Warning: Permanently added '[localhost]:45290' (ECDSA) to the list of known hosts. 2024/11/06 17:09:09 fuzzer started 2024/11/06 17:09:09 dialing manager at localhost:46317 syzkaller login: [ 83.805720] cgroup: Unknown subsys name 'net' [ 83.947388] cgroup: Unknown subsys name 'cpuset' [ 83.962345] cgroup: Unknown subsys name 'rlimit' 2024/11/06 17:09:32 syscalls: 205 2024/11/06 17:09:32 code coverage: enabled 2024/11/06 17:09:32 comparison tracing: enabled 2024/11/06 17:09:32 extra coverage: enabled 2024/11/06 17:09:32 setuid sandbox: enabled 2024/11/06 17:09:32 namespace sandbox: enabled 2024/11/06 17:09:32 Android sandbox: enabled 2024/11/06 17:09:32 fault injection: enabled 2024/11/06 17:09:32 leak checking: enabled 2024/11/06 17:09:32 net packet injection: enabled 2024/11/06 17:09:32 net device setup: enabled 2024/11/06 17:09:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/06 17:09:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/06 17:09:32 USB emulation: enabled 2024/11/06 17:09:32 hci packet injection: enabled 2024/11/06 17:09:32 wifi device emulation: enabled 2024/11/06 17:09:32 802.15.4 emulation: enabled 2024/11/06 17:09:32 fetching corpus: 0, signal 0/0 (executing program) 2024/11/06 17:09:33 starting 8 fuzzer processes 17:09:33 executing program 0: setregid(0xee00, 0x0) setregid(0xee01, 0xee00) setresgid(0x0, 0xee00, 0x0) getgroups(0x3, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01, 0xee00]) getresgid(&(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x0) getgroups(0x2, &(0x7f0000001200)=[0xee00, 0x0]) getresgid(&(0x7f0000001280), &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x0) setgroups(0xa, &(0x7f0000001340)=[r0, 0x0, r2, 0xee01, 0xee01, 0xee00, 0xee00, 0xee01, r6, r8]) r9 = syz_open_dev$mouse(&(0x7f0000001380), 0x9, 0x20002) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) setresgid(r1, r7, r5) setgid(r2) getgroups(0x3, &(0x7f0000001400)=[r8, r3, r2]) setgid(r10) getresgid(&(0x7f0000001440)=0x0, &(0x7f0000001480), &(0x7f00000014c0)=0x0) setgid(r12) getgroups(0x2, &(0x7f0000001500)=[r11, r1]) getresgid(&(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)=0x0) getresgid(&(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)=0x0) getgroups(0x8, &(0x7f0000001740)=[r14, r15, r11, r16, r4, r13, 0xee01, r5]) 17:09:33 executing program 2: ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000)) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/120, 0x78) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000860) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = socket(0x2c, 0x1, 0x80000000) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x800) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r4 = socket(0x2a, 0x2, 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x6, 0x101800) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000400)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000440)) r6 = socket(0x2, 0x5, 0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 17:09:33 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x115000) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1e7000, 0x0) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x2, 0x2, 0x4, "41ef210454906283c845697e029b3b0f734b35ecb79617e7aa79ccefa95889c7b2719ee12c9ab67af7059bda6a5b81c68462b2b0f55ac36d265e11f134e0e580fc10a0529765375b2d59712503badef3e637cd77805acf2d12e398d204759ec2d104c391540539839ae7e414ff6fb830b37d7aec17de242529e221c0b620483aedcabe3c7922d1574312574ecd2aaeee60b5ce9bca04e1953fba4d7f14b5ab863e05532696978ce28174542ed2d2d90169ed241d7b74000410b5189089be4827dfe848789483659b4ee03e4ae5ef101a1cd9731d12fc74fc7d44da28eecb65bb51a5b5"}, 0xf3) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000001c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000280)={0x2, 0x200, 0x72, 0x7fff, 0x1004}) r4 = eventfd(0x80000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd=r4, 0x1f, 0x8000, 0x20, 0xb, 0x0, {0x1}}, 0x9) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000300)) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000340)) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000380)={0x3, 0x100, 0x80}) r5 = syz_open_dev$mouse(&(0x7f00000003c0), 0x40000000000000, 0x0) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000400)) r6 = syz_open_dev$hiddev(&(0x7f0000000440), 0x1, 0x9ed00) ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f0000000480)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4040040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10004085}, 0x4000080) [ 107.366459] audit: type=1400 audit(1730912973.704:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:09:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x686401) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x14000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x80000000) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index, 0x8001, 0x0, 0x1, 0x2}, 0x100) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x100000000, 0x113000) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000180)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000080}, 0x40000) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x512, 0x3ff, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast2, @broadcast, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0xb, [{@remote, 0x100}, {@multicast2, 0x5}, {@rand_addr=0x64010101, 0xc11}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r4, 0x10, 0x7800, 0xe2b, 0x80000000, {{0x1b, 0x4, 0x0, 0x33, 0x6c, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x12, 0x3, 0x3, [{@broadcast, 0x9}, {@loopback, 0x40}, {@broadcast, 0xfffffff9}, {@empty, 0x3}, {@loopback, 0x80000001}, {@broadcast, 0x6}]}, @lsrr={0x83, 0x23, 0xe8, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0xc}, @empty, @loopback, @private=0xa010101, @rand_addr=0x64010100, @empty]}]}}}}}) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000540)) r5 = syz_open_dev$sg(&(0x7f0000000580), 0x7f, 0x400) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000005c0)) syz_open_dev$sg(&(0x7f0000000600), 0x7, 0x210000) 17:09:33 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8020) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x178, 0x0, 0x612, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x33}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x30}, 0x4004000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20005090}, 0x4000080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r4) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x4050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x4004801) 17:09:33 executing program 5: epoll_create(0x8) epoll_create(0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x850d3040dcdfb4f5}, 0x10000800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040091) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044810}, 0x24008000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x47}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xbc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf02}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2768d204}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x280448d0}, 0x4000010) epoll_create(0x6) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7c7b985c}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x186a2c90d5721636) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x367d}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x20000081) 17:09:33 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x81, 0x260000) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x80000001, 0x400800) getsockname$packet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r4 = socket(0x3, 0xa, 0xffffffff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20098000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) write$bt_hci(r2, &(0x7f0000000380)={0x1, @write_local_name={{0xc13, 0xf8}, {"96d822ed4dcfb53a4ef5447abcecf8845175e491b58e11f572d6538617237607f4d8cbe2501723f7f52f4194ca89719553b689442c9ed6f8ffa0867ca15e92a0ce9b1d473d097c415b58d339f3027c14ec64682b642f8339e3f1944e79f6a156cfe5aac77035f1dbf339c6db7d627c461d375b4f30c4e2d5ecfd5ba92931a5c142d459667c2dd448f3dfe144ca0a0c6281c2283ca713c17b1fc36e4c9d5251dea2ef379ec9992119b4671429af553aea60a4c97b5cdcdcc1f7d0ad3efbb599512a02b2605f1d619aa82eb205cd97ffeaf144cc3c956dc7b6d5fe58c868de85c6038e2d66951b6c33798f9e6475149e669c5d888061d220b5"}}}, 0xfc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x600000006}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc014}, 0x20004810) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0xb02, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xa9bea5ae05de3330}, 0x8000) 17:09:33 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x2, 0x8, {}, 0x401, 0x2, 0x1}, 0x2) r0 = socket(0x1f, 0xa, 0x7fffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fb0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88cc}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x88, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x20}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff6c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa39}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x50}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe476}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4010) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r3 = syz_open_dev$mouse(&(0x7f0000000a00), 0x6, 0x100) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r2, 0x511, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x24000845) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000d40)={'tunl0\x00', 0x0, 0x7f00, 0x20, 0x9c, 0x254, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x68, 0x0, 0xfc, 0x2f, 0x0, @broadcast, @loopback, {[@end, @cipso={0x86, 0x26, 0x3, [{0x2, 0x12, "ba2e962fee352bb2b484268237835a25"}, {0x7, 0xe, "2bd689f1ea5818a78340f39a"}]}, @end, @ssrr={0x89, 0x1f, 0x95, [@private=0xa010101, @rand_addr=0x64010102, @local, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, @loopback]}, @noop, @generic={0x86, 0xb, "1f86c36878825d0a36"}, @noop, @timestamp={0x44, 0x10, 0x25, 0x0, 0x9, [0x80000000, 0x8, 0x100]}, @lsrr={0x83, 0x7, 0x16, [@private=0xa010102]}, @lsrr={0x83, 0x1f, 0xbe, [@rand_addr=0x64010100, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) socket(0x21, 0x800, 0xfc3) [ 108.784370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.787132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.788520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.796142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.800332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.801493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.827326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.837908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.840275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.846482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.850918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.853226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.956520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.975004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.978155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.983220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.988106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.991019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.993401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.999794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.000922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.005945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.006031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.008537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.010944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.012183] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.015816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.020116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.023852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.026590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.030193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.033304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.035437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.040938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.050290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.052868] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 109.054991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.056752] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.059905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.076890] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.078927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.095937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.099610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.103977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.116535] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 109.118887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.124582] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 109.126289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.867150] Bluetooth: hci0: command tx timeout [ 110.930831] Bluetooth: hci1: command tx timeout [ 111.123068] Bluetooth: hci5: command tx timeout [ 111.123797] Bluetooth: hci4: command tx timeout [ 111.124385] Bluetooth: hci3: command tx timeout [ 111.124992] Bluetooth: hci2: command tx timeout [ 111.186806] Bluetooth: hci7: command tx timeout [ 111.187736] Bluetooth: hci6: command tx timeout [ 112.915312] Bluetooth: hci0: command tx timeout [ 112.979778] Bluetooth: hci1: command tx timeout [ 113.171200] Bluetooth: hci3: command tx timeout [ 113.171807] Bluetooth: hci2: command tx timeout [ 113.172284] Bluetooth: hci4: command tx timeout [ 113.173524] Bluetooth: hci5: command tx timeout [ 113.235032] Bluetooth: hci7: command tx timeout [ 113.235565] Bluetooth: hci6: command tx timeout [ 114.962754] Bluetooth: hci0: command tx timeout [ 115.026822] Bluetooth: hci1: command tx timeout [ 115.218814] Bluetooth: hci5: command tx timeout [ 115.219359] Bluetooth: hci4: command tx timeout [ 115.220224] Bluetooth: hci2: command tx timeout [ 115.220732] Bluetooth: hci3: command tx timeout [ 115.284744] Bluetooth: hci7: command tx timeout [ 115.285304] Bluetooth: hci6: command tx timeout [ 117.010755] Bluetooth: hci0: command tx timeout [ 117.074854] Bluetooth: hci1: command tx timeout [ 117.266815] Bluetooth: hci2: command tx timeout [ 117.266869] Bluetooth: hci3: command tx timeout [ 117.267347] Bluetooth: hci4: command tx timeout [ 117.268117] Bluetooth: hci5: command tx timeout [ 117.330863] Bluetooth: hci6: command tx timeout [ 117.331719] Bluetooth: hci7: command tx timeout [ 171.440786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.446279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.448479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.455151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.457847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.460504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.493204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.497405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.503988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.506994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.512881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.514991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.517343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.521272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.525923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.528199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.530498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.536390] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.537876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.543026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.555428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.560143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.569266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.585317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.587356] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.588156] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.590872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.593065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.593255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.596518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.598350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.600841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.604950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.606906] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.612315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.617153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.619344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.624738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.627779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.630113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.649175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.653480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.675851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.682858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.685749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.687926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.701883] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.704080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.522835] Bluetooth: hci0: command tx timeout [ 173.586832] Bluetooth: hci1: command tx timeout [ 173.588421] Bluetooth: hci2: command tx timeout [ 173.714850] Bluetooth: hci6: command tx timeout [ 173.714974] Bluetooth: hci3: command tx timeout [ 173.784757] Bluetooth: hci4: command tx timeout [ 173.784882] Bluetooth: hci7: command tx timeout [ 173.847757] Bluetooth: hci5: command tx timeout [ 175.570732] Bluetooth: hci0: command tx timeout [ 175.635910] Bluetooth: hci2: command tx timeout [ 175.636017] Bluetooth: hci1: command tx timeout [ 175.762809] Bluetooth: hci3: command tx timeout [ 175.762828] Bluetooth: hci6: command tx timeout [ 175.828187] Bluetooth: hci7: command tx timeout [ 175.828755] Bluetooth: hci4: command tx timeout [ 175.890952] Bluetooth: hci5: command tx timeout [ 177.618767] Bluetooth: hci0: command tx timeout [ 177.682823] Bluetooth: hci2: command tx timeout [ 177.683327] Bluetooth: hci1: command tx timeout [ 177.810771] Bluetooth: hci6: command tx timeout [ 177.811711] Bluetooth: hci3: command tx timeout [ 177.876719] Bluetooth: hci7: command tx timeout [ 177.878202] Bluetooth: hci4: command tx timeout [ 177.938956] Bluetooth: hci5: command tx timeout [ 179.667939] Bluetooth: hci0: command tx timeout [ 179.730797] Bluetooth: hci2: command tx timeout [ 179.731278] Bluetooth: hci1: command tx timeout [ 179.859735] Bluetooth: hci3: command tx timeout [ 179.860220] Bluetooth: hci6: command tx timeout [ 179.922874] Bluetooth: hci7: command tx timeout [ 179.923938] Bluetooth: hci4: command tx timeout [ 179.987753] Bluetooth: hci5: command tx timeout [ 233.826207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.862858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.873283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.876061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.881238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.885491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.887978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.889795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.891370] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.895045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.896410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.897956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.930878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.949964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.982386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.983878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.989064] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.995767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.998450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.004046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.006145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.029934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.033609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.034889] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 234.036285] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 234.037417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 234.039725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 234.061442] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.065558] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 234.065604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.068023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.070600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.070926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.075956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.077118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.078561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.078609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.085953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.087197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.090002] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 234.091807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.097683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.124713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.128363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.132677] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.134982] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.157095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.167030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.922864] Bluetooth: hci1: command tx timeout [ 235.923983] Bluetooth: hci0: command tx timeout [ 236.114898] Bluetooth: hci2: command tx timeout [ 236.179147] Bluetooth: hci3: command tx timeout [ 236.180611] Bluetooth: hci6: command tx timeout [ 236.182317] Bluetooth: hci5: command tx timeout [ 236.182326] Bluetooth: hci7: command tx timeout [ 236.242805] Bluetooth: hci4: command tx timeout [ 237.970857] Bluetooth: hci1: command tx timeout [ 237.971392] Bluetooth: hci0: command tx timeout [ 238.163075] Bluetooth: hci2: command tx timeout [ 238.226742] Bluetooth: hci7: command tx timeout [ 238.227329] Bluetooth: hci3: command tx timeout [ 238.228184] Bluetooth: hci6: command tx timeout [ 238.228270] Bluetooth: hci5: command tx timeout [ 238.292672] Bluetooth: hci4: command tx timeout [ 240.018732] Bluetooth: hci1: command tx timeout [ 240.018748] Bluetooth: hci0: command tx timeout [ 240.213666] Bluetooth: hci2: command tx timeout [ 240.276538] Bluetooth: hci5: command tx timeout [ 240.277601] Bluetooth: hci7: command tx timeout [ 240.278118] Bluetooth: hci3: command tx timeout [ 240.278225] Bluetooth: hci6: command tx timeout [ 240.338779] Bluetooth: hci4: command tx timeout [ 242.067870] Bluetooth: hci1: command tx timeout [ 242.067893] Bluetooth: hci0: command tx timeout [ 242.258703] Bluetooth: hci2: command tx timeout [ 242.322745] Bluetooth: hci3: command tx timeout [ 242.323228] Bluetooth: hci6: command tx timeout [ 242.323748] Bluetooth: hci7: command tx timeout [ 242.324197] Bluetooth: hci5: command tx timeout [ 242.386951] Bluetooth: hci4: command tx timeout [ 295.866758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.868328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.870576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.875591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.880851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.883299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.980298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.984521] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.986526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.992279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.994595] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.996042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.099329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.106918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.112851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.119437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.122869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.124753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.230850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.243067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.244869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.248847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.249972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.254511] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.256299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.265324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.270674] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.273516] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.276219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.277508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.278838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.284897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.288845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.291154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.295425] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.299291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.299805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.300671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.303516] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.304745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.308433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.309849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.327940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.334857] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.339371] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.343355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.378866] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.394809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.939847] Bluetooth: hci0: command tx timeout [ 298.067845] Bluetooth: hci1: command tx timeout [ 298.194767] Bluetooth: hci2: command tx timeout [ 298.387144] Bluetooth: hci4: command tx timeout [ 298.388039] Bluetooth: hci3: command tx timeout [ 298.388929] Bluetooth: hci5: command tx timeout [ 298.451086] Bluetooth: hci7: command tx timeout [ 298.515735] Bluetooth: hci6: command tx timeout [ 299.987720] Bluetooth: hci0: command tx timeout [ 300.114727] Bluetooth: hci1: command tx timeout [ 300.243071] Bluetooth: hci2: command tx timeout [ 300.435790] Bluetooth: hci3: command tx timeout [ 300.436294] Bluetooth: hci4: command tx timeout [ 300.437007] Bluetooth: hci5: command tx timeout [ 300.498721] Bluetooth: hci7: command tx timeout [ 300.562868] Bluetooth: hci6: command tx timeout [ 302.034821] Bluetooth: hci0: command tx timeout [ 302.162714] Bluetooth: hci1: command tx timeout [ 302.291574] Bluetooth: hci2: command tx timeout [ 302.482704] Bluetooth: hci3: command tx timeout [ 302.484320] Bluetooth: hci4: command tx timeout [ 302.484352] Bluetooth: hci5: command tx timeout [ 302.547884] Bluetooth: hci7: command tx timeout [ 302.611002] Bluetooth: hci6: command tx timeout [ 304.083986] Bluetooth: hci0: command tx timeout [ 304.213655] Bluetooth: hci1: command tx timeout [ 304.339766] Bluetooth: hci2: command tx timeout [ 304.530893] Bluetooth: hci5: command tx timeout [ 304.531770] Bluetooth: hci3: command tx timeout [ 304.531897] Bluetooth: hci4: command tx timeout [ 304.594757] Bluetooth: hci7: command tx timeout [ 304.658829] Bluetooth: hci6: command tx timeout [ 358.306792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.310027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.316278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.322202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.325671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.328115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.331073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.336008] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.342232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.343132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.345877] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 358.348162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.494016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.499870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.501190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.504891] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.506903] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.512116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.514470] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.525891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.527931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.530438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.534133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.536907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.584149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.591528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.595427] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.607003] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.609940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.615891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.654251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.668025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.674160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.682307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.689517] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.694500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.704012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.706192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.716058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.723214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.725358] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.727256] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.731437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.746975] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 358.752838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.759851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.763168] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.764478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.402898] Bluetooth: hci0: command tx timeout [ 360.402932] Bluetooth: hci1: command tx timeout [ 360.596683] Bluetooth: hci3: command tx timeout [ 360.596818] Bluetooth: hci2: command tx timeout [ 360.658730] Bluetooth: hci4: command tx timeout [ 360.787038] Bluetooth: hci6: command tx timeout [ 360.852807] Bluetooth: hci5: command tx timeout [ 360.852905] Bluetooth: hci7: command tx timeout [ 362.452759] Bluetooth: hci1: command tx timeout [ 362.452976] Bluetooth: hci0: command tx timeout [ 362.642711] Bluetooth: hci2: command tx timeout [ 362.642743] Bluetooth: hci3: command tx timeout [ 362.706890] Bluetooth: hci4: command tx timeout [ 362.835672] Bluetooth: hci6: command tx timeout [ 362.898704] Bluetooth: hci7: command tx timeout [ 362.899700] Bluetooth: hci5: command tx timeout [ 364.498821] Bluetooth: hci1: command tx timeout [ 364.500437] Bluetooth: hci0: command tx timeout [ 364.690693] Bluetooth: hci3: command tx timeout [ 364.692541] Bluetooth: hci2: command tx timeout [ 364.754923] Bluetooth: hci4: command tx timeout [ 364.886651] Bluetooth: hci6: command tx timeout [ 364.947417] Bluetooth: hci5: command tx timeout [ 364.948207] Bluetooth: hci7: command tx timeout [ 366.546816] Bluetooth: hci0: command tx timeout [ 366.546876] Bluetooth: hci1: command tx timeout [ 366.739230] Bluetooth: hci2: command tx timeout [ 366.739379] Bluetooth: hci3: command tx timeout [ 366.802908] Bluetooth: hci4: command tx timeout [ 366.932663] Bluetooth: hci6: command tx timeout [ 366.994689] Bluetooth: hci7: command tx timeout [ 366.996103] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 17:14:39 Registers: info registers vcpu 0 RAX=0000000000000003 RBX=dffffc0000000000 RCX=ffffffff813b0071 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806ce365d0 RBP=ffff88800c320770 RSP=ffff88806ce09e70 R8 =0000000000000000 R9 =fffffbfff0c7eef2 R10=ffffffff863f7797 R11=00000000000c36d9 R12=0000000000000004 R13=ffff88806ce09ee8 R14=ffff88806ce00000 R15=0000000000000003 RIP=ffffffff813b064a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2e8e940008 CR3=00000000362ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffff88800a3b50e0 RDX=1ffffd400003b796 RSI=ffffffff817e8e46 RDI=ffffea00001dbcb0 RBP=ffffea00001dbc80 RSP=ffff888025697b70 R8 =0000000000000001 R9 =ffff888033614138 R10=0000000000000000 R11=0000000000000056 R12=ffffea00001dbc80 R13=0000000000000000 R14=ffff88800a3b50e0 R15=ffff88800a3b50e0 RIP=ffffffff817e8e70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc357696540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e8ded03c70 CR3=000000002e82e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000