Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:21060' (ECDSA) to the list of known hosts. 2025/04/27 20:35:56 fuzzer started 2025/04/27 20:35:57 dialing manager at localhost:46629 syzkaller login: [ 92.939718] cgroup: Unknown subsys name 'net' [ 93.091495] cgroup: Unknown subsys name 'cpuset' [ 93.143147] cgroup: Unknown subsys name 'rlimit' 2025/04/27 20:36:11 syscalls: 202 2025/04/27 20:36:11 code coverage: enabled 2025/04/27 20:36:11 comparison tracing: enabled 2025/04/27 20:36:11 extra coverage: enabled 2025/04/27 20:36:11 setuid sandbox: enabled 2025/04/27 20:36:11 namespace sandbox: enabled 2025/04/27 20:36:11 Android sandbox: enabled 2025/04/27 20:36:11 fault injection: enabled 2025/04/27 20:36:11 leak checking: enabled 2025/04/27 20:36:11 net packet injection: enabled 2025/04/27 20:36:11 net device setup: enabled 2025/04/27 20:36:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 20:36:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 20:36:11 USB emulation: enabled 2025/04/27 20:36:11 hci packet injection: enabled 2025/04/27 20:36:11 wifi device emulation: enabled 2025/04/27 20:36:11 802.15.4 emulation: enabled 2025/04/27 20:36:11 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 20:36:12 starting 8 fuzzer processes 20:36:12 executing program 0: keyctl$restrict_keyring(0x1d, 0xfffffffffffffff9, &(0x7f0000000000)='dns_resolver\x00', 0x0) r0 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x44001) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x45}, 0x20000881) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$reject(0x13, r0, 0x9, 0x6, r0) keyctl$reject(0x13, 0x0, 0xa123, 0xff, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x24000090) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000004c0)=""/62) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = add_key(&(0x7f0000000640)='id_legacy\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0), 0x0, r0) keyctl$link(0x8, r0, r6) socket(0x10, 0xa, 0x4) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x5, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x20000010) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 20:36:12 executing program 1: ptrace$cont(0x9, 0xffffffffffffffff, 0xffffffffc0b5ed91, 0x0) r0 = shmget(0x3, 0x7000, 0x100, &(0x7f0000ff9000/0x7000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/4096) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000001000)=""/121) r2 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) getresuid(&(0x7f0000001080)=0x0, &(0x7f00000010c0), &(0x7f0000001100)) r4 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000001140)={{0x0, 0x0, 0x0, r3, 0xee01, 0xa8, 0x7}, 0x8, 0x6, 0x6, 0x8, 0xffffffffffffffff, r4, 0x9}) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000011c0)=""/166) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000001280)) r5 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ff9000/0x1000)=nil) r6 = gettid() shmctl$IPC_SET(r5, 0x1, &(0x7f00000012c0)={{0x1, r3, 0xee01, 0xffffffffffffffff, 0xee01, 0x40, 0xfff}, 0x8, 0x8, 0x6e5cabc6, 0x10001, r6, r4, 0x2}) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001340)=""/203) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001440)=""/171) [ 108.129722] audit: type=1400 audit(1745786172.499:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:36:12 executing program 2: syz_usb_ep_read(0xffffffffffffffff, 0x7, 0x62, &(0x7f0000000000)=""/98) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) syz_usb_ep_read(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000140)=""/16) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0]}) r2 = socket(0x28, 0x6, 0x6b) r3 = socket(0x2e, 0x80000, 0x5ef) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x83}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="dfcb8d8d9b4e"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008014) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x20, 0x9, 0xb7, {0xb7, 0x22, "3ed52c70593e36cf44644d1ab5fd432e8eb270fa97cb0d0ec3e95a431224a59d71ad36ee787037aa7a5a7a99e8495c23af28d68b29af7cc46821dcea8c0de90625233de811ffc1e224f2c09e35153f73b01e4ed0b1d331b7c76b31d9d73104f6ffefd28b3a488612af0613905ee76a8f9676d66d5e571c6ee9e9fd683a9967e653c9b96e2c92e000cdb9b7d6b4833c8a93fdbdb6f98560f6412824089b85561fcf9b059dd92155d7372cd2741eecfa6b8b90c6311f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x9, 0xd2, "5065bc56c25e6ab6d05f2758ef9c52cc11cb754d99c037a464d51d21b4417c5bbf51f28b22ca2c8742b4802cac9680a10857847087e3b11851bd7eec4ab4b35066df81ece664d948dbc03442c077cca31e0612c8935c3e56c115e8a4b7803079c2673a92abc147273ffa43d5213c4d3b7b4c51839fa0541094c49c7b550acecd441629033ec24da5533bdebb54c5972c412b86ea24bffe7e6011a7d60a57c1c1d6b285516a8597b250516be946127342cd07c76e5b18cd25ee676481f8cda3639707bf5a1809f8155f794f9fc1654bfe326c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x49}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf5}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x9, 0x3, 0x417, 0x3f8, 0x396, 0x1f, 0x400, 0x0, 0x1, 0x6, 0x1, 0x5d02}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x80}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008800}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r3) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x85, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0xc4, 0x1, 0x3, 0x1, 0x2, 0x6e, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xe39}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xff, 0xff}}}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0x8, 0x53, 0x81, 0x40, 0x47}, 0x7a, &(0x7f0000000a80)={0x5, 0xf, 0x7a, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x27, 0xf000, 0xff, [0xc000, 0xc000, 0xc030, 0xcf, 0xff0000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "123ec6272caab31892ffede844b74ac2"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1b5c11e460961c518b6df93a117ccb72"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x80, 0x3f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x1, 0x0, 0x1d}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "0459a0f694b5ce3d3c4fbf01e41d8d56"}]}, 0x5, [{0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "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"}}, {0xc6, &(0x7f0000000c40)=@string={0xc6, 0x3, "7f636b6ef22fd8494ff172689badd42b1c2e58ebae512e50bb864105494aea189b448243a12e1b9953f4824fe86b1299566620524a0a2c515a1d65423ec5fb6bc0de4e44343c747034f4f4c4df65b51932afdba59123dd46363e0b8fc97509f5b45a09b446075795e682c60cb1b294eaac880e8651082de94164ed764e853d500de5e47bf98a7a93367fe54633e266e273fc10b52082325361c22d5f60638d377d4a7aba729dac0c5225f2e9eab01d7130adb89fbab967b4499873a8c666bf622b013330"}}, {0xd5, &(0x7f0000000d40)=@string={0xd5, 0x3, "fd0ae54b360335076d84d756395bb342b4b177657057a2a11082c396182a77dfb8c2e958235e4103355d1f49650432de637a05d3758eb1e01dc32e53b377a8184ad36e8e074f032eae210a8d7cf8aea685533c97f82c1025de2e64626c73d7c8f2b317b1a732c8e0093673642fd0bb1ee3ad92a6be61843711c36b56a4aa23e50feba37e8e85fd4fdd6ca4ad85d7fbe71095ba65cf1bfd6f9fb569a4b948f916da27a00805eee5a1380e7459fbdbf00e63a65370fd88047bc9cba784fc6089e01ba46a4d49c9ec0ec66352675ed750d3224aa3"}}, {0x3d, &(0x7f0000000e40)=@string={0x3d, 0x3, "de540c7a20201cc57a00b916808668e02c0ca9970d45d266f4e0cba3dd334232df5ee5dcfbbaef6772820e121010b2d6ce826af64bc6c44fae7bb7"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$hid(r5, &(0x7f0000001100)={0x24, &(0x7f0000000f40)={0x20, 0xd, 0xbb, {0xbb, 0x22, "37a0d8dba5f7bcbbc203f08237b8cf929b983094aa3a120d5b79bb6f7599c7fd2a9ab7eed9ad1502fba8f3c7943e1414f8478bebd6abf5e3f1d0a2636755bbcb03e296eec59092144bd473e5a23d859167c2b833e4f5505742e9daccf2a40428abe45d77b5831b690460ba4c5fd486ce27ec5a79306839fb382cc88a64bad309038057e071eaf31e8a2a247bb0a275942fe491b38fbf8397df6b9b1b16b2b14dbaa6455de32f49b489cb5d0a978edcce0b44c7e7290932a56f"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000001080)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x0, "e9e0"}]}}, &(0x7f00000010c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x0, 0x1, {0x22, 0xa1b}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001140)={0x40, 0x16, 0x1a, "71dffd4435f5af9a9ec7b8a7e12b25aa8313ef1c684cc52ae2c9"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001200)={0x20, 0x1, 0xe, "eb70bc8f3cf01f84dc340bd85a11"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x3f}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) 20:36:12 executing program 3: r0 = shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) r2 = getgid() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x1, r1, r2, r3, 0xffffffffffffffff, 0x184, 0x7}, 0x7f, 0x6, 0x3, 0x8001, r4, 0xffffffffffffffff, 0xff0e}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6675}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040090}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x34}}, 0x800) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000440)=""/145) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0xa4c) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6, 0x1b, 0x4, "5226a3623133e7dd24f4db04d0c75bbf2ec958c45edea50e1a30307574c6f4d225e43d115c8848d7e672d38965e129d1a555ecf3dc4d2cdbb699d9986db1f82a", "8d06a82cc71266b06531cd2110552375ea6e1f9dbf15b2d07582a04fcaabe622c098b3436ec82cdfa706955dc13a158ae0b3fda4c705ab0b2ad37e535d7729e9", "ed86b3f24d07bd1f4ec2e8ab1acdd01bc004e59847d5786eac346c5217ebcea3", [0x5]}) r6 = syz_open_procfs(r4, &(0x7f0000000600)='cgroup\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ec0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2702010}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000940)=""/122) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0x81, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x3, 0x1, 0x2, 0x46, {0x9, 0x21, 0x3f, 0x81, 0x1, {0x22, 0x5a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9f, 0x5, 0xff}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x200, 0x8, 0x1, 0x0, 0x0, 0xed}, 0x35, &(0x7f0000000a40)={0x5, 0xf, 0x35, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0xff, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0xc0, 0x4, 0x5, 0xf00, 0x1, [0xff000f, 0x180, 0x0, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x0, 0xf2, 0x5}]}, 0x3, [{0xf0, &(0x7f0000000a80)=@string={0xf0, 0x3, "f47295b08ac1ee04bf8361413cbcfc75c134a2dd4e7dcbbad1b441196893b86d55b977a2a0d966f90e8f23d4c56b8632b00669bb2063afc6b97a0d59ae5a3aecdc7e33690f84b180c6103056eccf28f9581883990638773ea9ffcf6d4a1798d31962a61ecda5bcdb8a23f699e92539ded9c033804e4bbfd8190b2741f816399c2ee78128d324f36872a58fce59941d52858c9a0e640887183ec66e1801bee991b5529c972a94de5ec15c9bcac3ccd730e9277cb634a2f87e9563d6f998589180d8f61f80077819eca56a9e2f2789ae25ac87b0ed877ae8be37f751b0c8b56dba59af9d1915a9ff250c50000a6243"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x66}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000004) 20:36:12 executing program 4: getgid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r1 = getgid() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = gettid() r4 = gettid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r0, r1, r2, 0xee00, 0x40, 0x1391}, 0x8, 0xff, 0x1, 0x4, r3, r4, 0x1}) r5 = gettid() setpgid(r4, r5) getgid() getgid() r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000200)='ns/time\x00') r7 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r7) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) r9 = getgid() r10 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, r8, r1, r2, r9, 0x20}, 0x1, 0x200, 0x1, 0x54e, r3, r10, 0x7}) keyctl$get_persistent(0x16, r0, r7) 20:36:12 executing program 5: pause() pause() shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/70) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xff, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x7f, 0x9, 0x20, @loopback, @private1, 0x80, 0x80, 0x26, 0xf0000000}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe47c00}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x28044081}, 0x0) pause() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x8, 0x0, 0x81, 0x7}, {0x6, 0x0, 0x1, 0x12}]}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', r1, 0x29, 0xf7, 0x0, 0x100, 0x53, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f40, 0x8, 0x9, 0x1}}) semget$private(0x0, 0x4, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000007c0)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) 20:36:12 executing program 6: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x10001, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x4001) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x21800020}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, 0x0, 0x1, 0x70bd28, 0x7, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffe0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x197}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xbb0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x267}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x4040840) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40001) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/fib_trie\x00') sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4010) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r5) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4a000}, 0x8004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000dc0)={&(0x7f0000000c40), 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x88, r8, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 20:36:12 executing program 7: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) semget$private(0x0, 0x1, 0x10) r0 = semget$private(0x0, 0x1, 0x0) keyctl$get_persistent(0x16, 0xee01, 0xfffffffffffffff8) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/udplite6\x00') ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5bdf}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400e044}, 0x40) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0xd0, 0x96, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x101, 0x4, 0x1, {0x22, 0x648}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x4, 0x4}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x1f, 0x1f, 0x8, 0xff, 0x6}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0x6f, &(0x7f0000000480)=@string={0x6f, 0x3, "567ddb933544937f09da7434e798c246f85ebc9d828302eadfff170cd0627b5d0c1d669697c9b79222a0a3850a1d13eed706c90ed4e198e903ba60e93d5522661d5ecfd99ee9ea4e46bb556e2a3ac41215ad78de61e6ebb61eb7aed978ca606e1d716fc21947a2c40fbd481cfe"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000800)={0x24, &(0x7f00000005c0)={0x20, 0x23, 0xd9, {0xd9, 0x30, "87c57995402b950da1cf1ffcfdb9de5a552292d34b2ef0d3111c706f6f3623d146fb14faa4bf157103060d6251b3127cb03c76e0ddd672bd66e59906e2942d67cf7310d8f9e891995a1c300e2b4afef65681fe9409730f29dea7a5180e049a503d800dbba0ba8b32f80160a220a11f0bcf3d42907beffba5267c4c3b7f48742a279fc9d1f1b46d365d85ea653626f9c296dc5a2df2f24976be60ecc7ea8aec52a6605b310a392182a8faf2b7f429cce6f10a05f28514943ef3b170b3ab7fdc5290552f8788836d8af15e3e52eda9cf2cd2ab18a124912c"}}, &(0x7f00000006c0)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "04e6d857344c495adf12c4fda585ab45c8f1fc2650358ed1f070e3f16394d84c92a61ce640607735e22ccaf827695d0dc8f0b2d7267a8778bf570c521ece07dcc6f107a0c593af60f37c28c355731a73dbad07740b31ed8fe86e3e17180d6b3816f09004aea46ecd5f3b3a01c5a7159ff9160d2f65687b9ce02e66"}}, &(0x7f0000000780)={0x0, 0x22, 0x1c, {[@main=@item_012={0x2, 0x0, 0xa, '\fE'}, @main=@item_012={0x2, 0x0, 0x8, "ddec"}, @main=@item_4={0x3, 0x0, 0xa, "cd616c00"}, @global=@item_4={0x3, 0x1, 0x3, "721a65b4"}, @main=@item_4={0x3, 0x0, 0x8, "d7217f06"}, @local=@item_012={0x1, 0x2, 0x8, "a3"}, @local=@item_012={0x2, 0x2, 0xd, "8a88"}, @global=@item_012={0x1, 0x1, 0x3, 'F'}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x0, 0x1, {0x22, 0x64b}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000840)={0x0, 0xe, 0x78, "51b4f3165978c5f773300131a1685c591e2c4972ebe227790292c8ab5f89c5dde3572f75757a0105526bdf16a07afd7f2a633196cc6a1f1a8d86bcdca18f9bc275c043cd2d81461631e4b454a553ee8c7bb2660fccf4f323c4908ce39dc64f16d040aad7046c484abd92e2ab7a96bb317e5cd466ed0122c8"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x1, 0xaa, "84d433024ad21583b96b88577411b7eb0afa04e249dcae3251de6f98c7ca9fe503dbc4bdb45e05f1b89d8c382c822f804a4d244260e4c6e4df49e8d00911a0606ec16b90990a3e4425f3eafec4c720ebab163cfedf0af5bee5f7fa0d4514af01ab04108f324f3e15d3926dd44428fc7ddf46281944d0bd0d4c548dcbfd685589735d92ebe1284375f01a7fa7e560d03726e43b1a8c1df40fbcb5503782936e8b216bb986f178467bd0e3"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x2}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/netlink\x00') ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x2) r5 = syz_open_dev$loop(&(0x7f0000000ac0), 0x40, 0x642000) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000c00)={{0x2, 0xee00, 0xffffffffffffffff, 0xee01, 0xee01, 0x8, 0x3}, 0xe3d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 109.501822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.505499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.508108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.515794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.522242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.617399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.635644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.642057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.644634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.649404] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.653370] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.657690] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.668001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.674696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.677645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.689117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.692022] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.695541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.702703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.714060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.715914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.729884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.735982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.754832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.760539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.771829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.794743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.807997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.814842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.817699] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.820069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.826500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.836955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.866505] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.877751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.899498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.943117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.966869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.007076] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.014794] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.577299] Bluetooth: hci0: command tx timeout [ 111.705737] Bluetooth: hci2: command tx timeout [ 111.832373] Bluetooth: hci1: command tx timeout [ 111.834249] Bluetooth: hci3: command tx timeout [ 111.960484] Bluetooth: hci5: command tx timeout [ 111.961171] Bluetooth: hci4: command tx timeout [ 112.024305] Bluetooth: hci6: command tx timeout [ 112.152603] Bluetooth: hci7: command tx timeout [ 113.625571] Bluetooth: hci0: command tx timeout [ 113.754700] Bluetooth: hci2: command tx timeout [ 113.881574] Bluetooth: hci3: command tx timeout [ 113.882145] Bluetooth: hci1: command tx timeout [ 114.008484] Bluetooth: hci4: command tx timeout [ 114.010330] Bluetooth: hci5: command tx timeout [ 114.072916] Bluetooth: hci6: command tx timeout [ 114.202284] Bluetooth: hci7: command tx timeout [ 115.672355] Bluetooth: hci0: command tx timeout [ 115.801326] Bluetooth: hci2: command tx timeout [ 115.929596] Bluetooth: hci3: command tx timeout [ 115.930552] Bluetooth: hci1: command tx timeout [ 116.057339] Bluetooth: hci4: command tx timeout [ 116.058062] Bluetooth: hci5: command tx timeout [ 116.121425] Bluetooth: hci6: command tx timeout [ 116.250250] Bluetooth: hci7: command tx timeout [ 117.721282] Bluetooth: hci0: command tx timeout [ 117.849630] Bluetooth: hci2: command tx timeout [ 117.978490] Bluetooth: hci3: command tx timeout [ 117.979367] Bluetooth: hci1: command tx timeout [ 118.105365] Bluetooth: hci5: command tx timeout [ 118.105848] Bluetooth: hci4: command tx timeout [ 118.169397] Bluetooth: hci6: command tx timeout [ 118.298432] Bluetooth: hci7: command tx timeout [ 170.304272] syz-executor.7 (283) used greatest stack depth: 23800 bytes left [ 172.391891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.395350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.397726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.406983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.418825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.774565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.782908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.786655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.795142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.800138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.845162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.850569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.855722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.861028] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.864701] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.914346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.918770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.925078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.932651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.936676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.132966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.137784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.141944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.158451] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.172193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.176887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.191020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.193669] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.200971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.204823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.225708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.246445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.300735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.302334] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.325178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.327089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.330820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.335493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.364955] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.392370] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.489729] Bluetooth: hci0: command tx timeout [ 174.873304] Bluetooth: hci1: command tx timeout [ 175.001187] Bluetooth: hci2: command tx timeout [ 175.065310] Bluetooth: hci3: command tx timeout [ 175.321349] Bluetooth: hci6: command tx timeout [ 175.322273] Bluetooth: hci5: command tx timeout [ 175.448529] Bluetooth: hci4: command tx timeout [ 175.513449] Bluetooth: hci7: command tx timeout [ 176.536455] Bluetooth: hci0: command tx timeout [ 176.923363] Bluetooth: hci1: command tx timeout [ 177.049335] Bluetooth: hci2: command tx timeout [ 177.112350] Bluetooth: hci3: command tx timeout [ 177.368370] Bluetooth: hci6: command tx timeout [ 177.369687] Bluetooth: hci5: command tx timeout [ 177.496487] Bluetooth: hci4: command tx timeout [ 177.560360] Bluetooth: hci7: command tx timeout [ 178.585396] Bluetooth: hci0: command tx timeout [ 178.968931] Bluetooth: hci1: command tx timeout [ 179.098810] Bluetooth: hci2: command tx timeout [ 179.161130] Bluetooth: hci3: command tx timeout [ 179.418418] Bluetooth: hci5: command tx timeout [ 179.419635] Bluetooth: hci6: command tx timeout [ 179.544613] Bluetooth: hci4: command tx timeout [ 179.608436] Bluetooth: hci7: command tx timeout [ 180.632406] Bluetooth: hci0: command tx timeout [ 181.016326] Bluetooth: hci1: command tx timeout [ 181.145430] Bluetooth: hci2: command tx timeout [ 181.209657] Bluetooth: hci3: command tx timeout [ 181.464415] Bluetooth: hci5: command tx timeout [ 181.464933] Bluetooth: hci6: command tx timeout [ 181.592628] Bluetooth: hci4: command tx timeout [ 181.656442] Bluetooth: hci7: command tx timeout [ 234.673706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.678641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.686385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.696601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.705982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.865087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.867667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.871371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.877573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.883544] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.055563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.071334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.076911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.078224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.098331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.102894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.104912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.106833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.109278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.111513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.214776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.215851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.219701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.224627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.224855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.237353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.246558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.297477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.309389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.313295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.321594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.325864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.333335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.337508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.349750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.363908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.367039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.368654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.423708] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.452529] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.760490] Bluetooth: hci0: command tx timeout [ 236.953945] Bluetooth: hci1: command tx timeout [ 237.144335] Bluetooth: hci2: command tx timeout [ 237.145264] Bluetooth: hci3: command tx timeout [ 237.337405] Bluetooth: hci4: command tx timeout [ 237.464434] Bluetooth: hci6: command tx timeout [ 237.465509] Bluetooth: hci5: command tx timeout [ 237.528731] Bluetooth: hci7: command tx timeout [ 238.810364] Bluetooth: hci0: command tx timeout [ 239.000276] Bluetooth: hci1: command tx timeout [ 239.192328] Bluetooth: hci2: command tx timeout [ 239.192783] Bluetooth: hci3: command tx timeout [ 239.384299] Bluetooth: hci4: command tx timeout [ 239.512359] Bluetooth: hci5: command tx timeout [ 239.512894] Bluetooth: hci6: command tx timeout [ 239.576276] Bluetooth: hci7: command tx timeout [ 240.858286] Bluetooth: hci0: command tx timeout [ 241.048395] Bluetooth: hci1: command tx timeout [ 241.240810] Bluetooth: hci3: command tx timeout [ 241.241758] Bluetooth: hci2: command tx timeout [ 241.432822] Bluetooth: hci4: command tx timeout [ 241.560398] Bluetooth: hci6: command tx timeout [ 241.561338] Bluetooth: hci5: command tx timeout [ 241.624737] Bluetooth: hci7: command tx timeout [ 242.904352] Bluetooth: hci0: command tx timeout [ 243.096461] Bluetooth: hci1: command tx timeout [ 243.288333] Bluetooth: hci2: command tx timeout [ 243.288779] Bluetooth: hci3: command tx timeout [ 243.480407] Bluetooth: hci4: command tx timeout [ 243.608346] Bluetooth: hci6: command tx timeout [ 243.608798] Bluetooth: hci5: command tx timeout [ 243.672352] Bluetooth: hci7: command tx timeout [ 297.065659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.071973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.077036] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.089305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.094974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.163671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.167791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.170369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.172028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.175018] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.181801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.182667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.188710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.191160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.205453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.266273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.271901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.283260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.296763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.315858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.439469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.458488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.459955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.464531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.465754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.471663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.473942] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.508410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.510567] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.517847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.528043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.531111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.534079] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.544736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.549087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.554946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.559132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.564916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.571947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.586767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.160916] Bluetooth: hci0: command tx timeout [ 299.224561] Bluetooth: hci1: command tx timeout [ 299.289480] Bluetooth: hci2: command tx timeout [ 299.416355] Bluetooth: hci3: command tx timeout [ 299.672566] Bluetooth: hci4: command tx timeout [ 299.673412] Bluetooth: hci5: command tx timeout [ 299.673827] Bluetooth: hci7: command tx timeout [ 299.736475] Bluetooth: hci6: command tx timeout [ 301.212252] Bluetooth: hci0: command tx timeout [ 301.272300] Bluetooth: hci1: command tx timeout [ 301.336437] Bluetooth: hci2: command tx timeout [ 301.464319] Bluetooth: hci3: command tx timeout [ 301.720451] Bluetooth: hci4: command tx timeout [ 301.720926] Bluetooth: hci5: command tx timeout [ 301.721773] Bluetooth: hci7: command tx timeout [ 301.784288] Bluetooth: hci6: command tx timeout [ 303.256383] Bluetooth: hci0: command tx timeout [ 303.320272] Bluetooth: hci1: command tx timeout [ 303.386229] Bluetooth: hci2: command tx timeout [ 303.512572] Bluetooth: hci3: command tx timeout [ 303.770223] Bluetooth: hci7: command tx timeout [ 303.770718] Bluetooth: hci5: command tx timeout [ 303.771143] Bluetooth: hci4: command tx timeout [ 303.833429] Bluetooth: hci6: command tx timeout [ 305.305230] Bluetooth: hci0: command tx timeout [ 305.369324] Bluetooth: hci1: command tx timeout [ 305.432282] Bluetooth: hci2: command tx timeout [ 305.563230] Bluetooth: hci3: command tx timeout [ 305.817439] Bluetooth: hci4: command tx timeout [ 305.817918] Bluetooth: hci7: command tx timeout [ 305.819265] Bluetooth: hci5: command tx timeout [ 305.880278] Bluetooth: hci6: command tx timeout [ 359.669830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.675594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.682541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.691415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.697966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.730138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.735664] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.740912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.751805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.758801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.945038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.955061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.982130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.986317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.996897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.003803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.011698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.015510] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.028605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.036060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.039745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.041882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.072129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.127562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.133524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.138711] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.142104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.156354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.161605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.173627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.178438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.182045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.191706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.206276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.210465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.239363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.256820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.329505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.355036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.382868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.752271] Bluetooth: hci0: command tx timeout [ 361.816620] Bluetooth: hci1: command tx timeout [ 362.136306] Bluetooth: hci2: command tx timeout [ 362.200522] Bluetooth: hci3: command tx timeout [ 362.264344] Bluetooth: hci7: command tx timeout [ 362.264373] Bluetooth: hci6: command tx timeout [ 362.329326] Bluetooth: hci4: command tx timeout [ 362.521316] Bluetooth: hci5: command tx timeout [ 363.800856] Bluetooth: hci0: command tx timeout [ 363.864376] Bluetooth: hci1: command tx timeout [ 364.184311] Bluetooth: hci2: command tx timeout [ 364.248287] Bluetooth: hci3: command tx timeout [ 364.312271] Bluetooth: hci7: command tx timeout [ 364.313541] Bluetooth: hci6: command tx timeout [ 364.377419] Bluetooth: hci4: command tx timeout [ 364.569355] Bluetooth: hci5: command tx timeout [ 365.849270] Bluetooth: hci0: command tx timeout [ 365.912335] Bluetooth: hci1: command tx timeout [ 366.232474] Bluetooth: hci2: command tx timeout [ 366.297237] Bluetooth: hci3: command tx timeout [ 366.360685] Bluetooth: hci6: command tx timeout [ 366.361119] Bluetooth: hci7: command tx timeout [ 366.425594] Bluetooth: hci4: command tx timeout [ 366.616422] Bluetooth: hci5: command tx timeout [ 367.899253] Bluetooth: hci0: command tx timeout [ 367.960245] Bluetooth: hci1: command tx timeout [ 368.280289] Bluetooth: hci2: command tx timeout [ 368.344259] Bluetooth: hci3: command tx timeout [ 368.408433] Bluetooth: hci7: command tx timeout [ 368.408453] Bluetooth: hci6: command tx timeout [ 368.473069] Bluetooth: hci4: command tx timeout [ 368.665270] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 20:41:15 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802834f9c0 RCX=ffff88802834f27c RDX=0000000000000001 RSI=ffffffff85c1bac0 RDI=ffff88802c048a80 RBP=ffff888028348000 RSP=ffff88802834f2b0 R8 =0000000000000001 R9 =ffff88802834f368 R10=000000000003b0c2 R11=0000000000022661 R12=ffff88802834f301 R13=ffff88802834f370 R14=ffff88802834f990 R15=ffff88802834f328 RIP=ffffffff8151826d RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f19d6e6d0f0 CR3=00000000308c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a2ebc8 RBX=ffff88803414d340 RCX=0000000000000200 RDX=873d0e13b074236a RSI=ffff88803414de10 RDI=ffff88803414dde8 RBP=0000000000000000 RSP=ffff88806cf08888 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=00000000000258b4 R12=ffff88803414de10 R13=0000000000000000 R14=0000000000000003 R15=ffff88803414dd98 RIP=ffffffff81516cb4 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1510287610 CR3=000000002bf82000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000