syzkaller login: [ 70.441958] hrtimer: interrupt took 4057894 ns [ 77.381876] sshd (230) used greatest stack depth: 23712 bytes left Warning: Permanently added '[localhost]:38570' (ECDSA) to the list of known hosts. 2025/01/30 12:31:49 fuzzer started 2025/01/30 12:31:49 dialing manager at localhost:36977 [ 81.350181] cgroup: Unknown subsys name 'net' [ 81.488230] cgroup: Unknown subsys name 'cpuset' [ 81.507565] cgroup: Unknown subsys name 'rlimit' 2025/01/30 12:32:14 syscalls: 219 2025/01/30 12:32:14 code coverage: enabled 2025/01/30 12:32:14 comparison tracing: enabled 2025/01/30 12:32:14 extra coverage: enabled 2025/01/30 12:32:14 setuid sandbox: enabled 2025/01/30 12:32:14 namespace sandbox: enabled 2025/01/30 12:32:14 Android sandbox: enabled 2025/01/30 12:32:14 fault injection: enabled 2025/01/30 12:32:14 leak checking: enabled 2025/01/30 12:32:14 net packet injection: enabled 2025/01/30 12:32:14 net device setup: enabled 2025/01/30 12:32:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 12:32:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 12:32:14 USB emulation: enabled 2025/01/30 12:32:14 hci packet injection: enabled 2025/01/30 12:32:14 wifi device emulation: enabled 2025/01/30 12:32:14 802.15.4 emulation: enabled 2025/01/30 12:32:14 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 12:32:16 starting 8 fuzzer processes 12:32:16 executing program 0: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_VERSION={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0xc011}, 0x4000804) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000400)=0x7, &(0x7f0000000440)=0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000480)=0x4, &(0x7f00000004c0)=0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000091) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000007c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat2(r3, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x20201, 0x1, 0x18}, 0x18) syz_genetlink_get_family_id$team(&(0x7f0000000940), r6) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000a00)={{0x3, 0x1, 0x4e, 0x2, 0x9}, 0x80, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x35, 0xf5, 0x7fff, 0x4}) pipe(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000b40)=0x1, 0x1) 12:32:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x241800, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/161, &(0x7f0000000140)=0xa1) r1 = memfd_secret(0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000001c0)={{0x2, 0x2, 0x100, 0x2, 0x81}, 0x3, 0xfc1d, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0x5, 0x4, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000340)=0x200, &(0x7f0000000380)=0x4) r3 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x100000000, 0x4500) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000400)=0x9, 0x2) r4 = socket(0x1, 0x4, 0x200) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf5a}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x21}, 0x11) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000580)={{0x3, 0x3, 0x7fffffff, 0x2}, 0x3, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0xfffffffffffff323, 0xfffffffffffffffd, 0x8, 0x63dc}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) read$char_usb(r5, &(0x7f00000006c0)=""/106, 0x6a) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {0x3f}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000780)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000800)={{0x0, 0x3, 0x1f, 0x3}, 0x1000, 0x5, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 12:32:16 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = memfd_secret(0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x2, 0x3, 0xffff, 0x3, 0x5}}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0xb0100, 0x0) bind$bt_sco(r6, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x14) r8 = openat$cgroup_type(r4, &(0x7f0000000600), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8, {0xee01, r9}}, './file0\x00'}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r0, 0x6625ba475acd2c7f, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x5c}}, 0x51) r12 = openat$cgroup_devices(r10, &(0x7f0000000800)='devices.allow\x00', 0x2, 0x0) signalfd4(r12, &(0x7f0000000840)={[0x80000000]}, 0x8, 0x80800) 12:32:16 executing program 1: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000000c0)=0x3, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10000800) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xff, 0xde2, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x757, 0x1, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x80, 0x8, 0xffffffff, 0xc, @empty, @private1, 0x80, 0x8, 0x7, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x4014) socketpair(0x1, 0x800, 0x8000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000540)=0x5, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3a4eefcf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}}, 0x821) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r7 = socket(0x0, 0x1, 0x4) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000940)={0x0, @in={0x2, 0x4e24, @empty}, @vsock={0x28, 0x0, 0x0, @my=0x0}, @ethernet={0x6, @local}, 0x100, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000900)='veth0_to_bond\x00', 0x1, 0x1, 0x91}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10010) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001240)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xc443082}, 0xc, &(0x7f0000001200)={&(0x7f0000000e40)={0x398, 0x0, 0x402, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xcaf}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc1}}}]}}]}, 0x398}, 0x1, 0x0, 0x0, 0x884}, 0x24004014) 12:32:16 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40020) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4c010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r4) r6 = memfd_secret(0x80000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="befab6551064"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x20) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4008090) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44850}, 0x8040) write$cgroup_subtree(r6, &(0x7f0000000940)={[{0x2b, 'hugetlb'}, {0x2b, 'net'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x6, 'pids'}]}, 0x23) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r8, &(0x7f00000009c0)=""/246, 0xf6) 12:32:16 executing program 5: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x0, 0xfff, 0x41, @local, @empty, 0x80, 0x80, 0x3, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', r1, 0x2f, 0x1, 0x36, 0x100, 0x2, @mcast2, @mcast1, 0x1, 0x10, 0x6, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', r1, 0x4, 0x2, 0x20, 0xf675, 0x10, @mcast1, @mcast1, 0x20, 0x40, 0x7, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r1, 0x2f, 0xe1, 0xff, 0x9, 0x8, @mcast1, @remote, 0x40, 0x20, 0x8, 0xd6f9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r1, 0x2f, 0x8, 0x57, 0x5be5, 0x10, @mcast1, @loopback, 0x0, 0x700, 0x9, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl0\x00', r1, 0x4, 0x6, 0x20, 0x1, 0xa, @loopback, @remote, 0x51, 0x20, 0x2, 0xc46}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000680)={0x90c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2ab8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x200, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x9, 0xffff}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x2, 0x6, 0x7}, {0x0, 0x8, 0x80, 0x7fffffff}, {0x20, 0xff, 0x4, 0x1}, {0x7, 0x5, 0x1, 0x80000000}, {0x919, 0x81, 0x1, 0xb29}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x20, 0x3, 0xff}, {0x9, 0x7f, 0x1f, 0x2}, {0x5, 0x0, 0x4, 0x9}, {0x2, 0x5, 0x1f, 0x5}, {0x1, 0x2, 0x8, 0x5}, {0x5, 0x1, 0x80, 0x4}, {0x7, 0x6, 0x7, 0x20}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c1}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3a2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x90c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001040)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl0\x00', r9, 0x4, 0x5, 0xb4, 0xfffffff7, 0x50, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, 0x700, 0x90, 0xeff, 0xff}}) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0xa4000, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x134, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001380)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001440)={'syztnl0\x00', &(0x7f00000013c0)={'sit0\x00', r4, 0x2f, 0x7, 0xff, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x1, 0xffffc000, 0xf0}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000001580)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004010}, 0x20000000) [ 107.530739] audit: type=1400 audit(1738240336.127:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:32:16 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) write$P9_RLERRORu(r0, &(0x7f0000000040)={0x16, 0x7, 0x1, {{0x9, ':!(^)\'M{}'}, 0x3}}, 0x16) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0xc2800) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {r1, r2}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r10, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xcc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1e}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x1, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26008801}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000980)={{0x1, 0x1, 0x4, 0x2, 0x3}, 0xfffffffffffffffc, 0x6}) 12:32:16 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x1, 0x4) r2 = memfd_secret(0x80000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080), 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000100)={0x3, 0x40, 0x81, 0x0, 0x8}) r4 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x200) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x2, 0x2) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000200), 0x4) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r5 = mq_open(&(0x7f0000000280)='%}!$\x00', 0x40, 0x40, &(0x7f00000002c0)={0x8, 0x1ff, 0x6, 0x6}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f0000000300)=""/99, 0x63, 0x1, &(0x7f00000003c0)={r6, r7+10000000}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) read$char_usb(r8, &(0x7f0000000440)=""/4096, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001440)=0x2, 0x4) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000001480)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001600)={'syztnl2\x00', &(0x7f0000001580)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x6, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x1, 0x20, 0x7}}) [ 108.988573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.989812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.989871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.991109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.001781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.004771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.007224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.009351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.013270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.016824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.018403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.019437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.021011] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.022145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.027779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.032512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.059332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.061847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.080463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.081372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.082602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.111752] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.113285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.114341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.116612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.120706] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.121480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.124784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.125563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.166780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.167833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.169332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.188777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.191812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.231494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.233149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 109.234200] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.259665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.261112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.267684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.280793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.282194] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 109.287582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.312802] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.314937] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 109.316033] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.339382] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.340838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.104230] Bluetooth: hci2: command tx timeout [ 111.234806] Bluetooth: hci0: command tx timeout [ 111.298724] Bluetooth: hci3: command tx timeout [ 111.359631] Bluetooth: hci5: command tx timeout [ 111.423673] Bluetooth: hci1: command tx timeout [ 111.487736] Bluetooth: hci6: command tx timeout [ 111.488391] Bluetooth: hci7: command tx timeout [ 111.489254] Bluetooth: hci4: command tx timeout [ 113.152606] Bluetooth: hci2: command tx timeout [ 113.279746] Bluetooth: hci0: command tx timeout [ 113.343618] Bluetooth: hci3: command tx timeout [ 113.408613] Bluetooth: hci5: command tx timeout [ 113.479609] Bluetooth: hci1: command tx timeout [ 113.548576] Bluetooth: hci4: command tx timeout [ 113.549117] Bluetooth: hci6: command tx timeout [ 113.549647] Bluetooth: hci7: command tx timeout [ 115.199968] Bluetooth: hci2: command tx timeout [ 115.327643] Bluetooth: hci0: command tx timeout [ 115.391908] Bluetooth: hci3: command tx timeout [ 115.455589] Bluetooth: hci5: command tx timeout [ 115.519638] Bluetooth: hci1: command tx timeout [ 115.583997] Bluetooth: hci7: command tx timeout [ 115.584495] Bluetooth: hci6: command tx timeout [ 115.585729] Bluetooth: hci4: command tx timeout [ 117.248313] Bluetooth: hci2: command tx timeout [ 117.384583] Bluetooth: hci0: command tx timeout [ 117.441564] Bluetooth: hci3: command tx timeout [ 117.503726] Bluetooth: hci5: command tx timeout [ 117.567595] Bluetooth: hci1: command tx timeout [ 117.631663] Bluetooth: hci6: command tx timeout [ 117.632163] Bluetooth: hci4: command tx timeout [ 117.633022] Bluetooth: hci7: command tx timeout [ 171.358731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.373983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.375672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.376616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.377888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.380591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.381916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.383591] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.384721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.412094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.419211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.420420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.437779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.439322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.440663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.449145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.462401] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.463426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.505920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.509789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.515759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.517086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.517114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.518229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.526624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.528301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.529759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.531640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.533840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.535116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.652044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.656633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.662958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.667650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.667828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.668377] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.670288] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.672393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.675959] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.678976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.684859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.687813] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 171.688786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.709241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.710054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.743651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.746439] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.749328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.503673] Bluetooth: hci1: command tx timeout [ 173.503686] Bluetooth: hci0: command tx timeout [ 173.567615] Bluetooth: hci4: command tx timeout [ 173.567704] Bluetooth: hci2: command tx timeout [ 173.631835] Bluetooth: hci3: command tx timeout [ 173.760602] Bluetooth: hci6: command tx timeout [ 173.823816] Bluetooth: hci7: command tx timeout [ 173.889616] Bluetooth: hci5: command tx timeout [ 175.551636] Bluetooth: hci0: command tx timeout [ 175.552742] Bluetooth: hci1: command tx timeout [ 175.616058] Bluetooth: hci2: command tx timeout [ 175.616688] Bluetooth: hci4: command tx timeout [ 175.681628] Bluetooth: hci3: command tx timeout [ 175.807656] Bluetooth: hci6: command tx timeout [ 175.873103] Bluetooth: hci7: command tx timeout [ 175.956554] Bluetooth: hci5: command tx timeout [ 177.599617] Bluetooth: hci1: command tx timeout [ 177.599680] Bluetooth: hci0: command tx timeout [ 177.663682] Bluetooth: hci2: command tx timeout [ 177.663711] Bluetooth: hci4: command tx timeout [ 177.727587] Bluetooth: hci3: command tx timeout [ 177.855596] Bluetooth: hci6: command tx timeout [ 177.919574] Bluetooth: hci7: command tx timeout [ 177.983612] Bluetooth: hci5: command tx timeout [ 179.647635] Bluetooth: hci1: command tx timeout [ 179.648758] Bluetooth: hci0: command tx timeout [ 179.717654] Bluetooth: hci2: command tx timeout [ 179.718168] Bluetooth: hci4: command tx timeout [ 179.787721] Bluetooth: hci3: command tx timeout [ 179.903801] Bluetooth: hci6: command tx timeout [ 179.967659] Bluetooth: hci7: command tx timeout [ 180.031853] Bluetooth: hci5: command tx timeout [ 233.777954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.779634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.781647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.788246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.790169] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.791285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.931480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.932960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.934229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.937734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.939331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.940386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.004782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.007634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.012691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.023047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.024739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.026854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.060145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.067112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.069969] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.073711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.074998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.076045] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.086750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.092827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.093756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.098824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.098917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.102103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.105157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.106187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.134706] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.137928] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.140760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.146766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.186404] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 234.209364] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.210930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.213101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.219160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.220097] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 234.221895] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 234.222810] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 234.224961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 234.226403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.227779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 234.242469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.839607] Bluetooth: hci0: command tx timeout [ 235.967777] Bluetooth: hci1: command tx timeout [ 236.095577] Bluetooth: hci2: command tx timeout [ 236.223649] Bluetooth: hci5: command tx timeout [ 236.287621] Bluetooth: hci6: command tx timeout [ 236.292223] Bluetooth: hci3: command tx timeout [ 236.355587] Bluetooth: hci7: command tx timeout [ 236.356938] Bluetooth: hci4: command tx timeout [ 237.892578] Bluetooth: hci0: command tx timeout [ 238.036538] Bluetooth: hci1: command tx timeout [ 238.147284] Bluetooth: hci2: command tx timeout [ 238.279185] Bluetooth: hci5: command tx timeout [ 238.339213] Bluetooth: hci6: command tx timeout [ 238.339982] Bluetooth: hci3: command tx timeout [ 238.404543] Bluetooth: hci4: command tx timeout [ 238.405088] Bluetooth: hci7: command tx timeout [ 239.943590] Bluetooth: hci0: command tx timeout [ 240.063584] Bluetooth: hci1: command tx timeout [ 240.193025] Bluetooth: hci2: command tx timeout [ 240.319903] Bluetooth: hci5: command tx timeout [ 240.393470] Bluetooth: hci6: command tx timeout [ 240.394892] Bluetooth: hci3: command tx timeout [ 240.449573] Bluetooth: hci7: command tx timeout [ 240.449599] Bluetooth: hci4: command tx timeout [ 241.983604] Bluetooth: hci0: command tx timeout [ 242.111686] Bluetooth: hci1: command tx timeout [ 242.239661] Bluetooth: hci2: command tx timeout [ 242.367627] Bluetooth: hci5: command tx timeout [ 242.433245] Bluetooth: hci6: command tx timeout [ 242.434132] Bluetooth: hci3: command tx timeout [ 242.495563] Bluetooth: hci4: command tx timeout [ 242.503284] Bluetooth: hci7: command tx timeout [ 296.346518] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.350892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.357283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.363210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.366052] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.368358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.467101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.475858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.476816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.479002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.484753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.488170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.490011] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.491118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.498924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.508295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.517050] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.520692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.533051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.559410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.563903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.572882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.578009] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.579299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.652013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.678353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.691843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.694749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.712636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.714435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.724713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.738838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.739618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.746313] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.747988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.752650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.754671] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.758768] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.771812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.793101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.803097] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.805132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.812241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.814574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.963630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.034147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.051996] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 297.061833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.431643] Bluetooth: hci0: command tx timeout [ 298.559606] Bluetooth: hci2: command tx timeout [ 298.559636] Bluetooth: hci1: command tx timeout [ 298.688574] Bluetooth: hci3: command tx timeout [ 298.816188] Bluetooth: hci5: command tx timeout [ 299.136615] Bluetooth: hci7: command tx timeout [ 299.328703] Bluetooth: hci4: command tx timeout [ 299.712332] Bluetooth: hci6: command tx timeout [ 300.487502] Bluetooth: hci0: command tx timeout [ 300.607873] Bluetooth: hci2: command tx timeout [ 300.608391] Bluetooth: hci1: command tx timeout [ 300.751503] Bluetooth: hci3: command tx timeout [ 300.868957] Bluetooth: hci5: command tx timeout [ 301.191546] Bluetooth: hci7: command tx timeout [ 301.376571] Bluetooth: hci4: command tx timeout [ 301.772524] Bluetooth: hci6: command tx timeout [ 302.528576] Bluetooth: hci0: command tx timeout [ 302.656662] Bluetooth: hci2: command tx timeout [ 302.657117] Bluetooth: hci1: command tx timeout [ 302.784544] Bluetooth: hci3: command tx timeout [ 302.912633] Bluetooth: hci5: command tx timeout [ 303.232680] Bluetooth: hci7: command tx timeout [ 303.425915] Bluetooth: hci4: command tx timeout [ 303.809679] Bluetooth: hci6: command tx timeout [ 304.576651] Bluetooth: hci0: command tx timeout [ 304.704564] Bluetooth: hci1: command tx timeout [ 304.704651] Bluetooth: hci2: command tx timeout [ 304.831620] Bluetooth: hci3: command tx timeout [ 304.959682] Bluetooth: hci5: command tx timeout [ 305.280590] Bluetooth: hci7: command tx timeout [ 305.471570] Bluetooth: hci4: command tx timeout [ 305.855642] Bluetooth: hci6: command tx timeout [ 358.552854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.554151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.565032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.571666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.580345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 358.581392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.744990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.750713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.752846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.755297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.757152] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.758706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.860561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.866139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.867542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.881054] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.884227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.888799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.927988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.935690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.936980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.944713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.947538] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.948714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.005263] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.010051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.019724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.029675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.035918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.046383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.047947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.053309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.057771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.063275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.067776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.071730] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.078712] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.084331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 359.086056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.099943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.104583] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.105388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.108673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.110049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 359.111779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.118391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.138701] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 359.141821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.647370] Bluetooth: hci0: command tx timeout [ 360.769096] Bluetooth: hci1: command tx timeout [ 360.968579] Bluetooth: hci2: command tx timeout [ 361.029526] Bluetooth: hci3: command tx timeout [ 361.153543] Bluetooth: hci5: command tx timeout [ 361.154415] Bluetooth: hci6: command tx timeout [ 361.215799] Bluetooth: hci4: command tx timeout [ 361.216682] Bluetooth: hci7: command tx timeout [ 362.687560] Bluetooth: hci0: command tx timeout [ 362.817490] Bluetooth: hci1: command tx timeout [ 363.007643] Bluetooth: hci2: command tx timeout [ 363.071658] Bluetooth: hci3: command tx timeout [ 363.199877] Bluetooth: hci6: command tx timeout [ 363.200442] Bluetooth: hci5: command tx timeout [ 363.263553] Bluetooth: hci7: command tx timeout [ 363.264070] Bluetooth: hci4: command tx timeout [ 364.735578] Bluetooth: hci0: command tx timeout [ 364.869648] Bluetooth: hci1: command tx timeout [ 365.057489] Bluetooth: hci2: command tx timeout [ 365.127511] Bluetooth: hci3: command tx timeout [ 365.247578] Bluetooth: hci5: command tx timeout [ 365.248143] Bluetooth: hci6: command tx timeout [ 365.315557] Bluetooth: hci7: command tx timeout [ 365.317512] Bluetooth: hci4: command tx timeout [ 366.783591] Bluetooth: hci0: command tx timeout [ 366.911543] Bluetooth: hci1: command tx timeout [ 367.103777] Bluetooth: hci2: command tx timeout [ 367.167588] Bluetooth: hci3: command tx timeout [ 367.295771] Bluetooth: hci5: command tx timeout [ 367.295903] Bluetooth: hci6: command tx timeout [ 367.359560] Bluetooth: hci7: command tx timeout [ 367.360087] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 12:37:19 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8134b881 RDX=00000000000034b8 RSI=00000000000034b8 RDI=ffffffff86c49ed4 RBP=ffff88802b557930 RSP=ffff88802b557818 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003ab5c R11=00000000ffffffff R12=ffff88802b557938 R13=ffff88802b557920 R14=ffff88802b557919 R15=ffff88802b5578d8 RIP=ffffffff81349000 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5d08738090 CR3=0000000026e36000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000004 RBX=ffff88801680c26a RCX=ffffffff814f40de RDX=1ffff11002d01839 RSI=0000000000000001 RDI=ffffffff878d0658 RBP=ffff88801680c248 RSP=ffff888028977790 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000001 R12=ffff88801680b780 R13=3ecf2fd811e1a0e8 R14=ffffffff86405170 R15=0000000000000000 RIP=ffffffff814fe389 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa421c31580 CR3=00000000277a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000