Warning: Permanently added '[localhost]:40296' (ECDSA) to the list of known hosts. 2025/05/28 05:04:18 fuzzer started 2025/05/28 05:04:18 dialing manager at localhost:36005 syzkaller login: [ 95.268465] cgroup: Unknown subsys name 'net' [ 95.416385] cgroup: Unknown subsys name 'cpuset' [ 95.468092] cgroup: Unknown subsys name 'rlimit' 2025/05/28 05:04:34 syscalls: 200 2025/05/28 05:04:34 code coverage: enabled 2025/05/28 05:04:34 comparison tracing: enabled 2025/05/28 05:04:34 extra coverage: enabled 2025/05/28 05:04:34 setuid sandbox: enabled 2025/05/28 05:04:34 namespace sandbox: enabled 2025/05/28 05:04:34 Android sandbox: enabled 2025/05/28 05:04:34 fault injection: enabled 2025/05/28 05:04:34 leak checking: enabled 2025/05/28 05:04:34 net packet injection: enabled 2025/05/28 05:04:34 net device setup: enabled 2025/05/28 05:04:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 05:04:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 05:04:34 USB emulation: enabled 2025/05/28 05:04:34 hci packet injection: enabled 2025/05/28 05:04:34 wifi device emulation: enabled 2025/05/28 05:04:34 802.15.4 emulation: enabled 2025/05/28 05:04:34 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 05:04:35 starting 8 fuzzer processes 05:04:35 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/227) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x9) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x6000248) sendmsg$802154_raw(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a0c69902c78eeb6efa564c1d5de267fcd7938289f725f24063ac10340827f51360054b87a72b9f0c5543030fab33d393732ecc783217d85ed0d984106ea7c27e1e1ffa008c41f744f24335a067870c845341a68b67f550ec405a894c", 0x5c}}, 0x4010) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x435bd58b86ecbb9f}, 0x4000841) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x80400, 0x50, 0x13}, 0x18) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mount_setattr(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000580)={0x95, 0x9, 0x80000, {r4}}, 0x20) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000700)=""/163) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000800), r4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0xd10, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000040) r7 = getpid() pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f0000000940)={r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r3, 0x311, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 05:04:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x10048090}, 0x4040000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xe9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8850}, 0x40010) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0)) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x400c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f00000005c0)=@ready={0x0, 0x0, 0x8, "686b2c0e", {0x1, 0x800, 0xfff, 0xa8}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44001) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004801) r7 = syz_open_dev$evdev(&(0x7f0000000800), 0xb62, 0x40440) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000840)=""/150) syz_genetlink_get_family_id$net_dm(&(0x7f0000000900), r6) syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r6) 05:04:35 executing program 1: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x42c02, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@uid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '('}}, {@seclabel}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x4102, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000001}, 0x891) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x31}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x85) setsockopt$inet6_tcp_int(r1, 0x6, 0x3a, &(0x7f0000000640)=0xfffe, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x4008011) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000780)='./file1\x00', &(0x7f00000007c0), 0x400, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {}, {@cache_mmap}, {@nodevmap}, {@nodevmap}], [{@fsname={'fsname', 0x3d, '('}}, {@context={'context', 0x3d, 'system_u'}}]}}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000900), r5) pipe2(&(0x7f0000000940), 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8000) r8 = syz_open_dev$usbmon(&(0x7f0000000980), 0x5, 0x0) ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000000b00)={&(0x7f00000009c0), &(0x7f0000000a00)=""/250, 0xfa}) 05:04:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4c040) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3f}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x80}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x44010) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8d0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008050) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000680)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x800, 0xf8, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xbc}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x47}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x800) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24054084}, 0x400) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f48d090f0694"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x48090}, 0xc0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x80, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa83}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x20010090}, 0x4800) 05:04:35 executing program 4: statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() r2 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}, {@access_uid={'access', 0x3d, r0}}, {@version_u}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_fscache}, {@cache_fscache}], [{@smackfsroot={'smackfsroot', 0x3d, 'c#'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, ','}}, {@dont_appraise}, {@fowner_lt={'fowner<', r2}}]}}) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84800) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x148484, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_client}, {@noextend}, {@cache_none}, {@cache_mmap}], [{@smackfshat={'smackfshat', 0x3d, 'rfdno'}}, {@subj_role={'subj_role', 0x3d, 'version=9p2000.u'}}, {@hash}, {@smackfsroot}]}}) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x800, &(0x7f0000000540)={0x80, 0x35, 0x40000, {r4}}, 0x20) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x240048c1) r5 = socket(0x10, 0x4, 0x65c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r6, 0xe8b7743a7d85584e, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000880)={&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000800)=""/128, 0x80}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000008c0)=""/102) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x23}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x804) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000c80)={&(0x7f0000000a40), 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x198, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r9, &(0x7f0000000d00)={0x67446698, 0x0, 0x2, 0x3, 0x3, "719748bfe5bdde5413a03ab8a8a3"}, 0x1e) [ 111.731249] audit: type=1400 audit(1748408675.362:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:04:35 executing program 5: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0xf161}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3001, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x120400, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x7) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x4, 0x8001, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x1, 0x1000, 0x7fffffff]}, @SEG6_ATTR_ALGID={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x20000010) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x420000000000, 0x300) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000002c0)=""/24) r3 = perf_event_open(&(0x7f0000000340)={0x6, 0x80, 0xff, 0x7, 0x49, 0x3, 0x0, 0x5e544991, 0x4040, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x6, @perf_bp={&(0x7f0000000300)}, 0x8048, 0x0, 0x3, 0x8, 0x4, 0x9, 0x3, 0x0, 0x400, 0x0, 0x20}, 0xffffffffffffffff, 0xd, r1, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x7) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_score_adj\x00') ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000400)=""/189) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000540)={'wg0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 05:04:35 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x9, 0x1, 0xffffffff, 0x0, 0x3f, 0x3}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x10001, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf8b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbe8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044805}, 0x48000) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000200)=[0x9, 0x8]) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9573e6bedb"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b8eea6939e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e2cf80d4eb"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x75}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x91b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) r4 = socket(0x1a, 0x800, 0x7fff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x66}]}, 0x44}}, 0x4004000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x3f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x10, 0x4, 0x2c1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x104, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x51}, 0x4044) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a40)={0x0}) pipe2$9p(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000b00)={r8, 0x3, r9, 0x99a0, 0x80000}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x114, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000044) 05:04:35 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x401, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008801) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000200)={0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000002c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000380)={r6, 0x0, r4, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', r1, 0x4, 0x3a, 0x7, 0x3, 0x1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0xffffffc1, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x2f, 0x5, 0xf, 0x1000000, 0x8, @rand_addr=' \x01\x00', @local, 0x40, 0x1, 0x3, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r0, 0x2f, 0x6, 0xe0, 0x2, 0x21, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, 0x1, 0x700, 0x4, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)={0x308, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r0}}}]}}]}, 0x308}, 0x1, 0x0, 0x0, 0x20004000}, 0x104) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) [ 113.324616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.327477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.328997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.330305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.331421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.332765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.336572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.338382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.339434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.342111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.396860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.399596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.406467] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.408644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.411457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.413509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.417791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.419469] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.421588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.424520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.427472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.431779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.435944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.437102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.438576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.441251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.442566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.443944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.481204] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.488784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.490902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.491253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.496022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.507995] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.513074] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.515434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.519258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.523894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.526043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.532273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.407312] Bluetooth: hci0: command tx timeout [ 115.407330] Bluetooth: hci1: command tx timeout [ 115.535809] Bluetooth: hci6: command tx timeout [ 115.536010] Bluetooth: hci4: command tx timeout [ 115.536903] Bluetooth: hci2: command tx timeout [ 115.598968] Bluetooth: hci5: command tx timeout [ 115.598994] Bluetooth: hci3: command tx timeout [ 115.599228] Bluetooth: hci7: command tx timeout [ 117.455049] Bluetooth: hci0: command tx timeout [ 117.457865] Bluetooth: hci1: command tx timeout [ 117.582838] Bluetooth: hci4: command tx timeout [ 117.583328] Bluetooth: hci6: command tx timeout [ 117.584774] Bluetooth: hci2: command tx timeout [ 117.647126] Bluetooth: hci5: command tx timeout [ 117.647611] Bluetooth: hci7: command tx timeout [ 117.648806] Bluetooth: hci3: command tx timeout [ 119.503241] Bluetooth: hci1: command tx timeout [ 119.504129] Bluetooth: hci0: command tx timeout [ 119.630850] Bluetooth: hci4: command tx timeout [ 119.631362] Bluetooth: hci6: command tx timeout [ 119.631947] Bluetooth: hci2: command tx timeout [ 119.695149] Bluetooth: hci7: command tx timeout [ 119.695617] Bluetooth: hci5: command tx timeout [ 119.696184] Bluetooth: hci3: command tx timeout [ 121.550862] Bluetooth: hci1: command tx timeout [ 121.551652] Bluetooth: hci0: command tx timeout [ 121.679236] Bluetooth: hci2: command tx timeout [ 121.679810] Bluetooth: hci6: command tx timeout [ 121.680263] Bluetooth: hci4: command tx timeout [ 121.743050] Bluetooth: hci5: command tx timeout [ 121.743955] Bluetooth: hci3: command tx timeout [ 121.744413] Bluetooth: hci7: command tx timeout [ 175.424610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.428636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.431268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.441432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.451124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.644955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.650416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.653316] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.659053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.663371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.692465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.698974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.700023] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.711886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.717355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.727531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.736006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.738274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.742448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.745537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.809342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.814023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.822103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.826487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.828941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.832147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.832889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.879442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.885070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.892222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.127589] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.162551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.167470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.173583] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.192226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.194622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.204480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.211195] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.212865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.238042] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.486865] Bluetooth: hci0: command tx timeout [ 177.743108] Bluetooth: hci1: command tx timeout [ 177.806883] Bluetooth: hci3: command tx timeout [ 177.807622] Bluetooth: hci2: command tx timeout [ 178.063132] Bluetooth: hci4: command tx timeout [ 178.063914] Bluetooth: hci5: command tx timeout [ 178.320025] Bluetooth: hci6: command tx timeout [ 178.320999] Bluetooth: hci7: command tx timeout [ 179.534821] Bluetooth: hci0: command tx timeout [ 179.791110] Bluetooth: hci1: command tx timeout [ 179.857814] Bluetooth: hci3: command tx timeout [ 179.858261] Bluetooth: hci2: command tx timeout [ 180.111980] Bluetooth: hci4: command tx timeout [ 180.112457] Bluetooth: hci5: command tx timeout [ 180.367798] Bluetooth: hci6: command tx timeout [ 180.368267] Bluetooth: hci7: command tx timeout [ 181.582807] Bluetooth: hci0: command tx timeout [ 181.839764] Bluetooth: hci1: command tx timeout [ 181.904046] Bluetooth: hci2: command tx timeout [ 181.904498] Bluetooth: hci3: command tx timeout [ 182.160076] Bluetooth: hci4: command tx timeout [ 182.160562] Bluetooth: hci5: command tx timeout [ 182.414834] Bluetooth: hci6: command tx timeout [ 182.415328] Bluetooth: hci7: command tx timeout [ 183.631974] Bluetooth: hci0: command tx timeout [ 183.888909] Bluetooth: hci1: command tx timeout [ 183.952117] Bluetooth: hci3: command tx timeout [ 183.952569] Bluetooth: hci2: command tx timeout [ 184.207192] Bluetooth: hci5: command tx timeout [ 184.207674] Bluetooth: hci4: command tx timeout [ 184.464735] Bluetooth: hci7: command tx timeout [ 184.465243] Bluetooth: hci6: command tx timeout [ 237.726542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.729212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.731052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.734577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.736524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.825417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.827570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.828806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.836217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.840265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.882597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.903845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.908201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.915002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.920406] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.974019] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.982034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.001131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.006993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.009850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.146415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.153915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.158074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.171954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.182855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.251934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.304521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.317208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.352271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.359679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.509627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.522794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.528608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.533475] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.568913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.570111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.571230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.577550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.580428] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.585410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.758990] Bluetooth: hci0: command tx timeout [ 239.887768] Bluetooth: hci1: command tx timeout [ 239.950915] Bluetooth: hci2: command tx timeout [ 240.206792] Bluetooth: hci4: command tx timeout [ 240.270781] Bluetooth: hci3: command tx timeout [ 240.527793] Bluetooth: hci5: command tx timeout [ 240.655107] Bluetooth: hci6: command tx timeout [ 240.719299] Bluetooth: hci7: command tx timeout [ 241.807026] Bluetooth: hci0: command tx timeout [ 241.934989] Bluetooth: hci1: command tx timeout [ 241.998784] Bluetooth: hci2: command tx timeout [ 242.256100] Bluetooth: hci4: command tx timeout [ 242.319526] Bluetooth: hci3: command tx timeout [ 242.575328] Bluetooth: hci5: command tx timeout [ 242.703045] Bluetooth: hci6: command tx timeout [ 242.768733] Bluetooth: hci7: command tx timeout [ 243.854975] Bluetooth: hci0: command tx timeout [ 243.982882] Bluetooth: hci1: command tx timeout [ 244.046761] Bluetooth: hci2: command tx timeout [ 244.304830] Bluetooth: hci4: command tx timeout [ 244.366820] Bluetooth: hci3: command tx timeout [ 244.622938] Bluetooth: hci5: command tx timeout [ 244.751754] Bluetooth: hci6: command tx timeout [ 244.815731] Bluetooth: hci7: command tx timeout [ 245.902788] Bluetooth: hci0: command tx timeout [ 246.030787] Bluetooth: hci1: command tx timeout [ 246.094934] Bluetooth: hci2: command tx timeout [ 246.350762] Bluetooth: hci4: command tx timeout [ 246.414916] Bluetooth: hci3: command tx timeout [ 246.670863] Bluetooth: hci5: command tx timeout [ 246.799276] Bluetooth: hci6: command tx timeout [ 246.862772] Bluetooth: hci7: command tx timeout [ 300.267957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.275458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.279436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.287444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.294334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.400499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.409274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.419581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.430177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.444188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.611643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.623134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.626328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.635466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.648345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.650452] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.660804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.667097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.682673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.701757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.771923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.791265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.800313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.820114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.825636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.827615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.829651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.835979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.844627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.852304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.265752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.272170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.277207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.286959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.291000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.309024] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.373322] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.398630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.428231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.471408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.351194] Bluetooth: hci0: command tx timeout [ 302.543275] Bluetooth: hci1: command tx timeout [ 302.735808] Bluetooth: hci2: command tx timeout [ 302.991362] Bluetooth: hci4: command tx timeout [ 303.055422] Bluetooth: hci3: command tx timeout [ 303.056809] Bluetooth: hci6: command tx timeout [ 303.374853] Bluetooth: hci5: command tx timeout [ 303.631055] Bluetooth: hci7: command tx timeout [ 304.398947] Bluetooth: hci0: command tx timeout [ 304.592072] Bluetooth: hci1: command tx timeout [ 304.782840] Bluetooth: hci2: command tx timeout [ 305.040023] Bluetooth: hci4: command tx timeout [ 305.102843] Bluetooth: hci6: command tx timeout [ 305.103286] Bluetooth: hci3: command tx timeout [ 305.423332] Bluetooth: hci5: command tx timeout [ 305.680775] Bluetooth: hci7: command tx timeout [ 306.446794] Bluetooth: hci0: command tx timeout [ 306.639125] Bluetooth: hci1: command tx timeout [ 306.831242] Bluetooth: hci2: command tx timeout [ 307.086844] Bluetooth: hci4: command tx timeout [ 307.150809] Bluetooth: hci3: command tx timeout [ 307.151256] Bluetooth: hci6: command tx timeout [ 307.470884] Bluetooth: hci5: command tx timeout [ 307.727901] Bluetooth: hci7: command tx timeout [ 308.495887] Bluetooth: hci0: command tx timeout [ 308.687804] Bluetooth: hci1: command tx timeout [ 308.878837] Bluetooth: hci2: command tx timeout [ 309.134762] Bluetooth: hci4: command tx timeout [ 309.198880] Bluetooth: hci6: command tx timeout [ 309.199004] Bluetooth: hci3: command tx timeout [ 309.518811] Bluetooth: hci5: command tx timeout [ 309.774986] Bluetooth: hci7: command tx timeout [ 362.673188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.679004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.683391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.691134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.695507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.848452] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.851214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.857123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.863249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.867331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.015502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.020101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.022640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.028451] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.032529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.064279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.067193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.069766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.076340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.079569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.213198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.220987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.227199] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.231452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.233557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.246852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.262888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.267388] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.269564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.276586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.283959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.288229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.302209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.303566] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.317267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.325337] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.328280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.329432] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.339003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.406427] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.751807] Bluetooth: hci0: command tx timeout [ 364.942829] Bluetooth: hci1: command tx timeout [ 365.070860] Bluetooth: hci2: command tx timeout [ 365.136079] Bluetooth: hci3: command tx timeout [ 365.390795] Bluetooth: hci7: command tx timeout [ 365.518922] Bluetooth: hci6: command tx timeout [ 365.520022] Bluetooth: hci5: command tx timeout [ 365.584865] Bluetooth: hci4: command tx timeout [ 366.798777] Bluetooth: hci0: command tx timeout [ 366.990777] Bluetooth: hci1: command tx timeout [ 367.118871] Bluetooth: hci2: command tx timeout [ 367.183116] Bluetooth: hci3: command tx timeout [ 367.438923] Bluetooth: hci7: command tx timeout [ 367.568761] Bluetooth: hci6: command tx timeout [ 367.569262] Bluetooth: hci5: command tx timeout [ 367.630763] Bluetooth: hci4: command tx timeout [ 368.846977] Bluetooth: hci0: command tx timeout [ 369.038951] Bluetooth: hci1: command tx timeout [ 369.166964] Bluetooth: hci2: command tx timeout [ 369.232245] Bluetooth: hci3: command tx timeout [ 369.486811] Bluetooth: hci7: command tx timeout [ 369.614830] Bluetooth: hci5: command tx timeout [ 369.615330] Bluetooth: hci6: command tx timeout [ 369.679131] Bluetooth: hci4: command tx timeout [ 370.895179] Bluetooth: hci0: command tx timeout [ 371.088051] Bluetooth: hci1: command tx timeout [ 371.214960] Bluetooth: hci2: command tx timeout [ 371.278746] Bluetooth: hci3: command tx timeout [ 371.534807] Bluetooth: hci7: command tx timeout [ 371.662916] Bluetooth: hci6: command tx timeout [ 371.663378] Bluetooth: hci5: command tx timeout [ 371.727096] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 05:09:36 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=ffff888023335280 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888023335d28 RDI=ffff888023335280 RBP=ffff888023335cd8 RSP=ffff88806ce08c30 R8 =0000000000000000 R9 =0000000000000012 R10=0000000000000001 R11=0000000000000000 R12=ffff888023335d28 R13=873d0e13b074236a R14=0000000000000000 R15=0000000000000002 RIP=ffffffff815191b8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fa338c260 CR3=00000000253d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800f830a80 RBX=ffff888034c3f6d8 RCX=ffff888034c3f2cc RDX=0000000000000002 RSI=ffffffff85c1d1c0 RDI=ffff88800f830a80 RBP=ffffffff85c1d1c0 RSP=ffff888034c3f2c0 R8 =ffffffff86875eee R9 =ffff888034c3f3b8 R10=000000000003b6ad R11=0000000000024a8a R12=ffffffff81353f52 R13=0000000000000202 R14=ffff88800f830000 R15=0000000000000002 RIP=ffffffff8151acab RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc183d30540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d89938a4c8 CR3=0000000025378000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000