Warning: Permanently added '[localhost]:27937' (ECDSA) to the list of known hosts. 2025/04/27 03:28:39 fuzzer started 2025/04/27 03:28:40 dialing manager at localhost:46629 syzkaller login: [ 93.318642] cgroup: Unknown subsys name 'net' [ 93.450915] cgroup: Unknown subsys name 'cpuset' [ 93.498619] cgroup: Unknown subsys name 'rlimit' 2025/04/27 03:28:55 syscalls: 208 2025/04/27 03:28:55 code coverage: enabled 2025/04/27 03:28:55 comparison tracing: enabled 2025/04/27 03:28:55 extra coverage: enabled 2025/04/27 03:28:55 setuid sandbox: enabled 2025/04/27 03:28:55 namespace sandbox: enabled 2025/04/27 03:28:55 Android sandbox: enabled 2025/04/27 03:28:55 fault injection: enabled 2025/04/27 03:28:55 leak checking: enabled 2025/04/27 03:28:55 net packet injection: enabled 2025/04/27 03:28:55 net device setup: enabled 2025/04/27 03:28:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 03:28:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 03:28:55 USB emulation: enabled 2025/04/27 03:28:55 hci packet injection: enabled 2025/04/27 03:28:55 wifi device emulation: enabled 2025/04/27 03:28:55 802.15.4 emulation: enabled 2025/04/27 03:28:55 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 03:28:57 starting 8 fuzzer processes 03:28:57 executing program 0: r0 = eventfd(0x80000001) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"d4fce41bd0c11fca384dd096b8a5b2fb", 0x0, 0x0, {0x800, 0x8}, {0x10001, 0x9}, 0x0, [0x0, 0x5, 0xffffffff, 0x7, 0x800, 0x7, 0x4, 0x10001, 0x3, 0xbb3, 0x101, 0x2, 0xffffffffffffff01, 0x100000001, 0x2, 0x70]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)=r1) write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x100, 0x6, 0x0, 0x0, 0x1}, 0x8) eventfd2(0x80000, 0x80800) socketpair(0x22, 0x2, 0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4300}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x364, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7ff, 0x3, 0x4d, 0x200}, {0x7ff, 0x4, 0x81, 0xfffff000}, {0x800, 0x7f, 0xea, 0x4}, {0x1, 0x4, 0x7, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x9, 0x3f, 0x80}, {0x1, 0x6, 0x4, 0x9}, {0x1, 0x1f, 0xc3, 0xffffc6a0}, {0x4, 0x40, 0xbe, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x41) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$packet(r4, &(0x7f0000000a40)={0x11, 0xc, r5, 0x1, 0x5, 0x6, @link_local}, 0x14) r11 = accept4$packet(r4, 0x0, &(0x7f0000000a80), 0x1800) accept$packet(r11, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) fstat(r3, &(0x7f0000000b40)) 03:28:57 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4015}, 0x48040) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000804) socketpair(0x27, 0x80e, 0x4d, &(0x7f0000000300)={0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x80) r5 = socket(0x25, 0x4, 0xe6b9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'}) r6 = socket(0x6, 0x4, 0x1) bind$802154_dgram(r6, &(0x7f0000000540)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r7 = socket(0x27, 0x6, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000580)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40800) 03:28:57 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) socket$inet6(0xa, 0x4, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x0, r0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={r5, 0x0, r0, 0x9}) r6 = openat$cgroup_ro(r3, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000380)={r7, 0x2, 0xcd}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe1653653c2b62e0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x8, 0xdf, 0x101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000440)) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r3) getpeername$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x208, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x1ec, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc54}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x24004020}, 0x4a080) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f0000000880)=r4) timerfd_gettime(r6, &(0x7f00000008c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000940)={0x0, &(0x7f0000000900)}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x89004ee25078d85c, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2}, 0x20004080) 03:28:57 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4c051) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb222}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}}, 0x48001) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x53}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3f}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x2400c004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x80, 0x2, 0x6, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6d0, 0x7]}]}, 0x48}}, 0x8080) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048040}, 0x4040001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r8, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x87}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x0) [ 110.158335] audit: type=1400 audit(1745724537.310:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:28:57 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x40, 0x3, 0x2, 0x1f, 0x0, 0x8628, 0x48000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfff, 0x6}, 0x8090, 0x4, 0x7ff, 0x7, 0x4a, 0x1, 0xff81, 0x0, 0x2, 0x0, 0x1000}, r3, 0x7, r1, 0x8) openat$cgroup_int(r0, &(0x7f0000000300)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000340), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000380)='syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/114) write$rfkill(r0, &(0x7f0000000440)={0x7, 0x8, 0x2, 0x1}, 0x8) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x109802, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x20, 0x7, 0x40, 0x0, 0x2, 0x8109, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x3fffc}, 0x8, 0x10, 0x0, 0x8, 0x2, 0x8001, 0x8, 0x0, 0x7, 0x0, 0x3}, r1, 0xc, r4, 0x7) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x3f, 0x3, 0x1, 0x0, 0x7fff, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x4, 0x4}, 0x14000, 0xd9a9, 0x3ff, 0x0, 0x3, 0x10001, 0x3, 0x0, 0xff, 0x0, 0x1}, r5, 0x7, r6, 0x5) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 03:28:57 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioperm(0x2, 0x100, 0x80000001) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x1ff) openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) recvfrom$packet(r0, &(0x7f0000000240)=""/252, 0xfc, 0x40000000, &(0x7f0000000340)={0x11, 0x30b65d1ae793b72e, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000380)={0x6, 0x97, "162951f74c9bdcad6ecb430b35586ac9d379e5cf3e7720bbd2dc85dbf137cc98925f62b6128aa2d0b49feeb9f885791bf265a9ac6d6e904dbf5de23f6d71f72ea4264ed8d256152d7d1b172f1cd6582061107858f625afc3b372a74cdd49839ae8c9d62231308a4238795f92828f7d26614ebc83ebac77963d020a6262e750bca318928b12524e8e88d2e9bd8e33e71424d46e5e9db0c7"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000440)=""/165) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='cgroup.freeze\x00', 0x0, 0x0) sendto$packet(r3, &(0x7f0000000540)="dfc5c4d8016c9716465949610e290fe518222d15bc99ce87f34acc0180ca55aa0e1cbca30922c7269669b1742d4cab2d5ca40cf8a8abe7b239df5be5c5baa950d405ccac25e92839e38e9ab11b89cf1c161e6d1cd95b2f3094e8eb8b7923610501d4f03060bcc92e47c62db6ee92e5e1d7efe1029bad688502f078b14202b82cf66f6c33d59c71c74dda7a66ccda579e0a615735cb12139676aa36b5c44bf16153b120ae3924c51370bf77264d115406365e4369cb0eea8efd9a5b3018405112c564ac45834be6b2b04e16a34ca1a844c7", 0xd1, 0x400c010, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x32b4b9db3c837871}}, 0x14) r4 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000007c0)={@private1, 0x0}, &(0x7f0000000800)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd4, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000010) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000009c0)={0x1, 0x5, 0xe452, 0x0, 0xe}) 03:28:57 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0xd000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008074) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xeb829c91c7b9b973}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x330, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x1, 0x1, 0xffffffeb}, {0x9, 0x7f, 0x16, 0x9f}, {0x401, 0xff, 0x8, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x7f, 0xff, 0x10001}, {0x3, 0x1, 0x81, 0x7f}, {0x0, 0x9, 0xff, 0x1f}, {0x0, 0xbb, 0x9, 0x7ee5}, {0x2, 0x3}, {0x9, 0x4, 0xf, 0xbad}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x330}}, 0xe48c672de38c76a4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x37ae}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x21) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000900)={&(0x7f00000008c0)="528ce02645f73bc32a", 0x9}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008044) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x880) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4$packet(r3, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c00)=0x14, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010) accept4$packet(r8, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e00)=0x14, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r2, 0x500, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6f11}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}}, 0x8045) getsockname$packet(r5, &(0x7f0000000f80)={0x11, 0x0, 0x0}, &(0x7f0000000fc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000016c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001140)={0x518, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xa0, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x970d, 0x4, 0x1, 0x10001}, {0x2, 0xff, 0x5b}, {0x0, 0x9, 0x0, 0x101}, {0x3, 0x80, 0x1, 0x3f3e97f7}, {0x7, 0x0, 0x80, 0x5}, {0x8, 0x64, 0x3, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x490d}}}]}}, {{0x8, 0x1, r6}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x24000140}, 0x40081) 03:28:57 executing program 7: getegid() r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) fstat(r0, &(0x7f0000000040)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffff001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) r2 = gettid() clone3(&(0x7f00000004c0)={0x200000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x26}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000400)=""/87, &(0x7f0000000480)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0], 0x4, {r1}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000540)=r1, 0x1) sched_rr_get_interval(r2, &(0x7f0000000580)) r3 = socket(0x2c, 0xa, 0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) getpeername$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x600, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x800) r6 = openat$cgroup_devices(r1, &(0x7f0000000780)='devices.allow\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f00000007c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000800)) r7 = openat$cgroup(r6, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000880), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='net_prio.prioidx\x00', 0x0, 0x0) [ 111.501754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.508427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.512367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.519947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.524154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.611835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.618176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.621581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.630416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.637818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.764054] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.766904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.769341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.773594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.776415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.779151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.781762] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.783507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.796239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.804355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.812338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.819425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.821268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.827431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.834169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.842642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.870144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.873800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.897785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.903641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.916630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.926171] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.937521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.941505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.943992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.957988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.961201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.966603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.971957] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.979263] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.584398] Bluetooth: hci0: command tx timeout [ 113.713912] Bluetooth: hci1: command tx timeout [ 113.904018] Bluetooth: hci2: command tx timeout [ 113.968496] Bluetooth: hci4: command tx timeout [ 113.969998] Bluetooth: hci3: command tx timeout [ 114.033205] Bluetooth: hci7: command tx timeout [ 114.034512] Bluetooth: hci5: command tx timeout [ 114.097253] Bluetooth: hci6: command tx timeout [ 115.631990] Bluetooth: hci0: command tx timeout [ 115.760005] Bluetooth: hci1: command tx timeout [ 115.951977] Bluetooth: hci2: command tx timeout [ 116.016305] Bluetooth: hci3: command tx timeout [ 116.016774] Bluetooth: hci4: command tx timeout [ 116.080597] Bluetooth: hci5: command tx timeout [ 116.081077] Bluetooth: hci7: command tx timeout [ 116.144163] Bluetooth: hci6: command tx timeout [ 117.680961] Bluetooth: hci0: command tx timeout [ 117.807980] Bluetooth: hci1: command tx timeout [ 117.999940] Bluetooth: hci2: command tx timeout [ 118.064014] Bluetooth: hci3: command tx timeout [ 118.064477] Bluetooth: hci4: command tx timeout [ 118.128241] Bluetooth: hci5: command tx timeout [ 118.128720] Bluetooth: hci7: command tx timeout [ 118.192505] Bluetooth: hci6: command tx timeout [ 119.728930] Bluetooth: hci0: command tx timeout [ 119.856124] Bluetooth: hci1: command tx timeout [ 120.047944] Bluetooth: hci2: command tx timeout [ 120.112017] Bluetooth: hci4: command tx timeout [ 120.112465] Bluetooth: hci3: command tx timeout [ 120.177202] Bluetooth: hci5: command tx timeout [ 120.177645] Bluetooth: hci7: command tx timeout [ 120.240031] Bluetooth: hci6: command tx timeout [ 171.576461] syz-executor.0 (288) used greatest stack depth: 25072 bytes left [ 171.868796] syz-executor.6 (289) used greatest stack depth: 24952 bytes left [ 174.149708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.152050] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.153161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.155114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.155613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.157510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.161230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.163504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.170356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.173288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.304365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.309348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.316567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.318177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.330204] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.338573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.352524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.354469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.362995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.371992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.377891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.380468] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.382264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.408732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.410597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.432836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.435599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.455485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.476272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.506378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.517805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.527983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.596482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.659995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.723548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.845466] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.855005] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.930555] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.014283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.037337] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.176038] Bluetooth: hci1: command tx timeout [ 176.239961] Bluetooth: hci0: command tx timeout [ 176.497226] Bluetooth: hci4: command tx timeout [ 176.498429] Bluetooth: hci3: command tx timeout [ 176.499087] Bluetooth: hci2: command tx timeout [ 176.751962] Bluetooth: hci5: command tx timeout [ 176.944935] Bluetooth: hci6: command tx timeout [ 177.136198] Bluetooth: hci7: command tx timeout [ 178.224074] Bluetooth: hci1: command tx timeout [ 178.288919] Bluetooth: hci0: command tx timeout [ 178.544031] Bluetooth: hci3: command tx timeout [ 178.544489] Bluetooth: hci2: command tx timeout [ 178.545975] Bluetooth: hci4: command tx timeout [ 178.799930] Bluetooth: hci5: command tx timeout [ 178.992182] Bluetooth: hci6: command tx timeout [ 179.185000] Bluetooth: hci7: command tx timeout [ 180.272969] Bluetooth: hci1: command tx timeout [ 180.335932] Bluetooth: hci0: command tx timeout [ 180.591965] Bluetooth: hci2: command tx timeout [ 180.592416] Bluetooth: hci4: command tx timeout [ 180.592885] Bluetooth: hci3: command tx timeout [ 180.847944] Bluetooth: hci5: command tx timeout [ 181.040147] Bluetooth: hci6: command tx timeout [ 181.232102] Bluetooth: hci7: command tx timeout [ 182.320239] Bluetooth: hci1: command tx timeout [ 182.383952] Bluetooth: hci0: command tx timeout [ 182.640028] Bluetooth: hci3: command tx timeout [ 182.640526] Bluetooth: hci4: command tx timeout [ 182.641046] Bluetooth: hci2: command tx timeout [ 182.896954] Bluetooth: hci5: command tx timeout [ 183.088687] Bluetooth: hci6: command tx timeout [ 183.279942] Bluetooth: hci7: command tx timeout [ 236.429585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.447385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.449828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.466448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.472299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.515595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.517719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.527188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.547009] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.554292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.570145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.580266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.586027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.608259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.625299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.627641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.681228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.685250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.693621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.699116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.737535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.741591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.745440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.748301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.754457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.760465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.777307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.779776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.784640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.788467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.793672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.814253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.816985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.824883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.833484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.987153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.012518] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.034484] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.046688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.051536] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.514505] Bluetooth: hci0: command tx timeout [ 238.641304] Bluetooth: hci1: command tx timeout [ 238.705922] Bluetooth: hci2: command tx timeout [ 238.831944] Bluetooth: hci6: command tx timeout [ 238.833251] Bluetooth: hci3: command tx timeout [ 238.895983] Bluetooth: hci4: command tx timeout [ 238.896691] Bluetooth: hci5: command tx timeout [ 239.215961] Bluetooth: hci7: command tx timeout [ 240.559936] Bluetooth: hci0: command tx timeout [ 240.688906] Bluetooth: hci1: command tx timeout [ 240.752118] Bluetooth: hci2: command tx timeout [ 240.880997] Bluetooth: hci3: command tx timeout [ 240.881512] Bluetooth: hci6: command tx timeout [ 240.944131] Bluetooth: hci5: command tx timeout [ 240.944603] Bluetooth: hci4: command tx timeout [ 241.263971] Bluetooth: hci7: command tx timeout [ 242.607987] Bluetooth: hci0: command tx timeout [ 242.736135] Bluetooth: hci1: command tx timeout [ 242.800036] Bluetooth: hci2: command tx timeout [ 242.928260] Bluetooth: hci3: command tx timeout [ 242.928750] Bluetooth: hci6: command tx timeout [ 242.992166] Bluetooth: hci4: command tx timeout [ 242.992635] Bluetooth: hci5: command tx timeout [ 243.312227] Bluetooth: hci7: command tx timeout [ 244.656304] Bluetooth: hci0: command tx timeout [ 244.783927] Bluetooth: hci1: command tx timeout [ 244.847949] Bluetooth: hci2: command tx timeout [ 244.975962] Bluetooth: hci6: command tx timeout [ 244.976455] Bluetooth: hci3: command tx timeout [ 245.041914] Bluetooth: hci5: command tx timeout [ 245.042396] Bluetooth: hci4: command tx timeout [ 245.359939] Bluetooth: hci7: command tx timeout [ 299.153125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.160068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.167735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.184473] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.198920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.243819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.251385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.257165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.267428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.276140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.385156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.402717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.414368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.417573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.429805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.432825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.434609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.447544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.468655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.481358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.488441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.494365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.497828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.562627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.574767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.582776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.587356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.590619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.590936] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.598419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.605409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.626350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.644680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.654209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.661990] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.669170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.673323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.680824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.703191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.741363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.297441] Bluetooth: hci0: command tx timeout [ 301.361899] Bluetooth: hci1: command tx timeout [ 301.616965] Bluetooth: hci3: command tx timeout [ 301.617814] Bluetooth: hci2: command tx timeout [ 301.680031] Bluetooth: hci4: command tx timeout [ 301.744093] Bluetooth: hci6: command tx timeout [ 301.746870] Bluetooth: hci5: command tx timeout [ 301.809047] Bluetooth: hci7: command tx timeout [ 303.345006] Bluetooth: hci0: command tx timeout [ 303.409318] Bluetooth: hci1: command tx timeout [ 303.665006] Bluetooth: hci2: command tx timeout [ 303.665505] Bluetooth: hci3: command tx timeout [ 303.728963] Bluetooth: hci4: command tx timeout [ 303.792969] Bluetooth: hci5: command tx timeout [ 303.793417] Bluetooth: hci6: command tx timeout [ 303.856930] Bluetooth: hci7: command tx timeout [ 305.393153] Bluetooth: hci0: command tx timeout [ 305.457983] Bluetooth: hci1: command tx timeout [ 305.714107] Bluetooth: hci3: command tx timeout [ 305.714608] Bluetooth: hci2: command tx timeout [ 305.777216] Bluetooth: hci4: command tx timeout [ 305.840962] Bluetooth: hci6: command tx timeout [ 305.841414] Bluetooth: hci5: command tx timeout [ 305.903913] Bluetooth: hci7: command tx timeout [ 307.440955] Bluetooth: hci0: command tx timeout [ 307.504896] Bluetooth: hci1: command tx timeout [ 307.762413] Bluetooth: hci2: command tx timeout [ 307.762923] Bluetooth: hci3: command tx timeout [ 307.824008] Bluetooth: hci4: command tx timeout [ 307.889297] Bluetooth: hci5: command tx timeout [ 307.889749] Bluetooth: hci6: command tx timeout [ 307.953055] Bluetooth: hci7: command tx timeout [ 361.477539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.489620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.495827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.510424] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.522459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.603626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.608341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.610769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.618762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.626386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.674830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.685746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.696028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.718670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.724676] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.871555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.881239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.887271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.898905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.910197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.916707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.933155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.944307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.998372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.006383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.008710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.063092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.069121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.128381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.170482] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.357258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.367234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.372506] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.385413] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.406595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.412762] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.429498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.453516] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.465314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.486365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.568117] Bluetooth: hci0: command tx timeout [ 363.697903] Bluetooth: hci1: command tx timeout [ 363.760057] Bluetooth: hci2: command tx timeout [ 364.017101] Bluetooth: hci4: command tx timeout [ 364.335945] Bluetooth: hci3: command tx timeout [ 364.336935] Bluetooth: hci5: command tx timeout [ 364.592102] Bluetooth: hci6: command tx timeout [ 364.592139] Bluetooth: hci7: command tx timeout [ 365.617076] Bluetooth: hci0: command tx timeout [ 365.743930] Bluetooth: hci1: command tx timeout [ 365.809014] Bluetooth: hci2: command tx timeout [ 366.065898] Bluetooth: hci4: command tx timeout [ 366.386890] Bluetooth: hci5: command tx timeout [ 366.386911] Bluetooth: hci3: command tx timeout [ 366.639926] Bluetooth: hci6: command tx timeout [ 366.639994] Bluetooth: hci7: command tx timeout [ 367.663912] Bluetooth: hci0: command tx timeout [ 367.791974] Bluetooth: hci1: command tx timeout [ 367.855920] Bluetooth: hci2: command tx timeout [ 368.111946] Bluetooth: hci4: command tx timeout [ 368.431972] Bluetooth: hci5: command tx timeout [ 368.433036] Bluetooth: hci3: command tx timeout [ 368.688774] Bluetooth: hci6: command tx timeout [ 368.689407] Bluetooth: hci7: command tx timeout [ 369.711919] Bluetooth: hci0: command tx timeout [ 369.840100] Bluetooth: hci1: command tx timeout [ 369.903896] Bluetooth: hci2: command tx timeout [ 370.160276] Bluetooth: hci4: command tx timeout [ 370.481296] Bluetooth: hci3: command tx timeout [ 370.481337] Bluetooth: hci5: command tx timeout [ 370.737746] Bluetooth: hci7: command tx timeout [ 370.737772] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:33:58 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802b7efc48 RCX=ffffffff84ac6929 RDX=ffff888034a25340 RSI=ffffffff84ac6954 RDI=0000000000000006 RBP=000000000000001b RSP=ffff88802b7efa58 R8 =0000000000000001 R9 =fffff94000044236 R10=000000000000001b R11=0000000000000000 R12=ffff8880092902c0 R13=000000000000001b R14=000000000000001b R15=dffffc0000000000 RIP=ffffffff8172ebab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f85ca2af269 CR3=00000000136e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff000000000000000000000000000000 XMM01=0000000000000000657268747062696c XMM02=00000000000000362e6f732e6362696c XMM03=00000000000000000000000000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff82245cd6 RDX=ffff888014ffb780 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880261378f0 R8 =0000000000000000 R9 =ffffed100120303d R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000081 R14=0000000000000001 R15=ffff88800930b400 RIP=ffffffff8172eb60 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f144ee74540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f144f00f4a1 CR3=000000001a0d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000