Warning: Permanently added '[localhost]:10008' (ECDSA) to the list of known hosts. 2025/04/27 18:06:37 fuzzer started 2025/04/27 18:06:38 dialing manager at localhost:46629 syzkaller login: [ 98.041017] cgroup: Unknown subsys name 'net' [ 98.168926] cgroup: Unknown subsys name 'cpuset' [ 98.251779] cgroup: Unknown subsys name 'rlimit' 2025/04/27 18:06:55 syscalls: 201 2025/04/27 18:06:55 code coverage: enabled 2025/04/27 18:06:55 comparison tracing: enabled 2025/04/27 18:06:55 extra coverage: enabled 2025/04/27 18:06:55 setuid sandbox: enabled 2025/04/27 18:06:55 namespace sandbox: enabled 2025/04/27 18:06:55 Android sandbox: enabled 2025/04/27 18:06:55 fault injection: enabled 2025/04/27 18:06:55 leak checking: enabled 2025/04/27 18:06:55 net packet injection: enabled 2025/04/27 18:06:55 net device setup: enabled 2025/04/27 18:06:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 18:06:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 18:06:55 USB emulation: enabled 2025/04/27 18:06:55 hci packet injection: enabled 2025/04/27 18:06:55 wifi device emulation: enabled 2025/04/27 18:06:55 802.15.4 emulation: enabled 2025/04/27 18:06:55 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 18:06:57 starting 8 fuzzer processes 18:06:57 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{}, {r1, r2/1000+10000}}, 0x100) syz_open_dev$sg(&(0x7f0000000100), 0x849, 0x8080) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x4, &(0x7f00000001c0)) r3 = getuid() sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1f}, @IEEE802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x80) utimensat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{0x0, 0xea60}, {0x77359400}}, 0x100) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) pidfd_send_signal(r0, 0x28, &(0x7f0000000440)={0x13, 0x4, 0x8001}, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000004c0)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000580)) r5 = syz_mount_image$nfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3ff, 0x1, &(0x7f0000000700)=[{&(0x7f0000000680)="3f74a4cae3a9995e747c15658bfed46411460b98c04ddb8d8bcb261f66af19a79c29656f8a7b3247ecdbfc404d948fbb1fe8654baeee5730cea89e98946f1f371334f54a", 0x44, 0x4000000}], 0x2228001, &(0x7f0000000740)={[{'%\\+('}, {'/proc/mdstat\x00'}], [{@obj_user={'obj_user', 0x3d, '[\']\'\\@'}}, {@uid_gt={'uid>', r3}}, {@euid_gt={'euid>', r3}}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r3}}, {@obj_role}, {@fsname={'fsname', 0x3d, 'nl802154\x00'}}, {@subj_user={'subj_user', 0x3d, 'nl802154\x00'}}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/custom0\x00', 0x800, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000840), &(0x7f0000000880)=@md5={0x1, "ecf1494394f07471a55159d604f48f68"}, 0x11, 0x0) clock_getres(0x5, &(0x7f00000008c0)) utimensat(r5, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={{0x77359400}}, 0x100) 18:06:57 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x82080, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x7, 0xc}, {0x2, 0x1, [0x794, 0x3, 0x401, 0x4]}}}}, 0x19) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r7) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000080}, 0x4000) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xdbd) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 18:06:57 executing program 2: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) connect$bt_sco(r0, &(0x7f0000000200), 0x8) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfb3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4804}, 0x1) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000003c0)) r2 = getpgrp(0xffffffffffffffff) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000400)={r2, 0x1, 0x8}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000480)={0x95b, 0x38, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, 0x0, 0x7df2f9482e72bd54, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x44005}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6553}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000640)=""/57, &(0x7f0000000680)=0x39) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000700)=""/251, &(0x7f0000000800)=0xfb) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000000880)=""/29, &(0x7f00000008c0)=0x1d) 18:06:57 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr', 0x4100c0, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4001) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x7f, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, 0x14, 0x2, 0x70bd28, 0x25dfdbfc, {0x33, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x53, 0x1, "09ee3100024df35a3c19227c1c7d980d5269e8d1922470c60b70761b4feb8375364c0069c208348a5915879a5c0c16e57c4fc3ed3b95088ae871b4b1ba99a94b904d9adc3225ec81a7d4a360665d1e"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "6f4f3ca17d0a387010835685e9f6df3946b92757697aa30ad67d4521a11e3253fb4238d0dee448e21c18e8d5c6c153d1173eca82e6d2a36b409d2c02bc86bbc554870f77f58e33e42911bf780ce6fb95b71d17add66e2feedca980c117fa44e3d625bc7aadec384bcf381fc5719c7048885d5e1304b9185f08e9c6499f7d731425ed5de3731cfd2d"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "7ddb58e6874e3e1ea52a38f0b91df94316bbd756c2bedae0d0ab1afbc1eb81e68df8214477b845aabb32e21c76c78d516434de05e0b6da9ecd02d6691eb9bf6c23181e87e0fa12f0e11bde5cb4829c"}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x724, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl1\x00', r2, 0x2f, 0x5, 0x66, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x40, 0x3, 0x5c7}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000b40)={0x0, @can, @xdp={0x2c, 0x8, r2, 0x30}, @hci={0x1f, 0x3, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b00)='rose0\x00', 0x6, 0xfffffffffffffc01, 0x7ff}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000c40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r5, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x3c}}, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r8, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0xc080) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@remote, @in=@multicast1}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000ec0)=0xe8) bind$bt_sco(r0, &(0x7f0000000f00)={0x1f, @none}, 0x8) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept4(r9, &(0x7f0000000f40)=@x25={0x9, @remote}, &(0x7f0000000fc0)=0x80, 0x80000) [ 117.040632] audit: type=1400 audit(1745777217.764:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:06:57 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9b, 0x212000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)=0x1) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "881101ed66ea8d95e602b75a1613dddc2a94600b0d8b76ed7680ec46935660aa2cc8f00ce51aacab49de1d8c3558f26a4f9502157305df3af882fd63afc0535a627f070089b8c637041fb46611d5a91dc4f36bee7454a3c19af2d781bce769f2afeb09005260aee956d9230e64b8101d31c70bac2a29cab6b5715b2a2f62c1b4e7dfe892532e1549a60c0d7f8c4d0d20276e7874f471555d064135ac4d0f29de8215dba5056a557d5ed0df244f33ed698551e40b1ee6bd4cea2670"}, 0xbf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee48}}, './file0\x00'}) ioctl$RTC_AIE_OFF(r1, 0x7002) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xa) r2 = memfd_secret(0x0) ioctl$RTC_AIE_ON(r2, 0x7001) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1d30}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x200008c4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000007}, 0x44) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x108, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000000}, 0xacbd146a31422efd) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x148}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x8041) 18:06:57 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) io_uring_enter(r0, 0x4699, 0x242d, 0x2, &(0x7f0000000080)={[0x6]}, 0x8) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000100)={@desc={0x1, 0x0, @desc1}}) r2 = io_uring_setup(0x310c, &(0x7f0000000180)={0x0, 0xd14b, 0x0, 0x3, 0x95}) r3 = io_uring_setup(0x536e, &(0x7f0000000200)={0x0, 0xd0e5, 0x1, 0x2, 0x3cc, 0x0, r2}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000002c0)={0x0, 0x1, {0x6, 0x10, 0xa, 0xa, 0x3, 0x8949d77, 0x2, 0x88, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000340)=r5, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) statx(r5, &(0x7f0000000380)='./file0\x00', 0x2000, 0x200, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000500)={0x0}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/block/sda', 0x101001, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000005c0)={r6, 0x2, r7, 0x5}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x68d) 18:06:57 executing program 6: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8000, 0x28, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = memfd_create(&(0x7f0000000140)=':])/\x00', 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0x3, 0x8, 0xe4a2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x700, 0x4, 0x101}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x480c0) clock_getres(0x6, &(0x7f00000003c0)) pipe(&(0x7f0000000400)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x714, 0x14, 0x200, 0x70bd2d, 0x25dfdbff, {0x29, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "85eafd92c8964defaf89897d79d9201dcca497e78afbe90402c6ee4e3d2e51948a7f4153faec016399002eac16278ae435da0eacf2c717cc573d8e160f7067b14c807572891b8c6a1a3fb07b39fe8f6353f533f6d6eb66653c52ea8dee64bd41a5d60fac0cb78c443dc34fcff144db3991f78dc4ec79b0469e07cb9e12354a7674bd9275e908e52287006d3fa8e3b6f14b04c056dbc434ee3ea1bffd12f2dffff11ba94da8967f2580fca77a2bdd50d64308563529865b421b4da8a4cedfc332e423fb2eb04c4123a9cb5a9d853be25f1a04c3b7ce22ce8200d751710224257c07895ce3ec37fc34fb5efff792"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "8149344758497ecf751482ff4a820330fa1763ed18434e1e48282d2b68ec4bf33a8a1d53c3f8f1089e8187226fb9d8848146286a7debe2b9317994af394ffb1fc000a7c4c55ad1ebf359c4d0a1f66cc19109585493ebf7c24e736363902e33965badad5adbdc81c58faeeb5c3a67d18614d600451c4fe7fb69dfd8110f4ab27f9eee66b9af679929599a294c2a3968fafdc53616017843ea6a1181e5c5c3a3cfdec80ab4ef57d444cbf83c13866cf12c7bbb9fadf52c0cc86e86a4166f4f637e17b28b"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "2981e49cc285f9977e678f6f5c1b3113a8683ea65622ec0fe996f461ec3c8380258f8d8129436db7ddd8c9ea48e8a4edf48a808bcc17de4402264c7f7174d1fdc3e6a115148b7ef070d85bd2c8054ecd3598ae86ba0bf5205e57c56307ef9edc3af3b7467bc7096103400ecb36ce250651fb7d762a60bd0bbde4a455d42e778e8d34ed3ff6ab8d0d8f5adaed8077c3c25a77a017e666425f2b6aa498e686135ad56e51e87b2cc65ef1fb9c0a6566fe3e68ce0928dffeb91110c00448e23e36389730"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "8aefc952af95464081240d81054714edc4dc026d3e065af9da79333245391658fa5575cf2f074f7eca889f677b9fe703672205e9481699b7d244e6bc465f108bce3ed0f1bfb2f8570605ba75935049e6112eae2e7627b94448f2dfb263e897d617cfb97c615a7c2b63db80d985ea99497c11c7088b07e6b6e0d3"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "da814bcd7b19effcdb14bde41e6bc0a877cc1b772071aa1dadf8cb93a9b539a56da07b6e2e618d24171c53d14b3e7fd784d2c30ea38740272b777885ff8644a943b918a0b3d4260a1dfa82f172ba2cd742d7b2236c4fecd84459c1231a16605ac31882e7e604cf3b8701d73d346e66517c44bf95fc6d047fc68b3ec3016480003a7a3def2a9c6f"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "ae4d06224eb524249b899f0451c604eec6d91e451870ee650155ce5d3e096166dc94c40654305151f496fd6926c3063902b4bd03ad3e54d14380788fe453316ec5fefef188ed378be80c93805330f4de8e4d0f1c273026726191cac62db7a25633c760e1ccbe1050a52574677761edcab26655e82907f41454756c5bf643dad5258d17128e7daef6e1db187dc0b07f6a17023f10073b77"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "9f21b596c4223c610168abb1e1b2b3a59d7d14b8f65cb04ebc0bf7487534b1ac02449ddeca46d08f388a1585d2e9f0bf0f977cf1ab9caf9eaa7b29ba1d2271f3e07c2e1037beb1897c8ad785e0092f3f4752043ed06a918a10f5642174567b43026824be6f3de4dfcf121da22afce4ba85606725bcdc60fc3c359be85de317a568ad6a31260489e9b15674795b2b3cae27858d2c3b85c0a35f96b85033ffcc734fa205f214c47d07f52192077c17a9fd80e3bd744088eebbdb9dcdd1298db78ed4353bf37c12eb1f956f2dcc5a6c44f960fddc6c8cc1b5569ced17a023f0fc06dedd8cb2b5cd77ed134f0b"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "893ae5b05c56e37f3d60ef38e11d383644cfb4fd146ebe35b29f4b96cc44649d030a4c6ddcf1f6de62c228dd458d347e2267ae01726d77564812ddff55073c1ea9ba0265a5c71c5db4a30481aefdada42e023d992268cb15caecd3d7ca1b3c86893168b6a55f2df8aaec64a9f825831092908315553d5499b37da448a0cdf3c801ef6868b2f6fd7f83e643ad48f766abf81a93fcffb41320a88588c1a23dd9c983c4cb8be91d0bd1975b44b5e32c13eb5bf3"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "5b03bcd0f98a0b37510685f24e3fbbf720bd02b7495e13b917920a7a62d6a3e0003857712dde7e93c3fb1411c12b5b0dfb70829bb8aa4d5bc6"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "a8ede2ae9e8d17c00d17e04070b97ab642e4938b269b2c0473214f38e3a2e4431a0a266c82b8354e2c14d31dc31a3c9ee4a71330155cfafc07f336d2ac4ea8b0062e08e89c44bcef2149d5cd03ea9c756b6a9d884a5a4c4b16f3ce471a783345ca53957e1dff6eae2d0e45057da929a443a71c70255db5ba5d3c20f68af3076095a35cce175d9dc300254b87dfc6a3fa6091fcf2d8fa4ccf3865e0baae39422f879408b92d9d0807fd28eac630ac9d5e8e4a62a2aa32961d55f793fb8a3d729996a91d3b4de5227465f09ac45f0f42da749d7c78124b3d8c745b0f76c3d72d0fcd14c3e8fe9b"}]}, 0x714}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$inet6(0xa, 0x6, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) timer_create(0x7, &(0x7f0000000d40)={0x0, 0x16, 0x7, @tid=0xffffffffffffffff}, &(0x7f0000000d80)) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff}, 0x5000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r2) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x84, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x6e, 0x3, "79f268465f7655a0e32b988a672b4bac35006683e89977b2297a1d3a6dc66e1ca7875f49a1e96a6a43820ec63372683306f674af199c64db8ef141c518e03f058e63c37829b9d4ac93b3587031f502afdc8eb4394d9bef80ba5e04aa3978629ccbefc9800a36a67d740d"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008800}, 0x10008000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) 18:06:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) fallocate(r1, 0x4, 0x4, 0x4e3c) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x19c, 0x14, 0x300, 0x70bd2c, 0x25dfdbfd, {0x1f, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xae, 0x1, "a96f4b08a1a15634c83d71497d10c7e1e12fdd21742e02ba6727bd63cba1c4c8d34bccdc77fe89fb97f9ef95452f071df7b06522734ebf0ea3a56deae725bbbd44b348645e57eca2828e0c0eea58f33e1b405ac7236408bf7ae6c2d9a2d65a78494ec7a2b0284ca2986338599d9b8a29aafb67e71427276636d8459915497ca1d743612c75f9c6d8445bbd610187c0953ab330e3574e6c84cb2e8e9a1be846fd98b100982967d3dc8f3c"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "0b5a83be89def70636d2cbab451ad49e207d53f9525d754e53d2745fe767bc1b2bf3a41fa74fd7a1d73ed026cb4ed4eeeb061f862e48c3b74b13996c402b2b5480adf7447c947c0c9ec2666bb16fc0b07699025539a88d9edcbc46130ade1a58819a9648edc0c7f3da9ea03a9168ae31fd8ba850e746d3d48e65e0b5674a187947b8059d55ffd9558e9ecf751b1897855d6846e45ecfc5fc48a5ff364dde464fbd54de9ea572474363d4bcfeecb3bc278d8bda20d9330c6f14c0c6c53b82835536054a46f97be5a17f720b48a9c73af8ee413023"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x11}, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r2, 0x110, 0x2, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x811}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x703, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3) open_by_handle_at(r1, &(0x7f0000000600)=@reiserfs_6={0x18, 0x6, {0x100, 0x3f, 0x5, 0x7b94, 0x800, 0xffffffff}}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}}, 0x20008804) munlockall() pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r7 = gettid() write$cgroup_pid(r6, &(0x7f0000000880)=r7, 0x12) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x70}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044001}, 0x20000000) [ 118.540456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.543213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.546269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.547275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.550685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.552956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.558111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.565816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.568973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.578959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.590600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.593849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.596095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.601094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.606285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.609329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.612986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.621934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.626135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.645499] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.658776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.660719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.662233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.664049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.667196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.672851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.676232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.677113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.684143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.693767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.718686] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.731856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.741307] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.742481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.750083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.756903] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.758310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.760882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.795062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.839184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.612320] Bluetooth: hci0: command tx timeout [ 120.614316] Bluetooth: hci1: command tx timeout [ 120.675600] Bluetooth: hci2: command tx timeout [ 120.675795] Bluetooth: hci3: command tx timeout [ 120.739591] Bluetooth: hci4: command tx timeout [ 120.739865] Bluetooth: hci5: command tx timeout [ 120.867799] Bluetooth: hci6: command tx timeout [ 120.931488] Bluetooth: hci7: command tx timeout [ 122.659463] Bluetooth: hci1: command tx timeout [ 122.659976] Bluetooth: hci0: command tx timeout [ 122.724234] Bluetooth: hci3: command tx timeout [ 122.724872] Bluetooth: hci2: command tx timeout [ 122.787489] Bluetooth: hci5: command tx timeout [ 122.787558] Bluetooth: hci4: command tx timeout [ 122.916511] Bluetooth: hci6: command tx timeout [ 122.983425] Bluetooth: hci7: command tx timeout [ 124.708124] Bluetooth: hci1: command tx timeout [ 124.708695] Bluetooth: hci0: command tx timeout [ 124.771625] Bluetooth: hci2: command tx timeout [ 124.772543] Bluetooth: hci3: command tx timeout [ 124.837348] Bluetooth: hci4: command tx timeout [ 124.837866] Bluetooth: hci5: command tx timeout [ 124.963677] Bluetooth: hci6: command tx timeout [ 125.027607] Bluetooth: hci7: command tx timeout [ 126.755506] Bluetooth: hci1: command tx timeout [ 126.756483] Bluetooth: hci0: command tx timeout [ 126.820560] Bluetooth: hci3: command tx timeout [ 126.820620] Bluetooth: hci2: command tx timeout [ 126.883658] Bluetooth: hci4: command tx timeout [ 126.886465] Bluetooth: hci5: command tx timeout [ 127.011555] Bluetooth: hci6: command tx timeout [ 127.077124] Bluetooth: hci7: command tx timeout [ 180.724665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.729027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.732818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.745703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.749898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.795700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.801074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.801913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.804775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.814066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.814938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.818245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.821610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.826657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.835856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.860330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.866905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.869724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.889722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.895634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.942185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.943844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.945761] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.948522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.949527] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.949874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.957627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.959642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.975854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.975978] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.983427] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.985722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.988243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.990784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.990873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.995281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.995506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.999850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.003535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.029971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.819809] Bluetooth: hci0: command tx timeout [ 182.883753] Bluetooth: hci2: command tx timeout [ 182.947482] Bluetooth: hci1: command tx timeout [ 183.011654] Bluetooth: hci3: command tx timeout [ 183.075554] Bluetooth: hci7: command tx timeout [ 183.076444] Bluetooth: hci5: command tx timeout [ 183.076993] Bluetooth: hci4: command tx timeout [ 183.077575] Bluetooth: hci6: command tx timeout [ 184.867449] Bluetooth: hci0: command tx timeout [ 184.933928] Bluetooth: hci2: command tx timeout [ 184.995508] Bluetooth: hci1: command tx timeout [ 185.061447] Bluetooth: hci3: command tx timeout [ 185.124677] Bluetooth: hci4: command tx timeout [ 185.124748] Bluetooth: hci6: command tx timeout [ 185.125134] Bluetooth: hci5: command tx timeout [ 185.125679] Bluetooth: hci7: command tx timeout [ 186.917430] Bluetooth: hci0: command tx timeout [ 186.980522] Bluetooth: hci2: command tx timeout [ 187.043632] Bluetooth: hci1: command tx timeout [ 187.107525] Bluetooth: hci3: command tx timeout [ 187.172151] Bluetooth: hci5: command tx timeout [ 187.172732] Bluetooth: hci6: command tx timeout [ 187.173208] Bluetooth: hci4: command tx timeout [ 187.173737] Bluetooth: hci7: command tx timeout [ 188.964693] Bluetooth: hci0: command tx timeout [ 189.027481] Bluetooth: hci2: command tx timeout [ 189.092738] Bluetooth: hci1: command tx timeout [ 189.156805] Bluetooth: hci3: command tx timeout [ 189.219526] Bluetooth: hci4: command tx timeout [ 189.219950] Bluetooth: hci5: command tx timeout [ 189.221450] Bluetooth: hci7: command tx timeout [ 189.221608] Bluetooth: hci6: command tx timeout [ 242.873457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.878307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.885986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.902061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.910631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.935723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.947071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.950340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.956320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.962305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.027578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.035123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.042874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.051008] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.066794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.077635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.083190] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.094514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.119642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.134972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.175567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.178310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.181279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.186622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.189782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.233439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.240999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.245252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.256002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.268909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.277901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.291999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.298756] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.309038] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.346854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.353693] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.361181] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.365631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.372235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.424979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.963518] Bluetooth: hci0: command tx timeout [ 245.027778] Bluetooth: hci1: command tx timeout [ 245.155730] Bluetooth: hci2: command tx timeout [ 245.219464] Bluetooth: hci3: command tx timeout [ 245.284675] Bluetooth: hci4: command tx timeout [ 245.348452] Bluetooth: hci5: command tx timeout [ 245.475463] Bluetooth: hci7: command tx timeout [ 245.540488] Bluetooth: hci6: command tx timeout [ 247.011814] Bluetooth: hci0: command tx timeout [ 247.077999] Bluetooth: hci1: command tx timeout [ 247.203695] Bluetooth: hci2: command tx timeout [ 247.267440] Bluetooth: hci3: command tx timeout [ 247.332469] Bluetooth: hci4: command tx timeout [ 247.395942] Bluetooth: hci5: command tx timeout [ 247.524853] Bluetooth: hci7: command tx timeout [ 247.587447] Bluetooth: hci6: command tx timeout [ 249.062703] Bluetooth: hci0: command tx timeout [ 249.123632] Bluetooth: hci1: command tx timeout [ 249.252489] Bluetooth: hci2: command tx timeout [ 249.315641] Bluetooth: hci3: command tx timeout [ 249.380427] Bluetooth: hci4: command tx timeout [ 249.443761] Bluetooth: hci5: command tx timeout [ 249.573464] Bluetooth: hci7: command tx timeout [ 249.636432] Bluetooth: hci6: command tx timeout [ 251.108577] Bluetooth: hci0: command tx timeout [ 251.172648] Bluetooth: hci1: command tx timeout [ 251.299486] Bluetooth: hci2: command tx timeout [ 251.363471] Bluetooth: hci3: command tx timeout [ 251.428640] Bluetooth: hci4: command tx timeout [ 251.492468] Bluetooth: hci5: command tx timeout [ 251.619749] Bluetooth: hci7: command tx timeout [ 251.685563] Bluetooth: hci6: command tx timeout [ 305.535745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.541148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.544152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.556311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.564720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.716342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.723495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.726103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.732204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.737876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.796993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.806672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.814245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.827065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.836025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.849908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.871001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.879945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.895265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.910904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.934847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.949004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.957172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.965024] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.989800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.997882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.003209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.007256] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.012534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.029926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.040045] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.048178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.056931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.061034] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.070178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.095838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.099746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.119274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.156930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.194984] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.620488] Bluetooth: hci0: command tx timeout [ 307.812640] Bluetooth: hci1: command tx timeout [ 307.940561] Bluetooth: hci2: command tx timeout [ 308.004039] Bluetooth: hci3: command tx timeout [ 308.131939] Bluetooth: hci4: command tx timeout [ 308.133138] Bluetooth: hci5: command tx timeout [ 308.195458] Bluetooth: hci6: command tx timeout [ 308.323601] Bluetooth: hci7: command tx timeout [ 309.667490] Bluetooth: hci0: command tx timeout [ 309.860462] Bluetooth: hci1: command tx timeout [ 309.987489] Bluetooth: hci2: command tx timeout [ 310.051531] Bluetooth: hci3: command tx timeout [ 310.179859] Bluetooth: hci5: command tx timeout [ 310.180221] Bluetooth: hci4: command tx timeout [ 310.244817] Bluetooth: hci6: command tx timeout [ 310.371470] Bluetooth: hci7: command tx timeout [ 311.715815] Bluetooth: hci0: command tx timeout [ 311.909472] Bluetooth: hci1: command tx timeout [ 312.035511] Bluetooth: hci2: command tx timeout [ 312.099582] Bluetooth: hci3: command tx timeout [ 312.227488] Bluetooth: hci5: command tx timeout [ 312.227541] Bluetooth: hci4: command tx timeout [ 312.291465] Bluetooth: hci6: command tx timeout [ 312.419623] Bluetooth: hci7: command tx timeout [ 313.763451] Bluetooth: hci0: command tx timeout [ 313.955565] Bluetooth: hci1: command tx timeout [ 314.085724] Bluetooth: hci2: command tx timeout [ 314.147622] Bluetooth: hci3: command tx timeout [ 314.275619] Bluetooth: hci5: command tx timeout [ 314.278409] Bluetooth: hci4: command tx timeout [ 314.339652] Bluetooth: hci6: command tx timeout [ 314.467442] Bluetooth: hci7: command tx timeout [ 365.571547] syz-executor.1 (8137) used greatest stack depth: 24400 bytes left [ 367.815188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.821091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.822466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.827984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.834442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.837453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.840942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.844999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.853188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.865696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.114890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.127911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.133856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.137524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.147230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.169591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.177975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.207057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.226091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.239135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.241211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.247487] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.258989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.277348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.297204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.322536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.340293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.364096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.367000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.375866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.383290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.389655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.398927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.406890] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.410651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.430033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.432265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.440064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.467921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.479911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.891634] Bluetooth: hci1: command tx timeout [ 369.955467] Bluetooth: hci0: command tx timeout [ 370.211477] Bluetooth: hci2: command tx timeout [ 370.339611] Bluetooth: hci3: command tx timeout [ 370.340711] Bluetooth: hci4: command tx timeout [ 370.531559] Bluetooth: hci7: command tx timeout [ 370.532350] Bluetooth: hci5: command tx timeout [ 370.595469] Bluetooth: hci6: command tx timeout [ 371.941786] Bluetooth: hci1: command tx timeout [ 372.004488] Bluetooth: hci0: command tx timeout [ 372.262433] Bluetooth: hci2: command tx timeout [ 372.388485] Bluetooth: hci4: command tx timeout [ 372.388950] Bluetooth: hci3: command tx timeout [ 372.580472] Bluetooth: hci5: command tx timeout [ 372.580952] Bluetooth: hci7: command tx timeout [ 372.643644] Bluetooth: hci6: command tx timeout [ 373.988427] Bluetooth: hci1: command tx timeout [ 374.052468] Bluetooth: hci0: command tx timeout [ 374.308416] Bluetooth: hci2: command tx timeout [ 374.436493] Bluetooth: hci3: command tx timeout [ 374.436958] Bluetooth: hci4: command tx timeout [ 374.627450] Bluetooth: hci5: command tx timeout [ 374.627924] Bluetooth: hci7: command tx timeout [ 374.691572] Bluetooth: hci6: command tx timeout [ 376.038595] Bluetooth: hci1: command tx timeout [ 376.099463] Bluetooth: hci0: command tx timeout [ 376.355580] Bluetooth: hci2: command tx timeout [ 376.483465] Bluetooth: hci4: command tx timeout [ 376.483936] Bluetooth: hci3: command tx timeout [ 376.676463] Bluetooth: hci7: command tx timeout [ 376.676939] Bluetooth: hci5: command tx timeout [ 376.740476] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 18:12:06 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88802543f9e2 RBP=ffff88802543fbb0 RSP=ffff88802543f998 R8 =0000000000000000 R9 =00000001ffffffff R10=0000000000000010 R11=0000000000000001 R12=00000000ffffffff R13=ffff88802543fbe8 R14=ffff88802543fd50 R15=ffff88802543fc40 RIP=ffffffff8172eb64 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557557a400 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f916b849310 CR3=0000000016d80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=8f5c28f5c28f5c29 RBX=ffff888027fdd340 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1bac0 RBP=0000000000000000 RSP=ffff888034497928 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000023100 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888027fddd98 RIP=ffffffff815162b7 RFL=00000817 [-O--APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6cb0e7f540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6cb101a4a1 CR3=0000000034828000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000