Warning: Permanently added '[localhost]:58450' (ECDSA) to the list of known hosts. 2025/05/24 22:42:34 fuzzer started 2025/05/24 22:42:34 dialing manager at localhost:46087 syzkaller login: [ 93.445724] cgroup: Unknown subsys name 'net' [ 93.601379] cgroup: Unknown subsys name 'cpuset' [ 93.645846] cgroup: Unknown subsys name 'rlimit' 2025/05/24 22:42:51 syscalls: 202 2025/05/24 22:42:51 code coverage: enabled 2025/05/24 22:42:51 comparison tracing: enabled 2025/05/24 22:42:51 extra coverage: enabled 2025/05/24 22:42:51 setuid sandbox: enabled 2025/05/24 22:42:51 namespace sandbox: enabled 2025/05/24 22:42:51 Android sandbox: enabled 2025/05/24 22:42:51 fault injection: enabled 2025/05/24 22:42:51 leak checking: enabled 2025/05/24 22:42:51 net packet injection: enabled 2025/05/24 22:42:51 net device setup: enabled 2025/05/24 22:42:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 22:42:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 22:42:51 USB emulation: enabled 2025/05/24 22:42:51 hci packet injection: enabled 2025/05/24 22:42:51 wifi device emulation: enabled 2025/05/24 22:42:51 802.15.4 emulation: enabled 2025/05/24 22:42:51 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 22:42:52 starting 8 fuzzer processes 22:42:52 executing program 0: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3df}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x20004000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) socketpair(0x23, 0x4, 0x7ff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0x17, 0x1, &(0x7f0000000300)=""/242, 0xf2}, &(0x7f0000000440)=0x40) r3 = accept(r2, &(0x7f0000000480)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x3, 0x5, {{0xe, 0x4, 0x3, 0x37, 0x38, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x13, 0x2b, [@local, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @rr={0x7, 0xf, 0xcd, [@remote, @multicast1, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'gre0\x00', r5, 0x7840, 0x7, 0x8001, 0x0, {{0x14, 0x4, 0x3, 0x27, 0x50, 0x66, 0x0, 0x61, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x6e, 0x1, 0x0, [{@private=0xa010100, 0xffff}, {@rand_addr=0x64010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x120000}, {@local, 0x7}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x20}]}]}}}}}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', r4, 0x4, 0x5, 0x7, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00', 0x7, 0x20, 0x800, 0x8}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = io_uring_setup(0x6c59, &(0x7f0000000980)={0x0, 0x90c3, 0x8, 0x0, 0x173}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10010, r7, 0x0) r9 = accept(r3, &(0x7f0000000a00)=@rc, &(0x7f0000000a80)=0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000) syz_io_uring_setup(0x16d0, &(0x7f0000000bc0)={0x0, 0x2d10, 0x8, 0x1, 0x289}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000c40), &(0x7f0000000c80)=0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000cc0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, r0}}, 0x3ff) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000d00)) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) 22:42:52 executing program 1: prctl$PR_CAPBSET_READ(0x17, 0x27) prctl$PR_CAPBSET_READ(0x17, 0x1e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x310}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40) prctl$PR_CAPBSET_READ(0x17, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040008}, 0x11) socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_SECCOMP(0x15) prctl$PR_CAPBSET_READ(0x17, 0x15) prctl$PR_CAPBSET_READ(0x17, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) prctl$PR_CAPBSET_READ(0x17, 0x9) timer_create(0x2, &(0x7f0000001300)={0x0, 0x7, 0x1, @thr={&(0x7f0000000240)="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", &(0x7f0000001240)="783b1c977e921482099feb5ebb666371146a893ebf14dde8b8cf152024c1a450928f15d9360dcdc8cd1f9f1e4954c311cb699a8eb9b721aea399df8a5f10dd301f5ad0a8a0dc18e91e972c03d5c31ab3bf8030a06c09d7c74f2ed8217f831a2d7dd48237868763a122a634a90a52509308635ab5962d90f5183d138902a954ade50cccf804620bf159ce67b5c6db72ab65a39dcae294ded098366947355e124345a5bdcfd548696067d6464b2d"}}, &(0x7f0000001340)) prctl$PR_CAPBSET_READ(0x17, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048085}, 0x10) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000001500)=""/238) 22:42:52 executing program 2: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x1, 0x20, 0x6}, {0x11, 0x1, 0xa6, 0xff}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) wait4(0xffffffffffffffff, &(0x7f0000000240), 0x40000000, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'gretap0\x00', r0, 0x700, 0x8, 0x2, 0x101, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x66, 0x0, 0xee, 0x4, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x20, 0x4e, 0x0, 0x2, [0x79, 0x0, 0x3, 0x0, 0x1f, 0xfffffc01, 0xf0]}, @end, @timestamp_prespec={0x44, 0x3c, 0x14, 0x3, 0x1, [{@multicast1, 0x3f}, {@multicast2, 0x20}, {@multicast1, 0x6}, {@remote}, {@broadcast, 0xfffffff8}, {@private=0xa010101, 0xf7f}, {@multicast2, 0x21}]}, @lsrr={0x83, 0x13, 0x5f, [@multicast1, @loopback, @loopback, @remote]}, @end, @ssrr={0x89, 0x1b, 0x94, [@remote, @multicast1, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', r0, 0x4, 0xc9, 0x6, 0x2, 0x22, @mcast1, @remote, 0x80, 0x7, 0x800}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x8, 0x7, 0x3ff, 0xfffffe01, {{0x23, 0x4, 0x3, 0x2b, 0x8c, 0x68, 0x0, 0x3f, 0x2b55a31ca2074bfa, 0x0, @broadcast, @remote, {[@end, @cipso={0x86, 0x12, 0x2, [{0x2, 0x9, "87da1e4ade16af"}, {0x0, 0x3, '\v'}]}, @timestamp_prespec={0x44, 0x4c, 0x9b, 0x3, 0xc, [{@local, 0x10000}, {@empty, 0x2}, {@multicast1, 0x8}, {@private=0xa010102, 0x5}, {@multicast1, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x3}, {@private=0xa010100, 0xa21d}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x95, [@multicast1, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) r5 = syz_open_dev$vcsa(&(0x7f0000000780), 0x7, 0x8000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000840)={'syztnl2\x00', r4, 0x10, 0x1, 0x7fff, 0x8, {{0x3d, 0x4, 0x0, 0x0, 0xf4, 0x64, 0x0, 0x20, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x101}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, {@loopback}, {@empty}, {@local, 0xc86f}]}, @rr={0x7, 0x1f, 0x65, [@private=0xa010101, @local, @local, @remote, @remote, @local, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x8, [{@multicast1, 0x6}, {@remote, 0xffffff81}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x81}, {@remote, 0x9d1f}]}, @timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x7, [{@rand_addr=0x64010102, 0x6}]}, @cipso={0x86, 0x52, 0x0, [{0x0, 0xd, "5fa54b74d7540d74b21793"}, {0x3, 0x5, "41e737"}, {0x5, 0x10, "767835ea57a8119c8128c5623540"}, {0x5, 0x9, "c9b7dc983c9621"}, {0x2, 0x11, "7b24659894928a2956c11616e94903"}, {0x1, 0x8, "861a441edcea"}, {0x2, 0x8, "eb50de5e3030"}]}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc840) r8 = openat$cgroup_ro(r1, &(0x7f0000000ac0)='memory.swap.events\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000b00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000b40)) 22:42:52 executing program 3: mlock(&(0x7f0000feb000/0x14000)=nil, 0x14000) shmat(0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="40f5980a858ffa651848386119fc6025246721f2659945e8b70aaf3b2eea788343cfb22ab9a73f31b6983a4d646dd142bd7773b9e5a131f76e6ea2f69997a7dfdcf3738cff074f36f48b5a0efc92d8726db12225697dcc81e03e9e07c667537399e91d9430dc839890a4b4b61429bcae0076d85bfa0cc95075127dd4990090309b20a7403d09b38f", 0x88, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="82fdf0af6b6e4f32973bb3db654d5a142a52fd1ef739428aa8977dacba8a6c7b256889368b1567737143e463a5a1a60bfc2160223c9657764bfd920325d6b5fff26c46f453963905d6d1c38894c3187e46e044cd53228639452256d946e29a21b7dc45378d3c3306c218dce95e35dad57f3cae7e0421fb710e1bb1af77940125d517dedcccf1620597eae9f7427b925d06dbbe0ca4a10e8312b5d1da17b47f03fb1090ae4b0e26cc1235dc2e1f57c8a228c9f2abc7ac0773191dcc885bab5aa22fc95808bb93a6897005288ade881c11d549f112e25f6e012390347a244e5def79d13d8d10ff7c521b2faa71f634d0", 0xef, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r0, 0x0, r1}, &(0x7f0000000300)=""/171, 0xab, &(0x7f0000000480)={&(0x7f00000003c0)={'blake2s-224-x86\x00'}, &(0x7f0000000400)="84f65e36e80b5320b09e61f19fc3c3252f2467627e29c2912fc2f9ff2bdc1613ee5a07c63156a9b005f1e0c725e9408569f2c3946e294b43bf852351cbb6c64961e31fcb0c0e3a49474e29790ccbb39f886fb690844532251f6f31e37da8", 0x5e}) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="e1e52ab2c4061c7796dd6c9497a320352427e9fe3c9a02e04d5e00e336bb85467f5d78ff81565161fb576cc31d5b574e39e2b7b8f13c2d2cdf7d63aa1eb37aff5e1474d3a021694cf09de96a6e9eaf7abaf3ae25c331d915d1b10ae843d232976d7f3615c0bdc5570355edc02aaef93fcf58bd323919b70789", 0x79, 0xffffffffffffffff) add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="8fb501cae41e83129e1914edce675d6cc784c9bbc0b2e02ca947070560f15d68cbe70b30bd9d7c1f41303ecb898c8397014b9cbef26db25a8aa3e0922b3dab08073c09b1a3bdce4156d9a2bdd986fa225fb5166a894c731572f2817090f97ca6408e88e6ec8818b57ea0401ea221855f66fcf29564bc5b220c48cb02114926827f954bb37e2e115f92e43d308241df2014f7aaff169179088a8e9fe2a5ff02ae803d798d31d14312609dd5375643cd414bc05a57612d1ffc6b4b7b", 0xbb, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)=0x3, 0x4) capget(&(0x7f0000000740)={0x19980330}, &(0x7f0000000780)={0xff, 0x1ffc000, 0x1f, 0xfffffff7, 0xb0, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x5, 0x781003) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000800)=0x2, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000840), 0x3ff, 0x40001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x4, 0x800, 0x9d, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_complete(0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000009c0), 0x100, 0x0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48010}, 0x4014) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000b80)=@buf={0x66, &(0x7f0000000b00)="4bc5bcd87972a250ea028504ee4af261a83b395b6164689c5906c275c1b8b9abe5a9759c3673f1898660d6e439706266b762366ef1c421016b44b28921a408435f9d9d97e220a487d18b93c73adcdad1d23810414a3773ddabab76cb6eb6d252f0239a9a7c9f"}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000bc0)) [ 111.515167] audit: type=1400 audit(1748126572.972:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:42:52 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x800) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x9, 0x2) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', r0, 0x10, 0x60, 0x40, 0x92, {{0x40, 0x4, 0x3, 0x2, 0x100, 0x64, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @empty, {[@noop, @noop, @cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x0, 0xc, "fd8fe440bca72846ad92"}, {0x0, 0xd, "ee2e9ce731c66ae16e96aa"}, {0xf42499dcadf15eec, 0xe, "f839870af3ca7613b071d619"}, {0x5, 0x7, "3db771aac5"}, {0x0, 0xa, "23fe25c6c6f06191"}, {0x1, 0x8, "b78f0da9c645"}, {0x0, 0x9, "438959fa6afd08"}, {0x2, 0x8, "e17e33a1055f"}, {0x2, 0x3, 'i'}, {0x0, 0x4, "aad0"}]}, @lsrr={0x83, 0x7, 0x91, [@private=0xa010102]}, @cipso={0x86, 0x4d, 0x2, [{0x0, 0xd, "143df9e4b13cb70656d5da"}, {0x6, 0x3, "8b"}, {0x1, 0xe, "18ecc079c8c4c42545cf64cf"}, {0x2, 0xb, "a9f560d2242c9eb09a"}, {0x1, 0xf, "2d15a3ac7ff48a80eebfbf8927"}, {0x2, 0xf, "48ad6cad3f1a1e3e1bbe226a06"}]}, @cipso={0x86, 0x38, 0x3, [{0x7, 0x4, 'l6'}, {0x6, 0x10, "b30095c1b5390f6969158a90868e"}, {0x5, 0xc, "d7c2b5440fb3ac9ba9b3"}, {0x0, 0xe, "53e0333888b6ffe021a09010"}, {0x6, 0x4, "dda3"}]}]}}}}}) r1 = syz_io_uring_complete(0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) r3 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0x7) r5 = accept(0xffffffffffffffff, &(0x7f0000000540)=@in={0x2, 0x0, @empty}, &(0x7f00000005c0)=0x80) r6 = openat$cgroup_ro(r1, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x2) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'gretap0\x00', r0, 0x20, 0x7800, 0xf15e, 0x0, {{0x1e, 0x4, 0x3, 0xb, 0x78, 0x66, 0x0, 0xa9, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0x22, [@remote]}, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x5, [{@rand_addr=0x64010100, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x548}, {@empty, 0x8}]}, @timestamp_addr={0x44, 0x2c, 0xad, 0x1, 0x2, [{@loopback, 0x2}, {@local, 0x3}, {@empty, 0x7d0}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x297}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0x4, [{@broadcast, 0xffffffff}, {@broadcast, 0x1}]}]}}}}}) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@getpolicy={0x60, 0x15, 0x300, 0x70bd25, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x4e21, 0x4, 0x4e24, 0x25b2, 0x2, 0x20, 0x80, 0x2c, r7}}, [@proto={0x5, 0x19, 0x2b}, @replay_thresh={0x8, 0xb, 0x4fcffab0}]}, 0x60}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) 22:42:53 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0xc008) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=@target={'target ', {'PCI:', '8', ':', 'e', ':', '6', '.', '1d'}}, 0x14) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="bba36f42121b487e32a1aa60a6af47087c50216790130fe01f3ab4d31ce06d77554317c7d58027eba96430fef1df033c8dbcfa2d467c6f9d9d5fec96b76699160865c0fe192ca386fdc702b5fbc395d38c521e60d6eaed64a2a74bf7fb988a3d874d56e57436da55a8adfd34a5b858e6fb361602ec126293b2764621fcffaf51e65e6b2837e7551a8f423e04429ac7b44ae46862412ffc0462faea80b53827310339285ca8c3128c3750bb354b", 0xad) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x404c815) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000480)) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) shmget$private(0x0, 0x4000, 0xb43, &(0x7f0000ff9000/0x4000)=nil) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf7}]}, 0x34}, 0x1, 0x0, 0x0, 0x480c0}, 0x24000040) nanosleep(&(0x7f0000000900), &(0x7f0000000940)) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000980)=0x2, 0x4) nanosleep(&(0x7f00000009c0)={0x77359400}, &(0x7f0000000a00)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x854) 22:42:53 executing program 6: r0 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x80, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r0}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x29, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/86, 0x56, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/13, 0xd, 0x1, 0x22}, @fda={0x66646185, 0x9, 0x1, 0x13}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}}], 0x5f, 0x0, &(0x7f0000000200)="67ecef071a7476db6ccb3821d54c5f32ece72fe6c4ea3762420032e9c9314149a022b26e99c58df16cad1f135059d3cc607bb21f2710ceec71831dddd51f1cae8f9b20159f5336765f1750a3e75fa90f17bd6fca04b297169af980f02feddb"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x84, 0x0, &(0x7f0000000380)=[@enter_looper, @increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x2, 0x1}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}, @register_looper, @acquire_done, @increfs_done={0x40106308, 0x1}], 0x18, 0x0, &(0x7f0000000440)="b3cbe26c3b53ebc9909f92e637dfe1d4013629926f3369a1"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) write$hidraw(r1, &(0x7f0000000500)="0355e6d0dcdfd90d20340beaaab7e59d66c7ef0bbd74bfe38221d92235d6f86529fa538f3a0b834eb29a3e2569154c081f2553c6991a3323aa039e33d05912206ef0feb8b5800da412576dbff7b6be97b9a210e4a3d32ea2595de9be06c7262d6101a279313493314b0ca704f1323bcf5b79b1a5920ca25ec904ecc25db8cc4dceb71c05ca6f9c854dd9870c9a20782a43a0f41d65ecb2c5aa149ae1cd9888c7a5b9b6445c97ce9ac0ec91476b1a7c111d2c51d9a47fbdb9ef709d7d60befd1b677898a9c773cd41445136350223f08b34972753b1344261f1d904d9347b3b6ae108590d7305caeafea9bc876569a60dd3a4718374e7a58ce0", 0xf9) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r2, 0x0, &(0x7f0000000600), 0x80800) accept4(r1, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000006c0)=0x80, 0x800) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r1, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_complete(0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r5, 0xe09c, 0x0, 0x7f, 0x4, 0x1}, 0x2) r6 = syz_open_dev$vcsa(&(0x7f0000000740), 0x9, 0x40) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x91}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x3faba7febda56427}, 0x4000811) r7 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xffff, 0x4000000) r8 = syz_open_dev$hidraw(&(0x7f00000008c0), 0x8, 0x507080) ioctl$HIDIOCGRDESCSIZE(r8, 0x80044801, &(0x7f0000000900)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001ac0)={0x68, 0x0, &(0x7f0000000a40)=[@exit_looper, @register_looper, @enter_looper, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0xa, 0x0, 0x1f}, @fda={0x66646185, 0x7, 0x0, 0xf}}, &(0x7f0000000a00)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f0000000ac0)="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"}) 22:42:53 executing program 7: r0 = geteuid() geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getsadinfo={0x28, 0x23, 0x400, 0x70bd27, 0x25dfdbfc, 0x0, [@coaddr={0x14, 0xe, @in6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x40, 0x0, 0x1, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x64, 0x0, 0x40, 0x2f, 0x0, @private=0xa010101, @local, {[@end, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x1, [{@empty, 0x8}]}, @rr={0x7, 0x13, 0x8b, [@empty, @broadcast, @rand_addr=0x64010100, @multicast2]}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x5, 0x7, "9901d16a0c"}, {0x7, 0x8, "6673ddf69b84"}, {0x7, 0x11, "6fb052741eac82d42427adc8890e7d"}]}, @timestamp={0x44, 0x10, 0x3a, 0x0, 0xe, [0x5, 0x5, 0x0]}, @timestamp_addr={0x44, 0x4c, 0xdd, 0x1, 0xe, [{@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xfffff001}, {@multicast1, 0x5}, {@empty, 0x67}, {@remote, 0x7000}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@multicast2, 0xd6}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x8001}]}, @ssrr={0x89, 0x1b, 0xe, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @remote, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x7, 0x100, {{0x5, 0x4, 0x2, 0x13, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @empty}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@getpolicy={0xbc, 0x15, 0x4, 0x70bd28, 0x25dfdbfc, {{@in6=@mcast1, @in=@multicast2, 0x4e23, 0x0, 0x4e20, 0x35c, 0xb, 0x20, 0xa0, 0xc, r2, r0}, 0x6e6bbe, 0x2}, [@proto={0x5, 0x19, 0x2b}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@remote, 0x2, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in6=@remote, 0x0, 0xa}}]}, 0xbc}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) syz_io_uring_setup(0x2e2f, &(0x7f00000005c0)={0x0, 0xf1a9, 0x8, 0x0, 0x172}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000780)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f00000006c0)=0x80, &(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x0, 0x80800}, 0x9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mount_setattr(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1100, &(0x7f0000000900)={0x78, 0x100008, 0x1a0000}, 0x20) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@flushpolicy={0x1c, 0x1d, 0x200, 0x70bd28, 0x25dfdbfc, "", [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) geteuid() r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10008810}, 0x10) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x100010, 0xffffffffffffffff, 0x841) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x825}, 0x40) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000cc0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000d40)=@req={0x28, &(0x7f0000000d00)={'wg1\x00', @ifru_names}}) [ 112.959319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.968771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.972089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.976625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.982159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.991501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.993851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.004387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.005993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.015122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.040073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.048772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.077912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.088209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.092839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.099586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.109016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.118089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.119841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.129625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.131186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.145773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.148962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.150970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.155562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.165073] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.167995] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.170028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.176860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.183758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.187994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.191820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.196397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.214595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.228245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.229985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.257902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.264856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.303839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.320300] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.098239] Bluetooth: hci1: command tx timeout [ 115.098561] Bluetooth: hci0: command tx timeout [ 115.161626] Bluetooth: hci2: command tx timeout [ 115.289750] Bluetooth: hci5: command tx timeout [ 115.289804] Bluetooth: hci6: command tx timeout [ 115.290522] Bluetooth: hci3: command tx timeout [ 115.291205] Bluetooth: hci4: command tx timeout [ 115.354621] Bluetooth: hci7: command tx timeout [ 117.145768] Bluetooth: hci0: command tx timeout [ 117.145811] Bluetooth: hci1: command tx timeout [ 117.210439] Bluetooth: hci2: command tx timeout [ 117.338551] Bluetooth: hci3: command tx timeout [ 117.338769] Bluetooth: hci4: command tx timeout [ 117.339415] Bluetooth: hci6: command tx timeout [ 117.339561] Bluetooth: hci5: command tx timeout [ 117.401639] Bluetooth: hci7: command tx timeout [ 119.193652] Bluetooth: hci1: command tx timeout [ 119.194190] Bluetooth: hci0: command tx timeout [ 119.258403] Bluetooth: hci2: command tx timeout [ 119.385425] Bluetooth: hci6: command tx timeout [ 119.385916] Bluetooth: hci5: command tx timeout [ 119.386388] Bluetooth: hci4: command tx timeout [ 119.386810] Bluetooth: hci3: command tx timeout [ 119.450534] Bluetooth: hci7: command tx timeout [ 121.241487] Bluetooth: hci0: command tx timeout [ 121.241512] Bluetooth: hci1: command tx timeout [ 121.306738] Bluetooth: hci2: command tx timeout [ 121.435356] Bluetooth: hci3: command tx timeout [ 121.435380] Bluetooth: hci4: command tx timeout [ 121.435423] Bluetooth: hci5: command tx timeout [ 121.435841] Bluetooth: hci6: command tx timeout [ 121.497568] Bluetooth: hci7: command tx timeout [ 173.218655] syz-executor.7 (286) used greatest stack depth: 24800 bytes left [ 175.468056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.472893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.475683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.484163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.489009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.548544] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.561172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.563821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.566593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.568673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.572902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.577942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.582117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.586777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.586853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.589505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.591832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.596600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.596849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.600013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.600372] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.608457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.612034] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.616842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.622122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.626103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.629779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.645736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.664100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.677980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.683739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.693040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.713777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.722241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.724242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.742578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.744141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.754831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.758901] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.770509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.561660] Bluetooth: hci0: command tx timeout [ 177.689477] Bluetooth: hci3: command tx timeout [ 177.689575] Bluetooth: hci1: command tx timeout [ 177.753586] Bluetooth: hci5: command tx timeout [ 177.753778] Bluetooth: hci2: command tx timeout [ 177.754393] Bluetooth: hci4: command tx timeout [ 177.817443] Bluetooth: hci6: command tx timeout [ 177.881720] Bluetooth: hci7: command tx timeout [ 179.609619] Bluetooth: hci0: command tx timeout [ 179.737955] Bluetooth: hci1: command tx timeout [ 179.737978] Bluetooth: hci3: command tx timeout [ 179.802413] Bluetooth: hci4: command tx timeout [ 179.802630] Bluetooth: hci2: command tx timeout [ 179.802883] Bluetooth: hci5: command tx timeout [ 179.865464] Bluetooth: hci6: command tx timeout [ 179.929570] Bluetooth: hci7: command tx timeout [ 181.658417] Bluetooth: hci0: command tx timeout [ 181.785405] Bluetooth: hci1: command tx timeout [ 181.786559] Bluetooth: hci3: command tx timeout [ 181.849449] Bluetooth: hci4: command tx timeout [ 181.849914] Bluetooth: hci5: command tx timeout [ 181.851022] Bluetooth: hci2: command tx timeout [ 181.914451] Bluetooth: hci6: command tx timeout [ 181.978462] Bluetooth: hci7: command tx timeout [ 183.705403] Bluetooth: hci0: command tx timeout [ 183.834727] Bluetooth: hci3: command tx timeout [ 183.835227] Bluetooth: hci1: command tx timeout [ 183.898775] Bluetooth: hci2: command tx timeout [ 183.898854] Bluetooth: hci4: command tx timeout [ 183.899278] Bluetooth: hci5: command tx timeout [ 183.961536] Bluetooth: hci6: command tx timeout [ 184.025407] Bluetooth: hci7: command tx timeout [ 237.743753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.746182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.747870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.760881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.769015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.794728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.798776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.804613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.810796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.816295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.880878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.885654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.890841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.898112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.901477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.928746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.933695] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.939862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.962210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.968805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.081136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.092723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.109805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.120750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.131172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.156661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.159085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.172725] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.174133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.197804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.238386] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.242742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.281590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.285644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.287721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.297593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.299477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.300850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.315872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.325146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.833593] Bluetooth: hci0: command tx timeout [ 239.833752] Bluetooth: hci1: command tx timeout [ 239.961406] Bluetooth: hci2: command tx timeout [ 240.026399] Bluetooth: hci3: command tx timeout [ 240.217485] Bluetooth: hci5: command tx timeout [ 240.282424] Bluetooth: hci4: command tx timeout [ 240.345600] Bluetooth: hci7: command tx timeout [ 240.410505] Bluetooth: hci6: command tx timeout [ 241.881663] Bluetooth: hci0: command tx timeout [ 241.881781] Bluetooth: hci1: command tx timeout [ 242.010399] Bluetooth: hci2: command tx timeout [ 242.073537] Bluetooth: hci3: command tx timeout [ 242.265539] Bluetooth: hci5: command tx timeout [ 242.329431] Bluetooth: hci4: command tx timeout [ 242.393514] Bluetooth: hci7: command tx timeout [ 242.459468] Bluetooth: hci6: command tx timeout [ 243.929770] Bluetooth: hci1: command tx timeout [ 243.930264] Bluetooth: hci0: command tx timeout [ 244.058467] Bluetooth: hci2: command tx timeout [ 244.122721] Bluetooth: hci3: command tx timeout [ 244.313693] Bluetooth: hci5: command tx timeout [ 244.378829] Bluetooth: hci4: command tx timeout [ 244.444386] Bluetooth: hci7: command tx timeout [ 244.505593] Bluetooth: hci6: command tx timeout [ 245.977663] Bluetooth: hci1: command tx timeout [ 245.978441] Bluetooth: hci0: command tx timeout [ 246.106531] Bluetooth: hci2: command tx timeout [ 246.169424] Bluetooth: hci3: command tx timeout [ 246.361613] Bluetooth: hci5: command tx timeout [ 246.425378] Bluetooth: hci4: command tx timeout [ 246.490456] Bluetooth: hci7: command tx timeout [ 246.554806] Bluetooth: hci6: command tx timeout [ 300.082173] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.089572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.094616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.101998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.107913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.239479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.246145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.264908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.283800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.296298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.302063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.308006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.310594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.328897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.335112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.356834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.361973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.408787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.449948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.470750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.472849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.476834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.477030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.481234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.484838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.491231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.494886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.499460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.504046] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.507253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.509990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.517939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.522525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.528223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.536199] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.542820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.542875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.546754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.557214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.595520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.169575] Bluetooth: hci0: command tx timeout [ 302.362363] Bluetooth: hci1: command tx timeout [ 302.425391] Bluetooth: hci2: command tx timeout [ 302.618054] Bluetooth: hci3: command tx timeout [ 302.618769] Bluetooth: hci7: command tx timeout [ 302.619265] Bluetooth: hci4: command tx timeout [ 302.681620] Bluetooth: hci6: command tx timeout [ 302.748399] Bluetooth: hci5: command tx timeout [ 304.217608] Bluetooth: hci0: command tx timeout [ 304.409401] Bluetooth: hci1: command tx timeout [ 304.474750] Bluetooth: hci2: command tx timeout [ 304.666554] Bluetooth: hci4: command tx timeout [ 304.666709] Bluetooth: hci7: command tx timeout [ 304.667033] Bluetooth: hci3: command tx timeout [ 304.729383] Bluetooth: hci6: command tx timeout [ 304.793378] Bluetooth: hci5: command tx timeout [ 306.265391] Bluetooth: hci0: command tx timeout [ 306.458673] Bluetooth: hci1: command tx timeout [ 306.521382] Bluetooth: hci2: command tx timeout [ 306.715363] Bluetooth: hci7: command tx timeout [ 306.715843] Bluetooth: hci4: command tx timeout [ 306.716260] Bluetooth: hci3: command tx timeout [ 306.778572] Bluetooth: hci6: command tx timeout [ 306.841385] Bluetooth: hci5: command tx timeout [ 308.313478] Bluetooth: hci0: command tx timeout [ 308.506345] Bluetooth: hci1: command tx timeout [ 308.569575] Bluetooth: hci2: command tx timeout [ 308.761678] Bluetooth: hci3: command tx timeout [ 308.764357] Bluetooth: hci4: command tx timeout [ 308.764659] Bluetooth: hci7: command tx timeout [ 308.825714] Bluetooth: hci6: command tx timeout [ 308.889418] Bluetooth: hci5: command tx timeout [ 362.423743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.431142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.433801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.442868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.447542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.615135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.620522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.633509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.642233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.650948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.687682] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.692830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.700542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.708586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.727892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.820639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.828167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.835537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.861906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.875569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.897604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.903173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.916992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.964930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.984885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.996938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.053744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.069944] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.073918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.088485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.100037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.103176] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.128618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.170028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.191295] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.193427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.213738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.222810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.230225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.276292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.506569] Bluetooth: hci0: command tx timeout [ 364.698394] Bluetooth: hci1: command tx timeout [ 364.761412] Bluetooth: hci2: command tx timeout [ 365.017467] Bluetooth: hci3: command tx timeout [ 365.145681] Bluetooth: hci5: command tx timeout [ 365.274228] Bluetooth: hci4: command tx timeout [ 365.274354] Bluetooth: hci6: command tx timeout [ 365.401422] Bluetooth: hci7: command tx timeout [ 366.553526] Bluetooth: hci0: command tx timeout [ 366.746391] Bluetooth: hci1: command tx timeout [ 366.809412] Bluetooth: hci2: command tx timeout [ 367.065461] Bluetooth: hci3: command tx timeout [ 367.193583] Bluetooth: hci5: command tx timeout [ 367.321923] Bluetooth: hci4: command tx timeout [ 367.321974] Bluetooth: hci6: command tx timeout [ 367.449759] Bluetooth: hci7: command tx timeout [ 368.603350] Bluetooth: hci0: command tx timeout [ 368.793410] Bluetooth: hci1: command tx timeout [ 368.859363] Bluetooth: hci2: command tx timeout [ 369.113422] Bluetooth: hci3: command tx timeout [ 369.241576] Bluetooth: hci5: command tx timeout [ 369.369377] Bluetooth: hci6: command tx timeout [ 369.371390] Bluetooth: hci4: command tx timeout [ 369.497375] Bluetooth: hci7: command tx timeout [ 370.650360] Bluetooth: hci0: command tx timeout [ 370.841426] Bluetooth: hci1: command tx timeout [ 370.905922] Bluetooth: hci2: command tx timeout [ 371.161395] Bluetooth: hci3: command tx timeout [ 371.289403] Bluetooth: hci5: command tx timeout [ 371.418355] Bluetooth: hci4: command tx timeout [ 371.418861] Bluetooth: hci6: command tx timeout [ 371.547359] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:48:03 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819c4cfd RDX=ffff888016ac3700 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88803337f878 R8 =0000000000000000 R9 =fffff94000044c76 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f1233061000 R14=ffff88803337fce0 R15=00007f123306a000 RIP=ffffffff819c4d00 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f123314b6f4 CR3=0000000027140000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f123315a47000007f1233159f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e571b000 RCX=4b952e4da9267483 RDX=0000000000000000 RSI=000000005e406224 RDI=ffff88806cf31850 RBP=ffff888030077928 RSP=ffff888030077800 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff888030077918 R14=ffff888030077918 R15=ffff8880300778d0 RIP=ffffffff815ab830 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f82796e4540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f827987f4a1 CR3=0000000030ff8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000