Warning: Permanently added '[localhost]:38021' (ECDSA) to the list of known hosts. 2025/06/15 10:52:32 fuzzer started 2025/06/15 10:52:32 dialing manager at localhost:42061 syzkaller login: [ 101.534314] cgroup: Unknown subsys name 'net' [ 101.638300] cgroup: Unknown subsys name 'cpuset' [ 101.668762] cgroup: Unknown subsys name 'rlimit' 2025/06/15 10:52:49 syscalls: 204 2025/06/15 10:52:49 code coverage: enabled 2025/06/15 10:52:49 comparison tracing: enabled 2025/06/15 10:52:49 extra coverage: enabled 2025/06/15 10:52:49 setuid sandbox: enabled 2025/06/15 10:52:49 namespace sandbox: enabled 2025/06/15 10:52:49 Android sandbox: enabled 2025/06/15 10:52:49 fault injection: enabled 2025/06/15 10:52:49 leak checking: enabled 2025/06/15 10:52:49 net packet injection: enabled 2025/06/15 10:52:49 net device setup: enabled 2025/06/15 10:52:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/15 10:52:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/15 10:52:49 USB emulation: enabled 2025/06/15 10:52:49 hci packet injection: enabled 2025/06/15 10:52:49 wifi device emulation: enabled 2025/06/15 10:52:49 802.15.4 emulation: enabled 2025/06/15 10:52:49 fetching corpus: 0, signal 0/0 (executing program) 2025/06/15 10:52:51 starting 8 fuzzer processes 10:52:51 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100, 0x6902) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x0, "a41522d8dd6189fe40e34d3acc16a98667f0bd2a5fda951c7a470ebe1ff10508b1961a98ef5a67a7529bea013dfa432df4670246b52c05c8dcd4d3c835f932b1"}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) read$hidraw(r0, &(0x7f0000000100)=""/156, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8c98e7e397c77a7c9d01f341ac"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000400)=""/68, 0x44) r3 = syz_open_dev$hidraw(&(0x7f0000000480), 0x4893eea, 0x80) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000004c0)={0x4, "c0555bc1984fa58a00622bbce4e4df5d0cdfd75193e1ced5c029a39b07da6d0ff182a1845333fc604f1e889125097426b5dccdb7d80a474ccf8e4b640a21f062"}) syz_open_dev$hidraw(&(0x7f0000000540), 0x4b2, 0x40000) r4 = openat$cgroup_ro(r2, &(0x7f0000000580)='pids.current\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vlan0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x15) socketpair(0x27, 0x800, 0x48, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d1) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000980)="2a58b322cd5bae01c83374d03eaf1bd0dc863b95732e8d") 10:52:51 executing program 1: getgroups(0x5, &(0x7f0000000000)=[0x0, 0xee00, 0xee01, 0x0, 0xffffffffffffffff]) r2 = geteuid() r3 = getgid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0xee01, r0, r2, r3, 0x150, 0x1}, 0x0, 0x0, 0x3, 0xe85, 0xd299, 0xf1, 0x6, 0xbeb8, 0x8, 0x3, 0x0, 0xffffffffffffffff}) r4 = memfd_secret(0x80000) getgid() r5 = syz_io_uring_setup(0x7c52, &(0x7f00000000c0)={0x0, 0x1d2a, 0x2, 0x2, 0x85, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x3, 0x1, &(0x7f00000001c0)="3b10684e1ba29793a0099b67203ce09b7f6ea44df2006cb3876e5be499021ad9c7f534b1cbc4c08e9c1fe909ab7cd7f2467bee1dfb", 0x6f, 0x0, 0x0, {0x3}}, 0x3) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) mq_getsetattr(r4, &(0x7f0000000300)={0x4, 0x5, 0x0, 0xffff}, &(0x7f0000000340)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgrp(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x1, r2, r8, r2, 0xee01, 0x2, 0x9}, 0x36fd, 0x9, 0x400, 0x5, r9, 0x0, 0x9}) r10 = pidfd_getfd(r4, r5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f00000004c0)=r10, 0x1) r11 = geteuid() r12 = getgid() r13 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x0, r11, r1, r7, r12, 0x25ccdefc4c8a62c1, 0x7f}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x0, 0xbae, 0x3ff, 0x8001, 0x1, 0x1000, r13, r9}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x2, 0x80, 0x12, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x40, 0x1, 0x3}}) 10:52:51 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x200408c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}}, 0x4004400) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000003c0)=""/13) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0xb671953b28d8f8b1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5b3b9886}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x402c000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8040015) r6 = msgget(0x0, 0x0) msgsnd(r6, &(0x7f00000009c0)={0x1, "af22d1f1c88d823922dc7ff8e720cdf2b39a654c4a477d78948b1b69c9fbb22b3a3b5a0c6658cac5067bd9136e30de68f0f847a9eac5e4364d"}, 0x41, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x48c1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 119.631352] audit: type=1400 audit(1749984771.197:7): avc: denied { execmem } for pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:52:51 executing program 3: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x63da89801d6cbae7, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004000}, 0x8001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4aa}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x40815}, 0x24040004) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c800}, 0x4040) syz_io_uring_setup(0x1b00, &(0x7f0000000340)={0x0, 0x46b5, 0x8, 0x3, 0x145}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL, 0x8) r2 = memfd_secret(0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1400c000}, 0x880) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0xc01, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xf85, 0x5, 0x4, 0x20}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000880)='blkio.bfq.sectors\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r6) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000004) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r7, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) getrusage(0x1, &(0x7f0000000ac0)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r2) 10:52:51 executing program 4: r0 = fork() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) r1 = syz_io_uring_complete(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r1, 0x1) r2 = getpgrp(r0) capget(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000000c0)={0x5, 0x0, 0x6, 0x3, 0x8, 0x2}) setsockopt(r1, 0x961, 0x66e, &(0x7f0000000100)="d8856fb979608de54749b7e5ccbb780690edab", 0x13) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0xfff8}, 0x0, 0x0, 0x4, 0x401, 0xa6, 0x65e, 0x5, 0x9, 0x0, 0xc, r2, r2}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x4000055) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000002c0)) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x11, 0x0, 0xe0, 0xfffffffc, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8, 0x8000, 0x7f, 0xfffff801}}) r5 = msgget(0x0, 0x30b) msgctl$IPC_STAT(r5, 0x2, &(0x7f00000003c0)=""/169) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r6 = syz_io_uring_setup(0x3221, &(0x7f0000000700)={0x0, 0x1b36, 0x10, 0x2, 0x161}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000800)=@IORING_OP_FALLOCATE={0x11, 0x7, 0x0, @fd_index=0x4, 0x20, 0x0, 0x10000}, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x828060}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1a162604}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040044}, 0x800) 10:52:51 executing program 5: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x8c1, "4a5cc9035490966aa1ff734bf52e35ce9f23ceb4e84235c07f306879f3575ec4a53c0764f6bf42dbb35becee3f541a3b9f52f2755dd259b64ad6209410528ae4ccd1e743c03309e9bdd5bdbd5c6e365b8818616626a537b2c8f9e0f2207918a7c22b0a4cc7432df3b133f361111f91b56387d5d30bd7a45aa85445256ba357b949fac00bb56d113797fba2e768ab1ca0ae48a6060d22c840256ba24db12df703ad247e36a9f2caa67fb80d6f4b959b71f78ddf4d425cbde55033c248d0ef5373bc0e88168a241f02ca7db7d2c49e1875256e66c4e4572808240c12f8af101c9b169603b80ff4bcec66249e1caf8f727d2514269e59882e88796eee6c2a2fce1ef239c6019abf0ead2ff3f50b0df50f749c2106c693df6286b159c9decb5ade8c484443dfd80e46c9bb992a98de2b35dbda92494640ff53b824745fe580c7559bfc8574eb306e243311953b2b6305dee945b4580d533bab6662583f0876978a6c365b9762aea2ae86f409824b45b44bde4306391dcc4da79aa818e281ee57f34c0c6eac20b0a228efb2cddcbf7c09178cb9a78fd4f3a9ad7c8413e568b4a00f6ca605a7ffc46cbb57bd0e011e453d6758bacd6d86a33e7fe9b9d262d519cef0aac6cc1522b837d4798524298944e3f12793bf04442b174beb0cd8a7c949f85c383542611b336c380a314bd08babeac597c8fab38206785ccc59d01f659d0dfae5f8ef891c188adc3089958217d11cf2442fa5d49600fab1546329b8b72c9d55307928667e9f380feb8bbeebf80ec436312126eea4bb684a33bf2780026c792709188c151fd3654b6de50bde18ec7b59ccdac32392ab08aeb7c5377acb6e9f3429460eb8ac9ee9a54d66d5a43537ac652a9005107fa4e4632db75c8376a3a478f11b4a6b30dc0e285af5950621d50893939fffe309f3095973c5d261ed1206eee35da0eb5007fd926a5242d142d7eafb9885086bcda5fb1f83519e0121975ee52a83c41a34cad132311cac3373f5ab8453329ba020f95c917ccdcb4a942c9c9d3b2153cabab13c4ee3e7aebf0f7465990b80dc496e3efcad5d76d49981b8a3ee72bb46305c74d01edc8566406afa397ff273d73dcc78d5702c634bde53062590ae53b7bc5fbb1ffd7cd11afc7d5544127a9fdfec4ad5c84034f79db69a092b604cc825defe987755b1585d443092dff74c1d3e2a6ea801eec4dcd3780947ba994b05a0c4bd51bab6deaabb4288c07d14d04a4cd54c8b017057a630b370901638ad6fd4e5e88debae1ec7e1f562a1d87f53836490ab2f2fc74dcf557a87e82ba48f1813ea1477173c6a0901fdc5f2f1f03498b5ae3e8bb363f4c3914b48d9615732f31c6b19705482138dd3e947d5e33d2831bde1e681716cdb49ff2e21cbe9f791c1debc50c2224c444aaa8ac79e432956e2b127be635eb9d3f7cc1673b084d23f1028db0edaf9536b6c77f3dfbe20fba84028cdd49bf4bad7aee73c5a38ebe345bf88faf5034d4ef5518dd42237f84c236e58fbe776060b095479e44576b27c48bc00fb1fb70ed27280c8296284cec228467ba7e576f543af8277c3e13d8dc5ef3ca65a43f88432775a5eea49253affc8f0da37c5b8030e190863726e2515ae8df8b1ca74849bedfb159228c135c6475ad35d78a051d81e6d4648e462dbc8e197df988464107a9dac59ad6d660342f87f533ca6961c26ce02a184cc6c65271a364251624d283100cac968c782f43e8ce838039b10fed4823a6f10498deb4ed458739cedbef5aacb62704f20042a5e7c9790a5e8af5a1b961216ab979dcd8c2786f7ce012fbbf6c90b16c80eee5eab1d57487bf5810afa7da4096e988b3ea34b7f6c5a5d97a5cd25d784e25b3205bd3e15e05fa8f45195ca1cc09c2200bfd4336d763812ac24c5eaf2b8148859ab0fbdfd24066e3a1b646c48471949e10572417d6e77d81cb694d1c815c2e1bd1abd7f38c77a73d31868b096c338b1f16eb6e9527fad39f2e4b680e03405e0c8b3388f4e6de4fca03cc5d0e599cc2c32ec95130f7fb25b1118a78976cb8a797641d215fed60a062c65ff3f7980d1b6b5209d8dfe1f18faf851d20579bde40c8dea79f76583189eee4e9888a7fa7dd957982cebfbbc1dec29fbacf34a1b6572eb656ba158bd04471ceebdf89ab7ead70930ceed94aa7bb960c796859f1314708a8ebdc0c03ca50d8ce21fea8d9d6110e750b5de1073b39566d58d0d0a78f2b56d6f7bcc7c3c4e41df0812a86ed6b204261bfd4e00f49daf6b169dda14c64b63c044e82b161e9ef7760ade99e1bfce8838de7d4ecd25ff1449336fcfd8bf3af90801011b81a63c4b7310716b7faf521c1aa9fe023ec0c16f7720675e0223975be8e9bad957aa7b95b0f8efc0d459184b567a2f804c4e6804b3ae0f3750adc22eb100afbd5a8b2697d1065b560bee8f6cb70307c252a5304dffb0987799d86a1bdcef1f657ed856ddb2fb5fec0edc305232a39807f0164e8c23893c949e39233e0e1ee086be5934be3e011a1a3992ffc74eb4470381f0426858978b6951482550da4b284d41d15111d68796992723e080d5b2a9f403129ef335bde3e9b4f564e30426dc9e17140fc4933a58c77d1ac27fa1bc44d43f18290c3689d47419bef7b72e859794dea6dc4d0987acb0f0c05ee8304d6c6f22e41fcdb26cd4e9afa9cdbde7e4fbd497481b811f43b014d84757c637ac4c8187dc03d4f1403548f0610b8422d7e813e39d69b5c10deb841e9e45981abd1d285090bd27ba76e2e278e9e271f665382da453bda220181a577e6af7a43424412c2cd163434e65d7246ccecf4d8674823f89cc19036668612e3ad18a5c8992d972e52b1249c1697b402113bdf9066b32e674d513eec9e859212e6b66552ba331ef0571b445d6e58b91e6c40b750821ca46d98bf76fce58d605e923feda7177d8266d59cb4963a98c10570b306d6a4fa90f771bb18c41ce468ae431cebc7c3111d85a340038bf3f2ea2e2e28dade50c5e9c92436046faf3816f2b039500e7fd732c3f5a5f3d15a00c4cc30430e977ee0e2dacc8f1acafd257618610bab50d9cc30b484bde8257ac51ba8ccbfdc535b279c9bdd61de2dc03e9a31fa26631a01f26e808804dd4cc5fe7ff4a6a0106dd03e83346ee873332980fc4a147711b4f74b40552a4"}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000940)=""/194, 0xc2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs2/custom0\x00', 0x1002, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0xc, 0x0, &(0x7f0000000ac0)=[@dead_binder_done], 0xd8, 0x0, &(0x7f0000000b00)="20aacef0991855db608c7b2c09854b313b967f7530c2790fe31cec09d8f72066cf6fde543fdbca91dd57ffc4367e44c3959aed885e631003569a26c6a8d5167e63e5c40770dcda5cb7d0318ef23f3ada596734e2a9db622d0fdf8cd4acb8dd865dd3b750546f4c104bb4fd906c35c4ab39346fa385069b21e312404abb276993bb0b57ebf4bedce93ada20570f71bcaf73ced54f4b9e827987b8e2e7e2546cb1770261165a94b738b4058ee5ce565b790fd7bfa953325449720b1866bb3a9f0682be6d6f0458004b494c4e6e25864a87a3c03a6e809bacf3"}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000c40)=r0, 0x1) r3 = syz_io_uring_complete(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x10, r3, 0x8000000) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000e40)) r5 = syz_open_dev$hidraw(&(0x7f0000000e80), 0x100000000, 0x414002) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000000ec0)) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000000f00)) openat$cgroup_freezer_state(r1, &(0x7f0000000f40), 0x2, 0x0) r6 = syz_io_uring_complete(r4) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000f80)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x68, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4044844) 10:52:51 executing program 6: sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="eebe84e460b2b0c24ffdec658015204823d03cb707bc0e1f826538effe8fcdc9a5f85034116507766c741dc4d7900e0efc818a2af745bc2703668dcaf446e230e7adab6c10adca72e423e851a4a0e6bf4774569c9f0b91204800b1fe3ede284b6e94bb59308941b51b8a44c4a2df7ca36ba9874fd2a758cf4059757eb98f596aa1bf8c8e423fe3361348245304a55d5d866e522df523663d2d68aa466c408e8b86b1db6a9546deeb5ef8798f6f06e9b2cb7e75aeca55a6d681a692d5aeb68dbd9ea9ae21e78029f19a7ca0e49d5590fa85945b50", 0xd4}, {&(0x7f0000000100)="54c7523ac880b26978d04700f3ce20125b55b827a93050f56cf4d8dd6a6fe6383c6dd9fad0a4bcef63582aabeb6d6bf81d7436b71bbe16e9bf01ba42585884fd4dd5c9e0fdae59ac930dd0f7c42ee49140efdb8cd695f68f987d0fcd74bc0c20aa456a895c12edb6b09f6aaf8afbbf6ba97e93ba3fc8a594fffb03e411b8c61df66b806f3151eded7e94a29c537b8daf512215c83629ef7b22a2943a6e79cbc93b8b19255dcc9733625a9b4b75c25229cf33e3a17ff09eedf55969e9a8ea4b4c7ce67fda778d17db321d168dba817f92767933eb0b682842c7ea983eb1ec61db6116401f78295630fcf3f6", 0xeb}], 0x2, &(0x7f0000000240)=[{0x80, 0x11, 0x9, "1f1a13ae5d6ff0393f770ebe87fd03315120efea5ce9fb4423e55ddafbf9158f016d1b45c0ddd284447a54ea66f74131858cf51d478d267e66c4df2387b6b99a73ace7402592dd864297a3536932f37f968b0fff7520c578d307035ad94d774a50e350a5f5b117debab36163"}, {0x68, 0x11, 0x43, "aae97f755b0085bc52e12521ba803ca9193f9ea2d114d47982bd7fe745c368886df358e5ef477236104ed05aa41089ac31b75a05c6c5f6b8211bf3c84cd3804236b0a9defceddaa530e4e4c542bb7e792c36"}, {0x110, 0x24624ae5b01a89d, 0xffffffff, "56b4be30a0cfd17f1874d722a673b32dc5139fda762b322ae99073b15ca6f26e3a2d17f7ec5b04c257a5fa9ba57a45bbfac6f77958f134c15fa1030ddfa6a2f19d52264c879c61c32c5b60b7bf731ddf805039728c90a4473b88a016b34886db07bcbde23df4e3596ce1f4fd0401a4e79c34fd000d56b4d13d4376391d5a0827a6bccf20bf3788f1bfc3ee052be76075390c1a402541cbda8bb7f01a98e4437416c4733473da0a93136705103d16e6346a0c1fc084e34f1917f0e8157c8d108f26785a1d4ff6ba61e8fd937b3c00d840c9c0b65d37d3559449f30544e046958988a2ca9b0c44319abd558e3630e9678459f42b87a03906f1e9"}, {0xd0, 0x10e, 0x20, "f100773b5ad2c9d887168dbf73aa2ab10f00226d05f36bc543c72eba7565c2ef3f625b1965b3164597146b3a0469a21011b9d15a8a085436f0f0070d23962b5df971255f4c965d76c84f8c3de9cf0dcc6213efdb088d7dce4c2e9f5e12c6b3a5789b0c707d508baef1fa723de21ed4225d6c0cb09cdde7f3ed541210d5337ab71426fc6ba963904dccb87817dffb462e7ebf86f4f0140ff5154349717d2f009d003cc5f01bb85d35dea521469a09ee885d4102d545ed91065a5e745be973e49f"}, {0xd0, 0x9b02046ae79582d4, 0x3, "b2a36dacbbf1c1a360ed5468941f8a3c76f8064294bd6191aca30c9343e994863c46a0675c7efd6f07a333d9bac8b3f66d3b68ab9f150615940676a6f66c6abb4eeffdab3f679562c3144bb5dc9049c0ccd9f547e19d8296ff4794a315423c1fe8d8b866a61d1cf4062852d286ce090de3e8ec7c3b194cef0ea6abffbaec39fc32ac868650ccec0b8f37f82e2238624bc1a540fc1a6fdc9de12b64b32a34f1817af4b2feed3dded7a2859de32fac31a06035a054d90a30271fc3b2aa"}], 0x398}, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000640)={'veth0_to_bridge\x00', @multicast}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x300088d0}, 0x884) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$hidraw(r1, &(0x7f0000000780)="746857c98f5e4fc3ab12de3019902100969aaba51871d82b483b9ae7f688d1a8717a8202b3614d8fc37de009b7b871923cdd1703db5252e0f74a37455580a8bd34d2ae7e10beec82cb91cb", 0x4b) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000800)={0x1, 'veth1_virt_wifi\x00', {}, 0x9}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000900)={'rose0\x00', {0x2, 0x0, @empty}}) socketpair(0x25, 0xa, 0x10001, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x3, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0xc01, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x848}, 0x20008000) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x4004) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000f00), &(0x7f0000000f40)=0x30) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "507695bb22dbdbbe5d27e029dbd276ba"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5bef2ca6524d44a81e238a065716533aef0e1c7ea9cf0d7c11a01a7da0929b3d"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a5073ae3865ec55d0b58c720b030ba85"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ddb1bba9de0a66dd9ecd6baed21f0afd32084b92af53dac7435ae70994b24cd1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2b8a3c103edb78ea985aa351f0b2ade5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ba3a32572abea8d6d14c44cba04355e98d3f412ffe5f3c57781c5655ebdb1ee"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x90}, 0x8) 10:52:51 executing program 7: io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) r0 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) r1 = socket(0x1a, 0x80000, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xab) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0)=r0, 0x1) io_uring_setup(0x2b69, &(0x7f0000000100)={0x0, 0xcc34, 0x8, 0x1, 0x376, 0x0, r0}) r2 = syz_io_uring_setup(0x1a5, &(0x7f0000000180)={0x0, 0xbf02, 0x4, 0x1, 0x2f8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r3 = eventfd2(0x100, 0x80000) r4 = pidfd_getfd(r0, r3, 0x0) read$eventfd(r4, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'sit0\x00', r5, 0x29, 0x20, 0x40, 0x400, 0x4, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8, 0xb7c, 0x3}}) r6 = pidfd_getfd(r4, r2, 0x0) openat$cgroup_ro(r6, &(0x7f0000000440)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4061}, 0x2048081) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), 0xffffffffffffffff) r7 = io_uring_setup(0x6573, &(0x7f00000005c0)={0x0, 0xf19d, 0x8, 0x3, 0x1cd, 0x0, r0}) r8 = syz_io_uring_setup(0x4bff, &(0x7f0000000640)={0x0, 0x2181, 0x4, 0x2, 0x25, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000740)=r3, 0x1) [ 121.096868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.103939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.106872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.118241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.124259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.169164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.172778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.175318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.183073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.192115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.218091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.222144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.224836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.228064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.233751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.237862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.239264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.267941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.270570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.272382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.275576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.281479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.285836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.290644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.292993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.304384] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.305682] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.338740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.341013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.345252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.357136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.360036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 121.374437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.376350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 121.419343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.420703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 121.432755] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 121.437360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.478297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.480291] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.181585] Bluetooth: hci0: command tx timeout [ 123.309576] Bluetooth: hci1: command tx timeout [ 123.372520] Bluetooth: hci4: command tx timeout [ 123.436581] Bluetooth: hci2: command tx timeout [ 123.437354] Bluetooth: hci5: command tx timeout [ 123.438564] Bluetooth: hci3: command tx timeout [ 123.564540] Bluetooth: hci7: command tx timeout [ 123.628598] Bluetooth: hci6: command tx timeout [ 125.228922] Bluetooth: hci0: command tx timeout [ 125.358495] Bluetooth: hci1: command tx timeout [ 125.420677] Bluetooth: hci4: command tx timeout [ 125.484789] Bluetooth: hci5: command tx timeout [ 125.485292] Bluetooth: hci3: command tx timeout [ 125.486557] Bluetooth: hci2: command tx timeout [ 125.613482] Bluetooth: hci7: command tx timeout [ 125.676539] Bluetooth: hci6: command tx timeout [ 127.276666] Bluetooth: hci0: command tx timeout [ 127.404786] Bluetooth: hci1: command tx timeout [ 127.469007] Bluetooth: hci4: command tx timeout [ 127.533469] Bluetooth: hci3: command tx timeout [ 127.533913] Bluetooth: hci2: command tx timeout [ 127.534335] Bluetooth: hci5: command tx timeout [ 127.660669] Bluetooth: hci7: command tx timeout [ 127.724564] Bluetooth: hci6: command tx timeout [ 129.325515] Bluetooth: hci0: command tx timeout [ 129.452852] Bluetooth: hci1: command tx timeout [ 129.517665] Bluetooth: hci4: command tx timeout [ 129.581519] Bluetooth: hci3: command tx timeout [ 129.581964] Bluetooth: hci5: command tx timeout [ 129.582386] Bluetooth: hci2: command tx timeout [ 129.709511] Bluetooth: hci7: command tx timeout [ 129.772539] Bluetooth: hci6: command tx timeout [ 183.553061] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.557295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.559052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.566230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.570055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.614676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.623073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.625147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.631018] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.635771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.638838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.640973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.642089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.644262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.645376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.649767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.649980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.652738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.653691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.655642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.659648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.669654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.669754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.679726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.680155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.683034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.687416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.689771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.690762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.698224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.699589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.717751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.717770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.729059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.734357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.739876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.762687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.767792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.771251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.773394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.646051] Bluetooth: hci0: command tx timeout [ 185.709042] Bluetooth: hci1: command tx timeout [ 185.710500] Bluetooth: hci2: command tx timeout [ 185.772642] Bluetooth: hci3: command tx timeout [ 185.772794] Bluetooth: hci4: command tx timeout [ 185.773894] Bluetooth: hci5: command tx timeout [ 185.836637] Bluetooth: hci7: command tx timeout [ 185.839576] Bluetooth: hci6: command tx timeout [ 187.692590] Bluetooth: hci0: command tx timeout [ 187.757120] Bluetooth: hci2: command tx timeout [ 187.758412] Bluetooth: hci1: command tx timeout [ 187.821119] Bluetooth: hci4: command tx timeout [ 187.822244] Bluetooth: hci3: command tx timeout [ 187.822276] Bluetooth: hci5: command tx timeout [ 187.884901] Bluetooth: hci7: command tx timeout [ 187.885043] Bluetooth: hci6: command tx timeout [ 189.741516] Bluetooth: hci0: command tx timeout [ 189.804722] Bluetooth: hci2: command tx timeout [ 189.804897] Bluetooth: hci1: command tx timeout [ 189.869170] Bluetooth: hci5: command tx timeout [ 189.869775] Bluetooth: hci4: command tx timeout [ 189.870108] Bluetooth: hci3: command tx timeout [ 189.933505] Bluetooth: hci6: command tx timeout [ 189.933914] Bluetooth: hci7: command tx timeout [ 191.789534] Bluetooth: hci0: command tx timeout [ 191.854575] Bluetooth: hci2: command tx timeout [ 191.855338] Bluetooth: hci1: command tx timeout [ 191.916826] Bluetooth: hci3: command tx timeout [ 191.917769] Bluetooth: hci4: command tx timeout [ 191.918559] Bluetooth: hci5: command tx timeout [ 191.980833] Bluetooth: hci6: command tx timeout [ 191.980918] Bluetooth: hci7: command tx timeout [ 245.772985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.780092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.780277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.784291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.785134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.787140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.789812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.792080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.800572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.809273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.828651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.837229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.849853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.854345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.857714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.985774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.003818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.007141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.008488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.010689] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.013268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.018015] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.040175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.050051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.068651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.077926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.085335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.099603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.102236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.105175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.113209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.125719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.127499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.141924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.148046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.148992] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.204620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.224017] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.238539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.253729] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.853119] Bluetooth: hci1: command tx timeout [ 247.916549] Bluetooth: hci0: command tx timeout [ 247.917230] Bluetooth: hci2: command tx timeout [ 248.045196] Bluetooth: hci4: command tx timeout [ 248.239411] Bluetooth: hci7: command tx timeout [ 248.428907] Bluetooth: hci3: command tx timeout [ 248.492593] Bluetooth: hci6: command tx timeout [ 248.493606] Bluetooth: hci5: command tx timeout [ 249.901797] Bluetooth: hci1: command tx timeout [ 249.965529] Bluetooth: hci0: command tx timeout [ 249.966010] Bluetooth: hci2: command tx timeout [ 250.093505] Bluetooth: hci4: command tx timeout [ 250.285843] Bluetooth: hci7: command tx timeout [ 250.477788] Bluetooth: hci3: command tx timeout [ 250.541548] Bluetooth: hci5: command tx timeout [ 250.542046] Bluetooth: hci6: command tx timeout [ 251.949528] Bluetooth: hci1: command tx timeout [ 252.012530] Bluetooth: hci2: command tx timeout [ 252.013005] Bluetooth: hci0: command tx timeout [ 252.141269] Bluetooth: hci4: command tx timeout [ 252.335130] Bluetooth: hci7: command tx timeout [ 252.524594] Bluetooth: hci3: command tx timeout [ 252.588571] Bluetooth: hci6: command tx timeout [ 252.589320] Bluetooth: hci5: command tx timeout [ 253.997517] Bluetooth: hci1: command tx timeout [ 254.060909] Bluetooth: hci2: command tx timeout [ 254.062484] Bluetooth: hci0: command tx timeout [ 254.188553] Bluetooth: hci4: command tx timeout [ 254.380624] Bluetooth: hci7: command tx timeout [ 254.573495] Bluetooth: hci3: command tx timeout [ 254.637532] Bluetooth: hci5: command tx timeout [ 254.637970] Bluetooth: hci6: command tx timeout [ 308.359788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.364079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.368631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.378141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.385716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.436901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.442664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.445653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.448943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.451010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.454997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.472252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.477990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.485952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.490029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.491993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.494120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.504686] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.516986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.539284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.554506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.565901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.573205] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.585006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.590989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.592844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.594926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.612858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.614597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.616835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.629026] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.635080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.641122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.654512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.659068] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.666074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.672001] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.730951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.746242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.757154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.445645] Bluetooth: hci0: command tx timeout [ 310.575809] Bluetooth: hci1: command tx timeout [ 310.576567] Bluetooth: hci2: command tx timeout [ 310.637571] Bluetooth: hci4: command tx timeout [ 310.700540] Bluetooth: hci6: command tx timeout [ 310.701563] Bluetooth: hci3: command tx timeout [ 310.764809] Bluetooth: hci5: command tx timeout [ 310.829580] Bluetooth: hci7: command tx timeout [ 312.492811] Bluetooth: hci0: command tx timeout [ 312.620688] Bluetooth: hci2: command tx timeout [ 312.621177] Bluetooth: hci1: command tx timeout [ 312.685505] Bluetooth: hci4: command tx timeout [ 312.748900] Bluetooth: hci3: command tx timeout [ 312.749380] Bluetooth: hci6: command tx timeout [ 312.813056] Bluetooth: hci5: command tx timeout [ 312.877747] Bluetooth: hci7: command tx timeout [ 314.541493] Bluetooth: hci0: command tx timeout [ 314.668719] Bluetooth: hci1: command tx timeout [ 314.669564] Bluetooth: hci2: command tx timeout [ 314.732619] Bluetooth: hci4: command tx timeout [ 314.796663] Bluetooth: hci6: command tx timeout [ 314.796856] Bluetooth: hci3: command tx timeout [ 314.861639] Bluetooth: hci5: command tx timeout [ 314.925674] Bluetooth: hci7: command tx timeout [ 316.589843] Bluetooth: hci0: command tx timeout [ 316.717938] Bluetooth: hci2: command tx timeout [ 316.718058] Bluetooth: hci1: command tx timeout [ 316.780508] Bluetooth: hci4: command tx timeout [ 316.844756] Bluetooth: hci3: command tx timeout [ 316.845768] Bluetooth: hci6: command tx timeout [ 316.908660] Bluetooth: hci5: command tx timeout [ 316.972588] Bluetooth: hci7: command tx timeout [ 370.562915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.569084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.577078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.587673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.593027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.698258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.700976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.707895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.716598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.720616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.837525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.848163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.852342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.891049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.904847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.907695] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.911375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.918194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.920361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.924088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.939979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.948017] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.973188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.973921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.001841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.007983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.017042] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.022502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.049947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.082027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.213284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.224671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.253307] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.315245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.324949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.364800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.392969] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.395727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.403322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.446889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.652844] Bluetooth: hci0: command tx timeout [ 372.780812] Bluetooth: hci1: command tx timeout [ 373.037821] Bluetooth: hci3: command tx timeout [ 373.037869] Bluetooth: hci2: command tx timeout [ 373.164684] Bluetooth: hci4: command tx timeout [ 373.164887] Bluetooth: hci5: command tx timeout [ 373.420877] Bluetooth: hci6: command tx timeout [ 373.548651] Bluetooth: hci7: command tx timeout [ 374.700504] Bluetooth: hci0: command tx timeout [ 374.829052] Bluetooth: hci1: command tx timeout [ 375.084606] Bluetooth: hci3: command tx timeout [ 375.085097] Bluetooth: hci2: command tx timeout [ 375.213274] Bluetooth: hci5: command tx timeout [ 375.213907] Bluetooth: hci4: command tx timeout [ 375.468543] Bluetooth: hci6: command tx timeout [ 375.596825] Bluetooth: hci7: command tx timeout [ 376.748520] Bluetooth: hci0: command tx timeout [ 376.878504] Bluetooth: hci1: command tx timeout [ 377.132723] Bluetooth: hci3: command tx timeout [ 377.132830] Bluetooth: hci2: command tx timeout [ 377.260750] Bluetooth: hci5: command tx timeout [ 377.261608] Bluetooth: hci4: command tx timeout [ 377.516787] Bluetooth: hci6: command tx timeout [ 377.645285] Bluetooth: hci7: command tx timeout [ 378.797465] Bluetooth: hci0: command tx timeout [ 378.924580] Bluetooth: hci1: command tx timeout [ 379.180618] Bluetooth: hci3: command tx timeout [ 379.181644] Bluetooth: hci2: command tx timeout [ 379.309527] Bluetooth: hci4: command tx timeout [ 379.309957] Bluetooth: hci5: command tx timeout [ 379.565743] Bluetooth: hci6: command tx timeout [ 379.693777] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:58:01 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b3ac01 RDI=ffffed1006a43c31 RBP=ffff88803521e188 RSP=ffff888029157748 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff86415957 R11=0000000000000001 R12=0000000000000001 R13=ffffffff84b3ac01 R14=0000000000000000 R15=ffff888030be6b40 RIP=ffffffff81aebe7f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5573730540 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa14e550000 CR3=000000000bf5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880349f3700 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88806cf08990 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b4ed R11=0000000000008640 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246 RIP=ffffffff8151b013 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5eb393f8e0 CR3=0000000025992000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000