Warning: Permanently added '[localhost]:30659' (ECDSA) to the list of known hosts. 2025/05/26 09:51:21 fuzzer started 2025/05/26 09:51:22 dialing manager at localhost:46087 syzkaller login: [ 99.057398] cgroup: Unknown subsys name 'net' [ 99.167680] cgroup: Unknown subsys name 'cpuset' [ 99.196323] cgroup: Unknown subsys name 'rlimit' 2025/05/26 09:51:37 syscalls: 209 2025/05/26 09:51:37 code coverage: enabled 2025/05/26 09:51:37 comparison tracing: enabled 2025/05/26 09:51:37 extra coverage: enabled 2025/05/26 09:51:37 setuid sandbox: enabled 2025/05/26 09:51:37 namespace sandbox: enabled 2025/05/26 09:51:37 Android sandbox: enabled 2025/05/26 09:51:37 fault injection: enabled 2025/05/26 09:51:37 leak checking: enabled 2025/05/26 09:51:37 net packet injection: enabled 2025/05/26 09:51:37 net device setup: enabled 2025/05/26 09:51:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 09:51:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 09:51:37 USB emulation: enabled 2025/05/26 09:51:37 hci packet injection: enabled 2025/05/26 09:51:37 wifi device emulation: enabled 2025/05/26 09:51:37 802.15.4 emulation: enabled 2025/05/26 09:51:37 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 09:51:38 starting 8 fuzzer processes 09:51:38 executing program 0: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x190}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd0a5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfd}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffeff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x173}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x81) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x47}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25c}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000801}, 0x440088c5) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r5, 0x221, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x44050}, 0x20040000) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000940), 0x400440, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}}, 0x30044081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x26c, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfcb6, 0x7a}}}}, [@NL80211_ATTR_IE={0xdd, 0x2a, [@random_vendor={0xdd, 0xd7, "5f94ca4e5420add84c947366a6005748a2f257f2c394373a0c7038091741a8ffb7a3689ceef5a7cdf062f214afd3a27a32b8d17d3fa139e7dcfb8641239db6df2a2a7da584e7f54105167f8dd43168825c46c5b1d5d35da8020b8c0f03c165a6001030fae447cab2979e9dcb0e84a4868eb58a68a129604ca6195922d180dc282bbde2fe5ed4ee0dc2d9b2b1bb6a029df7219e9d59f7be9cff40ad214f49f7cb334af226e64c2f962195ed8f01f64a58b4fb11f3c81146ae6b06db3a2b382874734ae1b87b151a9afd03a39e289d9389bd90b949278ea2"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2c}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80}, @NL80211_ATTR_SCAN_SSIDS={0xc0, 0x2d, 0x0, 0x1, [{0x1d, 0x0, @random="8e3ada95736bb177daac7e91c80d570b60d416a29b551015c1"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x23, 0x0, @random="113edbb96dd2466d942837e8e1e9eec3ef71feca8420371a6fdeb2a8135db7"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xd, 0x0, @random="1c962e47dc6bc37d2b"}, {0x1d, 0x0, @random="20bd8573cd734dddb413efb1cad4bff906929d02cb3a4b9d92"}, {0x16, 0x0, @random="2d58c77741823d215a693369fe55b9e1089a"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x88, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7e, 0x0, "9440c16e9b76de4bc5e5639f1e3d9ed783c30ade33caf9356d41c35504ae64a0304ffc021f2aa5cc124570e849084ef29b88a40592f416faf7a51e587cdd3ee02a675bac86cc8617ae3206f4adddc04299e441d59f540f0c0281a9624a69993233c2526e9a5df55c5f05da7a738bf705e8c0c1d919c60d5e7e3f"}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) 09:51:38 executing program 1: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x7, 0x1, {{0x3, '\xe0!\\'}, 0x7}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) socketpair(0x33, 0x800, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r5 = accept$packet(r1, 0x0, &(0x7f0000000440)) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff296}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) accept$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x5}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x400180, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000008c0)) fcntl$getown(0xffffffffffffffff, 0x9) 09:51:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9e3, 0x3, 0x3f, 0x0, 0x7}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000480)) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x94c40, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x5) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)=@newsa={0x260, 0x10, 0x20, 0x70bd26, 0x25dfdbfb, {{@in=@empty, @in6=@mcast2, 0x4e23, 0x1000, 0x4e21, 0x8, 0x8, 0x80, 0xb0, 0x1d}, {@in=@empty, 0x4d2, 0xff}, @in6=@private1, {0x101, 0xf13, 0x693, 0x7df, 0x7f, 0x3, 0x101, 0x9ba3}, {0x2, 0x5, 0xffffffff}, {0x9, 0x77, 0x7}, 0x70bd28, 0x34ff, 0x4699175c4b1b55aa, 0x4, 0x8, 0xe0}, [@replay_esn_val={0x40, 0x17, {0x9, 0x70bd2a, 0x70bd27, 0x70bd29, 0x70bd2d, 0xff, [0xffffff6f, 0x3a0, 0x1, 0x10000, 0x2, 0xfffffffd, 0x75, 0xd2c, 0x8]}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @mark={0xc, 0x15, {0x35075c, 0xd32}}, @address_filter={0x28, 0x1a, {@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xa, 0xaf, 0x9}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd29, 0x70bd2b, 0x70bd29, 0x70bd25, 0xfffffffb, [0x7, 0x6, 0x200, 0x36c2, 0x6, 0x4, 0xffffffff]}}, @algo_comp={0x72, 0x3, {{'lzjh\x00'}, 0x150, "ea4ac2c1d59942a37f204222b65e8d42c435791c269beb31df9513c25fcfd85662c6f727ad939b006690"}}]}, 0x260}, 0x1, 0x0, 0x0, 0x40}, 0x20044041) 09:51:38 executing program 3: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) r2 = accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) clock_gettime(0x1, &(0x7f0000000200)) bind$packet(r1, &(0x7f0000000240)={0x11, 0x11, r3, 0x1, 0xf9, 0x6, @broadcast}, 0x14) getegid() ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000280)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r5 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=@delpolicy={0x244, 0x14, 0x8, 0x70bd2a, 0x25dfdbfd, {{@in6=@local, @in6=@private0, 0x4e21, 0x2, 0x4e23, 0x7fff, 0x2, 0x0, 0x80, 0x73, r4, r5}, 0x6e6bb2, 0x1}, [@encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e24, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd25, 0x1}}, @proto={0x5, 0x19, 0x32}, @algo_crypt={0xb7, 0x2, {{'ctr(cast5)\x00'}, 0x378, "7e0e235c3f3aa8565b222c36d8786197a157fc60c3aa3eb24cd3473ccb0b69220aebfb054e47d47547ebbbc9bb12b27f73f266981ffe972c91b4ccddc5cd1dca2b40a852f5b2dc05aca0cb3ca2f4d409c06172297548211c4f0fbb36c229c662768f42098cd44401b0120c545224c5"}}, @algo_auth_trunc={0x70, 0x14, {{'blake2s-256\x00'}, 0x120, 0xb6de6134d52724e5, "b4110aadccaf88ab292b243701f3384918ad5f1db240152b7ab39a40e07985bcbb068204"}}, @algo_aead={0x96, 0x12, {{'aegis256\x00'}, 0x250, 0xc0, "81059e4856ee5c7fdef3606f1a85651fcfcd4959250ac7c252831ee34e566cd1e2f406bcf06160f9e1a119278a5890e89eb215f1ce9f2595086bef21a2cc1bca3ca7bf1ed75425e08374"}}]}, 0x244}, 0x1, 0x0, 0x0, 0x11}, 0x4004850) clock_getres(0x1, &(0x7f0000000680)) setgid(0xffffffffffffffff) mq_timedsend(0xffffffffffffffff, &(0x7f00000006c0)="a79299c50f7cab46ad8848c1b80e2a3c121cc926d0e981d34f1e05c0f86f022147659a916eb0a9baa7d31e73245cdeecc3801e93c7abcac3b8d455f447a4eac4bb3a868b8ae7b111e1004e13d497323137c6f89d2638b8dadea041f811343ace306b81e8f06bd7898aee7d193955756ad19dae72c7e5c955e96e3ce4fbd4d4df3ebb6094c4176d2abd8f4a3ba4b287eba4c7b01de7e2a834f5f571e22309b19f3556e56c4a5ed9b158fba332efd9f66f4aa174d5139622", 0xb7, 0x2, &(0x7f0000000780)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f0000000a00)={0x80000, &(0x7f0000000800)=0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880), {0x24}, &(0x7f00000008c0)=""/121, 0x79, &(0x7f0000000940)=""/81, &(0x7f00000009c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4, {r6}}, 0x58) pidfd_send_signal(r7, 0x15, &(0x7f0000000a80)={0x2e, 0x5, 0x10001}, 0x0) [ 115.291691] audit: type=1400 audit(1748253098.661:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:51:38 executing program 4: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r1 = io_uring_setup(0x722f, &(0x7f0000000040)={0x0, 0xbdf9, 0x8, 0x2, 0x149}) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0xfe8a, 0x0, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r1, r2]}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000e, 0x9033, r1, 0x8000000) io_uring_setup(0x7324, &(0x7f0000000200)={0x0, 0xa721, 0x1, 0x2, 0x116, 0x0, r3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000003, 0x50, r3, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd2a42028}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40004) r4 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r5, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x40, 0x5}, {0x35, 0x6}, {0x17, 0x5}, {0xc0, 0x4}, {0x20, 0x7}, {0x80, 0x3}, {0x8, 0x3}, {0x80, 0x7}], "3961102688ae3f92"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x90) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) pipe2$9p(&(0x7f0000000640), 0x81800) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c814}, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x22}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000110}, 0x40804) 09:51:38 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x302, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9f7f, 0x13}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x41) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x328, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x22008080) r5 = openat$cgroup(r2, &(0x7f0000000800)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4801) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a00), 0x101000, 0x0) openat$cgroup_procs(r7, &(0x7f0000000a40)='tasks\x00', 0x2, 0x0) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000a80)) r8 = accept$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) getsockname$packet(r8, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) 09:51:38 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80a0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0xc80, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}}, 0x4001) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x16a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = inotify_init() set_tid_address(&(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/53, 0x35}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000700)=""/35, 0x23}], 0x3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xc62ab37bcc15203a}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = pidfd_getfd(r3, r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r7, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40000) clone3(&(0x7f0000000c00)={0x140100, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40), {0x35}, &(0x7f0000000a80)=""/100, 0x64, &(0x7f0000000b00)=""/172, &(0x7f0000000bc0)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r5}}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x95c0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c0c4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) 09:51:38 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfff3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24040045) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x10, 0xffffffffffffffff, 0x4fb36000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x84}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x480d1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r5) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x104, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40880}, 0x40800) [ 116.692682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.694861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.696518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.703775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.706457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.773503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.776416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.779434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.781010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.784627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.786493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.791173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.794375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.803983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.834789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.838654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.839919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.841817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.844914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.847815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.850074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.853405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.855175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.855273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.860448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.863536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.873609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.892581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.906576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.919022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.921191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.922949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.928734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.930641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.938732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.970967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.978414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 117.003630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.007589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 117.009678] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.787995] Bluetooth: hci0: command tx timeout [ 118.852300] Bluetooth: hci2: command tx timeout [ 118.917143] Bluetooth: hci3: command tx timeout [ 118.917274] Bluetooth: hci1: command tx timeout [ 118.979404] Bluetooth: hci4: command tx timeout [ 119.043744] Bluetooth: hci5: command tx timeout [ 119.108756] Bluetooth: hci7: command tx timeout [ 119.108795] Bluetooth: hci6: command tx timeout [ 120.836518] Bluetooth: hci0: command tx timeout [ 120.899459] Bluetooth: hci2: command tx timeout [ 120.964328] Bluetooth: hci1: command tx timeout [ 120.964666] Bluetooth: hci3: command tx timeout [ 121.027474] Bluetooth: hci4: command tx timeout [ 121.091599] Bluetooth: hci5: command tx timeout [ 121.155303] Bluetooth: hci7: command tx timeout [ 121.156583] Bluetooth: hci6: command tx timeout [ 122.900589] Bluetooth: hci0: command tx timeout [ 122.963403] Bluetooth: hci2: command tx timeout [ 123.011674] Bluetooth: hci3: command tx timeout [ 123.012621] Bluetooth: hci1: command tx timeout [ 123.075345] Bluetooth: hci4: command tx timeout [ 123.139870] Bluetooth: hci5: command tx timeout [ 123.203913] Bluetooth: hci6: command tx timeout [ 123.204591] Bluetooth: hci7: command tx timeout [ 124.933443] Bluetooth: hci0: command tx timeout [ 124.996567] Bluetooth: hci2: command tx timeout [ 125.060827] Bluetooth: hci3: command tx timeout [ 125.061540] Bluetooth: hci1: command tx timeout [ 125.124627] Bluetooth: hci4: command tx timeout [ 125.189273] Bluetooth: hci5: command tx timeout [ 125.253307] Bluetooth: hci7: command tx timeout [ 125.253904] Bluetooth: hci6: command tx timeout [ 179.606590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.612636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.618772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.623606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.627096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.629599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.632050] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.633783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.645632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.648003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.674110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.693667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.695056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.704630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.711071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.744334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.753577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.755191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.760783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.763654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.949699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.983438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.994855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.997343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.001314] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.006737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.009429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.010238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.011503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.016036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.018855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.044956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.063805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.077084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.079402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.084790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.095714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.121795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.167828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.196654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.700050] Bluetooth: hci1: command tx timeout [ 181.700937] Bluetooth: hci0: command tx timeout [ 181.763568] Bluetooth: hci2: command tx timeout [ 181.827329] Bluetooth: hci3: command tx timeout [ 182.149339] Bluetooth: hci4: command tx timeout [ 182.150651] Bluetooth: hci7: command tx timeout [ 182.211474] Bluetooth: hci5: command tx timeout [ 182.339537] Bluetooth: hci6: command tx timeout [ 183.747425] Bluetooth: hci0: command tx timeout [ 183.748085] Bluetooth: hci1: command tx timeout [ 183.811542] Bluetooth: hci2: command tx timeout [ 183.875369] Bluetooth: hci3: command tx timeout [ 184.196280] Bluetooth: hci7: command tx timeout [ 184.196959] Bluetooth: hci4: command tx timeout [ 184.259639] Bluetooth: hci5: command tx timeout [ 184.389283] Bluetooth: hci6: command tx timeout [ 185.795346] Bluetooth: hci0: command tx timeout [ 185.795975] Bluetooth: hci1: command tx timeout [ 185.859326] Bluetooth: hci2: command tx timeout [ 185.924300] Bluetooth: hci3: command tx timeout [ 186.244351] Bluetooth: hci4: command tx timeout [ 186.244942] Bluetooth: hci7: command tx timeout [ 186.307460] Bluetooth: hci5: command tx timeout [ 186.435352] Bluetooth: hci6: command tx timeout [ 187.844304] Bluetooth: hci1: command tx timeout [ 187.844890] Bluetooth: hci0: command tx timeout [ 187.907607] Bluetooth: hci2: command tx timeout [ 187.971310] Bluetooth: hci3: command tx timeout [ 188.291355] Bluetooth: hci7: command tx timeout [ 188.291942] Bluetooth: hci4: command tx timeout [ 188.356316] Bluetooth: hci5: command tx timeout [ 188.483337] Bluetooth: hci6: command tx timeout [ 242.257380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.259098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.262964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.269641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.273031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.458478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.461150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.462988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.467739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.471591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.572541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.574707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.576165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.581072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.583641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.663931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.672901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.688624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.705407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.713893] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.717938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.720898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.722352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.760748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.791595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.812947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.821973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.846094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.877619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.883408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.045255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.052599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.054272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.063562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.067804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.352514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.356677] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.358423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.377861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.380597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.292313] Bluetooth: hci0: command tx timeout [ 244.548466] Bluetooth: hci1: command tx timeout [ 244.613310] Bluetooth: hci2: command tx timeout [ 244.803387] Bluetooth: hci3: command tx timeout [ 244.931353] Bluetooth: hci5: command tx timeout [ 244.995518] Bluetooth: hci4: command tx timeout [ 245.253711] Bluetooth: hci7: command tx timeout [ 245.446324] Bluetooth: hci6: command tx timeout [ 246.340305] Bluetooth: hci0: command tx timeout [ 246.595611] Bluetooth: hci1: command tx timeout [ 246.659460] Bluetooth: hci2: command tx timeout [ 246.851573] Bluetooth: hci3: command tx timeout [ 246.979716] Bluetooth: hci5: command tx timeout [ 247.043430] Bluetooth: hci4: command tx timeout [ 247.301267] Bluetooth: hci7: command tx timeout [ 247.491341] Bluetooth: hci6: command tx timeout [ 248.387339] Bluetooth: hci0: command tx timeout [ 248.643341] Bluetooth: hci1: command tx timeout [ 248.707313] Bluetooth: hci2: command tx timeout [ 248.899648] Bluetooth: hci3: command tx timeout [ 249.027319] Bluetooth: hci5: command tx timeout [ 249.091605] Bluetooth: hci4: command tx timeout [ 249.347324] Bluetooth: hci7: command tx timeout [ 249.539401] Bluetooth: hci6: command tx timeout [ 250.437266] Bluetooth: hci0: command tx timeout [ 250.691737] Bluetooth: hci1: command tx timeout [ 250.756701] Bluetooth: hci2: command tx timeout [ 250.948257] Bluetooth: hci3: command tx timeout [ 251.075423] Bluetooth: hci5: command tx timeout [ 251.139322] Bluetooth: hci4: command tx timeout [ 251.395609] Bluetooth: hci7: command tx timeout [ 251.587675] Bluetooth: hci6: command tx timeout [ 305.058156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.060740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.062942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.070597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.073166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.308226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.313148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.315024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.319822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.323055] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.376309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.383947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.396823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.412651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.417893] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.446774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.448907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.451578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.458835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.460969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.613308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.617442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.620665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.625891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.630964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.639635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.643029] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.648105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.703164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.709277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.711449] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.727576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.744093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.785861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.800680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.806541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.812717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.842603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.913489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.961920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.139669] Bluetooth: hci0: command tx timeout [ 307.395633] Bluetooth: hci1: command tx timeout [ 307.461290] Bluetooth: hci2: command tx timeout [ 307.523723] Bluetooth: hci3: command tx timeout [ 307.715637] Bluetooth: hci5: command tx timeout [ 307.843352] Bluetooth: hci4: command tx timeout [ 307.971355] Bluetooth: hci6: command tx timeout [ 308.099870] Bluetooth: hci7: command tx timeout [ 309.188263] Bluetooth: hci0: command tx timeout [ 309.443748] Bluetooth: hci1: command tx timeout [ 309.507873] Bluetooth: hci2: command tx timeout [ 309.571386] Bluetooth: hci3: command tx timeout [ 309.763793] Bluetooth: hci5: command tx timeout [ 309.891474] Bluetooth: hci4: command tx timeout [ 310.020112] Bluetooth: hci6: command tx timeout [ 310.148547] Bluetooth: hci7: command tx timeout [ 311.235332] Bluetooth: hci0: command tx timeout [ 311.491291] Bluetooth: hci1: command tx timeout [ 311.556257] Bluetooth: hci2: command tx timeout [ 311.620525] Bluetooth: hci3: command tx timeout [ 311.812258] Bluetooth: hci5: command tx timeout [ 311.939508] Bluetooth: hci4: command tx timeout [ 312.067519] Bluetooth: hci6: command tx timeout [ 312.195596] Bluetooth: hci7: command tx timeout [ 313.285666] Bluetooth: hci0: command tx timeout [ 313.539802] Bluetooth: hci1: command tx timeout [ 313.606343] Bluetooth: hci2: command tx timeout [ 313.667360] Bluetooth: hci3: command tx timeout [ 313.859510] Bluetooth: hci5: command tx timeout [ 313.987386] Bluetooth: hci4: command tx timeout [ 314.116291] Bluetooth: hci6: command tx timeout [ 314.243402] Bluetooth: hci7: command tx timeout [ 367.956344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.963707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.967710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.973233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.978756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.149000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.152616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.155082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.159240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.163581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.208919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.214600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.219114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.230467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.236537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.341979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.344476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.350694] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.370969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.378569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.469999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.476221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.482979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.509562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.512101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.530687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.568278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.587636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.607798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.616969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.621571] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.623498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.632534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.636734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.661652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.081632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.118884] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.150820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.183544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.212700] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.053260] Bluetooth: hci0: command tx timeout [ 370.243431] Bluetooth: hci1: command tx timeout [ 370.307737] Bluetooth: hci2: command tx timeout [ 370.435760] Bluetooth: hci3: command tx timeout [ 370.629113] Bluetooth: hci4: command tx timeout [ 370.691349] Bluetooth: hci6: command tx timeout [ 370.755348] Bluetooth: hci5: command tx timeout [ 371.396264] Bluetooth: hci7: command tx timeout [ 372.100375] Bluetooth: hci0: command tx timeout [ 372.292320] Bluetooth: hci1: command tx timeout [ 372.356343] Bluetooth: hci2: command tx timeout [ 372.484656] Bluetooth: hci3: command tx timeout [ 372.675367] Bluetooth: hci4: command tx timeout [ 372.739357] Bluetooth: hci6: command tx timeout [ 372.804766] Bluetooth: hci5: command tx timeout [ 373.444489] Bluetooth: hci7: command tx timeout [ 374.149298] Bluetooth: hci0: command tx timeout [ 374.342284] Bluetooth: hci1: command tx timeout [ 374.404649] Bluetooth: hci2: command tx timeout [ 374.532430] Bluetooth: hci3: command tx timeout [ 374.724312] Bluetooth: hci4: command tx timeout [ 374.788622] Bluetooth: hci6: command tx timeout [ 374.851477] Bluetooth: hci5: command tx timeout [ 375.491501] Bluetooth: hci7: command tx timeout [ 376.196687] Bluetooth: hci0: command tx timeout [ 376.387631] Bluetooth: hci1: command tx timeout [ 376.451685] Bluetooth: hci2: command tx timeout [ 376.579645] Bluetooth: hci3: command tx timeout [ 376.772243] Bluetooth: hci4: command tx timeout [ 376.835332] Bluetooth: hci6: command tx timeout [ 376.899332] Bluetooth: hci5: command tx timeout [ 377.539726] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:56:41 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007fe4ce89b000 RCX=ffffffff81209632 RDX=ffff8880169db700 RSI=ffffffff81209640 RDI=0000000000000007 RBP=0000000000000001 RSP=ffff8880358b7710 R8 =ffffffff86799a1e R9 =0000000000000000 R10=00007fe4ce89b000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000000 R14=ffff8880169db700 R15=0000000000100000 RIP=ffffffff81209643 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe202c81008 CR3=000000002f202000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff816045be RCX=ffff88802e8ff6e0 RDX=1ffff11005d1fed3 RSI=ffffffff85c1d1c0 RDI=ffffffff816045be RBP=ffffffff816045be RSP=ffff88802e8ff5f8 R8 =0000000000000001 R9 =ffff88802e8ff680 R10=000000000003b67d R11=0000000000004421 R12=ffff88802e8ff708 R13=0000000000000000 R14=ffff888029f08000 R15=ffff8880332dacc0 RIP=ffffffff8142f9b0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d9a26a3080 CR3=000000001cd2a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000007000000060000000000000000 XMM02=6469646e616320636578650e0a010001 XMM03=65676169727420636578650b00657461 XMM04=786508006c61746f7420636578650a00 XMM05=7a7566206365786509006e6567206365 XMM06=650a0073746e696820636578650a007a XMM07=75636578651100736465657320636578 XMM08=636578650b006574616469646e616320 XMM09=6f7420636578650a0065676169727420 XMM10=6509006e6567206365786508006c6174 XMM11=6820636578650a007a7a756620636578 XMM12=736465657320636578650a0073746e69 XMM13=617473657220726f7475636578651100 XMM14=696d696e696d20636578650d00737472 XMM15=00006873616d7320636578650a00657a