Warning: Permanently added '[localhost]:12619' (ECDSA) to the list of known hosts. 2025/06/07 12:14:25 fuzzer started 2025/06/07 12:14:26 dialing manager at localhost:40003 syzkaller login: [ 109.780425] cgroup: Unknown subsys name 'net' [ 109.922101] cgroup: Unknown subsys name 'cpuset' [ 109.966053] cgroup: Unknown subsys name 'rlimit' 2025/06/07 12:14:48 syscalls: 204 2025/06/07 12:14:48 code coverage: enabled 2025/06/07 12:14:48 comparison tracing: enabled 2025/06/07 12:14:48 extra coverage: enabled 2025/06/07 12:14:48 setuid sandbox: enabled 2025/06/07 12:14:48 namespace sandbox: enabled 2025/06/07 12:14:48 Android sandbox: enabled 2025/06/07 12:14:48 fault injection: enabled 2025/06/07 12:14:48 leak checking: enabled 2025/06/07 12:14:48 net packet injection: enabled 2025/06/07 12:14:48 net device setup: enabled 2025/06/07 12:14:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/07 12:14:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/07 12:14:48 USB emulation: enabled 2025/06/07 12:14:48 hci packet injection: enabled 2025/06/07 12:14:48 wifi device emulation: enabled 2025/06/07 12:14:48 802.15.4 emulation: enabled 2025/06/07 12:14:48 fetching corpus: 0, signal 0/0 (executing program) 2025/06/07 12:14:49 starting 8 fuzzer processes 12:14:49 executing program 0: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x21, @broadcast, 0x4e23, 0x1, 'none\x00', 0x10, 0x101, 0x3c}, 0x2c) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/22, 0x16) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in=@multicast2, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x160, 0xff}, {0x7, 0x3, 0x9a, 0x80000000, 0x3ff, 0x9, 0xfffffffffffffff7, 0x3}, {0x0, 0x4, 0x100000000, 0x3}, 0x9, 0x6e6bb8, 0x1, 0x1, 0x2, 0x2}, {{@in6=@private2, 0x4d3, 0x2b}, 0x2, @in6=@local, 0x0, 0x3, 0x2, 0x4, 0x20, 0x7ff, 0x9}}, 0xe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x141101, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @broadcast}, &(0x7f00000003c0)=0xc) write$char_usb(r4, &(0x7f0000000400)="df1eaae11618efc7f414a021216b5c2de51deac234377169c8f796a43824be993801d7405d198961f045fc7757ecfd3d8a59c2c0db17269fe6b9cf8ed4b0af2754d84778ad63417a8b85a293053d70136bbeaa2576b81fffa50815", 0x5b) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000480)) r5 = accept$inet(r0, 0x0, &(0x7f00000004c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000500)={'ipvs\x00'}, &(0x7f0000000540)=0x1e) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xcc8b) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7, @in_args={0x2}}, './file1/../file0\x00'}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x205) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 12:14:49 executing program 1: getrandom(&(0x7f0000000000)=""/255, 0xff, 0x2) prctl$PR_GET_KEEPCAPS(0x7) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x71c}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20020014) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4228, 0x19]}]}, 0x5c}}, 0x40000) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000800) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000005c0)={{0x3, 0x2}, {0xffff, 0x3f}, 0x6, 0x1}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x850612c38d7b236, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}}, 0x44001) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xee89c23ea6a496e5}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0xfff]}, @SEG6_ATTR_SECRET={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040054}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = accept(r3, &(0x7f0000000880)=@tipc=@name, &(0x7f0000000900)=0x80) r5 = socket$netlink(0x10, 0x3, 0x13) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x2004000) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x2000800) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r7, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, '\x00'}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0xc801) 12:14:49 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000484}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000010) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x12481, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x44000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048801}, 0x20000040) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x85) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4000014) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r9) 12:14:49 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x95}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x917}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x95}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0xc001) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x201, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6a}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c051}, 0x2004c011) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip_vti0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40455}, 0x20008041) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3ff, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x90c8216f8f9aa846}, 0x4020880) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44404}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x12188400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x800c098) epoll_pwait2(r3, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000d00), &(0x7f0000000d40)={[0x5]}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) [ 132.886647] audit: type=1400 audit(1749298489.700:7): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:14:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/netfs', 0x4000, 0x48) r2 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10, 0x80000) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x3800}}, './file0/file0\x00'}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) r5 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@can={0x1d, 0x0}, &(0x7f0000000540)=0x80) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x24040054) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r7, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000007c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000800)=0xc) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000880)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0/file0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000008c0)={'vlan0\x00'}) keyctl$clear(0x7, 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5, @in_args={0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {r8}}, '.\x00'}) 12:14:49 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8672a51ebd39bfea, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) r1 = socket(0x1a, 0x800, 0xfffffffc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0xd36ab16d8460ac1d, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40041}, 0x80) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c884) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r6 = socket(0xf, 0x800, 0x1f) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x15, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3f}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r7, {0xee}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r9, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x8011) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x65a}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf2aa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x8000) 12:14:49 executing program 6: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x4000000) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x20000810) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x2c}}, 0x4800) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x800, 0x0, 0xd0, 0x0]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040000}, 0x40088c0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000500)) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xfffffff8, 0xbba]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x6, 0x38]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x80000001]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x480c1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r7, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6d}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040084) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfffffff8, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 12:14:49 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfad}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'vlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1ff, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8044}, 0x8040) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) recvmmsg(r1, &(0x7f0000008840)=[{{&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000640)=""/9, 0x9}], 0x4, &(0x7f00000006c0)=""/87, 0x57}, 0x7}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/177, 0xb1}, {&(0x7f0000000980)=""/117, 0x75}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001a80)=""/48, 0x30}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001ac0)=""/208, 0xd0}, {&(0x7f0000001bc0)=""/156, 0x9c}, {&(0x7f0000001c80)=""/209, 0xd1}], 0x3, &(0x7f0000001dc0)=""/151, 0x97}, 0x5}, {{&(0x7f0000001e80)=@caif=@rfm, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/142, 0x8e}], 0x1, &(0x7f0000002000)=""/35, 0x23}, 0x8}, {{&(0x7f0000002040)=@caif, 0x80, &(0x7f00000023c0)=[{&(0x7f00000020c0)=""/80, 0x50}, {&(0x7f0000002140)=""/209, 0xd1}, {&(0x7f0000002240)=""/245, 0xf5}, {&(0x7f0000002340)=""/109, 0x6d}], 0x4, &(0x7f0000002400)=""/164, 0xa4}, 0x5}, {{&(0x7f00000024c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)=""/23, 0x17}], 0x1, &(0x7f00000025c0)=""/75, 0x4b}, 0x1}, {{&(0x7f0000002640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002940)=[{&(0x7f00000026c0)=""/184, 0xb8}, {&(0x7f0000002780)=""/130, 0x82}, {&(0x7f0000002840)=""/105, 0x69}, {&(0x7f00000028c0)=""/78, 0x4e}], 0x4}, 0x7ff}, {{&(0x7f0000002980)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002a00)=""/28, 0x1c}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/135, 0x87}, {&(0x7f0000003b00)=""/105, 0x69}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x5, &(0x7f0000004c00)=""/91, 0x5b}, 0x5}, {{&(0x7f0000004c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000007080)=[{&(0x7f0000004d00)=""/39, 0x27}, {&(0x7f0000004d40)=""/11, 0xb}, {&(0x7f0000004d80)=""/143, 0x8f}, {&(0x7f0000004e40)=""/179, 0xb3}, {&(0x7f0000004f00)=""/3, 0x3}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)}, {&(0x7f0000006f80)=""/196, 0xc4}], 0x9, &(0x7f0000007140)=""/144, 0x90}, 0x5}, {{&(0x7f0000007200)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000008780)=[{&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/251, 0xfb}, {&(0x7f0000008380)=""/218, 0xda}, {&(0x7f0000008480)=""/89, 0x59}, {&(0x7f0000008500)=""/139, 0x8b}, {&(0x7f00000085c0)=""/115, 0x73}, {&(0x7f0000008640)=""/38, 0x26}, {&(0x7f0000008680)=""/241, 0xf1}], 0x8, &(0x7f0000008800)=""/51, 0x33}}], 0xa, 0x4062, &(0x7f0000008ac0)={0x77359400}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000008b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000008b40)={&(0x7f0000008b00)={0x24, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20008000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000008bc0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000008c00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000008d00)={&(0x7f0000008c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x24, r0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000008d40)={{0x1, 0x1, 0x18, r7, @out_args}, './file0\x00'}) syz_io_uring_setup(0x78f1, &(0x7f0000008d80)={0x0, 0x8754, 0x10, 0x1, 0x353, 0x0, r8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008e00), &(0x7f0000008e40)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008e80)='/sys/module/srcutree', 0x400, 0x2) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000008f80)={&(0x7f0000008ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000008f40)={&(0x7f0000008f00)={0x30, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r10 = socket(0x12, 0x800, 0x3c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000008fc0)=0x2, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x90, 0xffffffffffffffff, 0x8000000) [ 134.359335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.364474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.369167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.378168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.391116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.430391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.439459] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.441803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.454718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.460105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.463157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.472173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.476776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.481230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.483196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.495460] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.497488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.506313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.508350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.511215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.514014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.540615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.549371] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.551716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.555319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.558953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.562985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.567371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.575021] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.582013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.582040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.590757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.616100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.618481] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.625162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.640618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.654016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.673972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.719906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.723897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.437663] Bluetooth: hci0: command tx timeout [ 136.563896] Bluetooth: hci3: command tx timeout [ 136.628616] Bluetooth: hci5: command tx timeout [ 136.628691] Bluetooth: hci1: command tx timeout [ 136.629253] Bluetooth: hci2: command tx timeout [ 136.755650] Bluetooth: hci6: command tx timeout [ 136.755659] Bluetooth: hci7: command tx timeout [ 136.756767] Bluetooth: hci4: command tx timeout [ 138.483912] Bluetooth: hci0: command tx timeout [ 138.611623] Bluetooth: hci3: command tx timeout [ 138.675678] Bluetooth: hci2: command tx timeout [ 138.676657] Bluetooth: hci1: command tx timeout [ 138.677065] Bluetooth: hci5: command tx timeout [ 138.803685] Bluetooth: hci6: command tx timeout [ 138.804597] Bluetooth: hci4: command tx timeout [ 138.804686] Bluetooth: hci7: command tx timeout [ 140.531585] Bluetooth: hci0: command tx timeout [ 140.659766] Bluetooth: hci3: command tx timeout [ 140.723645] Bluetooth: hci5: command tx timeout [ 140.724156] Bluetooth: hci1: command tx timeout [ 140.724684] Bluetooth: hci2: command tx timeout [ 140.851734] Bluetooth: hci4: command tx timeout [ 140.852253] Bluetooth: hci6: command tx timeout [ 140.852906] Bluetooth: hci7: command tx timeout [ 142.580567] Bluetooth: hci0: command tx timeout [ 142.709781] Bluetooth: hci3: command tx timeout [ 142.774608] Bluetooth: hci2: command tx timeout [ 142.775086] Bluetooth: hci1: command tx timeout [ 142.777004] Bluetooth: hci5: command tx timeout [ 142.900833] Bluetooth: hci7: command tx timeout [ 142.901330] Bluetooth: hci6: command tx timeout [ 142.901359] Bluetooth: hci4: command tx timeout [ 197.381979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.387103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.390298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.403849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.416278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.583483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.593213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.598054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.610853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.612999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.619040] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.644091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.647975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.649844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.651600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.653330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.659936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.664986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.668770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.670186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.679224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.687414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.690974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.696462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.697081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.699855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.705806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.711006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.717210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.722187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.856832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.866898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.877301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.920094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.929327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.258879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.270107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.296096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.399910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.417057] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.475656] Bluetooth: hci0: command tx timeout [ 199.732564] Bluetooth: hci1: command tx timeout [ 199.795664] Bluetooth: hci6: command tx timeout [ 199.796369] Bluetooth: hci2: command tx timeout [ 199.860198] Bluetooth: hci3: command tx timeout [ 199.861290] Bluetooth: hci4: command tx timeout [ 200.244303] Bluetooth: hci5: command tx timeout [ 200.563574] Bluetooth: hci7: command tx timeout [ 201.524138] Bluetooth: hci0: command tx timeout [ 201.780604] Bluetooth: hci1: command tx timeout [ 201.843972] Bluetooth: hci2: command tx timeout [ 201.844468] Bluetooth: hci6: command tx timeout [ 201.907628] Bluetooth: hci4: command tx timeout [ 201.908109] Bluetooth: hci3: command tx timeout [ 202.292575] Bluetooth: hci5: command tx timeout [ 202.611589] Bluetooth: hci7: command tx timeout [ 203.572574] Bluetooth: hci0: command tx timeout [ 203.828583] Bluetooth: hci1: command tx timeout [ 203.892603] Bluetooth: hci6: command tx timeout [ 203.893093] Bluetooth: hci2: command tx timeout [ 203.956720] Bluetooth: hci3: command tx timeout [ 203.957161] Bluetooth: hci4: command tx timeout [ 204.340948] Bluetooth: hci5: command tx timeout [ 204.660747] Bluetooth: hci7: command tx timeout [ 205.622545] Bluetooth: hci0: command tx timeout [ 205.876656] Bluetooth: hci1: command tx timeout [ 205.942077] Bluetooth: hci6: command tx timeout [ 205.943599] Bluetooth: hci2: command tx timeout [ 206.004757] Bluetooth: hci4: command tx timeout [ 206.005238] Bluetooth: hci3: command tx timeout [ 206.387781] Bluetooth: hci5: command tx timeout [ 206.708069] Bluetooth: hci7: command tx timeout [ 259.659943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.664857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.672137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.683848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.695453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.915599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.918766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.922247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.934272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.937823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.000558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.010201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.033034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.049969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.054299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.059565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.062979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.070136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.074118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.087704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.108074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.110229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.120046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.124017] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.129452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.131383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.165548] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.173301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.184773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.186851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.190441] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.196886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.197144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.206047] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.210899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.212895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.218819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.256926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.262179] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.266108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.748865] Bluetooth: hci0: command tx timeout [ 262.003565] Bluetooth: hci1: command tx timeout [ 262.196667] Bluetooth: hci2: command tx timeout [ 262.197418] Bluetooth: hci3: command tx timeout [ 262.259602] Bluetooth: hci5: command tx timeout [ 262.260281] Bluetooth: hci7: command tx timeout [ 262.323618] Bluetooth: hci6: command tx timeout [ 262.452595] Bluetooth: hci4: command tx timeout [ 263.795595] Bluetooth: hci0: command tx timeout [ 264.051569] Bluetooth: hci1: command tx timeout [ 264.243736] Bluetooth: hci3: command tx timeout [ 264.244273] Bluetooth: hci2: command tx timeout [ 264.307946] Bluetooth: hci5: command tx timeout [ 264.308442] Bluetooth: hci7: command tx timeout [ 264.371883] Bluetooth: hci6: command tx timeout [ 264.501538] Bluetooth: hci4: command tx timeout [ 265.843639] Bluetooth: hci0: command tx timeout [ 266.100905] Bluetooth: hci1: command tx timeout [ 266.292035] Bluetooth: hci2: command tx timeout [ 266.293158] Bluetooth: hci3: command tx timeout [ 266.356293] Bluetooth: hci5: command tx timeout [ 266.357433] Bluetooth: hci7: command tx timeout [ 266.420180] Bluetooth: hci6: command tx timeout [ 266.547609] Bluetooth: hci4: command tx timeout [ 267.892736] Bluetooth: hci0: command tx timeout [ 268.147595] Bluetooth: hci1: command tx timeout [ 268.341357] Bluetooth: hci3: command tx timeout [ 268.341863] Bluetooth: hci2: command tx timeout [ 268.403827] Bluetooth: hci5: command tx timeout [ 268.404264] Bluetooth: hci7: command tx timeout [ 268.467899] Bluetooth: hci6: command tx timeout [ 268.595770] Bluetooth: hci4: command tx timeout [ 322.254691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.260022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.263206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.274219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.278685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.336592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.342225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.346658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.349440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.353994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.358922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.361769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.370021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.377376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.391109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.393268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.401131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.406399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.423110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.434371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.492835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.525024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.549742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.551890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.568995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.576064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.584163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.647783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 322.683987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.692134] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 322.709934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 322.734141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.756387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 322.770041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.774637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.790164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.794036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.820393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.901101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.929594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 324.339840] Bluetooth: hci0: command tx timeout [ 324.469815] Bluetooth: hci2: command tx timeout [ 324.470688] Bluetooth: hci1: command tx timeout [ 324.532552] Bluetooth: hci3: command tx timeout [ 324.787615] Bluetooth: hci4: command tx timeout [ 324.915833] Bluetooth: hci5: command tx timeout [ 324.917125] Bluetooth: hci6: command tx timeout [ 324.979692] Bluetooth: hci7: command tx timeout [ 326.387643] Bluetooth: hci0: command tx timeout [ 326.515599] Bluetooth: hci1: command tx timeout [ 326.516080] Bluetooth: hci2: command tx timeout [ 326.580810] Bluetooth: hci3: command tx timeout [ 326.836527] Bluetooth: hci4: command tx timeout [ 326.964207] Bluetooth: hci6: command tx timeout [ 326.965775] Bluetooth: hci5: command tx timeout [ 327.027810] Bluetooth: hci7: command tx timeout [ 328.436679] Bluetooth: hci0: command tx timeout [ 328.563809] Bluetooth: hci1: command tx timeout [ 328.564280] Bluetooth: hci2: command tx timeout [ 328.630577] Bluetooth: hci3: command tx timeout [ 328.884568] Bluetooth: hci4: command tx timeout [ 329.012519] Bluetooth: hci6: command tx timeout [ 329.012987] Bluetooth: hci5: command tx timeout [ 329.076776] Bluetooth: hci7: command tx timeout [ 330.483886] Bluetooth: hci0: command tx timeout [ 330.612608] Bluetooth: hci1: command tx timeout [ 330.613101] Bluetooth: hci2: command tx timeout [ 330.676661] Bluetooth: hci3: command tx timeout [ 330.932611] Bluetooth: hci4: command tx timeout [ 331.060637] Bluetooth: hci5: command tx timeout [ 331.061135] Bluetooth: hci6: command tx timeout [ 331.126539] Bluetooth: hci7: command tx timeout [ 384.652393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.659961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.663826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.674139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.681030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.910662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.914817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.917948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.923854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.927903] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.064986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.073779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.089529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.092214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.103201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.109111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.111250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.115116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.117715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.122920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.126747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.132269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.139986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.141725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.199177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.221331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.238028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.240901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.254293] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.257446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.299723] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.326387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.335947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.339905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.370066] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.373441] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.411121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.451655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.462059] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.520782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.739743] Bluetooth: hci0: command tx timeout [ 386.995816] Bluetooth: hci1: command tx timeout [ 387.187846] Bluetooth: hci3: command tx timeout [ 387.253317] Bluetooth: hci2: command tx timeout [ 387.316627] Bluetooth: hci4: command tx timeout [ 387.316680] Bluetooth: hci6: command tx timeout [ 387.572609] Bluetooth: hci5: command tx timeout [ 387.635605] Bluetooth: hci7: command tx timeout [ 388.788907] Bluetooth: hci0: command tx timeout [ 389.043733] Bluetooth: hci1: command tx timeout [ 389.235560] Bluetooth: hci3: command tx timeout [ 389.300710] Bluetooth: hci2: command tx timeout [ 389.363572] Bluetooth: hci6: command tx timeout [ 389.363643] Bluetooth: hci4: command tx timeout [ 389.620105] Bluetooth: hci5: command tx timeout [ 389.683590] Bluetooth: hci7: command tx timeout [ 390.835574] Bluetooth: hci0: command tx timeout [ 391.091823] Bluetooth: hci1: command tx timeout [ 391.283949] Bluetooth: hci3: command tx timeout [ 391.347665] Bluetooth: hci2: command tx timeout [ 391.412630] Bluetooth: hci4: command tx timeout [ 391.413099] Bluetooth: hci6: command tx timeout [ 391.668767] Bluetooth: hci5: command tx timeout [ 391.732748] Bluetooth: hci7: command tx timeout [ 392.883631] Bluetooth: hci0: command tx timeout [ 393.139626] Bluetooth: hci1: command tx timeout [ 393.333611] Bluetooth: hci3: command tx timeout [ 393.395645] Bluetooth: hci2: command tx timeout [ 393.459619] Bluetooth: hci6: command tx timeout [ 393.460603] Bluetooth: hci4: command tx timeout [ 393.716209] Bluetooth: hci5: command tx timeout [ 393.779897] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:19:54 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff8136936c RDX=0000000000000000 RSI=ffffffff81369158 RDI=ffff88806ce31850 RBP=ffffffff85c1cb00 RSP=ffff888009617b20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff81369158 R13=ffff88807ffd7650 R14=ffffea0000394cc0 R15=ffff88800e533780 RIP=ffffffff8151af59 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feda5b63368 CR3=0000000026e20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88806cf36f18 RDI=ffff88802cd05d00 RBP=ffff88806cf36f18 RSP=ffff88806cf08c68 R8 =00000000ffffffff R9 =ffffed100d9e119d R10=0000000000000000 R11=0000000000000001 R12=ffff88802cd05280 R13=ffff88802cd05cd8 R14=00000000ffffffff R15=ffff88802cd05d00 RIP=ffffffff84b41930 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f98aefa3368 CR3=0000000026e26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000