Warning: Permanently added '[localhost]:52563' (ECDSA) to the list of known hosts. 2025/06/01 22:21:59 fuzzer started 2025/06/01 22:21:59 dialing manager at localhost:34361 syzkaller login: [ 105.310433] cgroup: Unknown subsys name 'net' [ 105.485275] cgroup: Unknown subsys name 'cpuset' [ 105.535185] cgroup: Unknown subsys name 'rlimit' 2025/06/01 22:22:16 syscalls: 204 2025/06/01 22:22:16 code coverage: enabled 2025/06/01 22:22:16 comparison tracing: enabled 2025/06/01 22:22:16 extra coverage: enabled 2025/06/01 22:22:16 setuid sandbox: enabled 2025/06/01 22:22:16 namespace sandbox: enabled 2025/06/01 22:22:16 Android sandbox: enabled 2025/06/01 22:22:16 fault injection: enabled 2025/06/01 22:22:16 leak checking: enabled 2025/06/01 22:22:16 net packet injection: enabled 2025/06/01 22:22:16 net device setup: enabled 2025/06/01 22:22:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/01 22:22:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/01 22:22:16 USB emulation: enabled 2025/06/01 22:22:16 hci packet injection: enabled 2025/06/01 22:22:16 wifi device emulation: enabled 2025/06/01 22:22:16 802.15.4 emulation: enabled 2025/06/01 22:22:16 fetching corpus: 0, signal 0/0 (executing program) 2025/06/01 22:22:17 starting 8 fuzzer processes 22:22:17 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c044) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x2c}}, 0x4051) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x2000004) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000d010}, 0x20008040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40005) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8884) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10400002}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5147}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffe00000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x518}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4008056) 22:22:17 executing program 1: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/1, 0x1}], 0x3, &(0x7f0000000380)=""/167, 0xa7}, 0x3}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/201, 0xc9}, {&(0x7f0000000640)=""/204, 0xcc}], 0x3, &(0x7f0000000780)=""/152, 0x98}, 0x5}, {{&(0x7f0000000840)=@alg, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/12, 0xc}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/165, 0xa5}, {&(0x7f0000000b00)=""/80, 0x50}], 0x6, &(0x7f0000000c00)=""/253, 0xfd}, 0x2}, {{&(0x7f0000000d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d80)=""/162, 0xa2}], 0x1, &(0x7f0000000e80)=""/244, 0xf4}, 0x40}], 0x4, 0x2, &(0x7f0000001080)={0x77359400}) recvmmsg(r0, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/229, 0xe5}], 0x1, &(0x7f0000001200)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002200)=""/153, 0x99}, {&(0x7f00000022c0)=""/52, 0x34}, {&(0x7f0000002300)=""/244, 0xf4}], 0x3, &(0x7f0000002440)=""/213, 0xd5}, 0x2}, {{&(0x7f0000002540)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/82, 0x52}, {&(0x7f0000003640)=""/42, 0x2a}, {&(0x7f0000003680)=""/56, 0x38}, {&(0x7f00000036c0)=""/243, 0xf3}, {&(0x7f00000037c0)=""/24, 0x18}, {&(0x7f0000003800)=""/131, 0x83}], 0x7, &(0x7f0000003940)=""/209, 0xd1}, 0x4}, {{&(0x7f0000003a40)=@phonet, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003ac0)}], 0x1, &(0x7f0000003b40)=""/212, 0xd4}, 0x4}, {{&(0x7f0000003c40)=@tipc, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003cc0)=""/191, 0xbf}, {&(0x7f0000003d80)=""/41, 0x29}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x3, &(0x7f0000004e00)=""/192, 0xc0}, 0x7fffffff}, {{&(0x7f0000004ec0)=@nl=@proc, 0x80, &(0x7f0000006f80)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/27, 0x1b}], 0x3, &(0x7f0000006fc0)=""/100, 0x64}, 0x4}, {{&(0x7f0000007040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000007400)=[{&(0x7f00000070c0)=""/117, 0x75}, {&(0x7f0000007140)=""/10, 0xa}, {&(0x7f0000007180)=""/207, 0xcf}, {&(0x7f0000007280)=""/89, 0x59}, {&(0x7f0000007300)=""/225, 0xe1}], 0x5, &(0x7f0000007480)=""/66, 0x42}, 0x80000}, {{&(0x7f0000007500)=@nl=@unspec, 0x80, &(0x7f0000007b40)=[{&(0x7f0000007580)=""/102, 0x66}, {&(0x7f0000007600)=""/186, 0xba}, {&(0x7f00000076c0)=""/147, 0x93}, {&(0x7f0000007780)=""/56, 0x38}, {&(0x7f00000077c0)=""/12, 0xc}, {&(0x7f0000007800)=""/170, 0xaa}, {&(0x7f00000078c0)=""/193, 0xc1}, {&(0x7f00000079c0)=""/190, 0xbe}, {&(0x7f0000007a80)=""/155, 0x9b}], 0x9, &(0x7f0000007c00)=""/18, 0x12}, 0x8}, {{&(0x7f0000007c40), 0x80, &(0x7f0000008e80)=[{&(0x7f0000007cc0)=""/4096, 0x1000}, {0xfffffffffffffffe}, {&(0x7f0000008cc0)=""/161, 0xa1}, {&(0x7f0000008d80)=""/109, 0x6d}, {&(0x7f0000008e00)=""/77, 0x4d}], 0x5, &(0x7f0000008f00)=""/79, 0x4f}, 0x1000}], 0x9, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009540)='/sys/power/disk', 0x40, 0xde) recvmsg(r1, &(0x7f000000ab40)={&(0x7f0000009580)=@hci, 0x80, &(0x7f000000aa80)=[{&(0x7f0000009600)=""/4096, 0x1000}, {&(0x7f000000a600)=""/153, 0x99}, {&(0x7f000000a6c0)=""/10, 0xa}, {&(0x7f000000a700)=""/166, 0xa6}, {&(0x7f000000a7c0)=""/8, 0x8}, {&(0x7f000000a800)=""/114, 0x72}, {&(0x7f000000a880)=""/65, 0x41}, {&(0x7f000000a900)=""/62, 0x3e}, {&(0x7f000000a940)=""/50, 0x32}, {&(0x7f000000a980)=""/194, 0xc2}], 0xa}, 0x2020) socketpair(0x0, 0x1, 0x8, &(0x7f000000ab80)={0xffffffffffffffff}) recvmsg(r2, &(0x7f000000ae00)={0x0, 0x0, &(0x7f000000ad40)=[{&(0x7f000000abc0)=""/58, 0x3a}, {&(0x7f000000ac00)=""/150, 0x96}, {&(0x7f000000acc0)=""/66, 0x42}], 0x3, &(0x7f000000ad80)=""/69, 0x45}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f000000af00)={&(0x7f000000ae40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000aec0)={&(0x7f000000ae80)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000af40), 0x80000, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f000000af80), &(0x7f000000afc0)=0x4) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f000000b040)={&(0x7f000000b000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) recvmmsg(r1, &(0x7f000000e380)=[{{&(0x7f000000b080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f000000b180)=[{&(0x7f000000b100)=""/88, 0x58}], 0x1, &(0x7f000000b1c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f000000c1c0)=@nfc, 0x80, &(0x7f000000d340)=[{&(0x7f000000c240)=""/4096, 0x1000}, {&(0x7f000000d240)=""/144, 0x90}, {&(0x7f000000d300)=""/64, 0x40}], 0x3, &(0x7f000000d380)=""/4096, 0x1000}, 0x9}], 0x2, 0x10143, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f000000e400)="ffcad5d1a8f08d8e65c08bd2c03d39d5", 0x10) socketpair(0x1f, 0x6, 0x2, &(0x7f000000e440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f000000e580)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f000000e680)=0xe8) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f000000e700)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x4}}, @can={0x1d, r5}, @ethernet={0x6, @remote}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f000000e6c0)='bond_slave_1\x00', 0xf7, 0x1ff, 0x40}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f000000e780)={{{@in=@loopback, @in6=@private1}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f000000e880)=0xe8) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000e8c0), 0x10000, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f000000e9c0)={&(0x7f000000e900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000e980)={&(0x7f000000e940)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4) 22:22:17 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/pps', 0x4002, 0x100) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x65cb80e4, 0x5, 0x0, 0x5}, 0x14) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x257e, 0x45000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000140)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)={0x5c, 0xfffffffb, 0x0, "32a52c28e91ef6f2ae37d6d675c73077f91810a3d7c2d4ee3deb116341cf64440bbc428fd85735bcc3c418ea2e6cf6896d5d7117c66533cb5c367946b42e01f6ad65524aa948037dee5f38ef13df4b9ece3bf32156b202ffd1f08fb2"}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8008801}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004011}, 0x880) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) socket$packet(0x11, 0x3, 0x300) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000380)=0x9) r4 = socket$inet(0x2, 0x4, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x300, 0x2, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 22:22:17 executing program 3: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) socketpair(0x9, 0x5, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2, &(0x7f0000001840)=""/8, 0x8}, 0x8}, {{&(0x7f0000001880)=@nfc_llcp, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001900)=""/44, 0x2c}, {&(0x7f0000001940)=""/177, 0xb1}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/106, 0x6a}, {&(0x7f0000002a80)=""/146, 0x92}], 0x5, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x2}], 0x2, 0x100, &(0x7f0000003c40)) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000003d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003d40)={&(0x7f0000003c80)={0x8c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}}, 0x4000001) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f00)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x41) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004000)='/sys/power/wakeup_count', 0x30000, 0x20) ioctl$RTC_VL_CLR(r5, 0x7014) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000004040)) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000004080)={{{@in=@local, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000004180)=0xe8) r6 = syz_open_dev$usbmon(&(0x7f00000041c0), 0x7, 0x800) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000004200)) r7 = socket$inet6(0xa, 0x6, 0x3f) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f00000043c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004400)) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc256}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000004580), 0xffffffffffffffff) [ 123.213700] audit: type=1400 audit(1748816537.771:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:22:17 executing program 4: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000002}, 0x20000080) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000005) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x40) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2041}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4881) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/sysrq', 0x210000, 0x1) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000700)={0x0, 0x0, {0x16, 0x24, 0x6, 0xd, 0x9, 0x0, 0x1, 0x100, 0xfffffffffffffffe}}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004034}, 0x44) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x32a8a563d953de68}, 0x20008000) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000940)={0x0, @rand_addr, @multicast1}, &(0x7f0000000980)=0xc) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40811}, 0x10) 22:22:17 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x414801, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/virtio', 0x80, 0x3e) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f04ed53}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000060) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x84140, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000900)={'tunl0\x00', r3, 0x700, 0x8000, 0x4, 0x0, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@lsrr={0x83, 0x7, 0xf6, [@broadcast]}, @ssrr={0x89, 0xf, 0xfd, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x40}]}, @lsrr={0x83, 0xb, 0xc0, [@rand_addr=0x64010100, @private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0xb3, 0x1, 0x8, [{@broadcast, 0x2}, {@loopback, 0x4}, {@loopback, 0x1}, {@remote, 0x7eb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @timestamp_prespec={0x44, 0x14, 0x71, 0x3, 0x0, [{@empty, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x5c}}, 0x20080040) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x500, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 22:22:17 executing program 6: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r1 = socket$inet(0x2, 0x6, 0x2ddd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'erspan0\x00', r0, 0x8, 0x80, 0x81, 0x100, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x64, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, {[@generic={0x83, 0x4, "b5cf"}, @generic={0x7, 0xf, "9021250641186afdea86367177"}]}}}}}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hid_belkin', 0x2200, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getgroups(0x6, &(0x7f00000003c0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, r6]) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', r3, 0x7, 0x7800, 0x3, 0x7fffffff, {{0x24, 0x4, 0x2, 0x0, 0x90, 0x64, 0x0, 0x7f, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, {[@rr={0x7, 0xf, 0xde, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @end, @cipso={0x86, 0x1b, 0x3, [{0x2, 0xf, "715c4bc12974e5ff5c05637a3f"}, {0x5, 0x6, "31eb0717"}]}, @generic={0x82, 0xc, "6fee4cc1bdfad4747c93"}, @noop, @timestamp={0x44, 0x2c, 0x77, 0x0, 0x7, [0x7, 0x4, 0x1156, 0x6, 0x4, 0x2, 0x2, 0x93df, 0xfffffffd, 0x7]}, @timestamp={0x44, 0x14, 0x45, 0x0, 0x6, [0xf9c80000, 0x6, 0x58, 0x6b01]}, @noop]}}}}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/hid_sony', 0x204002, 0x80) ioctl$SCSI_IOCTL_DOORLOCK(r10, 0x5380) getgroups(0x3, &(0x7f0000000540)=[r7, r9, r8]) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000580)=0x1) syz_open_dev$loop(&(0x7f00000005c0), 0x101, 0x90001) getsockname(r10, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x10001, 0x1, &(0x7f0000000800)=[{&(0x7f0000000780)="b7d582ccf67600fd0ba96c61b0e204345c751ac4da1437fdcc4b5ed46dc33de99c08dd7d8ddf961780a10b4fa9724d3b4d8d79c4f7e4dc097b2378a8fb182e95760edd054e3a5235df5fb871dc0cd4a701fd320f5721376de30eaeb061c3b3e87bbe9f150d7729e23d711f163c696eded1f9", 0x72, 0x81}], 0x10000, &(0x7f0000000840)={[{@fat=@errors_continue}], [{@dont_hash}]}) 22:22:17 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x846}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xdf}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x43}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/8250', 0x20001, 0x60) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000340)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000380)) recvmsg(r1, &(0x7f0000001700)={&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000001640)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/196, 0xc4}], 0x4, &(0x7f0000001680)=""/125, 0x7d}, 0x120) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x4000800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000001840), &(0x7f0000001880)=0x4) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'gre0\x00', 0x0, 0x10, 0x20, 0x1, 0x7fff, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x64, 0x0, 0x2, 0x29, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x17, 0x1, 0x1, [{@local, 0xffff}, {@broadcast, 0x1}, {@empty, 0x3ff}]}]}}}}}) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000001980)=0x1ff) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001a00)={0x0, @l2={0x1f, 0x400, @none, 0x0, 0x2}, @ax25={0x3, @default, 0x4}, @vsock={0x28, 0x0, 0x2710, @local}, 0x94aa, 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)='team_slave_1\x00', 0x5, 0x800, 0x5}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r3, 0x206, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010080}, 0x850) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 124.903112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.906531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.907103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.911266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.923112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.925788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.931551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.936481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.942360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.949405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.957228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.966620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.969188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.969932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.974326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.979659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.980142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.983090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.991381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.995473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.008919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.019581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.028372] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.062241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.064177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.071561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.081558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.096573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.098622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.115857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.120658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.149275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.152994] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.168202] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.170503] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 125.175202] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 125.180466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.193425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.200289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.219959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.041643] Bluetooth: hci1: command tx timeout [ 127.041651] Bluetooth: hci4: command tx timeout [ 127.104558] Bluetooth: hci2: command tx timeout [ 127.104601] Bluetooth: hci0: command tx timeout [ 127.168026] Bluetooth: hci3: command tx timeout [ 127.231819] Bluetooth: hci5: command tx timeout [ 127.295811] Bluetooth: hci7: command tx timeout [ 127.297025] Bluetooth: hci6: command tx timeout [ 129.088014] Bluetooth: hci1: command tx timeout [ 129.088847] Bluetooth: hci4: command tx timeout [ 129.152028] Bluetooth: hci2: command tx timeout [ 129.153400] Bluetooth: hci0: command tx timeout [ 129.216938] Bluetooth: hci3: command tx timeout [ 129.281070] Bluetooth: hci5: command tx timeout [ 129.346911] Bluetooth: hci6: command tx timeout [ 129.347027] Bluetooth: hci7: command tx timeout [ 131.138343] Bluetooth: hci4: command tx timeout [ 131.138361] Bluetooth: hci1: command tx timeout [ 131.200855] Bluetooth: hci0: command tx timeout [ 131.201034] Bluetooth: hci2: command tx timeout [ 131.264778] Bluetooth: hci3: command tx timeout [ 131.328772] Bluetooth: hci5: command tx timeout [ 131.392140] Bluetooth: hci7: command tx timeout [ 131.394744] Bluetooth: hci6: command tx timeout [ 133.184033] Bluetooth: hci4: command tx timeout [ 133.184152] Bluetooth: hci1: command tx timeout [ 133.247813] Bluetooth: hci0: command tx timeout [ 133.247885] Bluetooth: hci2: command tx timeout [ 133.312231] Bluetooth: hci3: command tx timeout [ 133.376990] Bluetooth: hci5: command tx timeout [ 133.442016] Bluetooth: hci6: command tx timeout [ 133.442271] Bluetooth: hci7: command tx timeout [ 187.158444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.162149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.167619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.181349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.186442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.215874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.220428] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.223377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.235644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.240148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.242467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.244555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.247344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.250434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.253198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.255372] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.268621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.272863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.280811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.283125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.340989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.346151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.350269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.352560] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.370265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.375106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.385230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.393602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.407031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.412973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.416986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.418089] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.421137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.456546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.463137] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.476763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.485058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.487421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.530226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.546088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.377003] Bluetooth: hci3: command tx timeout [ 189.377568] Bluetooth: hci0: command tx timeout [ 189.378128] Bluetooth: hci1: command tx timeout [ 189.505060] Bluetooth: hci4: command tx timeout [ 189.567784] Bluetooth: hci2: command tx timeout [ 189.695853] Bluetooth: hci5: command tx timeout [ 189.696565] Bluetooth: hci6: command tx timeout [ 189.697124] Bluetooth: hci7: command tx timeout [ 191.425880] Bluetooth: hci0: command tx timeout [ 191.426364] Bluetooth: hci1: command tx timeout [ 191.427854] Bluetooth: hci3: command tx timeout [ 191.551938] Bluetooth: hci4: command tx timeout [ 191.617158] Bluetooth: hci2: command tx timeout [ 191.743978] Bluetooth: hci5: command tx timeout [ 191.744474] Bluetooth: hci6: command tx timeout [ 191.745677] Bluetooth: hci7: command tx timeout [ 193.472171] Bluetooth: hci1: command tx timeout [ 193.472686] Bluetooth: hci3: command tx timeout [ 193.473231] Bluetooth: hci0: command tx timeout [ 193.599823] Bluetooth: hci4: command tx timeout [ 193.663798] Bluetooth: hci2: command tx timeout [ 193.792070] Bluetooth: hci7: command tx timeout [ 193.792558] Bluetooth: hci5: command tx timeout [ 193.793831] Bluetooth: hci6: command tx timeout [ 195.520082] Bluetooth: hci0: command tx timeout [ 195.520583] Bluetooth: hci3: command tx timeout [ 195.521212] Bluetooth: hci1: command tx timeout [ 195.648083] Bluetooth: hci4: command tx timeout [ 195.711783] Bluetooth: hci2: command tx timeout [ 195.840394] Bluetooth: hci6: command tx timeout [ 195.841110] Bluetooth: hci5: command tx timeout [ 195.841533] Bluetooth: hci7: command tx timeout [ 249.424784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.428369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.430921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.440466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.444794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.512013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.515664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.516645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.520821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.523339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.529009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.552781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.554435] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.555532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.558237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.559536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.562401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.563507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.573143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.576302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.633426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.636218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.637635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.643379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.647121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.676121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.697398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.710139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.716225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.718248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.719997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.743857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.745792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.768038] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.775918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.791519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.797178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.808144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.825543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.859430] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.519841] Bluetooth: hci0: command tx timeout [ 251.647901] Bluetooth: hci3: command tx timeout [ 251.648525] Bluetooth: hci2: command tx timeout [ 251.649102] Bluetooth: hci1: command tx timeout [ 251.712947] Bluetooth: hci4: command tx timeout [ 251.776357] Bluetooth: hci5: command tx timeout [ 251.904316] Bluetooth: hci6: command tx timeout [ 252.351926] Bluetooth: hci7: command tx timeout [ 253.567834] Bluetooth: hci0: command tx timeout [ 253.695868] Bluetooth: hci3: command tx timeout [ 253.696379] Bluetooth: hci1: command tx timeout [ 253.696872] Bluetooth: hci2: command tx timeout [ 253.760082] Bluetooth: hci4: command tx timeout [ 253.825749] Bluetooth: hci5: command tx timeout [ 253.951997] Bluetooth: hci6: command tx timeout [ 254.399980] Bluetooth: hci7: command tx timeout [ 255.616069] Bluetooth: hci0: command tx timeout [ 255.743836] Bluetooth: hci2: command tx timeout [ 255.744353] Bluetooth: hci1: command tx timeout [ 255.745108] Bluetooth: hci3: command tx timeout [ 255.807808] Bluetooth: hci4: command tx timeout [ 255.871899] Bluetooth: hci5: command tx timeout [ 256.000089] Bluetooth: hci6: command tx timeout [ 256.448148] Bluetooth: hci7: command tx timeout [ 257.663953] Bluetooth: hci0: command tx timeout [ 257.791870] Bluetooth: hci3: command tx timeout [ 257.792358] Bluetooth: hci1: command tx timeout [ 257.793919] Bluetooth: hci2: command tx timeout [ 257.855997] Bluetooth: hci4: command tx timeout [ 257.919884] Bluetooth: hci5: command tx timeout [ 258.048009] Bluetooth: hci6: command tx timeout [ 258.497839] Bluetooth: hci7: command tx timeout [ 311.890161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.894592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.902639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.910874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.918310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.028116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.042384] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.055237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.065964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.071817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.152217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.154918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.161308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.163516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.166227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.168121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.180357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.182373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.186801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.191631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.284461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.314323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.317552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.323035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.334149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.336871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.352977] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.361541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.365041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.366517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.645464] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.663300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.670869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.684139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.692691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.697171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.715474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.733560] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.748581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.754232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.984007] Bluetooth: hci0: command tx timeout [ 314.111784] Bluetooth: hci1: command tx timeout [ 314.304949] Bluetooth: hci3: command tx timeout [ 314.433000] Bluetooth: hci2: command tx timeout [ 314.496794] Bluetooth: hci5: command tx timeout [ 314.624957] Bluetooth: hci4: command tx timeout [ 314.815814] Bluetooth: hci7: command tx timeout [ 314.880031] Bluetooth: hci6: command tx timeout [ 316.031793] Bluetooth: hci0: command tx timeout [ 316.160119] Bluetooth: hci1: command tx timeout [ 316.351821] Bluetooth: hci3: command tx timeout [ 316.480016] Bluetooth: hci2: command tx timeout [ 316.543929] Bluetooth: hci5: command tx timeout [ 316.672816] Bluetooth: hci4: command tx timeout [ 316.864143] Bluetooth: hci7: command tx timeout [ 316.929748] Bluetooth: hci6: command tx timeout [ 318.080044] Bluetooth: hci0: command tx timeout [ 318.207965] Bluetooth: hci1: command tx timeout [ 318.400057] Bluetooth: hci3: command tx timeout [ 318.528144] Bluetooth: hci2: command tx timeout [ 318.591783] Bluetooth: hci5: command tx timeout [ 318.720009] Bluetooth: hci4: command tx timeout [ 318.911776] Bluetooth: hci7: command tx timeout [ 318.975876] Bluetooth: hci6: command tx timeout [ 320.127873] Bluetooth: hci0: command tx timeout [ 320.255794] Bluetooth: hci1: command tx timeout [ 320.448774] Bluetooth: hci3: command tx timeout [ 320.575953] Bluetooth: hci2: command tx timeout [ 320.640252] Bluetooth: hci5: command tx timeout [ 320.767964] Bluetooth: hci4: command tx timeout [ 320.960063] Bluetooth: hci7: command tx timeout [ 321.023960] Bluetooth: hci6: command tx timeout [ 374.362310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.366087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.372941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.384519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.393852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.452917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.457950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.460889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.465246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.467337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.484650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.492867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.494084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.499660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.499823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.531908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.531985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.536576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.548387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.551400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.552082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.557388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.572091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.590237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.597304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.613222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.623115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.630410] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.632455] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.637007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.641247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.643275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.646587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.654243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.655385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.668351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.674633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.685239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.691225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.726674] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.447872] Bluetooth: hci0: command tx timeout [ 376.576490] Bluetooth: hci1: command tx timeout [ 376.639963] Bluetooth: hci3: command tx timeout [ 376.641370] Bluetooth: hci2: command tx timeout [ 376.704124] Bluetooth: hci4: command tx timeout [ 376.767933] Bluetooth: hci5: command tx timeout [ 376.831911] Bluetooth: hci7: command tx timeout [ 376.833332] Bluetooth: hci6: command tx timeout [ 378.497778] Bluetooth: hci0: command tx timeout [ 378.623845] Bluetooth: hci1: command tx timeout [ 378.687840] Bluetooth: hci2: command tx timeout [ 378.688487] Bluetooth: hci3: command tx timeout [ 378.751940] Bluetooth: hci4: command tx timeout [ 378.816158] Bluetooth: hci5: command tx timeout [ 378.879860] Bluetooth: hci7: command tx timeout [ 378.880395] Bluetooth: hci6: command tx timeout [ 380.544001] Bluetooth: hci0: command tx timeout [ 380.673520] Bluetooth: hci1: command tx timeout [ 380.736162] Bluetooth: hci3: command tx timeout [ 380.736654] Bluetooth: hci2: command tx timeout [ 380.800186] Bluetooth: hci4: command tx timeout [ 380.864369] Bluetooth: hci5: command tx timeout [ 380.928140] Bluetooth: hci7: command tx timeout [ 380.928638] Bluetooth: hci6: command tx timeout [ 382.592045] Bluetooth: hci0: command tx timeout [ 382.719911] Bluetooth: hci1: command tx timeout [ 382.783834] Bluetooth: hci2: command tx timeout [ 382.784292] Bluetooth: hci3: command tx timeout [ 382.847853] Bluetooth: hci4: command tx timeout [ 382.911909] Bluetooth: hci5: command tx timeout [ 382.975970] Bluetooth: hci6: command tx timeout [ 382.976524] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:27:27 Registers: info registers vcpu 0 RAX=ffff7fffffffffff RBX=0000000000000000 RCX=ffffffff817bb116 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff8641fb50 RBP=ffff888018437b98 RSP=ffff888018437b40 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81aeee9f RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd307d728e0 CR3=0000000028897000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803429f5b0 RCX=ffffffff81997a31 RDX=0000000000000000 RSI=ffffffff819979b5 RDI=0000000000000006 RBP=dffffc0000000000 RSP=ffff88802d9b7830 R8 =0000000000000001 R9 =ffffed100122b455 R10=0000000000000086 R11=0000000000000001 R12=00000000000002f3 R13=0000000000000086 R14=ffff888035e2ca00 R15=ffff88803429f5b8 RIP=ffffffff819979c9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30c5930260 CR3=00000000357db000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=001a016c6c6f502e726567616e614d0c XMM02=006c61746f7420636578650a0a010001 XMM03=72617473657220726f74756365786511 XMM04=650a007a7a7566206365786509007374 XMM05=2063657865080073746e696820636578 XMM06=6469646e616320636578650e006e6567 XMM07=65676169727420636578650b00657461 XMM08=726f74756365786511006c61746f7420 XMM09=20636578650900737472617473657220 XMM10=73746e696820636578650a007a7a7566 XMM11=636578650e006e656720636578650800 XMM12=636578650b006574616469646e616320 XMM13=696d20636578650d0065676169727420 XMM14=616d7320636578650a00657a696d696e XMM15=0000736465657320636578650a006873