Warning: Permanently added '[localhost]:64015' (ECDSA) to the list of known hosts. 2025/06/06 09:55:01 fuzzer started 2025/06/06 09:55:02 dialing manager at localhost:39689 syzkaller login: [ 115.812186] cgroup: Unknown subsys name 'net' [ 115.949788] cgroup: Unknown subsys name 'cpuset' [ 116.021765] cgroup: Unknown subsys name 'rlimit' 2025/06/06 09:55:19 syscalls: 200 2025/06/06 09:55:19 code coverage: enabled 2025/06/06 09:55:19 comparison tracing: enabled 2025/06/06 09:55:19 extra coverage: enabled 2025/06/06 09:55:19 setuid sandbox: enabled 2025/06/06 09:55:19 namespace sandbox: enabled 2025/06/06 09:55:19 Android sandbox: enabled 2025/06/06 09:55:19 fault injection: enabled 2025/06/06 09:55:19 leak checking: enabled 2025/06/06 09:55:19 net packet injection: enabled 2025/06/06 09:55:19 net device setup: enabled 2025/06/06 09:55:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/06 09:55:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/06 09:55:19 USB emulation: enabled 2025/06/06 09:55:19 hci packet injection: enabled 2025/06/06 09:55:19 wifi device emulation: enabled 2025/06/06 09:55:19 802.15.4 emulation: enabled 2025/06/06 09:55:19 fetching corpus: 0, signal 0/0 (executing program) 2025/06/06 09:55:20 starting 8 fuzzer processes 09:55:20 executing program 0: keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={0x0, 0x64, 0xc9}, 0x0, &(0x7f0000000040)="062f9acac3b5bb096c005e3db34dbdf67c68c44d4baf0becb540b282f8ff608b6ae83c5e3d2f3e79a1774628d82df8e11e691b6c34f3804a065a5354508940c131212fb91517de0bf0641633d094df6b69cfdd5635f6c286bb833dff7642561a87abff3d", &(0x7f00000000c0)="8ca726a8a1fabe1633a9cde7c1be81081e03495bba792239c7bcc094b7dc79bcac13034b8a443722abf143d0b97fc9ed82dd9738ecf5854d2d4407598c1b0524f74cb7a22c6fe9c8a0b81277e4a8746e2a31771c7d093632df18592aea4605bde1c99c3f1ce123c4b7dccc6decbf1e5399c4a87957cfcfe286da14762f2bcecd87cf1d8e56664f67bad9635114c1dde4fb6313185087d955525dc9e9a029cf462315ccef6f98f1e08a3ffa9d82fe31f629af1aa5ad9811d539bba4124b8947af6fb75aecbc646535ac") r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x38, 0x38, 0x64, 0x65, 0x61, 0x37, 0x37, 0x65, 0x35, 0x32, 0x38, 0x34, 0x33, 0x38, 0x35, 0x66]}, &(0x7f0000000240)={0x0, "427094be9bf921500798dae947bbff0da2d38af3b5e951dc0b50e83995a8bb62718b133ddf028f6ce0dad0a2ade737bd07a57688db4c0a6fd2fda13b079aca61", 0x58}, 0x48, 0x0) keyctl$setperm(0x5, r0, 0x2000) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0x6, r0) keyctl$reject(0x13, r0, 0x8000, 0x4d, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "9cd8730d8bdfb71def2b1386493a31e769e327e9a264122e6871cadc12a6f4fe52cae0dd0be9567db3d92cee0a306814f7f409a8cc2d148feed3f3ba6a0b4f7c", 0x2b}, 0x48, r0) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x842}, 0x48000) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)) keyctl$set_timeout(0xf, r0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000640)=""/122, 0x7a) keyctl$invalidate(0x15, r0) prctl$PR_SET_NAME(0xf, &(0x7f00000006c0)='\\\\$,\\@^^[\x00') write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000700)={'a', ' *:* ', 'rm\x00'}, 0x9) keyctl$set_timeout(0xf, r0, 0x9b) 09:55:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040090) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x4c804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x2000c048) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8001) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x20c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62dd8e9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc432}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54e3ee35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5062588a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5469e256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65a7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4634}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x469}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e0a0191}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a374631}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc839}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa43b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacd2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73fd21ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2383e15f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x163b3200}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x123e6ecc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ed7f2d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58954802}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x601e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3245b671}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab9e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bb4f445}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c9aaccc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1178602f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb31e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c7c1cee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7333226}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcdb9e5c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x387f044b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x349a14db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x634fd66c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ffa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x699a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2660}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7473b551}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3125c97a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e3c5d66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fc0ded}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xb2b556414269b38f}]}, 0x20c}}, 0x20000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x301, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffc1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004014) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, 0xfffffffffffffffc, 0x40800) 09:55:20 executing program 2: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80) inotify_rm_watch(0xffffffffffffffff, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)="0b72b6491bd1b2c99ade12b54e628e2110c150283344f74b350bddb5922f1138a7473efc352ff6e2cca434e75856f998ca9bfd686f3dec03c5450d13b66a631dff73267cf2a8125c9b828bf2725096f74086e4dbed725ee4ac671b552a9d63", 0x5f}, 0x68) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000180)={{0x3, 0x0, 0x9, 0x0, 0x721891db}, 0x6, 0x1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc1b6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x20000000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5d8f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c010}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048001}, 0x4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0xf5, 0x4400) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20048080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/31, 0x1f, 0x1, &(0x7f0000000780)=""/51, 0x33}, &(0x7f0000000800)=0x40) r8 = syz_open_dev$vcsu(&(0x7f0000000840), 0x2b, 0x40000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r9, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200088d0}, 0x40080) 09:55:21 executing program 3: r0 = io_uring_setup(0x8e8, &(0x7f0000000000)={0x0, 0x3193, 0x20, 0x3, 0x13d}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = syz_io_uring_setup(0x3689, &(0x7f0000000080)={0x0, 0xb9cf, 0x8, 0x0, 0x80, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = io_uring_setup(0x2cc2, &(0x7f0000000180)={0x0, 0xadaf, 0x10, 0x2, 0x219}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc0080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r3 = syz_io_uring_setup(0x13c0, &(0x7f0000000300)={0x0, 0x879c, 0x0, 0x3, 0x30b, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r3, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x4010, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x2010, r2, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r1, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) io_uring_setup(0x7374, &(0x7f0000000400)={0x0, 0x2b5, 0x0, 0x1, 0x193, 0x0, r0}) io_uring_setup(0x2e7b, &(0x7f0000000480)={0x0, 0xa11c, 0x4, 0x2, 0x4c}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20008841) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000640)) [ 134.121988] audit: type=1400 audit(1749203721.049:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:55:21 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x7, 0x9, 0x64d7739b, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8300) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x3, 0x1, 0x2c, 0x0, 0xd15}, 0x1, 0x9, 0x20}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x2000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000280)={{0xffffffffffffffff, 0x1, 0x80000000, 0x3}, 0x9, 0x1ff, 0x81}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000300)={'binder1\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8091) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x4, 0x70bd29, 0x9, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000680)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x46, 0x700, 0x2, 0x8, {{0xd, 0x4, 0x0, 0x3a, 0x34, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x18, 0xcd, 0x0, 0xb, [0x8020000, 0xfffffff8, 0xff, 0x8, 0x3]}, @lsrr={0x83, 0x7, 0xb3, [@empty]}]}}}}}) r3 = syz_open_dev$vcsu(&(0x7f00000007c0), 0x1, 0x3) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000800)={'binder1\x00'}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0xc800) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000980)) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000a00)) 09:55:21 executing program 6: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x28000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4092}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048050) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x624, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c800}, 0x8000) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x81}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x80}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xf}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x79}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 09:55:21 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008011}, 0x4800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40015) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8014) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2007}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) syz_io_uring_setup(0x185f, &(0x7f0000000640)={0x0, 0xd717, 0x0, 0x1, 0x20e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000006c0)=0x0, &(0x7f0000000700)) syz_io_uring_setup(0x5ad2, &(0x7f0000000740)={0x0, 0x492f, 0x4, 0x3, 0x22c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000840), 0xffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000a80)={0xfffffffffffffffd, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000002}, 0x8000) 09:55:21 executing program 7: r0 = getpid() tkill(r0, 0x2a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r1 = fork() ptrace(0x8, r1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) tkill(r0, 0x3c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x315}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x800) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040881) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xec5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008050}, 0x90) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x7d}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x63}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0x4) r3 = syz_open_dev$vcsu(&(0x7f0000000580), 0x5, 0x5a000) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) munlock(&(0x7f0000ff8000/0x8000)=nil, 0x8000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010040}, 0x82ae4abeffb4f8e4) r4 = socket(0x2c, 0x6, 0x1000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4005) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) [ 135.499569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.512836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.516593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.521619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.525471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.556097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.558674] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.562059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.563074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.567711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.569679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.574140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.575626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.601515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.608368] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.632928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.638920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.640012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.643544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.644413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.660775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.663876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.677590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.678613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.691458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.711786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.716618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.721580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.726495] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.738563] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.744689] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.745652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.749562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.752302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.760967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.773054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.777143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.779173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.796068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.832714] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.577850] Bluetooth: hci0: command tx timeout [ 137.641985] Bluetooth: hci1: command tx timeout [ 137.705359] Bluetooth: hci2: command tx timeout [ 137.769657] Bluetooth: hci4: command tx timeout [ 137.769665] Bluetooth: hci3: command tx timeout [ 137.833417] Bluetooth: hci5: command tx timeout [ 137.897756] Bluetooth: hci6: command tx timeout [ 137.962652] Bluetooth: hci7: command tx timeout [ 139.626374] Bluetooth: hci0: command tx timeout [ 139.689434] Bluetooth: hci1: command tx timeout [ 139.753586] Bluetooth: hci2: command tx timeout [ 139.817738] Bluetooth: hci4: command tx timeout [ 139.818906] Bluetooth: hci3: command tx timeout [ 139.881414] Bluetooth: hci5: command tx timeout [ 139.945349] Bluetooth: hci6: command tx timeout [ 140.009576] Bluetooth: hci7: command tx timeout [ 141.673999] Bluetooth: hci0: command tx timeout [ 141.737544] Bluetooth: hci1: command tx timeout [ 141.801344] Bluetooth: hci2: command tx timeout [ 141.865471] Bluetooth: hci4: command tx timeout [ 141.868301] Bluetooth: hci3: command tx timeout [ 141.929597] Bluetooth: hci5: command tx timeout [ 141.994517] Bluetooth: hci6: command tx timeout [ 142.057330] Bluetooth: hci7: command tx timeout [ 143.721683] Bluetooth: hci0: command tx timeout [ 143.785610] Bluetooth: hci1: command tx timeout [ 143.849555] Bluetooth: hci2: command tx timeout [ 143.914983] Bluetooth: hci3: command tx timeout [ 143.915004] Bluetooth: hci4: command tx timeout [ 143.977346] Bluetooth: hci5: command tx timeout [ 144.041572] Bluetooth: hci6: command tx timeout [ 144.105588] Bluetooth: hci7: command tx timeout [ 198.462021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.463648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.465089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.472905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.475051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.555651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.560582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.562027] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.569032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.574154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.593452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.595643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.601060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.618316] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.620627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.649618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.651228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.652700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.663297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.664673] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.665765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.667184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.668960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.679961] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.684387] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.686862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.700481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.704783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.714473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.715741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.719989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.732039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.733736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.743017] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.750568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.751824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.756449] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.757897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 198.770953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.787986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.553782] Bluetooth: hci0: command tx timeout [ 200.617728] Bluetooth: hci1: command tx timeout [ 200.682307] Bluetooth: hci2: command tx timeout [ 200.745333] Bluetooth: hci6: command tx timeout [ 200.809481] Bluetooth: hci7: command tx timeout [ 200.809502] Bluetooth: hci3: command tx timeout [ 200.810924] Bluetooth: hci4: command tx timeout [ 200.874576] Bluetooth: hci5: command tx timeout [ 202.601362] Bluetooth: hci0: command tx timeout [ 202.667322] Bluetooth: hci1: command tx timeout [ 202.729943] Bluetooth: hci2: command tx timeout [ 202.793358] Bluetooth: hci6: command tx timeout [ 202.857438] Bluetooth: hci3: command tx timeout [ 202.857563] Bluetooth: hci4: command tx timeout [ 202.857895] Bluetooth: hci7: command tx timeout [ 202.921405] Bluetooth: hci5: command tx timeout [ 204.650173] Bluetooth: hci0: command tx timeout [ 204.715270] Bluetooth: hci1: command tx timeout [ 204.777363] Bluetooth: hci2: command tx timeout [ 204.841327] Bluetooth: hci6: command tx timeout [ 204.905661] Bluetooth: hci7: command tx timeout [ 204.906356] Bluetooth: hci4: command tx timeout [ 204.906696] Bluetooth: hci3: command tx timeout [ 204.969385] Bluetooth: hci5: command tx timeout [ 206.697796] Bluetooth: hci0: command tx timeout [ 206.761368] Bluetooth: hci1: command tx timeout [ 206.827382] Bluetooth: hci2: command tx timeout [ 206.889699] Bluetooth: hci6: command tx timeout [ 206.954497] Bluetooth: hci4: command tx timeout [ 206.954592] Bluetooth: hci7: command tx timeout [ 206.955011] Bluetooth: hci3: command tx timeout [ 207.018773] Bluetooth: hci5: command tx timeout [ 261.120530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.122415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.126496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.131584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.146608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.450967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.453550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.456147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.461550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.525525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.620082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.624803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.627689] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.629065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.630712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.632374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.633488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.637600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.639184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.643119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.644823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.646613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.648327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.656305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.659568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.661981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.665100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.666908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.688535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.689222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.698401] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.727140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.741564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.750797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.753137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.755623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.760742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.763327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.767419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.782557] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.209459] Bluetooth: hci0: command tx timeout [ 263.726626] Bluetooth: hci4: command tx timeout [ 263.726630] Bluetooth: hci2: command tx timeout [ 263.726894] Bluetooth: hci3: command tx timeout [ 263.727656] Bluetooth: hci1: command tx timeout [ 263.785413] Bluetooth: hci6: command tx timeout [ 263.786036] Bluetooth: hci5: command tx timeout [ 263.849360] Bluetooth: hci7: command tx timeout [ 265.257698] Bluetooth: hci0: command tx timeout [ 265.769571] Bluetooth: hci3: command tx timeout [ 265.770188] Bluetooth: hci4: command tx timeout [ 265.770727] Bluetooth: hci2: command tx timeout [ 265.771330] Bluetooth: hci1: command tx timeout [ 265.833680] Bluetooth: hci5: command tx timeout [ 265.834217] Bluetooth: hci6: command tx timeout [ 265.897688] Bluetooth: hci7: command tx timeout [ 267.305435] Bluetooth: hci0: command tx timeout [ 267.817781] Bluetooth: hci4: command tx timeout [ 267.818462] Bluetooth: hci3: command tx timeout [ 267.818940] Bluetooth: hci2: command tx timeout [ 267.819465] Bluetooth: hci1: command tx timeout [ 267.881695] Bluetooth: hci5: command tx timeout [ 267.882528] Bluetooth: hci6: command tx timeout [ 267.946156] Bluetooth: hci7: command tx timeout [ 269.354591] Bluetooth: hci0: command tx timeout [ 269.865711] Bluetooth: hci4: command tx timeout [ 269.866416] Bluetooth: hci1: command tx timeout [ 269.867577] Bluetooth: hci2: command tx timeout [ 269.868698] Bluetooth: hci3: command tx timeout [ 269.930307] Bluetooth: hci5: command tx timeout [ 269.930471] Bluetooth: hci6: command tx timeout [ 269.994310] Bluetooth: hci7: command tx timeout [ 323.774905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.778594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.780493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.788644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.791992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.027838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.029647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.031056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.041090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.045366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.167873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.174682] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.178014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.189144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.197626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.250745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.253543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.257938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.267550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.274106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.275642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.284990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.305499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.307426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.321124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.328645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.360188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.367080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.402313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.409223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.654184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 324.667736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 324.670597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 324.680788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.685770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 324.688593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 324.711504] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.712988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.720152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.723916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.865371] Bluetooth: hci0: command tx timeout [ 326.121580] Bluetooth: hci1: command tx timeout [ 326.250343] Bluetooth: hci2: command tx timeout [ 326.442964] Bluetooth: hci4: command tx timeout [ 326.443729] Bluetooth: hci5: command tx timeout [ 326.571009] Bluetooth: hci3: command tx timeout [ 326.766904] Bluetooth: hci6: command tx timeout [ 326.826517] Bluetooth: hci7: command tx timeout [ 327.916302] Bluetooth: hci0: command tx timeout [ 328.170526] Bluetooth: hci1: command tx timeout [ 328.297723] Bluetooth: hci2: command tx timeout [ 328.493285] Bluetooth: hci5: command tx timeout [ 328.493339] Bluetooth: hci4: command tx timeout [ 328.617587] Bluetooth: hci3: command tx timeout [ 328.809958] Bluetooth: hci6: command tx timeout [ 328.873349] Bluetooth: hci7: command tx timeout [ 329.962388] Bluetooth: hci0: command tx timeout [ 330.217345] Bluetooth: hci1: command tx timeout [ 330.347527] Bluetooth: hci2: command tx timeout [ 330.537380] Bluetooth: hci4: command tx timeout [ 330.537408] Bluetooth: hci5: command tx timeout [ 330.665837] Bluetooth: hci3: command tx timeout [ 330.859409] Bluetooth: hci6: command tx timeout [ 330.921905] Bluetooth: hci7: command tx timeout [ 332.009570] Bluetooth: hci0: command tx timeout [ 332.265338] Bluetooth: hci1: command tx timeout [ 332.393345] Bluetooth: hci2: command tx timeout [ 332.585439] Bluetooth: hci4: command tx timeout [ 332.588283] Bluetooth: hci5: command tx timeout [ 332.713342] Bluetooth: hci3: command tx timeout [ 332.905325] Bluetooth: hci6: command tx timeout [ 332.969603] Bluetooth: hci7: command tx timeout [ 386.761372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.763010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.766564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.769722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.772599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.883561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.890847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.897623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.910600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.918641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.077973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.079022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.088686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.106737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.106882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.122743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.128975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.131923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.137067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.146568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.210899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.218202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.224708] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 387.234437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.236627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 387.242927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 387.245071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.247399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.287687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.297835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.303578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.304524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 387.310191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.315678] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.322817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.381993] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.410830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.426647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.467680] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.470953] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.841439] Bluetooth: hci0: command tx timeout [ 388.969404] Bluetooth: hci1: command tx timeout [ 389.225355] Bluetooth: hci2: command tx timeout [ 389.226036] Bluetooth: hci3: command tx timeout [ 389.417627] Bluetooth: hci5: command tx timeout [ 389.483540] Bluetooth: hci4: command tx timeout [ 389.484166] Bluetooth: hci6: command tx timeout [ 389.545403] Bluetooth: hci7: command tx timeout [ 390.890338] Bluetooth: hci0: command tx timeout [ 391.018320] Bluetooth: hci1: command tx timeout [ 391.274366] Bluetooth: hci3: command tx timeout [ 391.274864] Bluetooth: hci2: command tx timeout [ 391.465567] Bluetooth: hci5: command tx timeout [ 391.531322] Bluetooth: hci6: command tx timeout [ 391.531827] Bluetooth: hci4: command tx timeout [ 391.594627] Bluetooth: hci7: command tx timeout [ 392.937320] Bluetooth: hci0: command tx timeout [ 393.066303] Bluetooth: hci1: command tx timeout [ 393.322967] Bluetooth: hci2: command tx timeout [ 393.324752] Bluetooth: hci3: command tx timeout [ 393.514673] Bluetooth: hci5: command tx timeout [ 393.578389] Bluetooth: hci6: command tx timeout [ 393.578930] Bluetooth: hci4: command tx timeout [ 393.643688] Bluetooth: hci7: command tx timeout [ 394.986330] Bluetooth: hci0: command tx timeout [ 395.113351] Bluetooth: hci1: command tx timeout [ 395.370297] Bluetooth: hci2: command tx timeout [ 395.370891] Bluetooth: hci3: command tx timeout [ 395.561520] Bluetooth: hci5: command tx timeout [ 395.625376] Bluetooth: hci4: command tx timeout [ 395.625990] Bluetooth: hci6: command tx timeout [ 395.690380] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:00:31 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff84ac09a1 RDX=000000000003ac09 RSI=000000000003ac09 RDI=ffffffff86d5ce40 RBP=ffff8880277d7180 RSP=ffff8880277d70b8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000000001 R12=ffff8880277d7188 R13=ffff8880277d7170 R14=ffff8880277d7169 R15=ffff8880277d7128 RIP=ffffffff81353f42 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff743a56028 CR3=00000000315c5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81a4bddb RBX=ffffffff81604840 RCX=ffff88803650f35c RDX=1ffff11006ca1e8c RSI=ffffffff81a4bddb RDI=ffff88803650f4d0 RBP=ffff88803650f4a0 RSP=ffff88803650f400 R8 =0000000000000001 R9 =ffff88803650f448 R10=000000000003b6bd R11=00000000000226ba R12=ffff88803650f4d0 R13=0000000000000000 R14=ffff8880293dd280 R15=ffff888033f9c8c0 RIP=ffffffff84b66660 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2761c3cc70 CR3=000000002900e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000