Warning: Permanently added '[localhost]:50646' (ECDSA) to the list of known hosts. 2025/06/01 08:08:43 fuzzer started 2025/06/01 08:08:43 dialing manager at localhost:34361 syzkaller login: [ 94.795603] cgroup: Unknown subsys name 'net' [ 94.943848] cgroup: Unknown subsys name 'cpuset' [ 94.991934] cgroup: Unknown subsys name 'rlimit' 2025/06/01 08:09:00 syscalls: 206 2025/06/01 08:09:00 code coverage: enabled 2025/06/01 08:09:00 comparison tracing: enabled 2025/06/01 08:09:00 extra coverage: enabled 2025/06/01 08:09:00 setuid sandbox: enabled 2025/06/01 08:09:00 namespace sandbox: enabled 2025/06/01 08:09:00 Android sandbox: enabled 2025/06/01 08:09:00 fault injection: enabled 2025/06/01 08:09:00 leak checking: enabled 2025/06/01 08:09:00 net packet injection: enabled 2025/06/01 08:09:00 net device setup: enabled 2025/06/01 08:09:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/01 08:09:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/01 08:09:00 USB emulation: enabled 2025/06/01 08:09:00 hci packet injection: enabled 2025/06/01 08:09:00 wifi device emulation: enabled 2025/06/01 08:09:00 802.15.4 emulation: enabled 2025/06/01 08:09:00 fetching corpus: 0, signal 0/0 (executing program) 2025/06/01 08:09:02 starting 8 fuzzer processes 08:09:02 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x5, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r2 = accept4(r1, &(0x7f0000001100), &(0x7f0000001180)=0x80, 0x80000) r3 = accept(r0, &(0x7f00000011c0)=@ethernet={0x0, @remote}, &(0x7f0000001240)=0x80) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/attr/keycreate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001300)={0x3ff, 0x0, &(0x7f00000012c0)=[r2, r0, r1, r3, r1, r0, r0, r4]}, 0x8) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000001340)={0x9, 0x1}) bind$802154_dgram(r3, &(0x7f0000001380)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001480)={0xfffffffffffffffc, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3e1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x11c}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000004) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00000014c0)=0x5, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r2) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001580)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000015c0), 0x400, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000016c0)=0x1, 0x4) 08:09:02 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x8, 0x20, 0x40, 0x0, 0x401, 0x1a2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x80000001, 0x200}, 0x0, 0x800, 0xfc20, 0x5, 0x4, 0x8, 0x7, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@llc, &(0x7f0000000100)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x10, 0x10000, 0x1, {{0x2b, 0x4, 0x1, 0x0, 0xac, 0x65, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x2c, 0x2d, 0x0, 0x0, [0xffff, 0x100, 0xff, 0x0, 0x7ff, 0x8, 0x9, 0x3, 0x929, 0x6]}, @noop, @timestamp_addr={0x44, 0x24, 0x4b, 0x1, 0x2, [{@local, 0x4}, {@empty, 0x3}, {@empty, 0x3ff}, {@loopback, 0x5}]}, @lsrr={0x83, 0x7, 0x53, [@dev={0xac, 0x14, 0x14, 0x42}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xc2, 0x1, 0x9, [{@remote}, {@loopback, 0x1}, {@multicast1, 0x9}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdf}, {@multicast1, 0x3573}, {@loopback, 0x4e72477e}]}]}}}}}) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r4 = accept4(r1, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80, 0x80000) semget(0x3, 0x1, 0xb2) r5 = accept4(r1, &(0x7f0000000480)=@ieee802154={0x24, @short}, &(0x7f0000000500)=0x80, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000540)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000580)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', r2, 0x700, 0x7800, 0xfff, 0x0, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x67, 0x0, 0xfc, 0x29, 0x0, @private=0xa010101, @multicast2, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x17, 0x0, 0x1, [0x101]}, @lsrr={0x83, 0x7, 0x31, [@multicast2]}]}}}}}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000680)) perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x20, 0x7, 0x7f, 0x0, 0x0, 0x7fff, 0x80001, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000006c0), 0x9}, 0x46208, 0x4, 0x429, 0x6, 0x20000000, 0x0, 0x1000, 0x0, 0x800, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x9) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x48800) r7 = add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc2}, &(0x7f0000000940)={0x0, "33941cefa46d1007114d105e29622ada74b83e9376cf2b3af1127106a1caa362c0a94e20d0ef650a5dc9e1d6f47b6e42ce545637b0a5519beb244e2f141b4eee", 0x31}, 0x48, 0xfffffffffffffffd) r8 = add_key(&(0x7f00000009c0)='asymmetric\x00', &(0x7f0000000a00)={'syz', 0x3}, &(0x7f0000000a40)="9f3fcf22ee165e6444a15ac49d9b0a3355b717d294a4d4b73067750bcaf35566b48f3926cce2fef41db1a28112276c3b049f4ef0aaad307f501dd33abf5f140b0b22bee91f47d608bb35c375090feeea9ab0f0a12b47d1a94452d3c979c6b2b0f7667dfa3bad8228ef619276542e76778faa1f0360c876d4288e7c4def27faf8e11e7c10cc33d8369d42dbd6a8cc3fcba0fbe0af5a17a472959135de502c72f1f6f290953fe7a21e9e47fdd036bfb6638db7c05a8fe14fdc85", 0xb9, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r7, r8, 0xfffffffffffffff9, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000b40)={0x0, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @nl=@kern={0x10, 0x0, 0x0, 0x40}, @rc={0x1f, @any, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='veth1_to_batadv\x00', 0x2, 0xc5bb, 0x9}) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) 08:09:02 executing program 2: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x99c3eac84318c7fa, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008011}, 0x40081c0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001240)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001280)=""/108, 0x6c}, {&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/14, 0xe}], 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002440)={'vxcan0\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002480), 0x4000c0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r0, &(0x7f00000024c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002540)=0x80, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002640)={'erspan0\x00', &(0x7f0000002580)={'gretap0\x00', r4, 0x7, 0x10, 0x7fff, 0x4, {{0x21, 0x4, 0x2, 0x3, 0x84, 0x66, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0xb, 0x26, [@rand_addr=0x64010101, @local]}, @end, @end, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0x1, [{@empty, 0x101}, {@loopback, 0x2}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x53}]}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x7, [{@rand_addr=0x64010102, 0x8}, {@loopback}, {@broadcast, 0x1ff}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x5119}]}, @generic={0x94, 0x10, "242272fe48bfdf9a3406ca40b3b6"}]}}}}}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002680), 0x80140, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000026c0)=""/182) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002800)={'syztnl1\x00', &(0x7f0000002780)={'erspan0\x00', r5, 0x8000, 0x700, 0xffff, 0xbcc, {{0x17, 0x4, 0x0, 0x7, 0x5c, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @loopback, {[@generic={0x7, 0x3, 'h'}, @timestamp_prespec={0x44, 0x44, 0xca, 0x3, 0x3, [{@broadcast, 0x80}, {@remote, 0x10d40b3b}, {@rand_addr=0x64010100, 0x2}, {@loopback, 0x1f}, {@rand_addr=0x64010100, 0x14}, {@remote, 0x200000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@remote, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002880)={'erspan0\x00', &(0x7f0000002840)={'gre0\x00', r7, 0x8000, 0x700, 0x6, 0x4, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) r8 = syz_io_uring_setup(0x37f1, &(0x7f00000028c0)={0x0, 0x6fb, 0x2, 0x3, 0x70, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000002940), &(0x7f0000002980)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000029c0)=""/15, 0xf}, {&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/76, 0x4c}, {&(0x7f0000002b40)=""/52, 0x34}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/44, 0x2c}, {&(0x7f0000002c00)=""/255, 0xff}, {&(0x7f0000002d00)=""/3, 0x3}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000002e40)=""/79, 0x4f}], 0xa) 08:09:02 executing program 3: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfd, "4d822f0494f1dc48b67b9e4cf15fcc5a339cc1e8b6dd67798fc06e24482b559a705ec850acb9484bf5a7760d32dc887ea254e06a789a1c2db68cdeafb85ca790e81556730f8d19e312678bec3b7be83265df413013ba4d4e4956c0a6f17d2695a378196d11642d6ff328c185994c0888b726824cb138eb8c4b322c60513e2002f62d34ea5a590f5025869baad2d1468571231982", ["", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x2406c894) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x440, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x2, 0xc, [0x100, 0x9e6, 0x3, 0xc00000, 0x2, 0x0, 0x0, 0x2, 0xfff, 0xfff, 0x5, 0x5, 0x200, 0x4, 0x40, 0x0, 0x2, 0xffffffff, 0x5, 0x5, 0x8, 0x9, 0x8, 0xd9, 0x7fff, 0x4, 0x3ff, 0x7, 0x2, 0x6, 0x400, 0x1, 0x0, 0x200, 0x5, 0x7, 0x5, 0x6, 0xffffff2c, 0xfffffff8, 0x80, 0x111, 0x3, 0x5, 0xff, 0x0, 0x800, 0x8001, 0xb9de, 0x4, 0xfd, 0x7, 0x2, 0x2, 0xfffffffe, 0xfc6f, 0x5, 0xff, 0x5, 0x38, 0x7, 0x0, 0x9, 0x5], [0x8000, 0xa9b4, 0x5, 0xfffffffe, 0x5, 0x51, 0x4, 0x6, 0x0, 0x3f, 0x5ee, 0x10000, 0x524, 0x4, 0xb92b, 0x3, 0x4c6, 0xffff, 0x5375, 0x9, 0x2, 0x7b2, 0x3, 0x3, 0x5, 0x6, 0x1, 0x2, 0x9, 0x10001, 0x9, 0x0, 0x6033, 0x1ff, 0x401, 0x6, 0x8, 0x80, 0x0, 0x6, 0x6, 0x2, 0x55, 0xfa, 0x7, 0x9, 0x6, 0x7, 0x1, 0x7, 0x5e28, 0xfffffffc, 0x0, 0x3, 0x400, 0x800, 0x0, 0x10001, 0x80, 0x2, 0x6, 0x10000, 0x0, 0x7fff], [0x7fff, 0x2, 0x0, 0x9, 0x0, 0xfffffff9, 0xff, 0xea, 0x5, 0x5e9, 0x5, 0x5, 0x1, 0x8, 0xfff, 0x6, 0xfffffffd, 0xb7, 0x7, 0x9, 0x4, 0x3, 0x400, 0x9, 0xffffffff, 0x3f, 0x10001, 0x775, 0x2, 0x3ff, 0x7, 0x3f, 0x3, 0x3, 0x7, 0x100, 0x5, 0x7, 0x7, 0x6, 0x7, 0x0, 0xfffffffe, 0x8, 0x3, 0x4, 0xf28e, 0x2, 0x8001, 0x1, 0x2, 0x400, 0x244c, 0x7f, 0x0, 0xe5e, 0x5, 0x0, 0x0, 0x7, 0x3, 0x37be, 0x108cd523, 0x7], [0x200, 0x8, 0x3, 0x4, 0x36, 0x5, 0x7fffffff, 0xfc0, 0x6, 0x1, 0x4, 0x401, 0x9, 0x80cb, 0x5, 0x101, 0x0, 0x1, 0x5, 0x1, 0x1, 0x1f, 0x31, 0x7, 0x401, 0x2, 0x1, 0x7ff, 0x8, 0xffff, 0x101, 0x7fff, 0x78, 0x0, 0x7ff, 0x5, 0x9e9, 0x8, 0x9, 0x0, 0x3, 0xceaa, 0x7, 0xc00000, 0x1c94, 0x0, 0x6, 0x9, 0x3, 0x7, 0x6, 0x80000000, 0x7fff, 0x3ff, 0x2, 0xffffff00, 0x986a, 0x7, 0x101, 0x200, 0x10001, 0x0, 0x6, 0x1], 0x1f, ['\x00', '\\\x00', '$-[&#\x00', '\x00', '-!)&$\xde\\\x00', '(V_&}d}(\'{+$\x00']}, ["", "", "", "", ""]}, 0x440}}, 0x5) r0 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x44801) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2004c0c0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3fb, 0x10, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x20000011) socketpair(0x2c, 0x0, 0x8, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1e0, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x480}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x52b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) socketpair(0x5, 0x800, 0x6, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r5) accept4(r3, &(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000e80)=0x80, 0x0) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x24004004) geteuid() r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r6) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50011}, 0x20000041) timerfd_gettime(r7, &(0x7f0000001140)) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x42aa00, 0x0) openat$cgroup_int(r9, &(0x7f00000011c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) [ 113.185330] audit: type=1400 audit(1748765342.417:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:09:02 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xb3) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x880) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0xffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xffe1, @none, 0x8}, 0xe) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000002c0)=""/211) r3 = socket$inet(0x2, 0x800, 0x1ff) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={0x0, @xdp={0x2c, 0x0, r2, 0x29}, @isdn={0x22, 0x80, 0x2, 0x0, 0x81}, @l2tp={0x2, 0x0, @private=0xa010101}, 0x80, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)='dummy0\x00', 0xfe1, 0x6, 0x1f}) r5 = socket$inet(0x2, 0x800, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) r6 = accept4(r3, &(0x7f00000005c0)=@caif=@dgm, &(0x7f0000000640)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x16}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10000010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4094}, 0xc000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000008c0)) r7 = syz_open_dev$sg(&(0x7f0000000a40), 0x1, 0x4a2200) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000a80)={0x0, 0x0, 0xd81f}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000ac0)) 08:09:02 executing program 5: semctl$GETZCNT(0xffffffffffffffff, 0x4, 0xf, &(0x7f0000000000)=""/1) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c045}, 0x44804) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/4096) r0 = accept(0xffffffffffffffff, &(0x7f0000001180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001200)=0x80) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x20000080) clone3(&(0x7f0000002500)={0x20180000, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400), {0x1e}, &(0x7f0000001440)=""/78, 0x4e, &(0x7f00000014c0)=""/4096, &(0x7f00000024c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) clock_gettime(0x0, &(0x7f0000002580)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000025c0)=[{{r3, r4/1000+60000}, 0x1f, 0x1ff, 0x8}, {{}, 0x0, 0x100, 0x800}, {{}, 0x16, 0x9, 0xbf4}], 0x48) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000002640)=""/184) prctl$PR_GET_NO_NEW_PRIVS(0x27) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000002740), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040891}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000002840)={0x0, @nfc={0x27, 0x1, 0x1, 0x3}, @phonet={0x23, 0x0, 0x9, 0x93}, @xdp={0x2c, 0x4, 0x0, 0x11}, 0x81, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x6, 0x7, 0xa7f0}) 08:09:02 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x453, 0x400, 0x70bd2a, 0x25dfdbfe, "f77b074c18b5d63cdda718fb351834d968bb0fadc73bb05bfb96570e6981052a18479ae1bf34dc693e88b3433ccf30d8b307ab74c1aa08fd3c9aa9ac704b85c8e915cf6cf456167c6c77cae7147c0489c3e340bd659cbf8ffc2718daf7683671b054105be1bc6c230e8816130d9b38c6b85dbebb371e9d64c33301df9099", ["", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$802154_dgram(r0, &(0x7f0000000200)={0x24, @short={0x2, 0x3}}, 0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) bind$802154_dgram(r1, &(0x7f0000000280)={0x24, @short}, 0x14) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0xfffffffc, 0x80000000, {{0x29, 0x4, 0x0, 0x3f, 0xa4, 0x65, 0x0, 0x7, 0x4, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x3c, 0x3, [{0x5, 0x7, "9f83dc0927"}, {0x1, 0x12, "f17ce13764e1a3971eafd3a2c5acf80d"}, {0x7, 0xb, "79f988546ae3e02300"}, {0x2, 0x12, "2a7411e506b737967b6fd6b3a90bb197"}]}, @end, @cipso={0x86, 0x4d, 0x0, [{0x0, 0xa, "a2b9c56ce9c581ed"}, {0x5, 0xc, "2878d71ca9ce61aef08f"}, {0x5, 0xb, "e8cafc34053bdc21a1"}, {0x5, 0xf, "65e4d970b75d7cf627ac89c190"}, {0x0, 0x5, "0a7701"}, {0x0, 0x12, "62a819a58b5110c99203bc937f32a557"}]}, @end]}}}}}) sendmsg$AUDIT_TRIM(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x14) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000500)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x18, 0x3f9, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) r3 = accept(r0, &(0x7f0000000640)=@ieee802154={0x24, @long}, &(0x7f00000006c0)=0x80) connect$802154_dgram(r3, &(0x7f0000000700)={0x24, @none={0x0, 0x1}}, 0x14) r4 = accept4$bt_l2cap(r3, &(0x7f0000000740), &(0x7f0000000780)=0xe, 0xdcdb79585d1d61fa) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000800)={0x0, @rc={0x1f, @none, 0x3}, @l2={0x1f, 0x3, @any, 0x4, 0x2}, @qipcrtr={0x2a, 0x2, 0x3fff}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)='virt_wifi0\x00', 0xff, 0x100000000, 0xfff7}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x94) 08:09:02 executing program 7: r0 = eventfd2(0x4, 0x801) r1 = io_uring_setup(0x33f5, &(0x7f0000000000)={0x0, 0x1cb3, 0x0, 0x3, 0x255}) io_uring_enter(r1, 0x5129, 0x7385, 0x1, &(0x7f0000000080)={[0x2]}, 0x8) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=@encrypted_update={'update ', 'default', 0x20, 'user:'}, 0x15, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0xc0, 0x7800, 0x9, 0xfff, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x1, [{@rand_addr=0x64010101, 0x95e1}]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x8, 0x28, 0x1000, 0xffff8000, {{0x2e, 0x4, 0x0, 0x3a, 0xb8, 0x65, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @local, {[@noop, @noop, @cipso={0x86, 0x60, 0x3, [{0x5, 0x3, '<'}, {0x1, 0x8, "1f9f40ac7e62"}, {0x2, 0x10, "da2a07caae7f8e3bb51bedf3df38"}, {0x7, 0x12, "11c5f2b79dab8c37499fc383239c4379"}, {0x0, 0x9, "7b8e7f6c529192"}, {0x0, 0x10, "11db27adaf08e5ef6a0af13df0c7"}, {0x6, 0x10, "aa19d67bc256b23952cebbe975e2"}, {0x1, 0x4, "c125"}]}, @timestamp_addr={0x44, 0x3c, 0x25, 0x1, 0xa, [{@multicast2, 0x401}, {@private=0xa010102, 0x5de7}, {@local, 0x1}, {@rand_addr=0x64010101, 0xc03e}, {@multicast1, 0x7}, {@broadcast, 0x1}, {@private=0xa010100, 0x7fffffff}]}, @ra={0x94, 0x4}, @noop]}}}}}) r3 = request_key(&(0x7f0000000440)='blacklist\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='-**/^-\x00', 0xfffffffffffffff9) r4 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="e6553b597f3f76571ec68cfbceceb81cd55b197881a7369f295213a4a24cd3234ccc8200394c3164f59393dd31299546e3e2c5932393037cdfc24ed051cebd20c2b7d67cb8cfeb62fd2c378a73751ed51ff4bfa8a2a3281c3450cbd362df580288c25ab5c65e31f919e3e64edcda84b50a688699495d708ff4d837f075c8ea9645b190d163ca", 0x86, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x3ed, 0x800, 0x70bd28, 0x25dfdbff, "84d23f5fca64e3cccf32945c1da3faf64ca28d13e209e381ebac7e5d4aaace91205bd027c490ab9c57daece85f7968a19dca9e337ab90305a0aa93f8970e"}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000680)=r0, 0x1) r6 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x69be, 0xc2, 0x7f, 0x0, 0x100000000, r6}) clone3(&(0x7f0000000940)={0x200000, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0), {0x36}, &(0x7f0000000800)=""/169, 0xa9, &(0x7f00000008c0)=""/4, &(0x7f0000000900)=[r6, r6, r6, r6, 0xffffffffffffffff], 0x5}, 0x58) r7 = syz_io_uring_setup(0x4ba7, &(0x7f00000009c0)={0x0, 0x3f74, 0x0, 0x1, 0x3a, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000b00)={0x4, 0x80, 0x9, 0xcc, 0x3, 0x22, 0x0, 0x1, 0x113a0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x148, 0x4, @perf_bp={&(0x7f0000000ac0), 0x1}, 0x0, 0x0, 0x4, 0x6, 0x1, 0x0, 0x20, 0x0, 0xde, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) keyctl$negate(0xd, r4, 0xc46d, r3) [ 114.552624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.556746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.559768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.566463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.571134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.588712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.605502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.609744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.617623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.621147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.669019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.672118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.674320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.675074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.677531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.678461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.686902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.690674] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.707433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.723301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.734050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.745575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.756379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.765609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.767989] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.770773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.785358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.789710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.803341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.808871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.811176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.813510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.821171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.824894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.830208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.834302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.848557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.856218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.892548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.898775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.630526] Bluetooth: hci1: command tx timeout [ 116.694379] Bluetooth: hci0: command tx timeout [ 116.758205] Bluetooth: hci2: command tx timeout [ 116.822068] Bluetooth: hci3: command tx timeout [ 116.823230] Bluetooth: hci7: command tx timeout [ 116.950056] Bluetooth: hci4: command tx timeout [ 117.015070] Bluetooth: hci5: command tx timeout [ 117.015167] Bluetooth: hci6: command tx timeout [ 118.679108] Bluetooth: hci1: command tx timeout [ 118.744191] Bluetooth: hci0: command tx timeout [ 118.807107] Bluetooth: hci2: command tx timeout [ 118.871080] Bluetooth: hci7: command tx timeout [ 118.871102] Bluetooth: hci3: command tx timeout [ 118.998311] Bluetooth: hci4: command tx timeout [ 119.062563] Bluetooth: hci6: command tx timeout [ 119.063126] Bluetooth: hci5: command tx timeout [ 120.726027] Bluetooth: hci1: command tx timeout [ 120.790036] Bluetooth: hci0: command tx timeout [ 120.854812] Bluetooth: hci2: command tx timeout [ 120.918115] Bluetooth: hci3: command tx timeout [ 120.918156] Bluetooth: hci7: command tx timeout [ 121.048074] Bluetooth: hci4: command tx timeout [ 121.110211] Bluetooth: hci5: command tx timeout [ 121.110687] Bluetooth: hci6: command tx timeout [ 122.774291] Bluetooth: hci1: command tx timeout [ 122.838221] Bluetooth: hci0: command tx timeout [ 122.903969] Bluetooth: hci2: command tx timeout [ 122.966199] Bluetooth: hci7: command tx timeout [ 122.966475] Bluetooth: hci3: command tx timeout [ 123.094055] Bluetooth: hci4: command tx timeout [ 123.158207] Bluetooth: hci6: command tx timeout [ 123.158874] Bluetooth: hci5: command tx timeout [ 177.443361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.446342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.448622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.454854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.456969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.699440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.707220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.708846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.713784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.715683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.723863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.724631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.730313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.740175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.747152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.828852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.836423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.850556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.882421] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.891581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.934434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.946103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.964682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.987529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.994381] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.998436] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.002547] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.003500] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.007372] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.011353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.012717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.015216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.022710] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.023637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.032458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.034478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.058846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.076881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.080615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.098449] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.542467] Bluetooth: hci0: command tx timeout [ 179.798165] Bluetooth: hci2: command tx timeout [ 179.799037] Bluetooth: hci1: command tx timeout [ 180.118212] Bluetooth: hci5: command tx timeout [ 180.118237] Bluetooth: hci3: command tx timeout [ 180.118846] Bluetooth: hci4: command tx timeout [ 180.184080] Bluetooth: hci7: command tx timeout [ 180.246049] Bluetooth: hci6: command tx timeout [ 181.591023] Bluetooth: hci0: command tx timeout [ 181.846111] Bluetooth: hci1: command tx timeout [ 181.846710] Bluetooth: hci2: command tx timeout [ 182.166036] Bluetooth: hci4: command tx timeout [ 182.166132] Bluetooth: hci5: command tx timeout [ 182.166508] Bluetooth: hci3: command tx timeout [ 182.231185] Bluetooth: hci7: command tx timeout [ 182.295167] Bluetooth: hci6: command tx timeout [ 183.640127] Bluetooth: hci0: command tx timeout [ 183.894205] Bluetooth: hci1: command tx timeout [ 183.896128] Bluetooth: hci2: command tx timeout [ 184.214072] Bluetooth: hci3: command tx timeout [ 184.214102] Bluetooth: hci5: command tx timeout [ 184.214588] Bluetooth: hci4: command tx timeout [ 184.279049] Bluetooth: hci7: command tx timeout [ 184.342055] Bluetooth: hci6: command tx timeout [ 185.687019] Bluetooth: hci0: command tx timeout [ 185.943752] Bluetooth: hci2: command tx timeout [ 185.943862] Bluetooth: hci1: command tx timeout [ 186.262057] Bluetooth: hci5: command tx timeout [ 186.262530] Bluetooth: hci3: command tx timeout [ 186.263030] Bluetooth: hci4: command tx timeout [ 186.328997] Bluetooth: hci7: command tx timeout [ 186.390196] Bluetooth: hci6: command tx timeout [ 239.732295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.740798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.745487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.756759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.763663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.857852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.863499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.869841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.881200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.886472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.053854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.073628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.082680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.101695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.105363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.107764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.111439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.130855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.135507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.139822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.252784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.258003] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.262184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.263801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.271756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.277720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.279691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.287613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.292412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.301433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.391905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.421260] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.422890] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.436477] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.437842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.496455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.501108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.510514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.522779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.551421] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.814243] Bluetooth: hci0: command tx timeout [ 241.942029] Bluetooth: hci1: command tx timeout [ 242.198384] Bluetooth: hci2: command tx timeout [ 242.199329] Bluetooth: hci3: command tx timeout [ 242.390283] Bluetooth: hci5: command tx timeout [ 242.391230] Bluetooth: hci4: command tx timeout [ 242.582029] Bluetooth: hci6: command tx timeout [ 242.646103] Bluetooth: hci7: command tx timeout [ 243.862243] Bluetooth: hci0: command tx timeout [ 243.990036] Bluetooth: hci1: command tx timeout [ 244.246871] Bluetooth: hci2: command tx timeout [ 244.247628] Bluetooth: hci3: command tx timeout [ 244.438142] Bluetooth: hci5: command tx timeout [ 244.438636] Bluetooth: hci4: command tx timeout [ 244.630174] Bluetooth: hci6: command tx timeout [ 244.694043] Bluetooth: hci7: command tx timeout [ 245.910072] Bluetooth: hci0: command tx timeout [ 246.038203] Bluetooth: hci1: command tx timeout [ 246.294098] Bluetooth: hci2: command tx timeout [ 246.294619] Bluetooth: hci3: command tx timeout [ 246.486164] Bluetooth: hci4: command tx timeout [ 246.486673] Bluetooth: hci5: command tx timeout [ 246.679063] Bluetooth: hci6: command tx timeout [ 246.742282] Bluetooth: hci7: command tx timeout [ 247.958019] Bluetooth: hci0: command tx timeout [ 248.086059] Bluetooth: hci1: command tx timeout [ 248.342078] Bluetooth: hci2: command tx timeout [ 248.342561] Bluetooth: hci3: command tx timeout [ 248.534052] Bluetooth: hci5: command tx timeout [ 248.534524] Bluetooth: hci4: command tx timeout [ 248.727168] Bluetooth: hci6: command tx timeout [ 248.790009] Bluetooth: hci7: command tx timeout [ 302.315770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.319299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.324501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.332844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.337236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.562737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.565693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.569353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.575731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.580433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.704793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.716709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.729645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.735432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.744440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.747504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.753420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.765689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.802268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.838127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.854435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.874643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.877434] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.880202] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.889262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.902428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.912292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.925663] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.972880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.982648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.988738] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.993198] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.998752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.004319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.040832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.064806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.081652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.089475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.125614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.150767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.407307] Bluetooth: hci0: command tx timeout [ 304.663811] Bluetooth: hci1: command tx timeout [ 304.790296] Bluetooth: hci2: command tx timeout [ 304.982084] Bluetooth: hci3: command tx timeout [ 305.111021] Bluetooth: hci5: command tx timeout [ 305.174025] Bluetooth: hci6: command tx timeout [ 305.175216] Bluetooth: hci7: command tx timeout [ 305.238254] Bluetooth: hci4: command tx timeout [ 306.454013] Bluetooth: hci0: command tx timeout [ 306.710089] Bluetooth: hci1: command tx timeout [ 306.838225] Bluetooth: hci2: command tx timeout [ 307.030410] Bluetooth: hci3: command tx timeout [ 307.158058] Bluetooth: hci5: command tx timeout [ 307.222061] Bluetooth: hci7: command tx timeout [ 307.222533] Bluetooth: hci6: command tx timeout [ 307.286312] Bluetooth: hci4: command tx timeout [ 308.503018] Bluetooth: hci0: command tx timeout [ 308.758057] Bluetooth: hci1: command tx timeout [ 308.886020] Bluetooth: hci2: command tx timeout [ 309.078166] Bluetooth: hci3: command tx timeout [ 309.206036] Bluetooth: hci5: command tx timeout [ 309.270081] Bluetooth: hci6: command tx timeout [ 309.270555] Bluetooth: hci7: command tx timeout [ 309.336073] Bluetooth: hci4: command tx timeout [ 310.550020] Bluetooth: hci0: command tx timeout [ 310.806167] Bluetooth: hci1: command tx timeout [ 310.934041] Bluetooth: hci2: command tx timeout [ 311.126076] Bluetooth: hci3: command tx timeout [ 311.254200] Bluetooth: hci5: command tx timeout [ 311.318188] Bluetooth: hci6: command tx timeout [ 311.318648] Bluetooth: hci7: command tx timeout [ 311.382208] Bluetooth: hci4: command tx timeout [ 364.523285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.526353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.528832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.534382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.538306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.681879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.690862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.695156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.702774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.706632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.728133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.740563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.761574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.778521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.782039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.946891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.959415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.986453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.006133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.013035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.019522] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.031927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.053717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.068497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.087422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.159436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.181655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.196919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.204300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.207576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.297711] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.308203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.326839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.341975] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.357445] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.376595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.383733] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.392343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.445757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.478748] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.614034] Bluetooth: hci0: command tx timeout [ 366.807381] Bluetooth: hci2: command tx timeout [ 366.807482] Bluetooth: hci1: command tx timeout [ 367.126148] Bluetooth: hci4: command tx timeout [ 367.191974] Bluetooth: hci3: command tx timeout [ 367.255016] Bluetooth: hci5: command tx timeout [ 367.510075] Bluetooth: hci7: command tx timeout [ 367.574152] Bluetooth: hci6: command tx timeout [ 368.662275] Bluetooth: hci0: command tx timeout [ 368.854734] Bluetooth: hci1: command tx timeout [ 368.854759] Bluetooth: hci2: command tx timeout [ 369.174158] Bluetooth: hci4: command tx timeout [ 369.238199] Bluetooth: hci3: command tx timeout [ 369.302367] Bluetooth: hci5: command tx timeout [ 369.558001] Bluetooth: hci7: command tx timeout [ 369.623020] Bluetooth: hci6: command tx timeout [ 370.710973] Bluetooth: hci0: command tx timeout [ 370.902071] Bluetooth: hci1: command tx timeout [ 370.903250] Bluetooth: hci2: command tx timeout [ 371.223024] Bluetooth: hci4: command tx timeout [ 371.287149] Bluetooth: hci3: command tx timeout [ 371.350093] Bluetooth: hci5: command tx timeout [ 371.607362] Bluetooth: hci7: command tx timeout [ 371.671080] Bluetooth: hci6: command tx timeout [ 372.760326] Bluetooth: hci0: command tx timeout [ 372.950188] Bluetooth: hci2: command tx timeout [ 372.950249] Bluetooth: hci1: command tx timeout [ 373.270015] Bluetooth: hci4: command tx timeout [ 373.336966] Bluetooth: hci3: command tx timeout [ 373.398005] Bluetooth: hci5: command tx timeout [ 373.655071] Bluetooth: hci7: command tx timeout [ 373.719298] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 08:14:12 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888036a41b80 RCX=0000000000000004 RDX=0000000000000002 RSI=ffff888036a42628 RDI=ffff888036a41b80 RBP=ffff888036a425d8 RSP=ffff888034dcf2b0 R8 =0000000000000000 R9 =000000000000009c R10=0000000000000001 R11=0000000000000000 R12=ffff888036a42628 R13=0000000000000000 R14=0000000000000001 R15=0000000000040000 RIP=ffffffff8151975a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555e6136f4c8 CR3=0000000028e1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff817410cf RDI=fffffbfff0b83a38 RBP=ffffffff85c1d1c0 RSP=ffff888017807320 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88803354b500 RIP=ffffffff8151b1cc RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005605af507080 CR3=000000002cb4c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000