Warning: Permanently added '[localhost]:51439' (ECDSA) to the list of known hosts. 2024/11/06 14:36:48 fuzzer started 2024/11/06 14:36:49 dialing manager at localhost:46317 syzkaller login: [ 75.417942] cgroup: Unknown subsys name 'net' [ 75.595690] cgroup: Unknown subsys name 'cpuset' [ 75.620607] cgroup: Unknown subsys name 'rlimit' 2024/11/06 14:37:14 syscalls: 201 2024/11/06 14:37:14 code coverage: enabled 2024/11/06 14:37:14 comparison tracing: enabled 2024/11/06 14:37:14 extra coverage: enabled 2024/11/06 14:37:14 setuid sandbox: enabled 2024/11/06 14:37:14 namespace sandbox: enabled 2024/11/06 14:37:14 Android sandbox: enabled 2024/11/06 14:37:14 fault injection: enabled 2024/11/06 14:37:14 leak checking: enabled 2024/11/06 14:37:14 net packet injection: enabled 2024/11/06 14:37:14 net device setup: enabled 2024/11/06 14:37:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/06 14:37:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/06 14:37:14 USB emulation: enabled 2024/11/06 14:37:14 hci packet injection: enabled 2024/11/06 14:37:14 wifi device emulation: enabled 2024/11/06 14:37:14 802.15.4 emulation: enabled 2024/11/06 14:37:14 fetching corpus: 0, signal 0/0 (executing program) 2024/11/06 14:37:16 starting 8 fuzzer processes 14:37:16 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x375000, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/85, 0x55) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @xdp={0x2c, 0xa, 0x0, 0x21}, 0xe8, 0x0, 0x0, 0x0, 0x25bc, 0x0, 0x4, 0x89e1, 0x433}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', r1, 0x8, 0x40, 0x0, 0x3, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x7f, 0x29, 0x0, @empty, @loopback, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000280)=0x3c25, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000300)={0x24, @long={0x3, 0x2}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x8, 0x8000, 0xa26b, 0x0, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x7, 0x9, "91926bf75e10ae"}]}}}}}) clock_gettime(0x3, &(0x7f00000003c0)) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000440)=0x4, 0x4) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000480)) r5 = perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x8, 0x0, 0x40, 0x6, 0x0, 0x3, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x699, 0xffffffffffff38e4}, 0x2013, 0x46, 0xd2a0, 0x5, 0x40, 0x80000001, 0x6, 0x0, 0x43, 0x0, 0x3}, 0x0, 0xc, r0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) ioctl$SNAPSHOT_FREE(r0, 0x3305) accept(0xffffffffffffffff, &(0x7f0000000540)=@generic, &(0x7f00000005c0)=0x80) 14:37:16 executing program 2: write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0xad, 0x20, 0x81}, 0x2f) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc9, {0x4, 0x9, 0xff7f, 0x7, 0x7, 0x9}, {0x0, 0x0, 0x29, 0x1f, 0x8, 0x1}}}}, 0x25) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/hci\x00') write$bt_hci(r2, &(0x7f0000000100)={0x1, @reject_conn_req={{0x40a, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}}}, 0xb) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) r6 = openat$cgroup_pressure(r2, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) r7 = eventfd2(0x80000000, 0xc0800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000002c0)={0xfffffff7, 0x0, &(0x7f0000000280)=[r0, r5, r7, r6, r3, r4, r3]}, 0x7) r8 = syz_io_uring_setup(0x60f1, &(0x7f0000000300)={0x0, 0x4239, 0x1, 0x3, 0x15c, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x11) r9 = openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000500), 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000580), 0x2, 0x0) 14:37:16 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x840, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100), 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) write$snapshot(r3, &(0x7f00000001c0)="9630aa3173a6ba254407cb8d76152363d2cd19ba024b9e8c724ad7c0c92a345571a5062be9e2708142c8ef2f6539836400a43c57ff0d535763d2fe4cceeba9dba221dd4c21b31d6e339636743c79f87d97d18516790b4787a46dad3f6344c83a912ce096d8a673daf4600570ef2c604de50553cc4a95d1009f4d763d6214b8cfdca2b678654d8627ffd97f3983081ba90044dcb59bb1d85eeb0b21a09b2e87cf093d08ab8846823eff3ed90fccbea72d53f80d2d04f39524114994aeb3ab7988941fbfe6e46ea79f855799d290fab5dc5fb0128784f609acd4f734c6e1e2a6349dc723a4ad1c31e303d11d62dd", 0xed) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r4, 0x0, &(0x7f00000002c0)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000300)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) bind$bt_sco(r1, &(0x7f00000003c0), 0x8) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'tunl0\x00', r2, 0x1, 0x10, 0x4, 0x4, {{0x28, 0x4, 0x1, 0x28, 0xa0, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x1f, 0xc9, [@local, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x1d, 0x0, [{0x2, 0x2}, {0x6, 0xf, "a82de89eea8804cbb2dcd03fa7"}, {0x5, 0x6, "9ad25a7b"}]}, @end, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0xa, [{@loopback, 0x4}, {@rand_addr=0x64010102, 0x1140}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xff}]}, @ssrr={0x89, 0xb, 0x60, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0x59, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x8f, 0x0, 0x0, [0x9, 0x6, 0xfff, 0xfffffffa]}]}}}}}) r6 = getpgid(0xffffffffffffffff) write$cgroup_pid(r1, &(0x7f0000000540)=r6, 0x12) socket(0x1, 0x4, 0x6) connect$bt_sco(r3, &(0x7f0000000580), 0x8) 14:37:16 executing program 3: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000, 0x6c, 0x0, 0x3, 0x9, 0x15, "62ee28be7f0213c10ea91e7cedff132e3da03b85f1987da081c1b913e16a9e4ee252d0baad70c37d0e22d1726ece7c406731c78fad9b500aaa2dc1956c7b1d23", "61ed1e7be1a6d13b03f7beb258b9b50cb7fef588a609ed8e50ad100c8d92c9cc422ae9637756a490f80faf1789d67cd56fff81c6e45ef086bde412ee795bf379", "f355063ebf8a059309b0f8bd69c21b0e3ccc2ac50fefea83dcecc4db84845180", [0x4, 0x5]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xc391, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xb04) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4869, 0x1, 0x0, 0x2, 0x19, 0x11, "f99a91cb8d745060df09433a0408af0fb2e1917b4c57bb005b4c9beb5f350c264b0bd93a92fe8ae891248ebd4973d9e9fcbe4280519b5ad2f5c76ad6b594af27", "3d322200c410e3b3718e474a8aa1f0371dc488aa85f7e4c41966889b103309ae2a273857b78b14382290379ce2f70f4036868d9de280d17de91cd1d1b5d764ac", "8b379237641516db03d451efe7c5b5ddf020b0e8e9ff20119808137bc07398d3", [0x4, 0x5]}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000240)="341a1250d9f1874505a5628faf6c69e706e614a32595864d98e3eb07e4c9378a5af3917df72566ca54f79608ab6c9a62761cdff4934108c0bd5239ca2758392401b6da745055da211ed0e7fb5b096d5c58d29abfb01b3fc80a60700652666227467ae1201c6bbaa4d8554965bac23f0d52", 0x71, 0x7ff, &(0x7f0000000300)={r1, r2+60000000}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x7fe0000000, 0x0, 0xb, 0xf, 0x10, "d8c89e728a2906aa33047b1df8a378bee853a3e5bee142460fb9a5adb2a4b166d234326a0798b278871368a40d3dda44ec9fef620a9e820cc1df4094d5c16a82", "14e98389eeaca473d022b05c0e7e4b63b57eda7dcde9e9f9e79b749bb364ae8434b0cd468e84c5306822b91d62a46fa92fb16162b013a8d3d68bc0b6fb65de78", "5d4ccb378cd6650f6677c73de8def0c94b2132d6a5bb0edaf2a712c99272f1e3", [0x5, 0x10000]}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000440)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0xfffffffffffffffd) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x20, 0xfffffffffffffffa, 0x20, 0x5}, 0x48) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000500)={0x6, 0xfffffff9}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x7, 0x3f, 0x80, 0x0, 0x0, 0x5, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x9}, 0x400, 0x8, 0x8, 0x5, 0x0, 0x1, 0xd5, 0x0, 0x1, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000005c0)={0x0, {}, 0x0, {}, 0x5, 0x4, 0x4, 0xc, "06aa8f27cf33b8d7f52cac98561cfca07819b0d5465ac939aa08ae23260d9f5ec99f3c3b208e941251a07d10baf47cba25a23c2cb633d45ddf7e63d573159352", "2c8e550e24b04978d317aa5d694862b3a50fa612ceb4c24d85481465a8b8c94b", [0x40, 0x5]}) syz_extract_tcp_res$synack(&(0x7f0000000680), 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/unix\x00') ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000700)) [ 102.445311] audit: type=1400 audit(1730903836.823:7): avc: denied { execmem } for pid=277 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:37:16 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') connect$802154_dgram(r1, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8000, 0x60, 0xfffffffd, 0xca, {{0x2e, 0x4, 0x2, 0x4, 0xb8, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x23, 0xe3, [@multicast1, @broadcast, @broadcast, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0x2, [{@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x4}]}, @generic={0x86, 0xf, "8a7e95079c063035433d4aad8c"}, @timestamp_prespec={0x44, 0x2c, 0x39, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x2df}, {@private=0xa010102, 0x3ff}, {@local, 0x7ff}, {@loopback, 0x100}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x3c}]}, @rr={0x7, 0xb, 0x2c, [@empty, @local]}, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x3}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x3a0, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x338, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x2a4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}]}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "91f24c07e267a45ac96c0816c6315ed5373c1100f8d88af4cd86d0f49d6cef0f"}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf264}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4004005}, 0xc0) r3 = socket(0x0, 0x4, 0x20) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r3) write$bt_hci(r1, &(0x7f0000000700)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x7, 0x9, 0x1f, 0x1f, "d810c0a058093fcc2f776550bede587397d0a9447fb5db3e5898abc9020aa7"}}}, 0x27) r5 = socket(0x21, 0x80000, 0x80000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', r2, 0x2f, 0x1, 0x1, 0x0, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x40, 0x7800, 0x0, 0xcb}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x700, 0x701, 0x800, 0x7, {{0x35, 0x4, 0x1, 0x3e, 0xd4, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, {[@rr={0x7, 0xb, 0x1f, [@multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0xea, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x1}, {@local, 0x8000}, {@private=0xa010101, 0x10000}, {@empty, 0x2}, {@broadcast, 0x68e}]}, @generic={0x0, 0xf, "9fc9b31005bc202ccad972a79f"}, @timestamp_addr={0x44, 0xc, 0xda, 0x1, 0xb, [{@remote, 0xffffff00}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x69, [@loopback]}, @cipso={0x86, 0x4e, 0x3, [{0x5, 0xa, "e47cd4a6c39b6df8"}, {0x2, 0x7, "4b9fd3194f"}, {0x7, 0x3, "9e"}, {0x1, 0x2}, {0x1, 0xb, "a18174afa5b0cebb2f"}, {0x0, 0xe, "68d3442125265290f3d0807a"}, {0x0, 0xf, "ed0196e903a9fcb54a17ebf0fb"}, {0x2, 0xa, "64c807924ebe15f3"}]}, @cipso={0x86, 0xa, 0x1, [{0x0, 0x4, 'R0'}]}]}}}}}) getitimer(0x1, &(0x7f0000000940)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000a80)={'gretap0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x8000, 0x1, 0x4, 0xfffffff5, {{0x1e, 0x4, 0x1, 0x13, 0x78, 0x66, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x0, [{@remote, 0x101}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x6}]}, @timestamp_prespec={0x44, 0x1c, 0x7, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x549}, {@empty, 0x7}, {@local, 0x5}]}, @timestamp={0x44, 0xc, 0x6d, 0x0, 0x4, [0x0, 0x6]}, @lsrr={0x83, 0x1f, 0xd4, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x43}, @remote, @multicast2, @broadcast, @private=0xa010102]}, @ssrr={0x89, 0x3, 0x63}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000810) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000cc0)={0x0, 0x7f, 0x7, 0x200}) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000d00)) 14:37:16 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280), 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/softnet_stat\x00') pidfd_send_signal(r3, 0x0, &(0x7f0000000300)={0x1e, 0x1, 0x9}, 0x0) mq_open(&(0x7f0000000380)='batadv\x00', 0x40, 0x22, &(0x7f00000003c0)={0x7fffffff, 0x4, 0x7ff, 0x7fff}) syz_io_uring_setup(0x3da3, &(0x7f0000000400)={0x0, 0xff47, 0x20, 0x3, 0x199, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x75e5b1fe}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4048010) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x700, 0x80, 0x1f, 0x10000, {{0x24, 0x4, 0x3, 0x2d, 0x90, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x17, 0xce, [@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @loopback, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x80, 0x1, 0x7, [{@remote, 0x7ff}]}, @ssrr={0x89, 0x13, 0x95, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @cipso={0x86, 0x46, 0x2, [{0x5, 0x12, "79c336acb844e63a2a25f06a9a987fbb"}, {0x2, 0x8, "3ff292494c5a"}, {0x0, 0xa, "f3125b26a1d032a2"}, {0x5, 0x12, "8e7704397e651d5fd49d78b502731565"}, {0x5, 0x6, "9786628c"}, {0x7, 0x2}, {0x6, 0x2}]}]}}}}}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000700)=0x2, 0x4) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000740)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000880)=0x7f, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='limits\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000940)={'gre0\x00', r6, 0x700, 0x7800, 0x4, 0xa7dd, {{0x3f, 0x4, 0x0, 0x7, 0xfc, 0x68, 0x0, 0x4, 0x0, 0x0, @private=0xa010102, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0x4, [{@private=0xa010102, 0x100}, {@multicast1, 0x8}, {@local, 0x6}]}, @timestamp_addr={0x44, 0x4, 0xda, 0x1, 0xc}, @timestamp={0x44, 0x14, 0x45, 0x0, 0x4, [0x3ff, 0x44, 0xb7, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xfd, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@multicast1, 0x7}, {@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x80000}, {@multicast1, 0xcb}]}, @rr={0x7, 0x13, 0xc5, [@dev={0xac, 0x14, 0x14, 0x3c}, @empty, @empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x3d, 0x1, 0x7, [{@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x40}, {@rand_addr=0x64010102, 0x401}, {@local, 0x4}, {@private=0xa010100, 0xd304}]}, @timestamp={0x44, 0x2c, 0x8a, 0x0, 0x8, [0x9, 0x342b, 0x6, 0x3f1, 0x1ff, 0xff, 0x330, 0x5, 0x7fffffff, 0x0]}, @timestamp={0x44, 0xc, 0x4a, 0x0, 0x3, [0x40, 0x2]}]}}}}}) 14:37:16 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x44000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x7f, 0x10001, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @local, {[@timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x2, [{@broadcast, 0x400000}, {@remote, 0x6}, {@remote, 0x3}, {@multicast1, 0x2ce2235e}, {@loopback, 0x9}]}, @lsrr={0x83, 0xb, 0x5, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @end]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48004}, 0x40000) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000780)={0xffffff7f, 0x2, 0x10000, 0x1}) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000940)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000040) syz_genetlink_get_family_id$net_dm(&(0x7f0000000a80), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0), r1) 14:37:16 executing program 7: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = fork() r2 = getpgid(r1) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xd9b8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0xfffffffffffffffa) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = syz_open_procfs(r2, &(0x7f00000000c0)='limits\x00') openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000100), 0x2, 0x0) r5 = accept(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x9, 0x5, {{0x12, 0x4, 0x3, 0x31, 0x48, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x26, 0x3, [{0x1, 0xe, "6ee49769da28274d04bb6cdd"}, {0x0, 0x3, '8'}, {0x7, 0x3, 'd'}, {0x2, 0xc, "197c815000f2b4c4fb79"}]}, @rr={0x7, 0xb, 0xcf, [@loopback, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r6, 0x29, 0x7, 0x3, 0xffff, 0x8, @private0, @empty, 0x7800, 0x8000, 0xff, 0x3}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) [ 103.869370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.871852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.874762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.878773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.885348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.887387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.889759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.893996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.897023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.900597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.903359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.905399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.907640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.922523] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.924631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.933683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.937226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.940705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.961304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.966175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.973248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.999606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.005141] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.005200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.008116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.009597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.011326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.012488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.014625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.016643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.019677] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.037836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.039742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.040139] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 104.043116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.045498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.045538] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.049419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.056510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.059460] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.061982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.067275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.069645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.072654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.077143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.086803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.107367] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.112196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.962256] Bluetooth: hci2: command tx timeout [ 105.962260] Bluetooth: hci1: command tx timeout [ 106.027365] Bluetooth: hci0: command tx timeout [ 106.089990] Bluetooth: hci6: command tx timeout [ 106.090984] Bluetooth: hci3: command tx timeout [ 106.154023] Bluetooth: hci7: command tx timeout [ 106.155053] Bluetooth: hci5: command tx timeout [ 106.155174] Bluetooth: hci4: command tx timeout [ 108.010962] Bluetooth: hci2: command tx timeout [ 108.010981] Bluetooth: hci1: command tx timeout [ 108.075008] Bluetooth: hci0: command tx timeout [ 108.139169] Bluetooth: hci3: command tx timeout [ 108.139356] Bluetooth: hci6: command tx timeout [ 108.202269] Bluetooth: hci4: command tx timeout [ 108.203108] Bluetooth: hci5: command tx timeout [ 108.203264] Bluetooth: hci7: command tx timeout [ 110.061032] Bluetooth: hci2: command tx timeout [ 110.061610] Bluetooth: hci1: command tx timeout [ 110.121999] Bluetooth: hci0: command tx timeout [ 110.186091] Bluetooth: hci3: command tx timeout [ 110.186175] Bluetooth: hci6: command tx timeout [ 110.250069] Bluetooth: hci7: command tx timeout [ 110.251372] Bluetooth: hci5: command tx timeout [ 110.251924] Bluetooth: hci4: command tx timeout [ 112.106094] Bluetooth: hci2: command tx timeout [ 112.106203] Bluetooth: hci1: command tx timeout [ 112.170030] Bluetooth: hci0: command tx timeout [ 112.234048] Bluetooth: hci3: command tx timeout [ 112.235573] Bluetooth: hci6: command tx timeout [ 112.298028] Bluetooth: hci4: command tx timeout [ 112.298064] Bluetooth: hci5: command tx timeout [ 112.299356] Bluetooth: hci7: command tx timeout [ 166.423745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.424904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.435451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.448370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.452680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.456582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.458217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.460478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.463679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.465234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.466136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.468213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.470696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.472681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.476173] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.478124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.522079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.528272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.536397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.543686] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.545081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.546336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.547760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.553154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.557482] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.557599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.560270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.562059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.565063] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.566791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.577259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.604510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.605339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.610262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.612681] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.614128] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.615167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.615337] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.618823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.620606] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.621709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.629373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.648624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.664134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.679578] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 166.683168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 166.695191] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.731703] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.554025] Bluetooth: hci1: command tx timeout [ 168.554078] Bluetooth: hci3: command tx timeout [ 168.618010] Bluetooth: hci2: command tx timeout [ 168.618040] Bluetooth: hci5: command tx timeout [ 168.618684] Bluetooth: hci0: command tx timeout [ 168.745975] Bluetooth: hci7: command tx timeout [ 168.747235] Bluetooth: hci4: command tx timeout [ 168.810133] Bluetooth: hci6: command tx timeout [ 170.602344] Bluetooth: hci3: command tx timeout [ 170.602917] Bluetooth: hci1: command tx timeout [ 170.666021] Bluetooth: hci5: command tx timeout [ 170.666506] Bluetooth: hci0: command tx timeout [ 170.667308] Bluetooth: hci2: command tx timeout [ 170.794028] Bluetooth: hci4: command tx timeout [ 170.794532] Bluetooth: hci7: command tx timeout [ 170.858041] Bluetooth: hci6: command tx timeout [ 172.649962] Bluetooth: hci1: command tx timeout [ 172.652896] Bluetooth: hci3: command tx timeout [ 172.714088] Bluetooth: hci2: command tx timeout [ 172.714572] Bluetooth: hci0: command tx timeout [ 172.714987] Bluetooth: hci5: command tx timeout [ 172.843143] Bluetooth: hci7: command tx timeout [ 172.843168] Bluetooth: hci4: command tx timeout [ 172.905938] Bluetooth: hci6: command tx timeout [ 174.699083] Bluetooth: hci3: command tx timeout [ 174.700002] Bluetooth: hci1: command tx timeout [ 174.762116] Bluetooth: hci0: command tx timeout [ 174.762333] Bluetooth: hci2: command tx timeout [ 174.763515] Bluetooth: hci5: command tx timeout [ 174.889959] Bluetooth: hci7: command tx timeout [ 174.891074] Bluetooth: hci4: command tx timeout [ 174.957992] Bluetooth: hci6: command tx timeout [ 228.479347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.480641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.483383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.487457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.489214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.490421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.600356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.606918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.612246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.615396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.616917] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.618101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.620084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.625240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.630722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.647700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.649469] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.650534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.732701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.734937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.736404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.744709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.753173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.755614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.759236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.762195] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.769907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.795606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.800290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.801857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.803321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.804152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.808212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.818823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.827754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.832237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.836525] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.838084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.843081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.848121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.853501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.855246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.859747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.862485] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.871613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.876690] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.882311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.885210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.507039] Bluetooth: hci0: command tx timeout [ 230.697968] Bluetooth: hci1: command tx timeout [ 230.699585] Bluetooth: hci2: command tx timeout [ 230.849930] Bluetooth: hci4: command tx timeout [ 230.953982] Bluetooth: hci3: command tx timeout [ 230.955393] Bluetooth: hci6: command tx timeout [ 230.957182] Bluetooth: hci5: command tx timeout [ 231.018046] Bluetooth: hci7: command tx timeout [ 232.554918] Bluetooth: hci0: command tx timeout [ 232.745927] Bluetooth: hci2: command tx timeout [ 232.746950] Bluetooth: hci1: command tx timeout [ 232.874304] Bluetooth: hci4: command tx timeout [ 233.002095] Bluetooth: hci5: command tx timeout [ 233.002625] Bluetooth: hci3: command tx timeout [ 233.002661] Bluetooth: hci6: command tx timeout [ 233.066937] Bluetooth: hci7: command tx timeout [ 234.603122] Bluetooth: hci0: command tx timeout [ 234.795242] Bluetooth: hci1: command tx timeout [ 234.795362] Bluetooth: hci2: command tx timeout [ 234.922887] Bluetooth: hci4: command tx timeout [ 235.050897] Bluetooth: hci6: command tx timeout [ 235.051192] Bluetooth: hci5: command tx timeout [ 235.051382] Bluetooth: hci3: command tx timeout [ 235.114874] Bluetooth: hci7: command tx timeout [ 236.650893] Bluetooth: hci0: command tx timeout [ 236.842109] Bluetooth: hci2: command tx timeout [ 236.843491] Bluetooth: hci1: command tx timeout [ 236.969906] Bluetooth: hci4: command tx timeout [ 237.097986] Bluetooth: hci3: command tx timeout [ 237.100890] Bluetooth: hci5: command tx timeout [ 237.100916] Bluetooth: hci6: command tx timeout [ 237.161949] Bluetooth: hci7: command tx timeout [ 290.848136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.850075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.851358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.851599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.853436] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.854535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.856665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.859135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.860722] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.861996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.862486] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.864107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.950508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.952306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.954109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.956318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.957792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.969059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.970053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.982422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.983375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.984249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.990997] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 290.991892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.993779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.995371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.996418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.997510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.000419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.010595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.081294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.082806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.084668] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.088540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.092110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.093160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.139123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.140677] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.142469] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.144480] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.146055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.147256] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.150046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.151686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 291.152720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.244209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.257523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.269966] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.906132] Bluetooth: hci0: command tx timeout [ 292.907152] Bluetooth: hci1: command tx timeout [ 293.034904] Bluetooth: hci4: command tx timeout [ 293.036025] Bluetooth: hci3: command tx timeout [ 293.097966] Bluetooth: hci2: command tx timeout [ 293.162075] Bluetooth: hci7: command tx timeout [ 293.163206] Bluetooth: hci5: command tx timeout [ 293.353919] Bluetooth: hci6: command tx timeout [ 294.953972] Bluetooth: hci0: command tx timeout [ 294.954510] Bluetooth: hci1: command tx timeout [ 295.082376] Bluetooth: hci4: command tx timeout [ 295.082951] Bluetooth: hci3: command tx timeout [ 295.147010] Bluetooth: hci2: command tx timeout [ 295.210225] Bluetooth: hci5: command tx timeout [ 295.210719] Bluetooth: hci7: command tx timeout [ 295.402394] Bluetooth: hci6: command tx timeout [ 297.001933] Bluetooth: hci1: command tx timeout [ 297.002500] Bluetooth: hci0: command tx timeout [ 297.130091] Bluetooth: hci4: command tx timeout [ 297.130613] Bluetooth: hci3: command tx timeout [ 297.193893] Bluetooth: hci2: command tx timeout [ 297.259145] Bluetooth: hci7: command tx timeout [ 297.259644] Bluetooth: hci5: command tx timeout [ 297.450899] Bluetooth: hci6: command tx timeout [ 299.051963] Bluetooth: hci0: command tx timeout [ 299.052481] Bluetooth: hci1: command tx timeout [ 299.177968] Bluetooth: hci3: command tx timeout [ 299.178479] Bluetooth: hci4: command tx timeout [ 299.241899] Bluetooth: hci2: command tx timeout [ 299.306665] Bluetooth: hci5: command tx timeout [ 299.308032] Bluetooth: hci7: command tx timeout [ 299.498062] Bluetooth: hci6: command tx timeout [ 353.298071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.305073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.310054] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.313624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.316470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.317743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.337190] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.341101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.342254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.352667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.356270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.358179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.540777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.542455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.549122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.550496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.551362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.555303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.559172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.562603] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.565537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.573057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.575186] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 353.577684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.629387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.635377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.641072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.663695] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.673708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.676760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.683977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.700110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.702209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.705259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.706556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.711981] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 353.712224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.722286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.729247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.729316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.745207] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 353.751791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.781143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.787658] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.788733] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 353.790222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.826223] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 353.843100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.370374] Bluetooth: hci0: command tx timeout [ 355.433901] Bluetooth: hci1: command tx timeout [ 355.626908] Bluetooth: hci3: command tx timeout [ 355.629076] Bluetooth: hci2: command tx timeout [ 355.817953] Bluetooth: hci6: command tx timeout [ 355.819687] Bluetooth: hci4: command tx timeout [ 355.881908] Bluetooth: hci7: command tx timeout [ 355.882552] Bluetooth: hci5: command tx timeout [ 357.418993] Bluetooth: hci0: command tx timeout [ 357.482868] Bluetooth: hci1: command tx timeout [ 357.674919] Bluetooth: hci3: command tx timeout [ 357.675493] Bluetooth: hci2: command tx timeout [ 357.865936] Bluetooth: hci4: command tx timeout [ 357.866465] Bluetooth: hci6: command tx timeout [ 357.930932] Bluetooth: hci5: command tx timeout [ 357.931419] Bluetooth: hci7: command tx timeout [ 359.465893] Bluetooth: hci0: command tx timeout [ 359.530859] Bluetooth: hci1: command tx timeout [ 359.723083] Bluetooth: hci2: command tx timeout [ 359.723613] Bluetooth: hci3: command tx timeout [ 359.915032] Bluetooth: hci6: command tx timeout [ 359.915561] Bluetooth: hci4: command tx timeout [ 359.978064] Bluetooth: hci7: command tx timeout [ 359.978556] Bluetooth: hci5: command tx timeout [ 361.514172] Bluetooth: hci0: command tx timeout [ 361.577920] Bluetooth: hci1: command tx timeout [ 361.769940] Bluetooth: hci3: command tx timeout [ 361.770474] Bluetooth: hci2: command tx timeout [ 361.963054] Bluetooth: hci6: command tx timeout [ 361.963584] Bluetooth: hci4: command tx timeout [ 362.026089] Bluetooth: hci7: command tx timeout [ 362.026580] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:42:18 Registers: info registers vcpu 0 RAX=00000652a587ea06 RBX=00007fc01699a5f0 RCX=00007fc0169469e2 RDX=000000000000004f RSI=0000062198c1dae0 RDI=00007fc0169469dc RBP=00007ffe1ad12a80 RSP=00007ffe1ad128a0 R8 =00007fc016733030 R9 =0000000000000001 R10=00007fc0169de760 R11=00007fc016c3e510 R12=00007fc0169469dc R13=00007ffe1ad12a08 R14=00007fc016944980 R15=00007fc016c3e510 RIP=00007fc016c54c11 RFL=00000216 [----AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc016734540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc016c0b000 CR3=0000000031c32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000042494c4700352e32 XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff816a8dbd RDX=ffff88802a21d280 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea00002226a0 RSP=ffff888031a47b80 R8 =0000000000000000 R9 =fffff940000444d0 R10=0000000000000000 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=ffffea0000222680 R15=ffff888031a47d98 RIP=ffffffff8151d950 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc246bd368 CR3=0000000034130000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000