Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:65023' (ECDSA) to the list of known hosts. 2024/11/07 13:07:59 fuzzer started 2024/11/07 13:07:59 dialing manager at localhost:46317 syzkaller login: [ 67.594532] cgroup: Unknown subsys name 'net' [ 67.682899] cgroup: Unknown subsys name 'cpuset' [ 67.717042] cgroup: Unknown subsys name 'rlimit' 2024/11/07 13:08:16 syscalls: 203 2024/11/07 13:08:16 code coverage: enabled 2024/11/07 13:08:16 comparison tracing: enabled 2024/11/07 13:08:16 extra coverage: enabled 2024/11/07 13:08:16 setuid sandbox: enabled 2024/11/07 13:08:16 namespace sandbox: enabled 2024/11/07 13:08:16 Android sandbox: enabled 2024/11/07 13:08:16 fault injection: enabled 2024/11/07 13:08:16 leak checking: enabled 2024/11/07 13:08:16 net packet injection: enabled 2024/11/07 13:08:16 net device setup: enabled 2024/11/07 13:08:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/07 13:08:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/07 13:08:16 USB emulation: enabled 2024/11/07 13:08:16 hci packet injection: enabled 2024/11/07 13:08:16 wifi device emulation: enabled 2024/11/07 13:08:16 802.15.4 emulation: enabled 2024/11/07 13:08:16 fetching corpus: 0, signal 0/0 (executing program) 2024/11/07 13:08:18 starting 8 fuzzer processes 13:08:18 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40020}, 0x2000c190) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x4811) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x19c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x13}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3d674acaaaaa48f9b828a1c0c63dc4f9b5aa3b27811d24a3421415d2c756e054"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80a}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20a}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xec, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x92}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb0e00000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aba98cd245d3362043b14de9a7173592e8d7511e8d6727a7725ed1677230f765"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0e82e65a594245b12493e34ef4cdd9d8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "17377d2e4879469a71b72b2f01b068d1c118867e7858280f012697fec7acd5c6"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9f4ca2b17c15d7d5088d02aa8d061646"}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x44040}, 0x100) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000080}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x814}, 0x1bb3632c59f7834) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000cc0)=0x4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x74, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4004004) 13:08:18 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0}) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req={0x1, 0x7f, 0x1, 0x8000}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x1c, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}], 0x8d, 0x0, &(0x7f00000002c0)="2ee3ff58db5dd50e208c674e3695836722e33ef4960ddd14d125198f908093640a3094abe2cce49e133312280eb40486751bc6af656dfc53c901d0f9c5e3b545e87d82b190cb848bf10dd0f789249eb6085bb0250a239c444f2bbff5d1938a1ff8541760fd92e63069dfa894a3f3c02e5bb0b4aa7b6d2f1895c829ebc22b84d1e0a95838fa4e08638bf8bacaa2"}) r3 = syz_io_uring_setup(0x24a0, &(0x7f00000003c0)={0x0, 0x4dd3, 0x2, 0x1, 0x351}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd_index=0x1, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)="7887d7c8fb1dde96fb2dae3ad75ea234136f77cd41813672ddcd269409da7692dfbc2bb96d4084387098fb5b5d7c24feca07fa241b0c5ed4cee3ce90", 0x3c}, {&(0x7f0000000500)="d5dfe43e8a5d591f1eb57e88da49892afdfa8a5f263961ce0a676dd59c0ded371dc08850651e261b38d208ae515563f7dcb1c1bc48cc4deec4331147552c110a3f5c5c1fdc5fc733b489fd520ee1a07d2120342d061bf3b017c961e4ebbb71d6d6df904f0fd626887fd9eb2fcd7dd3174fc883ea3588f9d4c8879696ace45edf6106312c26fafcb964fd59291c8a9432dc9a6d2d02ef527715f8a42ee64444a92ad0544db7186abe12aa32f82ce6886ea3d5e449046023c8a8b3d897928046a9353e214516", 0xc5}, {&(0x7f0000000600)="c346f1fa17fed52e7d16c5ee14595481b0d67a91adc90bba5eef141410f71ddd4b148ca0bd129a552854ed67deec7fe1b4f79c1d0f2895e47dba7ddcb5ec060ee0d3fc4e035550eb2b409c3cd3495e1d692eaa1fcdecfecb52af13a468941650748d63", 0x63}, {&(0x7f0000000680)="d0ad4d5ecb5366170d61a867b608062db23806fd3d290a7f62d055e616503ceb3aee1e118275ae6ce05a98bfb992fdf1ad841b3453465514cff7378de4279351296d2aa0e16149d4badccd67576ee05d4858a241d653e1bead978ad0e346bcb607fa24b032f121f8", 0x68}], 0x4, 0xe, 0x1, {0x1, r5}}, 0x5) ioctl$sock_ifreq(r0, 0x8925, &(0x7f0000000780)={'erspan0\x00', @ifru_ivalue}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000007c0)=0x81) r6 = syz_open_dev$loop(&(0x7f0000000800), 0x401, 0x40000) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000840)={0x2, 0x45ab, 0x8, 0x3ff}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000880)={{r2, 0x6, 0x80000000, 0xffffffff, 0x0, 0x800, 0x2, 0x8, 0x36c6, 0x7, 0x4, 0x7, 0x4, 0x5616b879, 0x3ff}}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001880)) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000018c0)=0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000001900)={0x10}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x89b5f) getresgid(&(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0)) r7 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7ff) ioctl$KDGKBMETA(r7, 0x4b62, &(0x7f0000001a00)) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000001a80)={0xeef, 0x901, 0x2, 0x1, 0xffff}) 13:08:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}}, 0x4000802) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}}, 0x4040) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800029}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r1, 0xc28, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r10, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000845) 13:08:18 executing program 3: mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000040)) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x1f) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184800) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x8) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x484) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)=0x1) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'trylock', ' ', 'io+mem'}, 0xf) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000280)) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r3, 0x5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, 0x0}, &(0x7f00000027c0)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000002800)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x5, 0x4e24, 0x1000, 0x2, 0x0, 0x20, 0x3a, r6}, {0x80, 0x19, 0x7, 0x0, 0x622, 0x7, 0xf7aa, 0x4}, {0x7, 0xff, 0x0, 0x41e3}, 0x1, 0x6e6bc0, 0x2, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x34ff, 0x4, 0x2, 0x1, 0x27b, 0x8, 0x9}}, 0xe8) 13:08:18 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@decrefs, @increfs={0x40046304, 0x3}], 0xab, 0x0, &(0x7f0000000040)="3bad5b9fbafd4cf1896f8888d5583f5df96a05e00b4afa05b7ddc7c748fd2343e40266702813b37a9795af2d31280e5e4c385b67e0070595e6ca591864d84bf0eedcfca2faebaa0a5675ad6110acc87ca0b3754814ed73ed2cd94fa7a76e2546f09a7d92bbd9ba78184a75dd539b3c0c49cba5611e5bbf24b5dcaf1ea51b9d9d0b9148a42187b39a692ae52708256630ee6ab825b176481ceefebad7d12406d258238930afa371522c1ab0"}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) ioctl$TIOCNXCL(r0, 0x540d) socketpair(0x2a, 0x5, 0x4176, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x40801) r4 = syz_open_dev$loop(&(0x7f0000000400), 0x10000, 0x18000) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000440)=0x80) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000480)={@rand_addr=0x64010100, @private=0xa010102, 0x0, 0xa, [@remote, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @local, @private=0xa010102, @loopback, @loopback, @private=0xa010102]}, 0x38) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@arp={@multicast2, @broadcast, 0xff000000, 0x0, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8bb8, 0xfffd, 0xfc00, 0xd80b, 0x9, 0x7ff, 'wg1\x00', 'veth0_to_hsr\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @local, 0xf}}}, {{@arp={@broadcast, @private=0xa010100, 0xff, 0xffffff00, 0x10, 0x3, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x101, 0xfff9, 0x7, 0x1f, 0x8, 0x2, 'bond_slave_0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x202}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @local, @multicast1, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socketpair(0x18, 0x6, 0x80000001, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x7f) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x19}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3c}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}]}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040021) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x810, r7, 0x5df6a000) r8 = accept4$packet(r5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f80)=0x14, 0x100000) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000fc0)=@req={0x6, 0x800, 0x4, 0x4}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x7fff, 0x2}}}, {{@arp={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, 0xffffff00, 0xffffff00, 0xa, 0x5, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xff80, 0x1f, 0x51, 0x0, 0xfff9, 0x2, 'ip_vti0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @broadcast, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 13:08:18 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/46, 0x2e}) ioctl$VT_DISALLOCATE(r0, 0x5608) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000140)=""/207) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0xfff, 0x33, 0x800, 0xffffffff, 0x12, "976669e7ab3cab7942cfdf59fa85b07bbb6717"}) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/82, 0x52}) r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0xaf9f, 0x100) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000480)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/74, 0x4a}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f00000004c0)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000500)={{0x0, 0xe4e1, 0x1, 0x5, 0x6, 0x1, 0x100000000, 0x200, 0x45157289, 0x74, 0xbead, 0x40, 0x40, 0x3f, 0x9}, 0x18, [0x0, 0x0, 0x0]}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000005c0)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000600)={0xfffffffa, 0x9, 0x6, 0xffff188b, 0xb, "dd22930e92cb07e2c872523e2a70243877e562"}) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x80800) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r6) timerfd_create(0x8, 0x40000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x59132) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000006c0)={{r5, 0x6, 0x1, 0x0, 0xc3, 0x100000000, 0x0, 0x5, 0x8, 0xfff, 0x3, 0x4, 0x5, 0x97, 0x5}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) [ 85.719813] audit: type=1400 audit(1730984898.763:7): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:08:18 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000400)=""/85, 0x55}], 0x7, &(0x7f0000000500)=""/154, 0x9a}, 0x102) socketpair(0x9, 0x800, 0x1, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x20, 0xff00, 0x7fffffff, 0x5d, {{0x23, 0x4, 0x2, 0x7, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x13, 0x69, [@multicast2, @local, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x23, 0xb9, [@multicast2, @remote, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @multicast1]}, @ssrr={0x89, 0x13, 0x2d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @local]}, @ssrr={0x89, 0x1f, 0xbd, [@private=0xa010100, @rand_addr=0x64010100, @empty, @multicast1, @broadcast, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x8, [@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102]}]}}}}}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000740)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f00000007c0), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, 0xff, 0x0, 0x1, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x4, 0x29c, 0x5, 0x7fff, 0x800, 0x8, 'gretap0\x00', 'tunl0\x00', {}, {0xff}, 0x0, 0x140}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @remote, @remote, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @private=0xa010100, @local, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @rand_addr=0x64010100, @local, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000c80)={@remote, @loopback, 0x0, 0x3, [@multicast1, @multicast1, @multicast2]}, 0x1c) r4 = accept$inet(r1, &(0x7f0000000cc0), &(0x7f0000000d00)=0x10) accept4$inet(r4, &(0x7f0000000d40)={0x2, 0x0, @empty}, &(0x7f0000000d80)=0x10, 0x800) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000dc0)={r2, 0x1, 0x6, @multicast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = accept4$inet(r5, &(0x7f0000000e00)={0x2, 0x0, @private}, &(0x7f0000000e40)=0x10, 0x80800) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000e80)={'wg0\x00', @ifru_names}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000fc0)={'erspan0\x00', &(0x7f0000000ec0)={'tunl0\x00', r2, 0x10, 0x1, 0x3a, 0x3, {{0x33, 0x4, 0x0, 0x1, 0xcc, 0x67, 0x0, 0x81, 0xe, 0x0, @loopback, @multicast2, {[@end, @ssrr={0x89, 0x27, 0x1e, [@rand_addr=0x64010100, @multicast1, @local, @broadcast, @empty, @local, @multicast1, @empty, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x39, 0x1, 0x0, [{@loopback, 0x6}, {@private=0xa010100, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3}, {@multicast2, 0x7}, {@broadcast, 0xfffffff8}, {@broadcast, 0x7}]}, @rr={0x7, 0x17, 0xbb, [@loopback, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end, @rr={0x7, 0xf, 0xcf, [@broadcast, @rand_addr=0x64010100, @local]}, @timestamp_prespec={0x44, 0x34, 0xa8, 0x3, 0x4, [{@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1d}}, {@rand_addr=0x64010102, 0x6}, {@broadcast, 0x4}, {@local, 0x7}, {@private=0xa010102, 0x34ad0}]}, @end]}}}}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000001000)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'syztnl0\x00', r2, 0x40, 0x7800, 0xffff7647, 0x6, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x66, 0x0, 0x7, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0xc, 0xdd, 0x0, 0x0, [0x2, 0x2891]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xb4, [@local, @empty]}, @end, @noop, @lsrr={0x83, 0x27, 0xf6, [@local, @empty, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001640)={'erspan0\x00', r9, 0x7, 0x7, 0x8001, 0x3, {{0xc, 0x4, 0x2, 0x3, 0x30, 0x66, 0x0, 0x35, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp={0x44, 0x18, 0x8b, 0x0, 0x4, [0xfff, 0x4, 0x9, 0x1000, 0xfffffbff]}]}}}}}) 13:08:18 executing program 7: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080)={'veth0_to_bond', 0x32, 0x36}, 0x10) r1 = socket$inet(0x2, 0x3, 0x12cd5af7) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'veth1_virt_wifi\x00', 0x3}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x0, 0x3, 0x3f, 0x6bb, 0x751262ab, 0x40, 0xffffffff, 0x3, 0xd971, 0x2, 0x0, 0x8, 0x10000, 0x3}, 0x10, [0x0, 0x0]}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000180)={0x8, 0x80, 0x7, 0x100}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0x2, 0xea14, 0x0, 0x98, 0xa, "7fc87bb5fa8f6a54361d1a8eb3e5fe6389c550"}) read$char_usb(0xffffffffffffffff, &(0x7f0000000240)=""/119, 0x77) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000002c0)) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x1800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x20980, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x60, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/191, 0xbf, 0x1, 0x2e}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x40}, @register_looper, @increfs={0x40046304, 0x1}, @increfs={0x40046304, 0x3}], 0x50, 0x0, &(0x7f00000005c0)="c2490002e1702f842a16913d1eb3b5bcaa6d256478a1e9ed2d65b8905f61f769b337fed66a8562ac2694928ebc4b038ad8ba2b73f0f2eddad429dadbe859edf40b6cfd1adf056371d1f4ca2fd6b36c16"}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0], 0x1, 0x5}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)) r5 = socket$inet(0x2, 0x80000, 0x40) accept$inet(r5, &(0x7f0000000780)={0x2, 0x0, @private}, &(0x7f00000007c0)=0x10) [ 87.174661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.177477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.179966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.180028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.184779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.184779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.185110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.191064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.192196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.193652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.201148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.202159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.203488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.210462] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.215857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.218186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.224982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.225966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.225973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.232787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.232945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.236250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.237470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.241088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.246296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.247766] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.250508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.258760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.262434] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.269874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.272093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.291499] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.294133] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.295093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.296554] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.298105] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.310531] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.314854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.316975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.318392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.320195] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.321606] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.330053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.335486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.338054] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.339689] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.340800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.349781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.243923] Bluetooth: hci0: command tx timeout [ 89.308588] Bluetooth: hci1: command tx timeout [ 89.309256] Bluetooth: hci3: command tx timeout [ 89.373382] Bluetooth: hci5: command tx timeout [ 89.374020] Bluetooth: hci4: command tx timeout [ 89.375090] Bluetooth: hci2: command tx timeout [ 89.375762] Bluetooth: hci7: command tx timeout [ 89.435357] Bluetooth: hci6: command tx timeout [ 91.292944] Bluetooth: hci0: command tx timeout [ 91.356487] Bluetooth: hci1: command tx timeout [ 91.356989] Bluetooth: hci3: command tx timeout [ 91.420513] Bluetooth: hci2: command tx timeout [ 91.421012] Bluetooth: hci7: command tx timeout [ 91.422145] Bluetooth: hci4: command tx timeout [ 91.422687] Bluetooth: hci5: command tx timeout [ 91.484430] Bluetooth: hci6: command tx timeout [ 93.339333] Bluetooth: hci0: command tx timeout [ 93.404480] Bluetooth: hci1: command tx timeout [ 93.406454] Bluetooth: hci3: command tx timeout [ 93.468506] Bluetooth: hci4: command tx timeout [ 93.468998] Bluetooth: hci5: command tx timeout [ 93.470179] Bluetooth: hci7: command tx timeout [ 93.471586] Bluetooth: hci2: command tx timeout [ 93.531330] Bluetooth: hci6: command tx timeout [ 95.388403] Bluetooth: hci0: command tx timeout [ 95.452359] Bluetooth: hci1: command tx timeout [ 95.452858] Bluetooth: hci3: command tx timeout [ 95.516422] Bluetooth: hci5: command tx timeout [ 95.516921] Bluetooth: hci2: command tx timeout [ 95.517447] Bluetooth: hci7: command tx timeout [ 95.517933] Bluetooth: hci4: command tx timeout [ 95.580369] Bluetooth: hci6: command tx timeout [ 149.736004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.739771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.742480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.746534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.749787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.752210] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.986895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.997726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.000381] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.003958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.004439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.010790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.015139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.017643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.021650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.034924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.039167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.048171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.050641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.053140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.056845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.059418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.061971] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.072492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.078108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.081018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.084820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.087497] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.089827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.092993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.095850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.096047] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.100701] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.102940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.105449] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.105805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.110211] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.117100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.120642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.124847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.127749] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.133080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.171017] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.181195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.195581] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.236567] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.240049] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.242892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.773327] Bluetooth: hci0: command tx timeout [ 152.155456] Bluetooth: hci4: command tx timeout [ 152.220361] Bluetooth: hci5: command tx timeout [ 152.221908] Bluetooth: hci2: command tx timeout [ 152.223407] Bluetooth: hci6: command tx timeout [ 152.224890] Bluetooth: hci1: command tx timeout [ 152.283403] Bluetooth: hci7: command tx timeout [ 152.284921] Bluetooth: hci3: command tx timeout [ 153.819331] Bluetooth: hci0: command tx timeout [ 154.205352] Bluetooth: hci4: command tx timeout [ 154.268559] Bluetooth: hci1: command tx timeout [ 154.269120] Bluetooth: hci6: command tx timeout [ 154.270436] Bluetooth: hci5: command tx timeout [ 154.270961] Bluetooth: hci2: command tx timeout [ 154.331379] Bluetooth: hci3: command tx timeout [ 154.331914] Bluetooth: hci7: command tx timeout [ 155.867356] Bluetooth: hci0: command tx timeout [ 156.251467] Bluetooth: hci4: command tx timeout [ 156.315367] Bluetooth: hci2: command tx timeout [ 156.315920] Bluetooth: hci6: command tx timeout [ 156.316478] Bluetooth: hci5: command tx timeout [ 156.317009] Bluetooth: hci1: command tx timeout [ 156.379362] Bluetooth: hci7: command tx timeout [ 156.379921] Bluetooth: hci3: command tx timeout [ 157.915381] Bluetooth: hci0: command tx timeout [ 158.299353] Bluetooth: hci4: command tx timeout [ 158.363463] Bluetooth: hci1: command tx timeout [ 158.364932] Bluetooth: hci5: command tx timeout [ 158.366326] Bluetooth: hci6: command tx timeout [ 158.367706] Bluetooth: hci2: command tx timeout [ 158.427487] Bluetooth: hci7: command tx timeout [ 158.429129] Bluetooth: hci3: command tx timeout [ 212.120672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.131441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.134500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.135573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.137819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.153823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.156087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.159069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.161263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.162604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.180195] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.181840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.326751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.335421] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.339485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.346408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.348951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.352839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.360758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.365198] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.366374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.369720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.377576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.386019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.392545] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.395730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.397035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.398449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.399981] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.404937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.407831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.408916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.412539] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.413993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.414127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.417849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.424442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.436021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.437568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.439673] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.441198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.444646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.550109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.556403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.569442] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.578486] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.582880] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.587452] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.235481] Bluetooth: hci0: command tx timeout [ 214.235556] Bluetooth: hci1: command tx timeout [ 214.429301] Bluetooth: hci3: command tx timeout [ 214.556402] Bluetooth: hci2: command tx timeout [ 214.556413] Bluetooth: hci5: command tx timeout [ 214.557023] Bluetooth: hci4: command tx timeout [ 214.558055] Bluetooth: hci6: command tx timeout [ 214.683415] Bluetooth: hci7: command tx timeout [ 216.283372] Bluetooth: hci0: command tx timeout [ 216.283905] Bluetooth: hci1: command tx timeout [ 216.476549] Bluetooth: hci3: command tx timeout [ 216.604103] Bluetooth: hci4: command tx timeout [ 216.604800] Bluetooth: hci2: command tx timeout [ 216.606053] Bluetooth: hci5: command tx timeout [ 216.606294] Bluetooth: hci6: command tx timeout [ 216.732297] Bluetooth: hci7: command tx timeout [ 218.332957] Bluetooth: hci0: command tx timeout [ 218.332996] Bluetooth: hci1: command tx timeout [ 218.523441] Bluetooth: hci3: command tx timeout [ 218.651590] Bluetooth: hci5: command tx timeout [ 218.651700] Bluetooth: hci2: command tx timeout [ 218.652712] Bluetooth: hci4: command tx timeout [ 218.653163] Bluetooth: hci6: command tx timeout [ 218.780413] Bluetooth: hci7: command tx timeout [ 220.379467] Bluetooth: hci0: command tx timeout [ 220.379501] Bluetooth: hci1: command tx timeout [ 220.573297] Bluetooth: hci3: command tx timeout [ 220.699448] Bluetooth: hci5: command tx timeout [ 220.700411] Bluetooth: hci6: command tx timeout [ 220.700868] Bluetooth: hci4: command tx timeout [ 220.701347] Bluetooth: hci2: command tx timeout [ 220.827378] Bluetooth: hci7: command tx timeout [ 274.412000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.414729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.418135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.419098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.419202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.425394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.431007] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.434076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.435881] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.446689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.449975] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.451346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.598891] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.600596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.604359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.617358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.619654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.621651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.623907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.628412] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.629636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.646651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.674042] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.675864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.731148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.740725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.741391] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.750724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.758481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.767578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.784461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.787591] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.788864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.792832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.805022] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.806525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.814875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.820419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.830818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.831855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.836443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.849401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.871346] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.871404] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.882735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.889435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.891155] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.892425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.507689] Bluetooth: hci1: command tx timeout [ 276.508740] Bluetooth: hci0: command tx timeout [ 276.699334] Bluetooth: hci3: command tx timeout [ 276.700451] Bluetooth: hci2: command tx timeout [ 276.827388] Bluetooth: hci5: command tx timeout [ 276.891312] Bluetooth: hci4: command tx timeout [ 276.955366] Bluetooth: hci7: command tx timeout [ 276.957069] Bluetooth: hci6: command tx timeout [ 278.555350] Bluetooth: hci0: command tx timeout [ 278.555904] Bluetooth: hci1: command tx timeout [ 278.747355] Bluetooth: hci3: command tx timeout [ 278.747877] Bluetooth: hci2: command tx timeout [ 278.875428] Bluetooth: hci5: command tx timeout [ 278.939410] Bluetooth: hci4: command tx timeout [ 279.004256] Bluetooth: hci6: command tx timeout [ 279.004751] Bluetooth: hci7: command tx timeout [ 280.604406] Bluetooth: hci0: command tx timeout [ 280.604951] Bluetooth: hci1: command tx timeout [ 280.795582] Bluetooth: hci3: command tx timeout [ 280.796100] Bluetooth: hci2: command tx timeout [ 280.923486] Bluetooth: hci5: command tx timeout [ 280.987316] Bluetooth: hci4: command tx timeout [ 281.072306] Bluetooth: hci7: command tx timeout [ 281.072820] Bluetooth: hci6: command tx timeout [ 282.651334] Bluetooth: hci0: command tx timeout [ 282.651903] Bluetooth: hci1: command tx timeout [ 282.843309] Bluetooth: hci2: command tx timeout [ 282.843827] Bluetooth: hci3: command tx timeout [ 282.971297] Bluetooth: hci5: command tx timeout [ 283.036305] Bluetooth: hci4: command tx timeout [ 283.099481] Bluetooth: hci6: command tx timeout [ 283.099973] Bluetooth: hci7: command tx timeout [ 336.754801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.761448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.765544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.777050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.778639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.780663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.876938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.883808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.884993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.886891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.889470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.894445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.896294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.899479] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.901971] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.904303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.920161] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.925237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.944123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.954493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.956812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.960446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.963066] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.965322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.058684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.063095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.066015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.094335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.108504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.117439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.147737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.157913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.162763] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.164476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.168106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.170155] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.173441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.187756] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.195497] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.250464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.262408] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.269992] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.314560] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.322811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.361479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.425771] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.431508] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.433027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.845256] Bluetooth: hci0: command tx timeout [ 338.972376] Bluetooth: hci1: command tx timeout [ 338.972435] Bluetooth: hci2: command tx timeout [ 339.099306] Bluetooth: hci3: command tx timeout [ 339.230341] Bluetooth: hci4: command tx timeout [ 339.231622] Bluetooth: hci5: command tx timeout [ 339.419293] Bluetooth: hci6: command tx timeout [ 339.547414] Bluetooth: hci7: command tx timeout [ 340.893313] Bluetooth: hci0: command tx timeout [ 340.958334] hrtimer: interrupt took 5284352 ns [ 341.019381] Bluetooth: hci2: command tx timeout [ 341.019902] Bluetooth: hci1: command tx timeout [ 341.147378] Bluetooth: hci3: command tx timeout [ 341.275363] Bluetooth: hci4: command tx timeout [ 341.275391] Bluetooth: hci5: command tx timeout [ 341.467416] Bluetooth: hci6: command tx timeout [ 341.602262] Bluetooth: hci7: command tx timeout [ 342.941240] Bluetooth: hci0: command tx timeout [ 343.067595] Bluetooth: hci1: command tx timeout [ 343.067784] Bluetooth: hci2: command tx timeout [ 343.196515] Bluetooth: hci3: command tx timeout [ 343.323380] Bluetooth: hci5: command tx timeout [ 343.324408] Bluetooth: hci4: command tx timeout [ 343.515322] Bluetooth: hci6: command tx timeout [ 343.643316] Bluetooth: hci7: command tx timeout [ 344.988268] Bluetooth: hci0: command tx timeout [ 345.115490] Bluetooth: hci2: command tx timeout [ 345.115594] Bluetooth: hci1: command tx timeout [ 345.244409] Bluetooth: hci3: command tx timeout [ 345.372296] Bluetooth: hci4: command tx timeout [ 345.372319] Bluetooth: hci5: command tx timeout [ 345.564013] Bluetooth: hci6: command tx timeout [ 345.691299] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:13:28 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff8880362afc58 RSP=ffff8880362afad0 R8 =0000000000000001 R9 =fffff9400003baae R10=0000000000000000 R11=0000000000000001 R12=ffffea00001dd500 R13=000000000000002f R14=ffff8880092b63c0 R15=dffffc0000000000 RIP=ffffffff8151dc80 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fab13f82540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fab1419559e CR3=000000000db80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000001d59 RBX=00007f50001def20 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff84838919 RBP=0000000000000004 RSP=ffff88802cebff98 R8 =0000000000000001 R9 =0000000000000001 R10=00007f5000214f78 R11=0000000000000206 R12=00007ffdde5f69b8 R13=00007ffdde5f69e0 R14=00007f5000216180 R15=0000000000000000 RIP=ffffffff84a015fd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4fffcd4540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4fffce2000 CR3=0000000013242000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000