101, 0x1) r4 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x2, 0x4000) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1, 0x3}) r5 = socket(0x27, 0xa, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000480)='dctcp\x00', 0x6) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000004c0)={0x1}, 0x4) r6 = socket(0x2, 0x5, 0x7fffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'erspan0\x00', r1, 0x0, 0x7d9, 0x99, 0x7fffffff, {{0x14, 0x4, 0x2, 0x37, 0x50, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @generic={0x8b, 0x10, "b351f3c4178c9a6311e7b945c6a1"}, @end, @rr={0x7, 0xf, 0x76, [@remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x24, [@local]}, @ssrr={0x89, 0xf, 0x40, [@loopback, @private=0xa010101, @local]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x1, 0x7800, 0x3f, 0x6, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x67, 0x0, 0xff, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@lsrr={0x83, 0x27, 0x8e, [@dev={0xac, 0x14, 0x14, 0x23}, @loopback, @empty, @multicast2, @local, @remote, @rand_addr=0x64010102, @rand_addr=0x64010100, @remote]}, @rr={0x7, 0x13, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x5, [{@loopback, 0xffffffe0}]}, @generic={0x88, 0x8, "1c9948c0c3ad"}, @timestamp={0x44, 0x10, 0x92, 0x0, 0xc, [0x0, 0x8, 0x9]}]}}}}}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000780), 0x4) getpeername$netlink(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)=0xc) 03:06:10 executing program 1: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x19c1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80004) r1 = syz_open_dev$hidraw(&(0x7f00000003c0), 0xe32f, 0x8900) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000400)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r3, 0x8917, &(0x7f0000000480)={'syzkaller1\x00', @ifru_addrs=@sco}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x1eb66728015107f7, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c014}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10280008}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff902}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x9c06041691cfa0f7) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000006c0)=0xffffffe1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8a57bae5e90f90b1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40045) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) [ 86.657639] audit: type=1400 audit(1729825570.783:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:06:10 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x400c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x8616847d64aed99f, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4000051) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004844) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r2, 0x4903365d1236cfb7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040880}, 0x4004000) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x10001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40001) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r3, 0x704, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4044) 03:06:10 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x5, 0x12) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x400, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008010) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r4) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x890}, 0x40050) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r4) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r7) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r9, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4) getpeername$netlink(r0, &(0x7f0000000880), &(0x7f00000008c0)=0xc) 03:06:10 executing program 4: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x1d, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0), 0x4) connect$netlink(r0, &(0x7f0000000200)=@unspec, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) accept(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000003c0)=0x80) connect$netlink(r2, &(0x7f0000000400)=@unspec, 0xc) r3 = socket(0x2c, 0x800, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x3f, 0xd1, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x14, 0x67, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x9e, 0x1, 0x9, [{@broadcast, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xe2, [@rand_addr=0x64010100, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000500)=0x2, 0x4) r4 = syz_open_dev$vcsu(&(0x7f0000000540), 0x80000001, 0x181802) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x24}}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0xd1}, 0x20000001) syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) 03:06:10 executing program 5: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000001040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/4096, 0x1000}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000011c0)={&(0x7f0000001080), &(0x7f00000010c0)=""/210, 0xd2}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001200), 0x40000, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001340), 0x40, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008011) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000001) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001700)={&(0x7f0000001600), &(0x7f0000001640)=""/145, 0x91}) openat$nvram(0xffffffffffffff9c, &(0x7f0000001740), 0x290002, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000001cc0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f00000017c0)={0x49c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x60}}}}, [@NL80211_ATTR_IE={0x155, 0x2a, [@tim={0x5, 0xa, {0x5, 0xc9, 0x8, "373d1386b42f25"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @perr={0x84, 0xce, {0x5, 0xc, [@ext={{}, @broadcast, 0x9, @device_a, 0x6}, @not_ext={{}, @device_a, 0x20, "", 0x14}, @ext={{}, @broadcast, 0x54b, @device_b, 0x22}, @ext={{}, @broadcast, 0x8, @broadcast, 0x32}, @ext={{}, @device_a, 0x1, @device_a, 0x30}, @not_ext={{}, @broadcast, 0x80000001, "", 0x41}, @ext={{}, @device_a, 0x181, @device_a, 0x5}, @not_ext={{}, @device_a, 0x0, "", 0x1c}, @ext={{}, @broadcast, 0x2, @device_b, 0x41}, @ext={{}, @device_a, 0x6, @broadcast, 0x28}, @ext={{}, @device_b, 0x3, @device_a, 0xc}, @not_ext={{}, @device_a, 0x401, "", 0x34}]}}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x7, 0x1, 0x100, @broadcast, 0x1, @broadcast, 0xc68d, 0x4, 0x6, [{{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x10001}, {{0x1}, @device_a, 0x80}, {{0x1}, @broadcast}, {{0x1}, @device_a, 0x3}, {{}, @broadcast, 0x1}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x0, 0x7}}, @mesh_chsw={0x76, 0x6, {0x7, 0xff, 0x2c, 0x85}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x0, 0x0, 0x0, {0x6, 0x1800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x80, 0xff}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x4dc0, 0x88d5, 0x9, 0xff}}}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x6d, 0x115, "6cb87aaba1a883f5bb4c31f6636136a6dfe8ffb228843b8309357d3e22b4cfaee0d42d4fda01e35a44efb885b05e0f67d71cddcd18938754d127ef6eee216486ed13cf23fc670be60c920515f46fe6ca67b845d3ac804caca1c66030b3bee1a8a9f37a9a55624b8922"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "9d36044a021669a4a1fa43ff8e407239df649c7cb47ad9cc241e12adeb28e70426591cb3b294e2c2a885637ff07360700ce3c50c596f086c7ecbabf938d15229e132d411867ff504536f4b70f5c383698df86e59ff8d52f79d60a5f524b408e02683003a460c4528f53679584427ae9a6af6c6ed2e94ed328abf084f0ecb7128c5860c5be0afaba63ebc822f2da1f60bf458e0975c40d23651c7fe15f72fae771479584ad66c23956f13c32cf42d6830eba48286ca40591613f3918aa254ec1d19c8cac23cd1d4113c0d752acbf667efc1400cf350c2a7e9c2f79caf3700af924f6c4e43bb0d32217a76c3ac94bae8ea326e8e3331bef973af9ad6929195"}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0xffffffffffffff14, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x508, 0x1b}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xfcfdbdc4b12b2644}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xd2a, 0x5, 0xffff, 0x7, 0x0, 0xfffe, 0x0, 0x3, 0xe62, 0x1f, 0x6, 0x8da0, 0xfffb, 0x7, 0x9, 0x40]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socketpair(0x6, 0x3, 0x4cc9, &(0x7f0000001d40)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), r5) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x5c, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x18}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf34}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008814}, 0x800) 03:06:10 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x39, 0x1, 0x38, 0x39, 0x61, 0x36, 0x32, 0x34, 0x34, 0x39, 0x63, 0x35, 0x32, 0x9, 0x0, 0x35]}, &(0x7f0000000080)={0x0, "3908e525df066284d2f4a520647662e6398af76cae8525de04191647e2356e0d6047cda6abec717098fb6a82976ff5ff3866948ac2b56242f587478424a5d9a5", 0x29}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "cf63b1a9c88d6ff5c3e7b200a021bd85dd8dddf1d418e2a663475218d4fbecebc77f752d262148674e6e114e3179fa18b3452a4df1b69f6b57e99ce89f7738e8", 0x40}, 0x48, r0) keyctl$reject(0x13, r1, 0x700, 0x14, r0) keyctl$unlink(0x9, r0, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r2) keyctl$clear(0x7, r1) getuid() keyctl$clear(0x7, r2) keyctl$reject(0x13, r1, 0x1, 0x7, 0xfffffffffffffffe) geteuid() keyctl$negate(0xd, r1, 0xfffffffffffffeff, r0) r3 = add_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="b4290ae741d748ea425aa49f41ad6cda7fa1935fc206fe", 0x17, r0) keyctl$reject(0x13, r3, 0x6, 0x7f, r2) request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='fscrypt:', r2) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='85baa174f0cb1142', r2) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000540)='syzkaller\x00', &(0x7f0000000580)='\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 03:06:10 executing program 7: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xae, 0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x80) r0 = request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='(\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) r1 = socket(0x12, 0x2, 0x7) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6e82}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x9211e61d04d82597}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x92}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9f4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58b0}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x852a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x456e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x29e}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "8257828fdfa4a56ff0f9cb9bc73ef195e2b6fa1df30efb99ec0678dd41506c"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4840}, 0x8040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1830}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x800, 0x70bd27, 0x4, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r6) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}}, 0x2000c080) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000010) [ 88.032337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.033193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.036474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.037218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.047510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.048254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.051120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.053989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.055383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.079781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.081213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.082149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.083896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.089272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.089982] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.091627] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.093531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.095971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.098681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.108347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.111320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.119998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.139365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.140399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.155920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.175392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.183871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.188314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.191499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.193939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.203542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.207893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.214473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.220593] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.222618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.236291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.241842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.243994] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.252598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.257382] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.259326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.265650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.268284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.271482] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.272508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.273836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.288145] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.289357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.117542] Bluetooth: hci1: command tx timeout [ 90.119302] Bluetooth: hci2: command tx timeout [ 90.119748] Bluetooth: hci0: command tx timeout [ 90.246180] Bluetooth: hci3: command tx timeout [ 90.311122] Bluetooth: hci5: command tx timeout [ 90.312600] Bluetooth: hci6: command tx timeout [ 90.312608] Bluetooth: hci4: command tx timeout [ 90.373139] Bluetooth: hci7: command tx timeout [ 92.165170] Bluetooth: hci2: command tx timeout [ 92.166797] Bluetooth: hci1: command tx timeout [ 92.168070] Bluetooth: hci0: command tx timeout [ 92.294120] Bluetooth: hci3: command tx timeout [ 92.357346] Bluetooth: hci6: command tx timeout [ 92.358298] Bluetooth: hci4: command tx timeout [ 92.358860] Bluetooth: hci5: command tx timeout [ 92.421127] Bluetooth: hci7: command tx timeout [ 94.213199] Bluetooth: hci2: command tx timeout [ 94.213733] Bluetooth: hci1: command tx timeout [ 94.214302] Bluetooth: hci0: command tx timeout [ 94.341167] Bluetooth: hci3: command tx timeout [ 94.405349] Bluetooth: hci5: command tx timeout [ 94.406709] Bluetooth: hci4: command tx timeout [ 94.407927] Bluetooth: hci6: command tx timeout [ 94.469387] Bluetooth: hci7: command tx timeout [ 96.261200] Bluetooth: hci0: command tx timeout [ 96.263136] Bluetooth: hci1: command tx timeout [ 96.264355] Bluetooth: hci2: command tx timeout [ 96.389346] Bluetooth: hci3: command tx timeout [ 96.453176] Bluetooth: hci5: command tx timeout [ 96.453674] Bluetooth: hci4: command tx timeout [ 96.453708] Bluetooth: hci6: command tx timeout [ 96.517116] Bluetooth: hci7: command tx timeout [ 150.805108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.807841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.809801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.811248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.818137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.819569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.823347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.825678] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.827200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.838071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.840548] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.842015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.868978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.876805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.881396] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.886355] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.892904] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.895543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.959358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.962925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.963906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.969549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.970511] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.973494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.976184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.979959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.980952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.995813] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.001316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.002836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.005827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.011209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.012679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.013092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.015876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.016978] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.019388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.021965] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.023228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.024805] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.025930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.029523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.037393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.068421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.080087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.092850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.109284] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.118552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.920476] Bluetooth: hci0: command tx timeout [ 152.921374] Bluetooth: hci1: command tx timeout [ 152.969361] Bluetooth: hci2: command tx timeout [ 153.094200] Bluetooth: hci4: command tx timeout [ 153.094791] Bluetooth: hci3: command tx timeout [ 153.095404] Bluetooth: hci6: command tx timeout [ 153.095963] Bluetooth: hci5: command tx timeout [ 153.221191] Bluetooth: hci7: command tx timeout [ 154.949146] Bluetooth: hci1: command tx timeout [ 154.949671] Bluetooth: hci0: command tx timeout [ 155.014217] Bluetooth: hci2: command tx timeout [ 155.141285] Bluetooth: hci5: command tx timeout [ 155.141769] Bluetooth: hci6: command tx timeout [ 155.142342] Bluetooth: hci3: command tx timeout [ 155.142790] Bluetooth: hci4: command tx timeout [ 155.269434] Bluetooth: hci7: command tx timeout [ 156.998124] Bluetooth: hci0: command tx timeout [ 157.061509] Bluetooth: hci2: command tx timeout [ 157.062008] Bluetooth: hci1: command tx timeout [ 157.191222] Bluetooth: hci4: command tx timeout [ 157.191707] Bluetooth: hci3: command tx timeout [ 157.193210] Bluetooth: hci6: command tx timeout [ 157.193659] Bluetooth: hci5: command tx timeout [ 157.318506] Bluetooth: hci7: command tx timeout [ 159.046098] Bluetooth: hci0: command tx timeout [ 159.109246] Bluetooth: hci1: command tx timeout [ 159.109718] Bluetooth: hci2: command tx timeout [ 159.237467] Bluetooth: hci5: command tx timeout [ 159.237983] Bluetooth: hci4: command tx timeout [ 159.239149] Bluetooth: hci6: command tx timeout [ 159.239600] Bluetooth: hci3: command tx timeout [ 159.365191] Bluetooth: hci7: command tx timeout [ 212.862159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.864724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.871795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.889942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.891319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.896568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.898630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.900204] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.901634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.907132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.909940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.913790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.945611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.952290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.966338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.977800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.986323] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.992300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.136588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.140239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.141729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.147235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.150762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.154438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.165062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.195298] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.200550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.233201] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.234101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.240250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.241290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.242218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.243769] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.245195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.246227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.248630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.249627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.251770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.253426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.254443] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.257229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.258885] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.259959] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.261274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.264478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.271805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.283342] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.303807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.981146] Bluetooth: hci1: command tx timeout [ 214.982120] Bluetooth: hci0: command tx timeout [ 215.047081] Bluetooth: hci2: command tx timeout [ 215.174680] Bluetooth: hci3: command tx timeout [ 215.302666] Bluetooth: hci6: command tx timeout [ 215.303749] Bluetooth: hci5: command tx timeout [ 215.365155] Bluetooth: hci4: command tx timeout [ 215.367149] Bluetooth: hci7: command tx timeout [ 217.029195] Bluetooth: hci1: command tx timeout [ 217.029750] Bluetooth: hci0: command tx timeout [ 217.094297] Bluetooth: hci2: command tx timeout [ 217.222204] Bluetooth: hci3: command tx timeout [ 217.350782] Bluetooth: hci6: command tx timeout [ 217.351580] Bluetooth: hci5: command tx timeout [ 217.415089] Bluetooth: hci4: command tx timeout [ 217.415616] Bluetooth: hci7: command tx timeout [ 219.077981] Bluetooth: hci0: command tx timeout [ 219.079616] Bluetooth: hci1: command tx timeout [ 219.143068] Bluetooth: hci2: command tx timeout [ 219.270111] Bluetooth: hci3: command tx timeout [ 219.398215] Bluetooth: hci6: command tx timeout [ 219.399795] Bluetooth: hci5: command tx timeout [ 219.462121] Bluetooth: hci7: command tx timeout [ 219.463505] Bluetooth: hci4: command tx timeout [ 221.125152] Bluetooth: hci0: command tx timeout [ 221.125707] Bluetooth: hci1: command tx timeout [ 221.189307] Bluetooth: hci2: command tx timeout [ 221.318088] Bluetooth: hci3: command tx timeout [ 221.446355] Bluetooth: hci5: command tx timeout [ 221.446908] Bluetooth: hci6: command tx timeout [ 221.509244] Bluetooth: hci7: command tx timeout [ 221.509797] Bluetooth: hci4: command tx timeout [ 275.067290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.070214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.074463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.085719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.088972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.091385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.091734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.102190] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.104289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.110621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.116938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.118173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.220569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.222694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.230336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.232473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.232751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.237616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.244964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.248754] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.251489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.251692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.255219] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.269322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.401284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.405532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.408166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.410526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.414562] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.417094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.420459] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.422481] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.423358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.425560] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.428947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.431631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.433793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.438705] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.440159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.449161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.460144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.463895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.469606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.472201] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.478348] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.480827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.499565] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.511393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.125717] Bluetooth: hci0: command tx timeout [ 277.190054] Bluetooth: hci1: command tx timeout [ 277.318095] Bluetooth: hci2: command tx timeout [ 277.446232] Bluetooth: hci4: command tx timeout [ 277.448177] Bluetooth: hci3: command tx timeout [ 277.509240] Bluetooth: hci6: command tx timeout [ 277.509364] Bluetooth: hci7: command tx timeout [ 277.573084] Bluetooth: hci5: command tx timeout [ 279.173579] Bluetooth: hci0: command tx timeout [ 279.237101] Bluetooth: hci1: command tx timeout [ 279.365081] Bluetooth: hci2: command tx timeout [ 279.493188] Bluetooth: hci3: command tx timeout [ 279.496100] Bluetooth: hci4: command tx timeout [ 279.557343] Bluetooth: hci7: command tx timeout [ 279.558201] Bluetooth: hci6: command tx timeout [ 279.621085] Bluetooth: hci5: command tx timeout [ 281.221126] Bluetooth: hci0: command tx timeout [ 281.285097] Bluetooth: hci1: command tx timeout [ 281.414101] Bluetooth: hci2: command tx timeout [ 281.541154] Bluetooth: hci4: command tx timeout [ 281.541330] Bluetooth: hci3: command tx timeout [ 281.605166] Bluetooth: hci6: command tx timeout [ 281.605665] Bluetooth: hci7: command tx timeout [ 281.669088] Bluetooth: hci5: command tx timeout [ 283.269090] Bluetooth: hci0: command tx timeout [ 283.333276] Bluetooth: hci1: command tx timeout [ 283.461109] Bluetooth: hci2: command tx timeout [ 283.589169] Bluetooth: hci4: command tx timeout [ 283.590840] Bluetooth: hci3: command tx timeout [ 283.654093] Bluetooth: hci7: command tx timeout [ 283.654138] Bluetooth: hci6: command tx timeout [ 283.717222] Bluetooth: hci5: command tx timeout [ 337.431475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.436269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.438307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.443236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.451875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.454094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.551720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.556244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.558719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.562360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.565153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.567310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.613307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.615740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.617906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.621244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.623776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.625918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.693294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.696179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.700242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.703903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.706727] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.712139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.755065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.770634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.781210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.784234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.788263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.796219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.800224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.805131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.812354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.816390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.818802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.824117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.983505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.984949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.992161] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.001336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.026555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.052309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.065199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.099302] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.104163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.113298] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.128696] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.131337] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.526206] Bluetooth: hci0: command tx timeout [ 339.589277] Bluetooth: hci1: command tx timeout [ 339.654080] Bluetooth: hci2: command tx timeout [ 339.782120] Bluetooth: hci3: command tx timeout [ 339.846096] Bluetooth: hci5: command tx timeout [ 339.848168] Bluetooth: hci4: command tx timeout [ 340.230270] Bluetooth: hci7: command tx timeout [ 340.232182] Bluetooth: hci6: command tx timeout [ 341.574210] Bluetooth: hci0: command tx timeout [ 341.638248] Bluetooth: hci1: command tx timeout [ 341.703052] Bluetooth: hci2: command tx timeout [ 341.830055] Bluetooth: hci3: command tx timeout [ 341.894125] Bluetooth: hci4: command tx timeout [ 341.896063] Bluetooth: hci5: command tx timeout [ 342.277243] Bluetooth: hci7: command tx timeout [ 342.278832] Bluetooth: hci6: command tx timeout [ 343.621085] Bluetooth: hci0: command tx timeout [ 343.686199] Bluetooth: hci1: command tx timeout [ 343.749042] Bluetooth: hci2: command tx timeout [ 343.877167] Bluetooth: hci3: command tx timeout [ 343.942086] Bluetooth: hci4: command tx timeout [ 343.943552] Bluetooth: hci5: command tx timeout [ 344.325634] Bluetooth: hci6: command tx timeout [ 344.327294] Bluetooth: hci7: command tx timeout [ 345.671008] Bluetooth: hci0: command tx timeout [ 345.734294] Bluetooth: hci1: command tx timeout [ 345.798054] Bluetooth: hci2: command tx timeout [ 345.926070] Bluetooth: hci3: command tx timeout [ 345.990323] Bluetooth: hci5: command tx timeout [ 345.991222] Bluetooth: hci4: command tx timeout [ 346.374082] Bluetooth: hci6: command tx timeout [ 346.374836] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:11:20 Registers: info registers vcpu 0 RAX=1ffffd400036776b RBX=ffff88802ccdbc28 RCX=dffffc0000000000 RDX=ffff888027161b80 RSI=ffffffff8179201b RDI=0000000000000001 RBP=000000006ceed025 RSP=ffff88803010f8a0 R8 =0000000000000000 R9 =fffff94000367768 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffea0001b3bb40 R14=00007f879a585000 R15=ffff88803010fce0 RIP=ffffffff81792032 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f879a9af6f4 CR3=0000000034bb8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f879a9be47000007f879a9bdf20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=1ffff1100d9e13af RDX=1ffff11002cb0b97 RSI=0000000000000001 RDI=ffffffff87861fb8 RBP=ffff88806cf2ce00 RSP=ffff88806cf09f08 R8 =0000000000000000 R9 =fffffbfff0fda9d5 R10=ffffffff87ed4eaf R11=ffff88806cf09ff8 R12=0000000000000046 R13=ffff88806cf2ce4c R14=0000000000000000 R15=ffff88806cf2ce00 RIP=ffffffff813001ec RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f265974c8e0 CR3=00000000343b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000