Warning: Permanently added '[localhost]:15486' (ECDSA) to the list of known hosts. 2024/12/12 13:38:29 fuzzer started 2024/12/12 13:38:29 dialing manager at localhost:35345 syzkaller login: [ 73.485190] cgroup: Unknown subsys name 'net' [ 73.587199] cgroup: Unknown subsys name 'cpuset' [ 73.635090] cgroup: Unknown subsys name 'rlimit' 2024/12/12 13:38:46 syscalls: 200 2024/12/12 13:38:46 code coverage: enabled 2024/12/12 13:38:46 comparison tracing: enabled 2024/12/12 13:38:46 extra coverage: enabled 2024/12/12 13:38:46 setuid sandbox: enabled 2024/12/12 13:38:46 namespace sandbox: enabled 2024/12/12 13:38:46 Android sandbox: enabled 2024/12/12 13:38:46 fault injection: enabled 2024/12/12 13:38:46 leak checking: enabled 2024/12/12 13:38:46 net packet injection: enabled 2024/12/12 13:38:46 net device setup: enabled 2024/12/12 13:38:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/12 13:38:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/12 13:38:46 USB emulation: enabled 2024/12/12 13:38:46 hci packet injection: enabled 2024/12/12 13:38:46 wifi device emulation: enabled 2024/12/12 13:38:46 802.15.4 emulation: enabled 2024/12/12 13:38:46 fetching corpus: 0, signal 0/0 (executing program) 13:38:48 executing program 0: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/115, 0x73) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040850}, 0x20000000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20008000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000500)) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8840) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0xc0002, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f00000007c0)) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000800)='\xa2\x00', &(0x7f0000000840)='./file0\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80d0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xbd7704d2c5aec8e1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404084c}, 0x20000080) 2024/12/12 13:38:48 starting 8 fuzzer processes 13:38:48 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x48, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "351efaa6c65d895bcbd2469b90a2c106"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf3}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6e1f000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x8008845) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28000000}, 0x880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r12, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0000c5}, 0x4010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x4040000) 13:38:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1061000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffc00}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000191}, 0x4004008) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40a8}, 0x4c040) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x50}}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1125eec307817e31}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x801) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x174, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0xbc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f70f54d004dae485aa9a658f928a58b33e8f26a1f7da7b1c279e891103015e8f"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20008841}, 0x1) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x22}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2005}, 0x20000810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) 13:38:48 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x44881}, 0x40000) r1 = fsopen(&(0x7f0000000140)='cpuset\x00', 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) getsockname$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0xffffffffffffffff, 0x121002) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000480)='\\#\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff) fsopen(&(0x7f0000000500)='zonefs\x00', 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20004010) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x2, 0x100) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000640)='\\#\x00', &(0x7f0000000680)='./file0\x00', r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000700)) mq_getsetattr(r4, &(0x7f0000000740)={0x5, 0x1, 0x400, 0x6}, &(0x7f0000000780)) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fe00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x82d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040851}, 0x40040) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) [ 91.282337] audit: type=1400 audit(1734010728.313:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:38:48 executing program 4: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)=',&^\x00', &(0x7f0000000040)="691f3a317692268fd71ea8c6564c2d48df704f4bd59209bb48935517f7b896ade994e4c0b3a6bf95fda69a1c17eb377d48e9dd0f18579cc599a2ce9d487e6f3fa5cb7ec5e3d9723fa9ab0fdceecc1c2471c1d7f5bafabd268841d21e763d5afffe90bf317ecabf0e1f31097a799610d326de4622eaea080ecb520ec5560631aac54ec6c7fab211999a55943eebcc4cac3a", 0x91) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000100)='\'u\x00', &(0x7f0000000140)='./file0\x00', r0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x7444, 0xcb58268c4837f605) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = getpid() mq_notify(r0, &(0x7f0000000200)={0x0, 0x2e, 0x1, @tid=r2}) socketpair(0x22, 0x6, 0x7fff, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x8, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000003c0)) r7 = syz_open_dev$vcsa(&(0x7f0000000400), 0x9, 0x5c0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000) r9 = socket$inet6(0xa, 0x800, 0x6) setsockopt$inet6_MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f00000005c0)={{0xa, 0x4e20, 0xf111, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e22, 0x94, @loopback, 0x20}, 0x0, [0x7, 0xffffffff, 0x286, 0x8, 0x2, 0x4, 0x169, 0x8]}, 0x5c) socketpair(0x1, 0x3, 0x844, &(0x7f0000000640)={0xffffffffffffffff}) getsockname$inet6(r10, &(0x7f0000000680)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000006c0)=0x1c) 13:38:48 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x800) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004800}, 0x40008) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e23, 0x9, @private1, 0xffffffff}, {0xa, 0x4e23, 0x0, @mcast2, 0x8f}, 0x7271, [0x1, 0xe34, 0x80000001, 0x400, 0xc0e, 0x7, 0x8, 0x4]}, 0x5c) getpgrp(0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, 0x1c) socketpair(0x21, 0x800, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000480)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x89}, {0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x9, [0x2, 0x6, 0x2, 0x9, 0xc15d, 0x9, 0x7, 0x1ac]}, 0x5c) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000540)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2121}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r3 = accept4$inet6(r0, 0x0, &(0x7f0000000700), 0x80800) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e21, 0x1, @remote}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000007c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r4 = socket(0x18, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x60}}, 0x0) 13:38:48 executing program 6: r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, r0) r1 = fork() rt_tgsigqueueinfo(0xffffffffffffffff, r1, 0x14, &(0x7f0000000000)={0xa, 0xffffffff, 0x80}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, 0xffffffffffffffff, 0x8000000) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x4) r2 = fork() ptrace$getregs(0xc, r2, 0x100, &(0x7f00000000c0)=""/202) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = fork() capget(&(0x7f00000001c0)={0x19980330, r3}, &(0x7f0000000200)={0x4, 0x6, 0x1000, 0xff, 0x7f, 0x1}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(r3, r3, 0x38, &(0x7f0000000280)={0xe, 0xe0000000, 0x5}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = getpgrp(r1) syz_open_procfs$namespace(r4, &(0x7f0000000300)='ns/ipc\x00') r5 = fork() timer_create(0x7, &(0x7f0000000340)={0x0, 0x35, 0x4, @tid=r5}, &(0x7f0000000380)) 13:38:48 executing program 7: wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x20003, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000041) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x408e}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x48800}, 0x20040000) waitid(0x1, 0x0, &(0x7f00000003c0), 0x2, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x200, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) timer_delete(0x0) r2 = getpgrp(0xffffffffffffffff) waitid(0x0, r2, &(0x7f0000000680), 0x0, &(0x7f0000000700)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x40}]}, 0x1c}}, 0x80) r4 = gettid() wait4(r4, &(0x7f0000000900), 0x1, 0x0) epoll_create(0x9) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000980)={{r5, r6+10000000}, {0x0, 0x989680}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000051}, 0x4040040) [ 92.641447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.642877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.644268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.647177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.649180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.650525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.789191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.798061] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.799797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.803986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.810859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.817358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.819920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.825278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.827765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.828159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.834493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.840522] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.861730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.864364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.867674] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.870207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.872831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.876192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.879737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.884917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.886921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.891313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.893250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.901127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.904113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.906363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.909033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.914919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.918252] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.923813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.933722] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.935930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.943782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.946976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.955309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.957632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.960047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.972072] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.006725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.019183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.024939] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.026442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.698347] Bluetooth: hci0: command tx timeout [ 94.890665] Bluetooth: hci1: command tx timeout [ 94.954645] Bluetooth: hci2: command tx timeout [ 94.956635] Bluetooth: hci3: command tx timeout [ 95.017656] Bluetooth: hci5: command tx timeout [ 95.018822] Bluetooth: hci4: command tx timeout [ 95.019910] Bluetooth: hci6: command tx timeout [ 95.081705] Bluetooth: hci7: command tx timeout [ 96.747668] Bluetooth: hci0: command tx timeout [ 96.938618] Bluetooth: hci1: command tx timeout [ 97.001690] Bluetooth: hci3: command tx timeout [ 97.002701] Bluetooth: hci2: command tx timeout [ 97.065653] Bluetooth: hci6: command tx timeout [ 97.066871] Bluetooth: hci4: command tx timeout [ 97.067345] Bluetooth: hci5: command tx timeout [ 97.130245] Bluetooth: hci7: command tx timeout [ 98.793638] Bluetooth: hci0: command tx timeout [ 98.985622] Bluetooth: hci1: command tx timeout [ 99.049779] Bluetooth: hci3: command tx timeout [ 99.050721] Bluetooth: hci2: command tx timeout [ 99.113719] Bluetooth: hci4: command tx timeout [ 99.114201] Bluetooth: hci5: command tx timeout [ 99.114708] Bluetooth: hci6: command tx timeout [ 99.177700] Bluetooth: hci7: command tx timeout [ 100.841826] Bluetooth: hci0: command tx timeout [ 101.033668] Bluetooth: hci1: command tx timeout [ 101.097843] Bluetooth: hci2: command tx timeout [ 101.098012] Bluetooth: hci3: command tx timeout [ 101.162731] Bluetooth: hci6: command tx timeout [ 101.162766] Bluetooth: hci5: command tx timeout [ 101.163203] Bluetooth: hci4: command tx timeout [ 101.226648] Bluetooth: hci7: command tx timeout [ 155.455094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.457108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.458315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.460685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.462235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.463256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.522778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.528115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.529150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.532848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.537761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.540174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.544343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.546353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.548434] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.556237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.560885] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.563971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.593578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.600737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.602941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.609641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.612954] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.622509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.714782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.717088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.735213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.736655] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.750249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.760008] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.768745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.770881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.781673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.783500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.785724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.799807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.802239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.808290] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.812576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.814395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.825929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.827894] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.830912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.833362] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.836170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.839094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.887784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.891871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.482798] Bluetooth: hci0: command tx timeout [ 157.673644] Bluetooth: hci2: command tx timeout [ 157.675513] Bluetooth: hci1: command tx timeout [ 157.738617] Bluetooth: hci4: command tx timeout [ 157.865966] Bluetooth: hci7: command tx timeout [ 157.930753] Bluetooth: hci3: command tx timeout [ 157.932415] Bluetooth: hci6: command tx timeout [ 157.933906] Bluetooth: hci5: command tx timeout [ 159.529741] Bluetooth: hci0: command tx timeout [ 159.723342] Bluetooth: hci1: command tx timeout [ 159.724927] Bluetooth: hci2: command tx timeout [ 159.786662] Bluetooth: hci4: command tx timeout [ 159.915140] Bluetooth: hci7: command tx timeout [ 159.978482] Bluetooth: hci3: command tx timeout [ 159.979894] Bluetooth: hci5: command tx timeout [ 159.981176] Bluetooth: hci6: command tx timeout [ 161.579491] Bluetooth: hci0: command tx timeout [ 161.769954] Bluetooth: hci1: command tx timeout [ 161.770937] Bluetooth: hci2: command tx timeout [ 161.833595] Bluetooth: hci4: command tx timeout [ 161.961621] Bluetooth: hci7: command tx timeout [ 162.025800] Bluetooth: hci3: command tx timeout [ 162.026342] Bluetooth: hci6: command tx timeout [ 162.027069] Bluetooth: hci5: command tx timeout [ 163.625976] Bluetooth: hci0: command tx timeout [ 163.817866] Bluetooth: hci2: command tx timeout [ 163.818382] Bluetooth: hci1: command tx timeout [ 163.881621] Bluetooth: hci4: command tx timeout [ 164.011572] Bluetooth: hci7: command tx timeout [ 164.073686] Bluetooth: hci3: command tx timeout [ 164.074174] Bluetooth: hci6: command tx timeout [ 164.075647] Bluetooth: hci5: command tx timeout [ 217.797566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.799789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.802248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.804713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.806672] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.807851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.838537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.844236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.846747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.856424] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.858189] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.859247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.907104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.916921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.919348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.925289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.934802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.937171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.974838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.977193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.985807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.987253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.990025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.004726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.005916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.008327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.010129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.011326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.018802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.019836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.045901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.052294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.053221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.073058] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.075365] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.090136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.091762] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.098725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.114939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.115824] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.116854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.121950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.147247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.155712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.160982] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.165570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.171923] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.173157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.818865] Bluetooth: hci0: command tx timeout [ 219.882580] Bluetooth: hci1: command tx timeout [ 220.010722] Bluetooth: hci2: command tx timeout [ 220.074785] Bluetooth: hci4: command tx timeout [ 220.137656] Bluetooth: hci3: command tx timeout [ 220.203368] Bluetooth: hci6: command tx timeout [ 220.265658] Bluetooth: hci5: command tx timeout [ 220.266710] Bluetooth: hci7: command tx timeout [ 221.866590] Bluetooth: hci0: command tx timeout [ 221.929634] Bluetooth: hci1: command tx timeout [ 222.058245] Bluetooth: hci2: command tx timeout [ 222.121944] Bluetooth: hci4: command tx timeout [ 222.185598] Bluetooth: hci3: command tx timeout [ 222.250871] Bluetooth: hci6: command tx timeout [ 222.313679] Bluetooth: hci7: command tx timeout [ 222.314242] Bluetooth: hci5: command tx timeout [ 223.916581] Bluetooth: hci0: command tx timeout [ 223.977711] Bluetooth: hci1: command tx timeout [ 224.106649] Bluetooth: hci2: command tx timeout [ 224.170582] Bluetooth: hci4: command tx timeout [ 224.234580] Bluetooth: hci3: command tx timeout [ 224.298567] Bluetooth: hci6: command tx timeout [ 224.362807] Bluetooth: hci7: command tx timeout [ 224.363303] Bluetooth: hci5: command tx timeout [ 225.962753] Bluetooth: hci0: command tx timeout [ 226.025744] Bluetooth: hci1: command tx timeout [ 226.153655] Bluetooth: hci2: command tx timeout [ 226.217766] Bluetooth: hci4: command tx timeout [ 226.281606] Bluetooth: hci3: command tx timeout [ 226.345752] Bluetooth: hci6: command tx timeout [ 226.410757] Bluetooth: hci7: command tx timeout [ 226.411561] Bluetooth: hci5: command tx timeout [ 279.934261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.941729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.947234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.955453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.959809] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.964107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.054139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.059536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.073150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.078680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.082652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.085093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.183994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.187959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.190012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.195778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.196119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.204821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.208737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.210275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.224715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.226339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.229421] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.231477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.245341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.250679] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.254648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.259785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.267448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.272541] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.281600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.295688] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.302352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.310139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.314029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.315761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.320898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.323722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.335724] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.348368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.350654] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.353637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.361054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.366965] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.369262] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.396804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.407961] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.414053] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.025660] Bluetooth: hci0: command tx timeout [ 282.156772] Bluetooth: hci1: command tx timeout [ 282.282832] Bluetooth: hci2: command tx timeout [ 282.346768] Bluetooth: hci3: command tx timeout [ 282.347227] Bluetooth: hci4: command tx timeout [ 282.409616] Bluetooth: hci5: command tx timeout [ 282.473637] Bluetooth: hci6: command tx timeout [ 282.474203] Bluetooth: hci7: command tx timeout [ 284.073581] Bluetooth: hci0: command tx timeout [ 284.201665] Bluetooth: hci1: command tx timeout [ 284.329593] Bluetooth: hci2: command tx timeout [ 284.394575] Bluetooth: hci3: command tx timeout [ 284.394657] Bluetooth: hci4: command tx timeout [ 284.458745] Bluetooth: hci5: command tx timeout [ 284.521758] Bluetooth: hci7: command tx timeout [ 284.523293] Bluetooth: hci6: command tx timeout [ 286.123706] Bluetooth: hci0: command tx timeout [ 286.249695] Bluetooth: hci1: command tx timeout [ 286.379540] Bluetooth: hci2: command tx timeout [ 286.441588] Bluetooth: hci3: command tx timeout [ 286.442967] Bluetooth: hci4: command tx timeout [ 286.506597] Bluetooth: hci5: command tx timeout [ 286.569727] Bluetooth: hci6: command tx timeout [ 286.571664] Bluetooth: hci7: command tx timeout [ 288.170628] Bluetooth: hci0: command tx timeout [ 288.298628] Bluetooth: hci1: command tx timeout [ 288.425631] Bluetooth: hci2: command tx timeout [ 288.489658] Bluetooth: hci4: command tx timeout [ 288.490630] Bluetooth: hci3: command tx timeout [ 288.555566] Bluetooth: hci5: command tx timeout [ 288.617640] Bluetooth: hci6: command tx timeout [ 288.619112] Bluetooth: hci7: command tx timeout [ 342.460353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.461998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.466997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.472417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.481984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.487416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.515075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.522375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.524815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.527754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.531182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.533921] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.534858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.536796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.537855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.557764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.561060] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.564326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.649252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.656743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.667204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.691753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.699087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.716631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.718770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.727362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.729781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.733721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.737606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.745730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.755792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.761844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.763843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.767213] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.769560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.771860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.774345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.779617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.783622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.785071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.789749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.792161] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.799877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.801393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.828760] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.830844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.834021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.836558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.553571] Bluetooth: hci0: command tx timeout [ 344.619419] Bluetooth: hci2: command tx timeout [ 344.620250] Bluetooth: hci1: command tx timeout [ 344.810575] Bluetooth: hci3: command tx timeout [ 344.873622] Bluetooth: hci4: command tx timeout [ 344.874312] Bluetooth: hci7: command tx timeout [ 344.874957] Bluetooth: hci6: command tx timeout [ 344.939554] Bluetooth: hci5: command tx timeout [ 346.601567] Bluetooth: hci0: command tx timeout [ 346.667544] Bluetooth: hci1: command tx timeout [ 346.668038] Bluetooth: hci2: command tx timeout [ 346.857754] Bluetooth: hci3: command tx timeout [ 346.921729] Bluetooth: hci6: command tx timeout [ 346.922243] Bluetooth: hci7: command tx timeout [ 346.922821] Bluetooth: hci4: command tx timeout [ 346.986519] Bluetooth: hci5: command tx timeout [ 348.649692] Bluetooth: hci0: command tx timeout [ 348.713654] Bluetooth: hci2: command tx timeout [ 348.715666] Bluetooth: hci1: command tx timeout [ 348.906655] Bluetooth: hci3: command tx timeout [ 348.969684] Bluetooth: hci6: command tx timeout [ 348.970184] Bluetooth: hci4: command tx timeout [ 348.971634] Bluetooth: hci7: command tx timeout [ 349.033595] Bluetooth: hci5: command tx timeout [ 350.698628] Bluetooth: hci0: command tx timeout [ 350.761564] Bluetooth: hci2: command tx timeout [ 350.762053] Bluetooth: hci1: command tx timeout [ 350.961398] Bluetooth: hci3: command tx timeout [ 351.017611] Bluetooth: hci6: command tx timeout [ 351.017685] Bluetooth: hci7: command tx timeout [ 351.018075] Bluetooth: hci4: command tx timeout [ 351.081769] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:43:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85c16180 RDI=ffff88800bce1fbc RBP=0000000000000001 RSP=ffff88806ce099d0 R8 =0000000000000001 R9 =ffff88800bce2600 R10=ffffffff863fbe97 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c6dc88 R15=ffff888034076a00 RIP=ffffffff81726c73 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8f6264d8e0 CR3=000000002a6e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff8828aa40 RCX=0000000000000000 RDX=1ffff11001aae8e1 RSI=ffffffff8577f07d RDI=ffffffff882adcc0 RBP=ffff88800d574708 RSP=ffff8880237b7760 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000532 R12=ffffffff882adcc0 R13=0000000000000000 R14=0000000000000000 R15=0000000000000cc0 RIP=ffffffff81504d38 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556db6448080 CR3=000000002968c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000