Warning: Permanently added '[localhost]:45830' (ECDSA) to the list of known hosts. 2024/10/28 00:15:07 fuzzer started 2024/10/28 00:15:08 dialing manager at localhost:45639 syzkaller login: [ 69.821265] cgroup: Unknown subsys name 'net' [ 69.944361] cgroup: Unknown subsys name 'cpuset' [ 69.961581] cgroup: Unknown subsys name 'rlimit' 2024/10/28 00:15:24 syscalls: 201 2024/10/28 00:15:24 code coverage: enabled 2024/10/28 00:15:24 comparison tracing: enabled 2024/10/28 00:15:24 extra coverage: enabled 2024/10/28 00:15:24 setuid sandbox: enabled 2024/10/28 00:15:24 namespace sandbox: enabled 2024/10/28 00:15:24 Android sandbox: enabled 2024/10/28 00:15:24 fault injection: enabled 2024/10/28 00:15:24 leak checking: enabled 2024/10/28 00:15:24 net packet injection: enabled 2024/10/28 00:15:24 net device setup: enabled 2024/10/28 00:15:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/28 00:15:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/28 00:15:24 USB emulation: enabled 2024/10/28 00:15:24 hci packet injection: enabled 2024/10/28 00:15:24 wifi device emulation: enabled 2024/10/28 00:15:24 802.15.4 emulation: enabled 2024/10/28 00:15:24 fetching corpus: 0, signal 0/0 (executing program) 00:15:26 executing program 0: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="9bf4e79426d337900451c1d46d746184c88f135888daf6a5e64649fba0db49d6529a1a518af741199257ac5fab1feab5080890460c2cf61b2f74fcb62f7fb91a6853c91edf92e19983375a4df306cbb84106b4a82c39f0dae1d725f3c48f1afe34f40e1fe5a7c3134ea25aebac5a63e4b2a2f2d8bf18f9a86fcf1c374cb173f20d1f52c2823e51236fe136d76a9a9959864d0012b2354d3526a2648d8bb40c55d632bdbcd3c34438276d1b109abe016fd1f649d13e06971fc9cd9d28abd3a7456a965e063e93c746efb8bb", 0xcb) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='mand\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) r2 = fsmount(r1, 0x1, 0xe) r3 = accept(r2, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='&)##/\xff,*\x00', &(0x7f0000000300)="5dc6ce09df7235c6bd98e3b89adf00933a8f1066431ce6d3b43132114a5a39e4db3d6e6d5f4157839b5ec5080a3806475108d5977f2b5195a79e3ca1413ebc49eeb6269bfdd58bc81bda93b519e8e9938868c0391246fd2a9059abc203309c7347d90cd51e92b8e88bd44f10325b55748dba06ee5a6684d726c40b3f459c127fb70ce69b16054d338446eccfae3965f8328a9ddd5859e4cd51cd2b75648064f8476b2d5f40dea3a6ccbed7233f743c3c8007294d23cd6decc951faa520bf0c2e809be8ac44a65d", 0xc7) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x224}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='ro\x00', &(0x7f0000000580)="3d5da648531aacc93584de4cb18ebb71a327ef0646c5f8738f0e7f98df2a31904982ada0aeb16db42632117166a3294eb57290cbfe95bf741d50bc929d43a046844af50ddc2f7cc9c5032938c50ebe06b1", 0x51) r4 = request_key(&(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='$%(+\'\x00', 0x0) keyctl$update(0x2, r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000, 0x0) read$rfkill(r5, &(0x7f0000000700), 0x8) syz_open_dev$usbmon(&(0x7f0000000740), 0x2, 0x0) add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, r4) write$char_usb(r5, &(0x7f0000000800)="7bdd68f1b7eb98522748711f8fd2894f0ff3a84a2d7757bd62fff2296d75fda371c55e7b766b686d4d716fa36ac92ca3c9977aa6c7697a2e0b45607caa24fa2c92638bd0d75dc25e11543cbda48ba83ea2c5c6e0c399a78aa5f370c78bcd6d0d8c6f00807d66b7ef970cc8a04de0965d65871d7c0eeed387a3173078e15258451fd903035cc56eb2b2a560733d6b992bc9d4218790f8e471ac862d34cfed0b2e20222ca7591faeeb3bf5ab314d8b05303cf5655f901b596a7be88508d82a002b355316341ba013193155b910490f5dedf0f39198f470ce1036c09fc748ae8f14db631d85bfdae7289b5a16b5f917d3bb8af79c0e9d", 0xf5) 2024/10/28 00:15:26 starting 8 fuzzer processes 00:15:26 executing program 1: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x8080) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x7fff}, @llc={0x1a, 0x10f, 0x80, 0x2, 0x3, 0x7f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @can={0x1d, 0x0}, 0xfe01, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x40, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/237, 0xed}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/41, 0x29}], 0x4, &(0x7f0000000880)=""/84, 0x54}}, {{&(0x7f0000000900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/127, 0x7f}, {&(0x7f0000000a00)=""/94, 0x5e}, {&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b00)=""/87, 0x57}], 0x4}, 0x100}], 0x3, 0x60, &(0x7f0000000c80)={0x0, 0x989680}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = fsopen(&(0x7f0000000dc0)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000e00)='[\x00', &(0x7f0000000e40)='./file0\x00', r0) mount$9p_fd(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x10040, &(0x7f0000000f00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@posixacl}, {@cachetag={'cachetag', 0x3d, ')'}}, {@noextend}, {@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@msize}, {@msize={'msize', 0x3d, 0x9}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@aname={'aname', 0x3d, 'nilfs2\x00'}}, {@fscache}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001000), 0x100, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) getresuid(&(0x7f0000001100)=0x0, &(0x7f0000001140), &(0x7f0000001180)) getresuid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x80, &(0x7f0000001280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r6}}, {@aname}, {@cachetag={'cachetag', 0x3d, '\\}&'}}, {@afid={'afid', 0x3d, 0x10001}}, {@access_client}, {@noextend}, {@msize={'msize', 0x3d, 0xeb0}}, {@nodevmap}, {@cache_mmap}, {@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-\r,-.'}}, {@fowner_lt={'fowner<', r7}}, {@dont_appraise}, {@appraise_type}, {@euid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nilfs2\x00'}}, {@dont_hash}]}}) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000001400)='nolazytime\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000001440)='fscache', &(0x7f0000001480)='./file0\x00', 0xffffffffffffff9c) connect$bt_l2cap(r0, &(0x7f00000014c0)={0x1f, 0xa5d, @none, 0x9, 0x1}, 0xe) openat$full(0xffffffffffffff9c, &(0x7f0000001500), 0x10000, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x40000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a0f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:15:26 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='+0]\x00', 0x0, r1) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff00}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x4a6b05a3e3018d8e, 0x4, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'bond_slave_1\x00', {}, 0x8787}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)={0x3, 'veth1_to_team\x00', {}, 0x4}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000240)='geneve1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x700, 0x40, 0x8, 0x6, {{0x19, 0x4, 0x3, 0x2f, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x32}, {[@timestamp={0x44, 0x10, 0x16, 0x0, 0x5, [0x3, 0xe00000, 0x800]}, @timestamp_addr={0x44, 0x24, 0xe4, 0x1, 0xe, [{@broadcast, 0x8001}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x200}, {@multicast2, 0x7fff}]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x9, [{@rand_addr=0x64010102, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x4}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x62}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/153, 0x99) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000640)={'vxcan1\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000680)={0x3, 'virt_wifi0\x00', {0x5}, 0x7}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f00000006c0)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x204040, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000740), 0x4) 00:15:26 executing program 3: keyctl$setperm(0x5, 0x0, 0x10000000) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "c3fc5dc1ac646f95e659e0c45ed0e9dcc1243c0e70b34013595e88313a3c9cf9a475776e4480af7bb9cc50fe8053661c0a2ffd5684b9e3d60c6ca6706c3d4741", 0x3d}, 0x48, 0xfffffffffffffffb) r1 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='0000111122223333', r0) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, r1) keyctl$read(0xb, r1, &(0x7f0000000200), 0x0) r2 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x00', r0) r3 = add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='\x00', r2) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000440)='cpu.pressure\x00', 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "1ec05c95aa8ae8fb57d806b1f6692709e61918d94c7de8867f0162fc9561e35314736dee7d7b3fcd70c6e81ac150ae64bb90d08dfca26b35091c7353ec75cc17", 0x2e}, 0x48, r2) keyctl$read(0xb, r4, &(0x7f0000000580)=""/244, 0xf4) request_key(&(0x7f0000000680)='pkcs7_test\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)='\x00', r0) r5 = request_key(&(0x7f0000000740)='.request_key_auth\x00', &(0x7f0000000780)={'syz', 0x3}, &(0x7f00000007c0)='e355a76a11a1be18', 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x232000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000800)='blacklist\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)='ecryptfs', r6) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc3}, &(0x7f00000009c0)={0x0, "a77eebf0eb235ecba4bc27c81461110c0036f5137b0c97cf470c445cf377f2d12a9913afb763ad9fd5bb354789516735d036fdb7f086b6d9540268b17c523cb3", 0x1b}, 0x48, r3) request_key(&(0x7f0000000a40)='cifs.idmap\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)='\xbe&#\x00', r2) keyctl$reject(0x13, r4, 0x6, 0x7, r4) 00:15:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x4, 0x2, {{0x1f, 0x4, 0x0, 0x3e, 0x7c, 0x64, 0x0, 0xc5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x2d, 0x2, [{0x5, 0xb, "f1ce78877cadd2a5d1"}, {0x6, 0x3, "8c"}, {0x5, 0x8, "ae94c83e96a8"}, {0x0, 0x11, "ed1b31dd3431c6646b56378c1ead8b"}]}, @ssrr={0x89, 0x1f, 0x73, [@empty, @loopback, @rand_addr=0x64010102, @private=0xa010102, @multicast1, @multicast1, @local]}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0x3, [{@multicast2, 0x6}]}, @noop, @timestamp={0x44, 0xc, 0xd5, 0x0, 0x3, [0x9, 0x80000000]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5912}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x5c}}, 0x400d4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@empty, @in=@empty, 0x4e23, 0x1000, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x5e, r1}, {0x1ff, 0x6, 0x0, 0xffffffffffffff00, 0x8001, 0x2, 0xffffffff, 0x715c5545}, {0x8, 0x0, 0x4, 0x5}, 0x200, 0x6e6bbe, 0x2, 0x0, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d6, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x4, 0x1, 0x2, 0x2, 0x1000, 0x5}}, 0xe8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20000800) r4 = accept(0xffffffffffffffff, &(0x7f0000000dc0)=@hci, &(0x7f0000000e40)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r3, 0x920, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20004801) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r6 = accept4(r0, &(0x7f00000010c0)=@ax25={{0x3, @null}, [@netrom, @null, @default, @default, @default, @null, @default, @rose]}, &(0x7f0000001140)=0x80, 0x80000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r4) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc052}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x801) r8 = socket(0x15, 0x80000, 0x80000001) syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r8) socketpair(0x27, 0x6, 0x9, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40001) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5937}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x5) [ 87.497381] audit: type=1400 audit(1730074526.534:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:15:26 executing program 5: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x100000000, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='^\x02@$)\\\x00', 0x0, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/233, 0xe9}) r3 = fsopen(&(0x7f0000000280)='sockfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000002c0)='/dev/usbmon#\x00', &(0x7f0000000300)="42964db4ec6f53fd23908cc3e2a63aa12e12d617e94ccfd1fa9874f0b6d4f55df38fae27911ff9b03d5e40a4aa03c8ba9ff1dbb9f2b83fd28580248bcea81776cf363eddb3fb22e5eadac7c5cec638bb25d452f7b56d17a2964b5935c87cfd6c7cd6b7bedf9cc35e3c13ca698247e729f676804b566736d9b57589960d58f2fd4193a4bf9df8c78155c67774c9c5d0c5740a8f4867369ab78f4dd4e901fb462aac2cf0689919fd022cc4c47da0e4b904a097c7e1f64e954fb4bb4588e870dc7a0c49d893e767c7b09196a19d0c5c39c6cfeff659d97cae25c82d849c0f4c35eee4fc925a89a5f1bf", 0xe8) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000440)='^\x02@$)\\\x00', &(0x7f0000000480)='./file0\x00', r2) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000004c0)=""/229, 0xe5) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = accept4(r4, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x80, 0xc00) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000006c0)='/dev/usbmon#\x00', &(0x7f0000000700)='\x00', 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x18800, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8) openat$cgroup_freezer_state(r6, &(0x7f0000000800), 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 00:15:26 executing program 7: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x35, 0x0, "af3903a3c56baecf8d0c2bec4c43b93b1f66f096c6e7fd1b660649dc311853216821cef481057c295c6d2cb67fc151fc45c4e26cbaff8b48cc4098df5e2258ffa8c0b4a4ec8a490d76dab24327e8323e"}, 0xd8) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x2}, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x4}}, @l2tp={0x2, 0x0, @multicast1}, 0xfc00, 0x0, 0x0, 0x0, 0x241, &(0x7f0000000240)='veth1_to_bond\x00', 0x101, 0x7, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000002540)=@gcm_128={{0x303}, "7c2d56b319e51c3d", "555764de6faa5d936b7cf25401833e67", "5444f956", "6de954acaf5b4f05"}, 0x28) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x802408}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = accept(r2, &(0x7f0000002780)=@alg, &(0x7f0000002800)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000002840)=""/14, &(0x7f0000002880)=0xe) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000028c0), 0x400000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000002900)=""/47, &(0x7f0000002940)=0x2f) syz_open_dev$char_usb(0xc, 0xb4, 0x3) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1401001}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000002a80), 0x282000, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000002b80)={&(0x7f0000002ac0), 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008041) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002bc0)=@gcm_256={{0x304}, "1085ec5826a49f1f", "3868ed33177a4f44e68a175ddef02deafdc28fe0f32559f997964ce13986787a", "0710bfeb", "2c1eff120e0d6921"}, 0x38) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000002c00)=""/93, &(0x7f0000002c80)=0x5d) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x1c, 0x0, 0x809, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040095}, 0x5) 00:15:26 executing program 6: sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x805) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x101}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x895}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, 0xfffffffffffffffd, 0x80) wait4(0x0, &(0x7f0000000280), 0x1, &(0x7f00000002c0)) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}}, 0x800) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, &(0x7f0000000480)) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4041}, 0x88c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000006c0)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r3) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004800) accept(r4, &(0x7f0000000840)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f00000008c0)=0x80) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x811}, 0x0) [ 88.870281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.883370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.890133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.897527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.905059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.906380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.907555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.915017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.916395] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.917670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.918993] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.920452] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.926297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.929658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.931261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.966044] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.966951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.969873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.970900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.972975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.973882] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.975082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.976578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.981234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.981603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.983473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.984414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.986456] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.987464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.989341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.996094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.000052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.003542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.005319] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.011086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.016078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.017880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.026444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.033057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.034454] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.035711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.044547] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.045831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.049347] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.050636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.053129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.078634] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.079937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.989534] Bluetooth: hci0: command tx timeout [ 90.990392] Bluetooth: hci1: command tx timeout [ 91.053352] Bluetooth: hci4: command tx timeout [ 91.053554] Bluetooth: hci2: command tx timeout [ 91.117947] Bluetooth: hci7: command tx timeout [ 91.118114] Bluetooth: hci6: command tx timeout [ 91.118682] Bluetooth: hci5: command tx timeout [ 91.119610] Bluetooth: hci3: command tx timeout [ 93.037664] Bluetooth: hci0: command tx timeout [ 93.039189] Bluetooth: hci1: command tx timeout [ 93.100898] Bluetooth: hci2: command tx timeout [ 93.102418] Bluetooth: hci4: command tx timeout [ 93.165037] Bluetooth: hci5: command tx timeout [ 93.166876] Bluetooth: hci3: command tx timeout [ 93.168460] Bluetooth: hci6: command tx timeout [ 93.168809] Bluetooth: hci7: command tx timeout [ 95.084863] Bluetooth: hci0: command tx timeout [ 95.084890] Bluetooth: hci1: command tx timeout [ 95.148837] Bluetooth: hci2: command tx timeout [ 95.148882] Bluetooth: hci4: command tx timeout [ 95.212907] Bluetooth: hci5: command tx timeout [ 95.212941] Bluetooth: hci6: command tx timeout [ 95.214458] Bluetooth: hci3: command tx timeout [ 95.214498] Bluetooth: hci7: command tx timeout [ 97.135851] Bluetooth: hci0: command tx timeout [ 97.136384] Bluetooth: hci1: command tx timeout [ 97.196841] Bluetooth: hci2: command tx timeout [ 97.197331] Bluetooth: hci4: command tx timeout [ 97.260821] Bluetooth: hci7: command tx timeout [ 97.262426] Bluetooth: hci6: command tx timeout [ 97.263076] Bluetooth: hci3: command tx timeout [ 97.263529] Bluetooth: hci5: command tx timeout [ 151.735937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.742118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.745643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.751326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.751494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.755219] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.756784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.758123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.773118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.776250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.776750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.778466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.780427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.783957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.801357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.803185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.807985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.812244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.824364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.825677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.828691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.829699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.832831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.834263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.835285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.850341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.855748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.861058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.865093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.869198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.877128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.883769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.889598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.915522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.916352] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.917585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.956979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.961866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.962598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.982402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.983798] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.984963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.990033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.992639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.993599] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.994699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.999942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.001558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.900942] Bluetooth: hci0: command tx timeout [ 153.901650] Bluetooth: hci1: command tx timeout [ 153.964921] Bluetooth: hci4: command tx timeout [ 154.028833] Bluetooth: hci5: command tx timeout [ 154.029594] Bluetooth: hci2: command tx timeout [ 154.157904] Bluetooth: hci7: command tx timeout [ 154.158701] Bluetooth: hci3: command tx timeout [ 154.220955] Bluetooth: hci6: command tx timeout [ 155.949266] Bluetooth: hci0: command tx timeout [ 155.950230] Bluetooth: hci1: command tx timeout [ 156.012983] Bluetooth: hci4: command tx timeout [ 156.077805] Bluetooth: hci5: command tx timeout [ 156.078286] Bluetooth: hci2: command tx timeout [ 156.204831] Bluetooth: hci3: command tx timeout [ 156.205309] Bluetooth: hci7: command tx timeout [ 156.269811] Bluetooth: hci6: command tx timeout [ 157.997832] Bluetooth: hci1: command tx timeout [ 157.998350] Bluetooth: hci0: command tx timeout [ 158.060908] Bluetooth: hci4: command tx timeout [ 158.125882] Bluetooth: hci5: command tx timeout [ 158.126360] Bluetooth: hci2: command tx timeout [ 158.254923] Bluetooth: hci7: command tx timeout [ 158.255417] Bluetooth: hci3: command tx timeout [ 158.317797] Bluetooth: hci6: command tx timeout [ 160.044825] Bluetooth: hci0: command tx timeout [ 160.045338] Bluetooth: hci1: command tx timeout [ 160.109827] Bluetooth: hci4: command tx timeout [ 160.173843] Bluetooth: hci2: command tx timeout [ 160.174314] Bluetooth: hci5: command tx timeout [ 160.300898] Bluetooth: hci3: command tx timeout [ 160.301391] Bluetooth: hci7: command tx timeout [ 160.364878] Bluetooth: hci6: command tx timeout [ 213.817275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.822119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.824605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.833870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.835961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.838129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.014002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.015662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.017990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.024466] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.026918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.028298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.029393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.035227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.036504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.043365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.051204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.053008] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.136320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.147011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.152324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.161155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.163315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.164685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.227462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.242867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.243849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.249990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.252347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.262179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.277965] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.278779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.281238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.281568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.283438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.285367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.450479] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.466241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.466289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.468415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.483128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.486102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.522070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.523874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.525523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.528125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.538814] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.564647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.853613] Bluetooth: hci0: command tx timeout [ 216.109857] Bluetooth: hci2: command tx timeout [ 216.110934] Bluetooth: hci1: command tx timeout [ 216.236828] Bluetooth: hci3: command tx timeout [ 216.493865] Bluetooth: hci4: command tx timeout [ 216.496022] Bluetooth: hci5: command tx timeout [ 216.630804] Bluetooth: hci6: command tx timeout [ 216.631641] Bluetooth: hci7: command tx timeout [ 217.902095] Bluetooth: hci0: command tx timeout [ 218.158002] Bluetooth: hci1: command tx timeout [ 218.158530] Bluetooth: hci2: command tx timeout [ 218.285844] Bluetooth: hci3: command tx timeout [ 218.541807] Bluetooth: hci4: command tx timeout [ 218.542355] Bluetooth: hci5: command tx timeout [ 218.669142] Bluetooth: hci7: command tx timeout [ 218.669642] Bluetooth: hci6: command tx timeout [ 219.950614] Bluetooth: hci0: command tx timeout [ 220.205897] Bluetooth: hci1: command tx timeout [ 220.206403] Bluetooth: hci2: command tx timeout [ 220.334736] Bluetooth: hci3: command tx timeout [ 220.588854] Bluetooth: hci4: command tx timeout [ 220.589392] Bluetooth: hci5: command tx timeout [ 220.717791] Bluetooth: hci7: command tx timeout [ 220.718287] Bluetooth: hci6: command tx timeout [ 221.997797] Bluetooth: hci0: command tx timeout [ 222.254788] Bluetooth: hci2: command tx timeout [ 222.256496] Bluetooth: hci1: command tx timeout [ 222.380804] Bluetooth: hci3: command tx timeout [ 222.636827] Bluetooth: hci5: command tx timeout [ 222.637334] Bluetooth: hci4: command tx timeout [ 222.764917] Bluetooth: hci6: command tx timeout [ 222.765400] Bluetooth: hci7: command tx timeout [ 276.332544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.334467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.335887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.339159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.374034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.376087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.378905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.381307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.382292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.383257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.385956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.397580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.405916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.407448] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.408451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.414095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.424456] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.427009] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.459551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.463148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.464629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.469396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.470467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.472566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.476487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.478906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.486291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.489339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.492743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.502017] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.504839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.511975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.517454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.541997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.545894] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.553925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.555615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.563606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.565030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.567003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.584501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.585651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.589479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.591149] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.592423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.643963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.668003] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.679647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.446920] Bluetooth: hci1: command tx timeout [ 278.448303] Bluetooth: hci0: command tx timeout [ 278.509811] Bluetooth: hci4: command tx timeout [ 278.509906] Bluetooth: hci2: command tx timeout [ 278.573102] Bluetooth: hci5: command tx timeout [ 278.574141] Bluetooth: hci3: command tx timeout [ 278.700816] Bluetooth: hci7: command tx timeout [ 278.767928] Bluetooth: hci6: command tx timeout [ 280.492845] Bluetooth: hci1: command tx timeout [ 280.494713] Bluetooth: hci0: command tx timeout [ 280.557022] Bluetooth: hci4: command tx timeout [ 280.557047] Bluetooth: hci2: command tx timeout [ 280.620882] Bluetooth: hci3: command tx timeout [ 280.620917] Bluetooth: hci5: command tx timeout [ 280.764728] Bluetooth: hci7: command tx timeout [ 280.813271] Bluetooth: hci6: command tx timeout [ 282.540969] Bluetooth: hci0: command tx timeout [ 282.542395] Bluetooth: hci1: command tx timeout [ 282.605097] Bluetooth: hci2: command tx timeout [ 282.605141] Bluetooth: hci4: command tx timeout [ 282.668795] Bluetooth: hci5: command tx timeout [ 282.669941] Bluetooth: hci3: command tx timeout [ 282.797776] Bluetooth: hci7: command tx timeout [ 282.860819] Bluetooth: hci6: command tx timeout [ 284.588956] Bluetooth: hci1: command tx timeout [ 284.589189] Bluetooth: hci0: command tx timeout [ 284.653873] Bluetooth: hci4: command tx timeout [ 284.653898] Bluetooth: hci2: command tx timeout [ 284.717127] Bluetooth: hci3: command tx timeout [ 284.718626] Bluetooth: hci5: command tx timeout [ 284.844840] Bluetooth: hci7: command tx timeout [ 284.908853] Bluetooth: hci6: command tx timeout [ 338.526879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.534635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.537416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.582011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.586274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.594024] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.684935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.689957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.692293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.699086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.703537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.706576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.749350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.756192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.761864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.762768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.774019] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.775005] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.780627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.786972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.804952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.806770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.812380] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.813402] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.815396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.817655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.820542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.827466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.827513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.832431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.833621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.837222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.838538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.844233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.845994] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.847119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.918298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.927949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.932818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.934905] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.949617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.964467] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.972135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.978108] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.980031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.982304] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.050996] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.059918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.653889] Bluetooth: hci0: command tx timeout [ 340.781006] Bluetooth: hci1: command tx timeout [ 340.909770] Bluetooth: hci2: command tx timeout [ 340.909975] Bluetooth: hci3: command tx timeout [ 340.911645] Bluetooth: hci4: command tx timeout [ 340.913467] Bluetooth: hci5: command tx timeout [ 341.037811] Bluetooth: hci7: command tx timeout [ 341.164817] Bluetooth: hci6: command tx timeout [ 342.702744] Bluetooth: hci0: command tx timeout [ 342.828945] Bluetooth: hci1: command tx timeout [ 342.957009] Bluetooth: hci5: command tx timeout [ 342.958454] Bluetooth: hci3: command tx timeout [ 342.960057] Bluetooth: hci4: command tx timeout [ 342.961382] Bluetooth: hci2: command tx timeout [ 343.084765] Bluetooth: hci7: command tx timeout [ 343.212935] Bluetooth: hci6: command tx timeout [ 344.749083] Bluetooth: hci0: command tx timeout [ 344.876834] Bluetooth: hci1: command tx timeout [ 345.004791] Bluetooth: hci5: command tx timeout [ 345.006353] Bluetooth: hci4: command tx timeout [ 345.006400] Bluetooth: hci3: command tx timeout [ 345.007768] Bluetooth: hci2: command tx timeout [ 345.132758] Bluetooth: hci7: command tx timeout [ 345.262742] Bluetooth: hci6: command tx timeout [ 346.796769] Bluetooth: hci0: command tx timeout [ 346.925013] Bluetooth: hci1: command tx timeout [ 347.052835] Bluetooth: hci5: command tx timeout [ 347.052890] Bluetooth: hci3: command tx timeout [ 347.054584] Bluetooth: hci2: command tx timeout [ 347.054633] Bluetooth: hci4: command tx timeout [ 347.181830] Bluetooth: hci7: command tx timeout [ 347.308770] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:20:27 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=000000000000000f RCX=ffffffff812ef5ee RDX=fffffbfff0fda9d5 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff88802cf31b80 RSP=ffff88802cdbf920 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=00000000000c2f81 R12=ffff88802cf325e8 R13=44189a6c92aec889 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812ef5f6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563dc4718008 CR3=000000003019e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000019d RBX=dffffc0000000000 RCX=ffffffff81856990 RDX=ffff888013ee1b80 RSI=ffffffff818569a3 RDI=0000000000000004 RBP=ffffea00001dc840 RSP=ffff888022af78f8 R8 =0000000000000000 R9 =fffff9400003b908 R10=000000000000019d R11=00000000000007e0 R12=000000000000019d R13=000000000000000a R14=0000000000000009 R15=00000000000001fd RIP=ffffffff818569a8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe07a670438 CR3=000000000ef86000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000