Warning: Permanently added '[localhost]:1252' (ECDSA) to the list of known hosts. 2025/06/10 02:59:09 fuzzer started 2025/06/10 02:59:09 dialing manager at localhost:40003 syzkaller login: [ 100.043107] cgroup: Unknown subsys name 'net' [ 100.184180] cgroup: Unknown subsys name 'cpuset' [ 100.236040] cgroup: Unknown subsys name 'rlimit' 2025/06/10 02:59:25 syscalls: 203 2025/06/10 02:59:25 code coverage: enabled 2025/06/10 02:59:25 comparison tracing: enabled 2025/06/10 02:59:25 extra coverage: enabled 2025/06/10 02:59:25 setuid sandbox: enabled 2025/06/10 02:59:25 namespace sandbox: enabled 2025/06/10 02:59:25 Android sandbox: enabled 2025/06/10 02:59:25 fault injection: enabled 2025/06/10 02:59:25 leak checking: enabled 2025/06/10 02:59:25 net packet injection: enabled 2025/06/10 02:59:25 net device setup: enabled 2025/06/10 02:59:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/10 02:59:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/10 02:59:25 USB emulation: enabled 2025/06/10 02:59:25 hci packet injection: enabled 2025/06/10 02:59:25 wifi device emulation: enabled 2025/06/10 02:59:25 802.15.4 emulation: enabled 2025/06/10 02:59:25 fetching corpus: 0, signal 0/0 (executing program) 2025/06/10 02:59:27 starting 8 fuzzer processes 02:59:27 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffe}}, 0x15) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x848}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x60000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000000}, 0x40090) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ipmi_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x54}}, 0x8000) r1 = syz_open_dev$mouse(&(0x7f00000004c0), 0x7f, 0xa00) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xba}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4803}, 0x4004010) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb8, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x8000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004054}, 0x8080) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d00)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000ec0)={&(0x7f0000000d40), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x80, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4) 02:59:27 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x8010, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x4500) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xd41000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000100)={{r0}, 0x0, 0xc, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x7f, {0x0, 0x8, 0x7f, 0xd4c00000000000}, [0x0]}}, @devid}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001140)={"a245b8e4ac74c6842927cdc647445278", 0x0, r2, {0xfffffffffffffffb, 0x8}, {0x8000000000000, 0x4}, 0x7f, [0x1000, 0x0, 0x8, 0x1000, 0x3, 0x7, 0x0, 0x3f, 0x7, 0x4, 0x5, 0x80, 0x7c, 0x3, 0x3, 0x8001]}) r3 = syz_open_dev$mouse(&(0x7f0000001240), 0x1, 0x301002) r4 = syz_open_dev$mouse(&(0x7f0000001280), 0x800, 0x480d40) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000012c0), 0x220000, 0x0) r6 = socket$inet(0x2, 0xa, 0xffffd549) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000001340)={0x400, 0x0, &(0x7f0000001300)=[r4, r0, r5, r6, r1, r1, r7, r8]}, 0x8) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000001380)=0x1, 0x4) socketpair(0x1e, 0x80000, 0x4, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000001400)={{0x0, 0x5, 0x4, 0x0, 0xdd, 0x5, 0x1, 0x800, 0x7, 0x80000000, 0xffffff8f, 0x9, 0xfffffffffffffe00, 0xffff, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000014c0)=[r9], 0x1) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001540), 0x4) 02:59:27 executing program 2: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r1, 0x7e6, 0x1, [0xffffffff80000001, 0x9, 0x7e7, 0x7, 0x4], [0x2, 0x2, 0x16d, 0x3, 0x2, 0xd97, 0x3, 0x3f, 0x0, 0x7, 0x8, 0x0, 0x4, 0x8, 0x6, 0x10000, 0x9, 0x2, 0x39, 0x8, 0x9, 0x3, 0x4, 0x9, 0x3340000000000000, 0x8, 0x1, 0x4, 0x8e0, 0x6, 0x1c, 0x8, 0x100, 0x3, 0x60e6, 0x2, 0xfffffffffffffffa, 0x0, 0x8000, 0x9, 0x81, 0x5, 0x6, 0x80000000, 0x0, 0x9, 0xff, 0x1, 0x9, 0x1, 0x100, 0x2, 0x5, 0xd643, 0x2, 0x6, 0x3, 0x6, 0x3f, 0x6, 0x1c0000000, 0x3, 0x7, 0x7fff, 0x2, 0x6, 0x5f67, 0x100, 0xbacf, 0x1, 0x83b771140000000, 0x4, 0xcc49, 0x70d, 0x7f, 0x79a, 0x9, 0x400, 0x10000, 0xf01, 0x75, 0x3f, 0x7ff, 0x81, 0x5, 0x0, 0xd4b4, 0xf6b5, 0x9, 0xe95, 0x326, 0x8, 0x3, 0x81, 0x5ec, 0x1000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x4, 0x7, 0x8, 0x2, 0x3, 0x9, 0x1, 0x9, 0xffffffff, 0x5, 0x5, 0x10000, 0x7, 0x8, 0x0, 0x1, 0x5, 0x0, 0x8, 0x6, 0x100000001, 0x4cc, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000840)={0x14, 0x1, {0x2, @usage=0x9, r2, 0xff, 0x1, 0x6, 0x4, 0x8001, 0x0, @struct={0x1ff, 0x4}, 0x2, 0x1480, [0x1, 0x1ff, 0x3, 0x51772b54, 0x630a, 0x5e91]}, {0x9, @struct={0x0, 0xe60}, r0, 0x401, 0x2, 0x4, 0x3, 0x4, 0x0, @struct={0x3}, 0x4, 0x1, [0x9, 0x6, 0x7f, 0x9, 0x4, 0x3f]}, {0x40, @struct={0x7, 0x6}, r1, 0x0, 0x5, 0x46dd, 0x33e, 0xd8b, 0x72, @usage=0x5, 0x15, 0x53, [0x7fffffff, 0xfffffffffffffbff, 0x4, 0x6, 0x1, 0x5]}, {0x80000001, 0xcda, 0x9}}) epoll_create1(0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @empty, @loopback}, &(0x7f0000000d00)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'ip6tnl0\x00', r3, 0x2f, 0x7, 0xd7, 0x80000001, 0x0, @empty, @private1, 0x700, 0x7800, 0x80000000, 0x55c4}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000e00)={0x2, {{0x2, 0x4e24, @multicast1}}}, 0x88) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000ec0)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x306, @broadcast}, 0x50, {0x2, 0x4e21, @private=0xa010101}, 'bridge0\x00'}) r5 = accept$inet(r4, &(0x7f0000000f40)={0x2, 0x0, @multicast2}, &(0x7f0000000f80)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, r7, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffff8aa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x40814) r8 = accept$inet(r4, &(0x7f0000001140)={0x2, 0x0, @local}, &(0x7f0000001180)=0x10) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f00000011c0)={r2, 0xffffffffffffffe0, 0xffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001740)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/158, 0x9e, 0x1, &(0x7f0000001680)=""/174, 0xae}, &(0x7f0000001780)=0x40) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000017c0)={'NETMAP\x00'}, &(0x7f0000001800)=0x1e) r9 = syz_open_dev$mouse(&(0x7f0000001840), 0x7fff, 0x40c000) ioctl$RTC_EPOCH_READ(r9, 0x8008700d, &(0x7f0000001880)) 02:59:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400d4}, 0x400c0c4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xd1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x40c0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x48d0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:console_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40010) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000090}, 0x44800) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x401c0}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x96c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff0001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x60}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0c0}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d8814f1d6880"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x30000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008011}, 0x54) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, 0xfffffffffffffffc, 0x44000000) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000c40), r4) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000420}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x44) [ 117.384655] audit: type=1400 audit(1749524367.316:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:59:27 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x3a5081, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x101, 0x2b89a95a}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={r1, 0x5, 0x1, [0x1ff, 0x400, 0x10cc, 0x0, 0xa52], [0x1f, 0x2e16, 0x7, 0x3, 0xfffffffffffeffff, 0xfd, 0x4, 0x3, 0x29e, 0x8, 0x20, 0x2, 0x6, 0x6, 0xfffffffffffffe01, 0x40, 0x9, 0x7, 0xfff, 0x4, 0x1, 0x6, 0x1, 0xa08, 0x8, 0x0, 0x20, 0x1000, 0x6, 0x5, 0x2208000000000, 0x80, 0x4, 0xffff, 0x7f, 0x160e, 0x7fffffff, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffe, 0x7, 0x2, 0x6, 0x8, 0x6c, 0x6, 0x0, 0x9f, 0x8, 0x683, 0x2, 0xff, 0x2, 0x0, 0x6f18, 0x8, 0x7, 0x7fffffff, 0x8, 0x8, 0x1, 0x7f, 0x9, 0x80, 0x9, 0x0, 0x401, 0x7fffffff, 0xfff, 0x8, 0x4, 0x40, 0x9, 0x3f, 0x4, 0xbb, 0x40, 0x400, 0x0, 0x4, 0xffffffffffffffd6, 0x4, 0x1, 0x9, 0x40, 0x2, 0x0, 0xe8a, 0x7fff, 0x200, 0x4, 0xfa8, 0x7fff, 0x0, 0x1000, 0x1ff, 0xffffffff7fffffff, 0x3, 0x9, 0x100, 0x100, 0x9, 0x0, 0x7ff, 0x1, 0x9, 0x1ff, 0xe26f, 0xffffffff, 0x72, 0x1, 0x1, 0x7, 0x5, 0x7, 0x7, 0x8000, 0x0, 0x0, 0x8ad4, 0x100]}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x3}}, 0xffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000900)={r2, 0x17c, 0x7}) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000d00), 0x1000000, &(0x7f0000000d80)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = epoll_create(0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000ec0)={r2, 0xff, 0x8, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000012c0)={{r6}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000e40)={0x1, 0x1, 0x2, 0x6, {0x1, 0x5, 0x469, 0x1, 0x1000000000000}, [0x51]}}, @devid=r7}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100900}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0xc000) r9 = getpgrp(0xffffffffffffffff) syz_open_procfs(r9, &(0x7f0000002400)='net/stat\x00') accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002440), &(0x7f0000002480)=0xe, 0x80000) r10 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000024c0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002fc0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r10, 0x5000943a, &(0x7f00000033c0)={{r5}, 0x0, 0xe, @inherit={0x70, &(0x7f0000002500)={0x0, 0x5, 0xffffffff, 0x0, {0x2e, 0x1, 0x14d, 0xdc70, 0x8}, [0xfffffffffffffeff, 0x10000, 0x80000000, 0x1, 0x7f]}}, @devid=r11}) 02:59:27 executing program 6: pselect6(0x40, &(0x7f0000000000)={0x53, 0x57a2, 0x8000, 0x5, 0x0, 0x5, 0xfffffffffffffff9, 0x101}, &(0x7f0000000040)={0x200, 0x8, 0x6, 0x1, 0x9, 0x6, 0x800000010, 0x9}, &(0x7f0000000080)={0xd59f, 0x212a, 0x101, 0x0, 0xfffffffffffffffc, 0x0, 0x2bc6a11b, 0x4}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffff3dc]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x7, 0xa3, 0x2, 0x40, 0x8, 0x6, 0xfffffffffffffff9, 0xffffffffffffffff}, &(0x7f00000001c0)={0x2, 0x1, 0x7ff, 0x101, 0x2, 0x4c, 0x4, 0xf6}, &(0x7f0000000200)={0x0, 0x2dc, 0x7550, 0x8000, 0x40, 0x200, 0xffffffff80000001, 0xffffffff80000000}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f00000003c0), {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x10, 0x10, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x400, 0xff, 0x0, 0xef6c, 0x5, 'syz_tun\x00', 'wg2\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @rand_addr=0x64010102, @broadcast, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0xaef7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) syz_open_dev$rtc(&(0x7f0000000840), 0x7, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r2}, 0x0) socketpair(0x8, 0x463966560b2d3bf1, 0x9, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000900)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000a00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', r5, 0x2f, 0x7, 0x9, 0xa12, 0x2c, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x5, 0x817}}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000b00)={{0x4a, @broadcast, 0x4e20, 0x4, 'sh\x00', 0x18, 0xb276, 0x3f}, {@empty, 0x4e22, 0x2, 0xd9, 0xffff, 0x2}}, 0x44) pselect6(0x40, &(0x7f0000000b80)={0x2, 0x9, 0x8, 0x80000000, 0x6, 0x3a, 0x5617, 0x7f}, &(0x7f0000000bc0)={0x8, 0xff, 0x80, 0x3, 0x4d8e6031, 0x1, 0x200, 0x40}, &(0x7f0000000c00)={0x6, 0x4, 0x24d, 0xaa, 0xe9c, 0x1000, 0xffff, 0x6}, &(0x7f0000000c40)={0x77359400}, &(0x7f0000000cc0)={&(0x7f0000000c80)={[0x8]}, 0x8}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x810, 0xffffffffffffffff, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x40010, 0xffffffffffffffff, 0x10000000) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000002100)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r8, 0x0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000d00)=""/86, 0x56}, {&(0x7f0000000d80)=""/179, 0xb3}, {&(0x7f0000000e40)=""/53, 0x35}, {&(0x7f0000000e80)=""/87, 0x57}, {&(0x7f0000000f00)=""/61, 0x3d}, {&(0x7f0000000f40)=""/101, 0x65}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002040)=""/122, 0x7a}, 0x0, 0x0, 0x0, {0x2}}, 0x9) r9 = socket$inet(0x2, 0xa, 0x4) setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000002140)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000002200), 0x1) 02:59:27 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xfffffffffffffff7) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0xa180) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000000c0)={'virt_wifi0', 0x32, 0x38}, 0xd) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x1, 0xfffffffb, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}, @remote, 0x8000, 0x10, 0x40, 0x3}}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @loopback}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'sit0\x00', r4, 0x2f, 0x6e, 0x9, 0x5, 0x0, @mcast1, @empty, 0x700, 0x40, 0x8, 0x101}}) r5 = syz_open_dev$rtc(&(0x7f0000000300), 0x3, 0x216102) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000340)={{0x67, @rand_addr=0x64010101, 0x4e24, 0x1, 'wrr\x00', 0x1, 0x8, 0x7}, {@private=0xa010102, 0x4e20, 0x2000, 0x8, 0x400, 0x5}}, 0x44) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/nfsfs\x00') r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r6, 0x0, &(0x7f0000000400)='./file0\x00', 0x109, 0x2000, 0x23456, {0x0, r7}}, 0x8) syz_open_dev$mouse(&(0x7f0000000480), 0x2, 0x1c1301) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000940)={{0x3c, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e24, 0x0, 'ovf\x00', 0x12, 0x8001, 0x50}, {@loopback, 0x4e24, 0x2, 0x0, 0x0, 0x5}}, 0x44) 02:59:27 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x115000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10010, r0, 0x10000000) r1 = syz_io_uring_setup(0x283d, &(0x7f0000000040)={0x0, 0xdd92, 0x1, 0x1, 0x4d, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = socket(0x10, 0xa, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f0000000140)="0efb1f733603de282b21e88aee0653dd3f335e21fbfa74f2565dadfcf381d145c6b497a8c8fc390022d0c4eb9863baaa08d9766ddc4cdee82a1dd843ac9920c689981004d5ad98cbcadfb580d72decb4abadd005047b3a684ce2630c44892d17d3b4ad50869a4edc8e79cb52", 0x6c, 0x4000080}, 0x7fffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x8000000) r4 = socket(0x3, 0x54e2ac55ba5da954, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000200)={{0x0, 0x936, 0x5, 0xff00000000000000, 0x6, 0x6, 0x1, 0x2, 0x101, 0x78e8, 0x5, 0x9, 0x3, 0x4, 0x240000}, 0x10, [0x0, 0x0]}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x100c0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) r7 = socket(0x6, 0x5, 0x10001) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000500)={'broute\x00', 0x0, 0x4, 0x90, [0xa206, 0x100000001, 0x8e39, 0x6, 0x2, 0x6], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000440)=""/144}, &(0x7f0000000580)=0x78) syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0), 0xffffffffffffffff) r8 = io_uring_setup(0x335, &(0x7f0000000600)={0x0, 0x3856, 0x2, 0x3, 0xdb, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000006c0)={0x144, 0x0, &(0x7f0000000680)=[r0, r5, r1]}, 0x3) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0xc4, 0x9a, 0x8, 0x78, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8, 0xff}}) r10 = syz_open_dev$mouse(&(0x7f00000007c0), 0x1f, 0x44000) connect$bt_l2cap(r10, &(0x7f0000000800)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) [ 118.741339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.745021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.746231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.752350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.757077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.997981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.006682] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.009090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.014196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.018748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.020273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.024894] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.027264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.036725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.038347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.131410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.144961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.146011] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.147095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.153325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.156230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.167234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.170405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.172069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.175701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.183780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.185325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.200344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.203286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.205202] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.207722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.217531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.218235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.225901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.226971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.231598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.245193] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.305959] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.333703] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.339955] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.835076] Bluetooth: hci0: command tx timeout [ 121.091973] Bluetooth: hci1: command tx timeout [ 121.093720] Bluetooth: hci2: command tx timeout [ 121.282912] Bluetooth: hci3: command tx timeout [ 121.283744] Bluetooth: hci5: command tx timeout [ 121.346543] Bluetooth: hci4: command tx timeout [ 121.347070] Bluetooth: hci6: command tx timeout [ 121.410549] Bluetooth: hci7: command tx timeout [ 122.882508] Bluetooth: hci0: command tx timeout [ 123.138534] Bluetooth: hci1: command tx timeout [ 123.139007] Bluetooth: hci2: command tx timeout [ 123.331827] Bluetooth: hci5: command tx timeout [ 123.332272] Bluetooth: hci3: command tx timeout [ 123.394557] Bluetooth: hci4: command tx timeout [ 123.395002] Bluetooth: hci6: command tx timeout [ 123.458526] Bluetooth: hci7: command tx timeout [ 124.930686] Bluetooth: hci0: command tx timeout [ 125.186527] Bluetooth: hci1: command tx timeout [ 125.187022] Bluetooth: hci2: command tx timeout [ 125.378849] Bluetooth: hci3: command tx timeout [ 125.379341] Bluetooth: hci5: command tx timeout [ 125.442731] Bluetooth: hci6: command tx timeout [ 125.443226] Bluetooth: hci4: command tx timeout [ 125.506521] Bluetooth: hci7: command tx timeout [ 126.980715] Bluetooth: hci0: command tx timeout [ 127.234590] Bluetooth: hci2: command tx timeout [ 127.235016] Bluetooth: hci1: command tx timeout [ 127.426543] Bluetooth: hci5: command tx timeout [ 127.426968] Bluetooth: hci3: command tx timeout [ 127.490531] Bluetooth: hci6: command tx timeout [ 127.490947] Bluetooth: hci4: command tx timeout [ 127.555518] Bluetooth: hci7: command tx timeout [ 181.271266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.276709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.281945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.290670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.296917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.542984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.546482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.550383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.557674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.561994] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.609120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.618921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.635727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.639273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.642228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.654939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.659855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.667477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.670909] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.675063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.678138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.684351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.689153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.694696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.715240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.718073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.728213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.733322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.747919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.792043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.800350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.827778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.854160] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.912308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.931228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.942821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.946341] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.993336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.005645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.016174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.363885] Bluetooth: hci0: command tx timeout [ 183.618657] Bluetooth: hci1: command tx timeout [ 183.746717] Bluetooth: hci5: command tx timeout [ 183.810643] Bluetooth: hci2: command tx timeout [ 183.812631] Bluetooth: hci3: command tx timeout [ 183.874580] Bluetooth: hci4: command tx timeout [ 184.066683] Bluetooth: hci7: command tx timeout [ 184.066742] Bluetooth: hci6: command tx timeout [ 185.410714] Bluetooth: hci0: command tx timeout [ 185.667567] Bluetooth: hci1: command tx timeout [ 185.795834] Bluetooth: hci5: command tx timeout [ 185.860486] Bluetooth: hci3: command tx timeout [ 185.860593] Bluetooth: hci2: command tx timeout [ 185.922569] Bluetooth: hci4: command tx timeout [ 186.115402] Bluetooth: hci7: command tx timeout [ 186.115719] Bluetooth: hci6: command tx timeout [ 187.459679] Bluetooth: hci0: command tx timeout [ 187.715584] Bluetooth: hci1: command tx timeout [ 187.843769] Bluetooth: hci5: command tx timeout [ 187.906764] Bluetooth: hci3: command tx timeout [ 187.907696] Bluetooth: hci2: command tx timeout [ 187.970605] Bluetooth: hci4: command tx timeout [ 188.162509] Bluetooth: hci6: command tx timeout [ 188.162606] Bluetooth: hci7: command tx timeout [ 189.506708] Bluetooth: hci0: command tx timeout [ 189.763784] Bluetooth: hci1: command tx timeout [ 189.891516] Bluetooth: hci5: command tx timeout [ 189.954672] Bluetooth: hci2: command tx timeout [ 189.955144] Bluetooth: hci3: command tx timeout [ 190.018596] Bluetooth: hci4: command tx timeout [ 190.210822] Bluetooth: hci7: command tx timeout [ 190.211854] Bluetooth: hci6: command tx timeout [ 243.919855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.924197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.926047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.930168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.933545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.052172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.056763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.058881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.076199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.080741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.202403] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.205235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.206368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.217846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.221505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.448298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.462266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.462304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.476823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.490800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.492327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.504479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.507975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.519817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.523350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.529578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.530282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.531365] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.545164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.556904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.558153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.560308] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.565755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.567816] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.575775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.586333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.625187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.629491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.647079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.691195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.954552] Bluetooth: hci0: command tx timeout [ 246.146524] Bluetooth: hci1: command tx timeout [ 246.274539] Bluetooth: hci2: command tx timeout [ 246.594564] Bluetooth: hci3: command tx timeout [ 246.659806] Bluetooth: hci4: command tx timeout [ 246.722619] Bluetooth: hci5: command tx timeout [ 246.786568] Bluetooth: hci7: command tx timeout [ 246.787272] Bluetooth: hci6: command tx timeout [ 248.002627] Bluetooth: hci0: command tx timeout [ 248.197703] Bluetooth: hci1: command tx timeout [ 248.322519] Bluetooth: hci2: command tx timeout [ 248.643358] Bluetooth: hci3: command tx timeout [ 248.707877] Bluetooth: hci4: command tx timeout [ 248.770558] Bluetooth: hci5: command tx timeout [ 248.834509] Bluetooth: hci6: command tx timeout [ 248.834568] Bluetooth: hci7: command tx timeout [ 250.052654] Bluetooth: hci0: command tx timeout [ 250.242499] Bluetooth: hci1: command tx timeout [ 250.370605] Bluetooth: hci2: command tx timeout [ 250.690553] Bluetooth: hci3: command tx timeout [ 250.754844] Bluetooth: hci4: command tx timeout [ 250.818579] Bluetooth: hci5: command tx timeout [ 250.882772] Bluetooth: hci7: command tx timeout [ 250.882973] Bluetooth: hci6: command tx timeout [ 252.099740] Bluetooth: hci0: command tx timeout [ 252.290529] Bluetooth: hci1: command tx timeout [ 252.420502] Bluetooth: hci2: command tx timeout [ 252.739526] Bluetooth: hci3: command tx timeout [ 252.805369] Bluetooth: hci4: command tx timeout [ 252.866528] Bluetooth: hci5: command tx timeout [ 252.930564] Bluetooth: hci7: command tx timeout [ 252.930611] Bluetooth: hci6: command tx timeout [ 306.452583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.456143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.461380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.485225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.497975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.591490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.596563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.598803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.611041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.616188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.780074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.785984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.794128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.802761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.810301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.811136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.814374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.815582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.841658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.846150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.003543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.007896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.019293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.030773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.044810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.054727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.054769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.067016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.074807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.083046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.089881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.091921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.097716] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.101590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.103989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.142644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.152949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.243119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.306707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.315339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.546531] Bluetooth: hci0: command tx timeout [ 308.674726] Bluetooth: hci1: command tx timeout [ 308.868480] Bluetooth: hci2: command tx timeout [ 308.931990] Bluetooth: hci3: command tx timeout [ 309.187734] Bluetooth: hci5: command tx timeout [ 309.187815] Bluetooth: hci4: command tx timeout [ 309.250510] Bluetooth: hci6: command tx timeout [ 309.442550] Bluetooth: hci7: command tx timeout [ 310.596472] Bluetooth: hci0: command tx timeout [ 310.724458] Bluetooth: hci1: command tx timeout [ 310.914877] Bluetooth: hci2: command tx timeout [ 310.980523] Bluetooth: hci3: command tx timeout [ 311.236494] Bluetooth: hci5: command tx timeout [ 311.236756] Bluetooth: hci4: command tx timeout [ 311.299784] Bluetooth: hci6: command tx timeout [ 311.490511] Bluetooth: hci7: command tx timeout [ 312.642980] Bluetooth: hci0: command tx timeout [ 312.770658] Bluetooth: hci1: command tx timeout [ 312.963617] Bluetooth: hci2: command tx timeout [ 313.026617] Bluetooth: hci3: command tx timeout [ 313.282660] Bluetooth: hci4: command tx timeout [ 313.283106] Bluetooth: hci5: command tx timeout [ 313.346752] Bluetooth: hci6: command tx timeout [ 313.539461] Bluetooth: hci7: command tx timeout [ 314.690539] Bluetooth: hci0: command tx timeout [ 314.818773] Bluetooth: hci1: command tx timeout [ 315.010545] Bluetooth: hci2: command tx timeout [ 315.074723] Bluetooth: hci3: command tx timeout [ 315.330568] Bluetooth: hci4: command tx timeout [ 315.330588] Bluetooth: hci5: command tx timeout [ 315.396520] Bluetooth: hci6: command tx timeout [ 315.586504] Bluetooth: hci7: command tx timeout [ 369.308611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.316236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.319798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.330254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.336773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.379560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.385825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.389915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.399510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.404144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.579906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.606147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.613985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.619723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.622116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.626191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.637910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.647046] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.664397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.668912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.674180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.678798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.684091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.691179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.728827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.734368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.735881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.737638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.739325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.749126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.759169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.763209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.779212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.809976] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.811762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.816971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.818729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.850276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.869677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.883096] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.394746] Bluetooth: hci0: command tx timeout [ 371.458601] Bluetooth: hci1: command tx timeout [ 371.714694] Bluetooth: hci3: command tx timeout [ 371.844481] Bluetooth: hci2: command tx timeout [ 371.845101] Bluetooth: hci5: command tx timeout [ 371.906691] Bluetooth: hci4: command tx timeout [ 371.970518] Bluetooth: hci7: command tx timeout [ 371.971064] Bluetooth: hci6: command tx timeout [ 373.442776] Bluetooth: hci0: command tx timeout [ 373.507167] Bluetooth: hci1: command tx timeout [ 373.763642] Bluetooth: hci3: command tx timeout [ 373.892594] Bluetooth: hci5: command tx timeout [ 373.893040] Bluetooth: hci2: command tx timeout [ 373.955838] Bluetooth: hci4: command tx timeout [ 374.020500] Bluetooth: hci6: command tx timeout [ 374.020944] Bluetooth: hci7: command tx timeout [ 375.491487] Bluetooth: hci0: command tx timeout [ 375.555472] Bluetooth: hci1: command tx timeout [ 375.810800] Bluetooth: hci3: command tx timeout [ 375.938568] Bluetooth: hci2: command tx timeout [ 375.939081] Bluetooth: hci5: command tx timeout [ 376.003511] Bluetooth: hci4: command tx timeout [ 376.066747] Bluetooth: hci6: command tx timeout [ 376.067248] Bluetooth: hci7: command tx timeout [ 377.539704] Bluetooth: hci0: command tx timeout [ 377.602880] Bluetooth: hci1: command tx timeout [ 377.858594] Bluetooth: hci3: command tx timeout [ 377.987098] Bluetooth: hci2: command tx timeout [ 377.988125] Bluetooth: hci5: command tx timeout [ 378.050559] Bluetooth: hci4: command tx timeout [ 378.116527] Bluetooth: hci6: command tx timeout [ 378.118201] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:04:27 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007f515ba5e699 RCX=ffff88803658f60c RDX=0000000000000000 RSI=ffffffff85c1cbc0 RDI=ffff8880181cbafc RBP=0000000000000001 RSP=ffff88803658f650 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c74ee8 R15=0000000000092800 RIP=ffffffff81741104 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc85d53f38 CR3=000000001ccc7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000001112935ca8c RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000111 RSI=ffff88806cf238c0 RDI=000000000005095a RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000e6acb R11=0000000000000001 R12=000000000005095a R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080 RIP=ffffffff813276b5 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f84e3794540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055af185004c8 CR3=000000001cd9e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000