Warning: Permanently added '[localhost]:32954' (ECDSA) to the list of known hosts. 2025/06/18 03:31:27 fuzzer started 2025/06/18 03:31:27 dialing manager at localhost:34087 syzkaller login: [ 93.281104] cgroup: Unknown subsys name 'net' [ 93.428104] cgroup: Unknown subsys name 'cpuset' [ 93.475733] cgroup: Unknown subsys name 'rlimit' 2025/06/18 03:31:43 syscalls: 201 2025/06/18 03:31:43 code coverage: enabled 2025/06/18 03:31:43 comparison tracing: enabled 2025/06/18 03:31:43 extra coverage: enabled 2025/06/18 03:31:43 setuid sandbox: enabled 2025/06/18 03:31:43 namespace sandbox: enabled 2025/06/18 03:31:43 Android sandbox: enabled 2025/06/18 03:31:43 fault injection: enabled 2025/06/18 03:31:43 leak checking: enabled 2025/06/18 03:31:43 net packet injection: enabled 2025/06/18 03:31:43 net device setup: enabled 2025/06/18 03:31:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/18 03:31:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/18 03:31:43 USB emulation: enabled 2025/06/18 03:31:43 hci packet injection: enabled 2025/06/18 03:31:43 wifi device emulation: enabled 2025/06/18 03:31:43 802.15.4 emulation: enabled 2025/06/18 03:31:43 fetching corpus: 0, signal 0/0 (executing program) 2025/06/18 03:31:44 starting 8 fuzzer processes 03:31:44 executing program 0: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0xfc, 0x0, 0x400, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x1, 0x40, 0x80000001, 0x7f}}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="0321be94af6a59eb0764773505fe057cfd3d8fa950e7b6e185022e23f35676a6fdb8a7ba5861a73743331cde9fb4d3bdd423b5de635a21f06a8b7b072ea3d61db8b0dfd80ffa81468b7d5c08909357f8fe2fa512f61c95633a529f28605f7ab03d6fc0ba2b149f32e340f06801846b7f79c782ff33bb15a4d26687be14191e18acc9362302dd251bebdcf479c2809acd62aeb3c534a2484be631dc74dc11795a5dc5b81cdc9e9dae5023b20dcb0a4cbba7a5c20dab6f07d9437ced436eb3bffd2dfea9299502056c8713e50380bc8302312a2e31897665c65a0846ee69ac63b47f77f6eb0afa0cda4c9aacd6d3af", 0xee, 0x4000, &(0x7f0000000200)={0x11, 0xf8, r0, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x3, 0xff, 0x8, @empty, @private2, 0x10, 0x20, 0x80, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', r0, 0x4, 0x40, 0x8, 0x9, 0x24, @remote, @mcast1, 0x7, 0x1, 0x3, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000440)={'\x00', 0x4, 0x0, 0x7}) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/vlan/vlan1\x00') ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/icmp6\x00') openat$cgroup_type(r3, &(0x7f0000000540), 0x2, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETATTR(r4, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x110, {0x80, 0x3, 0x2}, 0x47, 0xee00, 0xffffffffffffffff, 0x0, 0x100000001, 0x3, 0x6, 0x1000, 0x8, 0x100000001, 0x2ce, 0x6e64, 0x101, 0x800, 0x200, 0x7a, 0x0, 0x200a}}, 0xa0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x40804) r5 = socket(0x1, 0x6, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 03:31:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0xb4, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x0, 0x100, 0x20}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip_vti0\x00', r1, 0x8000, 0x7800, 0x8001, 0x7fff, {{0x12, 0x4, 0x1, 0x29, 0x48, 0x67, 0x0, 0x64, 0x4, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0x7, 0x17, [@local]}, @end, @timestamp_addr={0x44, 0x1c, 0x7b, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x6}, {@empty, 0x5}]}, @end, @lsrr={0x83, 0xf, 0x7, [@broadcast, @loopback, @private=0xa010102]}]}}}}}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xd, 0x1, {{0x6ea379c8e9027f86, 0x1, 0x4}, 0x7}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x6, 0xd1, 0xee9}}}, ["", "", "", ""]}, 0x30}}, 0x4040040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000580)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$sock_ifreq(r5, 0x891d, &(0x7f00000005c0)={'ip6gre0\x00', @ifru_hwaddr=@link_local}) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="9f6acd04e210a4724eccffd10002948bb93b05d465228ebb12b510c3674451f8a7b811dbfb5ad8035b7750a47b8ad07f6a0912ca63cf4dc2cc738b831abc379d2ad4d6afc797eac925c61a3d8b70853629ab0963e7f4ec69e0fbccd5a6822935c8a0510adaea5b783b807245314b95011723f0a304a4504939957381c85c93c897059b74c3e8e2f3df7aab3dbfccc8ad0e0221a2199cdd55a03d9a1a8d5c3fb7868506fcffa91c8df9b34d7f423f2647d83f4b9968b3c5c37599c9c0371da19fafac7117d5f156446edbc7af87aac390bc607706065bf83d762f0c", 0xdb, 0x20000001, &(0x7f0000000700)={0x11, 0x15, r1, 0x1, 0x85, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x190, 0x0, 0xf4e90159d6ec7516, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8800}, 0x20008010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x8000) statx(0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', 0x6000, 0xac, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000c40)={0x79, 0x7d, 0x2, {{0x0, 0x55, 0xbd12, 0x5, {0xe2, 0x4, 0x6}, 0x40010000, 0x10000, 0x7dd3, 0x8, 0xf, 'batadv_slave_1\x00', 0x6, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x6, ']-,-[$', 0x7, 'vxcan1\x00'}, 0xf, 'batadv_slave_1\x00', 0xee00, r7, r8}}, 0x79) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000cc0)={0x7, 0x7b, 0x2}, 0x7) 03:31:44 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'wlan1\x00', @ifru_hwaddr=@local}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x31, 0x4, 0x9, 0x23, @private0, @remote, 0x20, 0x8, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'sit0\x00', r0, 0x2f, 0xf0, 0x8, 0x0, 0x30, @local, @mcast1, 0x1, 0x7800, 0x7fffffff, 0xffffffc1}}) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'sit0\x00', r0, 0x4, 0x6, 0x2, 0x20, 0x10, @remote, @loopback, 0x8000, 0x80a1, 0x5, 0x4}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r2, 0x8926, &(0x7f00000002c0)={'wg0\x00', @ifru_flags}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000600)={@lba=0xf1bc, 0x1, 0x2}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040010}, 0x8085) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x80) 03:31:44 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/233, 0xe9) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x9, 0x1}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000180)) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x200}, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000001) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RMKDIR(r2, &(0x7f00000003c0)={0x14, 0x49, 0x1, {0x80, 0x4, 0x1}}, 0x14) r3 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000400)={0xa0, 0x19, 0x2, {0x0, {0x10, 0x3, 0x5}, 0x100, 0xee00, r3, 0x4, 0x100, 0xfffffffffffffff7, 0x4, 0x9, 0xffffffffffff0001, 0x3, 0x8, 0x9, 0x6, 0x100, 0x7ff, 0x2, 0x9, 0xf961}}, 0xa0) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="65999fa210e6736da3b097ebe09d14c89c8576b238c1cc9a0f5e28b470f970e0710126cd9714ba5b35e6fe2a8e0e1e050ace0450452407532b1c8b4671c860bcc368ce3696851601ee6d9948e234b9b74a79f56ae04c633e4f48e0d5d1b37000c44fe2dfc18ef3cdfbf64658e9195e759cae33dd2b99d4b95100cb2b3e91dc8d42ab505a309e4b8cb4805d10f54bd69af4b680dcd330", 0x96, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000600)={r4}, &(0x7f0000000640)=""/70, 0x46, &(0x7f0000001700)={&(0x7f00000006c0)={'blake2s-256\x00'}, &(0x7f0000000700)="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", 0x1000}) pipe2$9p(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getresuid(&(0x7f0000001780)=0x0, &(0x7f00000017c0), &(0x7f0000001800)) write$P9_RSTATu(r5, &(0x7f0000001840)={0x60, 0x7d, 0x1, {{0x0, 0x49, 0x763, 0x7, {0x1, 0x2, 0x7}, 0x0, 0x2, 0x6, 0x2, 0xa, '$):(@$\\#{^', 0x3, 'syz', 0x8, 'batadv0\x00', 0x1, '\x00'}, 0x2, ',]', 0xee00, r3, r6}}, 0x60) getuid() getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001a40)={'syztnl1\x00', &(0x7f00000019c0)={'sit0\x00', r1, 0x29, 0x2, 0x9, 0x4, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7800, 0x8, 0x9, 0x6}}) [ 109.597765] audit: type=1400 audit(1750217504.484:7): avc: denied { execmem } for pid=276 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:31:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1f, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x24008814) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040040}, 0xc000) r2 = socket(0x29, 0x3, 0xffffff4f) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd0}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x841) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c014}, 0x4000800) r3 = socket(0x1e, 0x6, 0xffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24800}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x40}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4000000) r5 = accept(r0, &(0x7f0000000880)=@qipcrtr, &(0x7f0000000900)=0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r3) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x86fe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000000}, 0xcc010) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000ac0), 0x2, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000b00)={0x18, 0xf, 0x2, {{0x1, 0x3}, 0x2}}, 0x18) gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x0, 0x20, 0x551, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf48c547e1aaf9fe}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x20000000) 03:31:44 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x3, 0x7, 0x1, 0x0, @mcast1, @private0, 0x20, 0x10, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x4, 0x0, 0x0, 0x9, 0x44, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x20, 0x40, 0x20, 0x80000000}}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') ioctl$CDROMREADALL(r3, 0x5318, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x28, 0x6, 0x7fffffff, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'syztnl1\x00', r5, 0x2f, 0x9, 0x9, 0x3, 0x20, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x400, 0x6}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d80)='cpuset\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000f80)={'ip_vti0\x00', &(0x7f0000000f00)={'ip_vti0\x00', r2, 0x7, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x1, 0x9, 0x48, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0xb, "a3e48d23234f5b3bc2"}, @rr={0x7, 0x1b, 0x67, [@private=0xa010100, @loopback, @private=0xa010100, @loopback, @remote, @remote]}, @timestamp={0x44, 0x8, 0x31, 0x0, 0x9, [0x0]}]}}}}}) ioctl$CDROMMULTISESSION(r3, 0x5310, &(0x7f0000000fc0)={@lba=0x2, 0x1, 0x1}) r8 = openat$cgroup_type(r3, &(0x7f0000001000), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000001040), 0x9) write$cgroup_type(r6, &(0x7f0000001080), 0x9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r9 = socket(0x1a, 0xbc984219e98d1ef0, 0x487) getsockopt$WPAN_WANTACK(r9, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200)=0x4) 03:31:44 executing program 6: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xc}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10000, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x50) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x54}}, 0x2080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='net/fib_trie\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x200, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044840) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x54}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd9}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x1) ioctl$CDROMREADALL(r4, 0x5318, &(0x7f0000000b00)) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000001580)={'bridge_slave_1', 0x32, 0x34}, 0x11) write$cgroup_subtree(r4, &(0x7f00000015c0)={[{0x2b, 'perf_event'}, {0x914b618f92509bec, 'cpuacct'}]}, 0x15) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 03:31:44 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00') write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000300)={'batadv_slave_0', 0x32, 0x35}, 0x11) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000340)=0x3, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip6tnl0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_devices(r1, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x401, 0x40, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4db58e47a4f390590b5b4dd66f513dda"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a1ec0a181f81ddb38d4760c74c72a49a"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044001}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x64}}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) [ 111.078357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.081703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.085571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.093305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.097713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.161322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.164707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.178020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.193867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.206021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.214015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.219309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.222364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.230525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.232372] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.239261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.245881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.246714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.250718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.257705] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.261988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.269334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.274826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.295698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.300565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.305566] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.309607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.311662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.313611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.316655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.325772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.330570] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.363542] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.374124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.381050] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.385294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.390444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.392710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.409506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.440998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.157916] Bluetooth: hci0: command tx timeout [ 113.350323] Bluetooth: hci1: command tx timeout [ 113.413290] Bluetooth: hci5: command tx timeout [ 113.416246] Bluetooth: hci3: command tx timeout [ 113.416881] Bluetooth: hci2: command tx timeout [ 113.477557] Bluetooth: hci4: command tx timeout [ 113.478458] Bluetooth: hci6: command tx timeout [ 113.542539] Bluetooth: hci7: command tx timeout [ 115.206453] Bluetooth: hci0: command tx timeout [ 115.397497] Bluetooth: hci1: command tx timeout [ 115.461400] Bluetooth: hci2: command tx timeout [ 115.462254] Bluetooth: hci3: command tx timeout [ 115.463052] Bluetooth: hci5: command tx timeout [ 115.526063] Bluetooth: hci4: command tx timeout [ 115.528570] Bluetooth: hci6: command tx timeout [ 115.589315] Bluetooth: hci7: command tx timeout [ 117.254524] Bluetooth: hci0: command tx timeout [ 117.445732] Bluetooth: hci1: command tx timeout [ 117.509410] Bluetooth: hci2: command tx timeout [ 117.510305] Bluetooth: hci3: command tx timeout [ 117.511106] Bluetooth: hci5: command tx timeout [ 117.573491] Bluetooth: hci6: command tx timeout [ 117.574369] Bluetooth: hci4: command tx timeout [ 117.637305] Bluetooth: hci7: command tx timeout [ 119.301534] Bluetooth: hci0: command tx timeout [ 119.495281] Bluetooth: hci1: command tx timeout [ 119.557471] Bluetooth: hci3: command tx timeout [ 119.559059] Bluetooth: hci5: command tx timeout [ 119.559672] Bluetooth: hci2: command tx timeout [ 119.622449] Bluetooth: hci6: command tx timeout [ 119.622888] Bluetooth: hci4: command tx timeout [ 119.686510] Bluetooth: hci7: command tx timeout [ 171.094838] syz-executor.6 (288) used greatest stack depth: 24640 bytes left [ 173.544646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.550747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.557744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.561374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.567101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.570470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.574551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.579655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.581543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.587083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.601627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.611696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.613734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.617416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.629969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.677841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.687119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.688617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.702840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.705009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.730380] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.745420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.750267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.764732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.779046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.787032] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.790067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.805932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.808987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.816029] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.821650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.829726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.831624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.833385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.837381] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.843418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.845796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.847765] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.849270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.850878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.623334] Bluetooth: hci1: command tx timeout [ 175.685393] Bluetooth: hci2: command tx timeout [ 175.685417] Bluetooth: hci0: command tx timeout [ 175.749259] Bluetooth: hci3: command tx timeout [ 175.877513] Bluetooth: hci4: command tx timeout [ 175.941300] Bluetooth: hci7: command tx timeout [ 175.941526] Bluetooth: hci6: command tx timeout [ 175.941930] Bluetooth: hci5: command tx timeout [ 177.669580] Bluetooth: hci1: command tx timeout [ 177.733327] Bluetooth: hci2: command tx timeout [ 177.736227] Bluetooth: hci0: command tx timeout [ 177.797267] Bluetooth: hci3: command tx timeout [ 177.925761] Bluetooth: hci4: command tx timeout [ 177.991241] Bluetooth: hci6: command tx timeout [ 177.991667] Bluetooth: hci7: command tx timeout [ 177.992078] Bluetooth: hci5: command tx timeout [ 179.717568] Bluetooth: hci1: command tx timeout [ 179.781648] Bluetooth: hci0: command tx timeout [ 179.782078] Bluetooth: hci2: command tx timeout [ 179.845538] Bluetooth: hci3: command tx timeout [ 179.973382] Bluetooth: hci4: command tx timeout [ 180.037307] Bluetooth: hci5: command tx timeout [ 180.037729] Bluetooth: hci7: command tx timeout [ 180.038130] Bluetooth: hci6: command tx timeout [ 181.767286] Bluetooth: hci1: command tx timeout [ 181.829616] Bluetooth: hci2: command tx timeout [ 181.830035] Bluetooth: hci0: command tx timeout [ 181.893289] Bluetooth: hci3: command tx timeout [ 182.021488] Bluetooth: hci4: command tx timeout [ 182.085336] Bluetooth: hci6: command tx timeout [ 182.085762] Bluetooth: hci7: command tx timeout [ 182.086168] Bluetooth: hci5: command tx timeout [ 233.507063] syz-executor.0 (2764) used greatest stack depth: 24448 bytes left [ 235.669160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.677731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.680893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.690607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.696019] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.735374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.741491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.743959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.751399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.755526] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.832798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.838057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.844679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.872334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.873464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.877826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.918265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.923479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.925837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.934023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.938389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.941975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.946582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.958831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.963687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.997552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.005846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.013803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.038845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.042511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.157467] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.161501] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.164447] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.171962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.174540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.196081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.197941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.200581] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.218461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.228798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.766272] Bluetooth: hci0: command tx timeout [ 237.829270] Bluetooth: hci1: command tx timeout [ 237.958593] Bluetooth: hci2: command tx timeout [ 238.021352] Bluetooth: hci3: command tx timeout [ 238.022338] Bluetooth: hci4: command tx timeout [ 238.149386] Bluetooth: hci5: command tx timeout [ 238.213309] Bluetooth: hci6: command tx timeout [ 238.342281] Bluetooth: hci7: command tx timeout [ 239.813299] Bluetooth: hci0: command tx timeout [ 239.877686] Bluetooth: hci1: command tx timeout [ 240.007265] Bluetooth: hci2: command tx timeout [ 240.069297] Bluetooth: hci4: command tx timeout [ 240.069721] Bluetooth: hci3: command tx timeout [ 240.198437] Bluetooth: hci5: command tx timeout [ 240.261271] Bluetooth: hci6: command tx timeout [ 240.390451] Bluetooth: hci7: command tx timeout [ 241.861459] Bluetooth: hci0: command tx timeout [ 241.926672] Bluetooth: hci1: command tx timeout [ 242.053252] Bluetooth: hci2: command tx timeout [ 242.118267] Bluetooth: hci3: command tx timeout [ 242.118696] Bluetooth: hci4: command tx timeout [ 242.245455] Bluetooth: hci5: command tx timeout [ 242.309897] Bluetooth: hci6: command tx timeout [ 242.437277] Bluetooth: hci7: command tx timeout [ 243.910412] Bluetooth: hci0: command tx timeout [ 243.974250] Bluetooth: hci1: command tx timeout [ 244.102290] Bluetooth: hci2: command tx timeout [ 244.166309] Bluetooth: hci4: command tx timeout [ 244.166737] Bluetooth: hci3: command tx timeout [ 244.295234] Bluetooth: hci5: command tx timeout [ 244.357547] Bluetooth: hci6: command tx timeout [ 244.485253] Bluetooth: hci7: command tx timeout [ 298.132399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.137001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.140499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.151055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.159009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.226237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.230705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.232941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.258413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.263632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.323381] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.326016] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.328301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.333557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.336993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.393578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.401264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.403282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.408571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.412478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.607533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.625339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.633158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.640690] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.644806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.657647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.658882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.660837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.670883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.688885] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.692477] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.696449] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.702170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.703756] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.708387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.710736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.723131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.729705] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.740464] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.789494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.229412] Bluetooth: hci0: command tx timeout [ 300.293283] Bluetooth: hci1: command tx timeout [ 300.357484] Bluetooth: hci2: command tx timeout [ 300.486321] Bluetooth: hci3: command tx timeout [ 300.805353] Bluetooth: hci5: command tx timeout [ 300.806353] Bluetooth: hci4: command tx timeout [ 300.806864] Bluetooth: hci6: command tx timeout [ 300.869312] Bluetooth: hci7: command tx timeout [ 302.277838] Bluetooth: hci0: command tx timeout [ 302.341425] Bluetooth: hci1: command tx timeout [ 302.405966] Bluetooth: hci2: command tx timeout [ 302.534506] Bluetooth: hci3: command tx timeout [ 302.853679] Bluetooth: hci6: command tx timeout [ 302.854166] Bluetooth: hci4: command tx timeout [ 302.855947] Bluetooth: hci5: command tx timeout [ 302.918304] Bluetooth: hci7: command tx timeout [ 304.325366] Bluetooth: hci0: command tx timeout [ 304.389416] Bluetooth: hci1: command tx timeout [ 304.453449] Bluetooth: hci2: command tx timeout [ 304.581287] Bluetooth: hci3: command tx timeout [ 304.902240] Bluetooth: hci5: command tx timeout [ 304.902706] Bluetooth: hci4: command tx timeout [ 304.903117] Bluetooth: hci6: command tx timeout [ 304.965651] Bluetooth: hci7: command tx timeout [ 306.374353] Bluetooth: hci0: command tx timeout [ 306.438392] Bluetooth: hci1: command tx timeout [ 306.501283] Bluetooth: hci2: command tx timeout [ 306.629550] Bluetooth: hci3: command tx timeout [ 306.952263] Bluetooth: hci6: command tx timeout [ 306.952762] Bluetooth: hci4: command tx timeout [ 306.953165] Bluetooth: hci5: command tx timeout [ 307.013563] Bluetooth: hci7: command tx timeout [ 360.798114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.800997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.805155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.809071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.816415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.822138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.824992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.832035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.834871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.842828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.007115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.021853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.035904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.050694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.077767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.114728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.143852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.147829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.151861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.156603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.180438] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.186563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.198680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.220567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.220613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.228903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.229654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.234363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.249170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.252463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.261116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.263049] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.267503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.271029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.287635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.291674] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.294992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.300422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.325324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.342775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.886308] Bluetooth: hci1: command tx timeout [ 362.886347] Bluetooth: hci0: command tx timeout [ 363.205321] Bluetooth: hci2: command tx timeout [ 363.270286] Bluetooth: hci3: command tx timeout [ 363.333304] Bluetooth: hci4: command tx timeout [ 363.397447] Bluetooth: hci6: command tx timeout [ 363.461581] Bluetooth: hci5: command tx timeout [ 363.462457] Bluetooth: hci7: command tx timeout [ 364.935470] Bluetooth: hci1: command tx timeout [ 364.935586] Bluetooth: hci0: command tx timeout [ 365.254261] Bluetooth: hci2: command tx timeout [ 365.318483] Bluetooth: hci3: command tx timeout [ 365.383007] Bluetooth: hci4: command tx timeout [ 365.446218] Bluetooth: hci6: command tx timeout [ 365.510432] Bluetooth: hci7: command tx timeout [ 365.510595] Bluetooth: hci5: command tx timeout [ 366.981290] Bluetooth: hci1: command tx timeout [ 366.981773] Bluetooth: hci0: command tx timeout [ 367.303241] Bluetooth: hci2: command tx timeout [ 367.365250] Bluetooth: hci3: command tx timeout [ 367.429423] Bluetooth: hci4: command tx timeout [ 367.493352] Bluetooth: hci6: command tx timeout [ 367.557403] Bluetooth: hci5: command tx timeout [ 367.557855] Bluetooth: hci7: command tx timeout [ 369.029474] Bluetooth: hci0: command tx timeout [ 369.029916] Bluetooth: hci1: command tx timeout [ 369.350986] Bluetooth: hci2: command tx timeout [ 369.415248] Bluetooth: hci3: command tx timeout [ 369.478398] Bluetooth: hci4: command tx timeout [ 369.541297] Bluetooth: hci6: command tx timeout [ 369.605462] Bluetooth: hci7: command tx timeout [ 369.605948] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 03:36:46 Registers: info registers vcpu 0 RAX=ffff88802b500001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802b4fff01 RSI=ffff88802b4fff20 RDI=ffff88802b4ff800 RBP=ffff88802b4ff848 RSP=ffff88802b4ff780 R8 =ffffffff867bdec0 R9 =ffff88802b4ff830 R10=000000000003b53d R11=00000000000083f9 R12=ffff88802b4ff850 R13=ffff88802b4ff838 R14=ffff88802b4fff28 R15=ffff88802b4ff7f0 RIP=ffffffff81354808 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4fb459c8e0 CR3=0000000030309000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff815f9cb2 RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88802ff5f928 R8 =0000000000000000 R9 =0000000000000000 R10=00007fc89c800000 R11=00000000000002f3 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000cc0 RIP=ffffffff8151b001 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc89c829580 CR3=000000000d0eb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000