Warning: Permanently added '[localhost]:46387' (ECDSA) to the list of known hosts. 2025/06/22 20:41:49 fuzzer started 2025/06/22 20:41:50 dialing manager at localhost:33119 syzkaller login: [ 101.251388] cgroup: Unknown subsys name 'net' [ 101.422548] cgroup: Unknown subsys name 'cpuset' [ 101.460275] cgroup: Unknown subsys name 'rlimit' 2025/06/22 20:42:11 syscalls: 210 2025/06/22 20:42:11 code coverage: enabled 2025/06/22 20:42:11 comparison tracing: enabled 2025/06/22 20:42:11 extra coverage: enabled 2025/06/22 20:42:11 setuid sandbox: enabled 2025/06/22 20:42:11 namespace sandbox: enabled 2025/06/22 20:42:11 Android sandbox: enabled 2025/06/22 20:42:11 fault injection: enabled 2025/06/22 20:42:11 leak checking: enabled 2025/06/22 20:42:11 net packet injection: enabled 2025/06/22 20:42:11 net device setup: enabled 2025/06/22 20:42:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 20:42:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 20:42:11 USB emulation: enabled 2025/06/22 20:42:11 hci packet injection: enabled 2025/06/22 20:42:11 wifi device emulation: enabled 2025/06/22 20:42:11 802.15.4 emulation: enabled 2025/06/22 20:42:11 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 20:42:13 starting 8 fuzzer processes 20:42:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x500, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40804}, 0x810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x844}, 0x4004004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r2) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c008004}, 0x40080) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r2) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008881) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x104, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4971e90f9d7b8a8}, 0x20008000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0xe2c8630068ed25aa}, 0x20000080) 20:42:13 executing program 1: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x6}, 0xfffffffc}}, 0x18) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x28a000, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)={0x15, 0x7, 0x1, {{0x8, '\\,])&](['}, 0xfffffffb}}, 0x15) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTAT(r1, &(0x7f0000000140)={0x5d, 0x7d, 0x1, {0x0, 0x56, 0x8000, 0xef, {0x2, 0x0, 0x2}, 0xdc970000, 0xfffffffb, 0x6, 0x8, 0xa, '/dev/zero\x00', 0x8, '\\,])&]([', 0xf, ',.-\x02&,+\x90/(:-/}:', 0x2, '+('}}, 0x5d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r3, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.u'}, 0x15) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x69044b4b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe00}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004841}, 0x844) write$P9_RLCREATE(r3, &(0x7f0000000480)={0x18, 0xf, 0x1, {{0x2, 0x2}, 0x4}}, 0x18) write$P9_RLERRORu(r3, &(0x7f00000004c0)={0xd, 0x7, 0x2}, 0xd) r4 = accept4$bt_l2cap(r2, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x6) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000600)) write$P9_RSTATu(r1, &(0x7f0000000640)={0x71, 0x7d, 0x1, {{0x0, 0x56, 0x7f, 0x401, {0x1, 0x4, 0x7}, 0x880000, 0xfff, 0x8, 0x2, 0xf, ',.-\x02&,+\x90/(:-/}:', 0x2, '\'}', 0x10, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, '!!'}, 0x6, '#:+.-\xb7', 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x71) write$P9_RVERSION(r0, &(0x7f00000006c0)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f0000000740)={0x8, 0x35, 0x1}, 0x8) 20:42:13 executing program 3: write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x9, 0xec7c, {0x0, 0x0, 0x4}, 0xe13bb2424900fbb2, 0x820, 0x1, 0x3, 0x4, '@]]-', 0x5, '}]:[^', 0x1, ']', 0x3, '/{@'}}, 0x47) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)={0x56, 0x7d, 0x2, {{0x0, 0x3f, 0x1, 0x101, {0x4, 0x3, 0x6}, 0x10200000, 0xafc, 0x5, 0x7, 0x5, '}]:[^', 0x2, '\':', 0x1, '\x1b', 0x4, '@]]-'}, 0x2, '&(', 0xee00, 0xee01}}, 0x56) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x0, 0x2}, 0x8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADDIR(r0, &(0x7f0000000180)={0x2a, 0x29, 0x2, {0x27bf, [{{0x20, 0x1, 0x8}, 0x8, 0x1, 0x7, './file0'}]}}, 0x2a) write$P9_RUNLINKAT(r0, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) write$P9_RVERSION(r0, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x3ff, 0x8, '9P2000.u'}, 0x15) write$P9_RLOPEN(r0, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0x80, 0x4, 0x1}, 0x469}}, 0x18) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x9, 0xa07, 0x5, 0x9, 0x0, 0x0, 0xff5d}, 0xc) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) write$P9_RUNLINKAT(r1, &(0x7f0000000300)={0x7, 0x4d, 0x1}, 0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x10080, 0x0) write$P9_RSTAT(r2, &(0x7f0000000380)={0x43, 0x7d, 0x2, {0x0, 0x3c, 0x20, 0xf19, {0x10, 0x4, 0x8}, 0x200000, 0xfffffffb, 0xef, 0x8, 0x2, '&(', 0x2, '\':', 0x4, '@]]-', 0x1, '\''}}, 0x43) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x2100, 0x0) write$P9_RAUTH(r3, &(0x7f0000000440)={0x14, 0x67, 0x2, {0x20, 0x0, 0x6}}, 0x14) r4 = accept4$bt_l2cap(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2004c8c2) 20:42:13 executing program 2: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000000) r1 = socket(0x22, 0x4, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x49f6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000050) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x780}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000540)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44800) r8 = socket(0x6, 0x0, 0x3) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xfc, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2932}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10008001}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r10, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 124.124661] audit: type=1400 audit(1750624933.203:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:42:13 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x3}, 0x2}}, 0x18) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040084) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6b0b2eec}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4804}, 0x90) write$P9_RREMOVE(r0, &(0x7f0000000380)={0x7, 0x7b, 0x2}, 0x7) r2 = socket(0x18, 0x400, 0xb3d) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20008840) bind$802154_raw(r2, &(0x7f00000004c0)={0x24, @short}, 0x14) write$P9_RFLUSH(r0, &(0x7f0000000500)={0x7, 0x6d, 0x1}, 0x7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xf8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffff}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xfe}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x20008800) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x9c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6e7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffd0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80045) write$P9_RATTACH(r0, &(0x7f0000000940)={0x14, 0x69, 0x1, {0x20, 0xa2, 0x5}}, 0x14) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000980), 0x4201, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 20:42:13 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40081) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x6d}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3e}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4881) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10008080}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x4004) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x5640}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008081) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7e}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x30}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffff80}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r4, 0x400, 0x5, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0xc0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d00), 0x200000, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0xd5}, 0x4000085) 20:42:13 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xf1a86e98, 0x6, '9P2000'}, 0x13) write$P9_RMKDIR(r2, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x10, 0x4, 0x6}}, 0x14) write$P9_RCREATE(r0, &(0x7f0000000200)={0x18, 0x73, 0x2, {{0x20, 0x3, 0x7}, 0x6}}, 0x18) write$P9_RLINK(r2, &(0x7f0000000240)={0x7, 0x47, 0x2}, 0x7) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x1}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004801}, 0x8000) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x1b, 0x1}, 0x7) write$P9_RGETLOCK(r2, &(0x7f0000000500)={0x28, 0x37, 0x1, {0x1, 0x7, 0x7, 0xffffffffffffffff, 0xa, '/dev/zero\x00'}}, 0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20050890) r8 = socket(0x2a, 0x6, 0x2) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) 20:42:13 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000101) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x21200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048004}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x20}, 0x1, 0x0, 0x0, 0x50840}, 0x80) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c895}, 0x81) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x431db6ef764a2faa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = socket(0x5, 0xa, 0x1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) [ 125.591287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.598652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.602563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.609044] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.613433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.616438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.619126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.624252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.642338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.653043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.670562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.677399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.679403] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.684923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.695433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.697678] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.698723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.705163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.714341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.731022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.738683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.749993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.762235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.771110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.772866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.808262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.811566] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.813631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.815338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 125.832716] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.846078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 125.847403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.881495] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.881607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.884528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.897382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.899001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.901307] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.903637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.943268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.673425] Bluetooth: hci0: command tx timeout [ 127.737622] Bluetooth: hci1: command tx timeout [ 127.800991] Bluetooth: hci3: command tx timeout [ 127.863910] Bluetooth: hci4: command tx timeout [ 127.864044] Bluetooth: hci2: command tx timeout [ 127.991929] Bluetooth: hci6: command tx timeout [ 127.991954] Bluetooth: hci7: command tx timeout [ 127.993137] Bluetooth: hci5: command tx timeout [ 129.720745] Bluetooth: hci0: command tx timeout [ 129.784174] Bluetooth: hci1: command tx timeout [ 129.848888] Bluetooth: hci3: command tx timeout [ 129.912261] Bluetooth: hci2: command tx timeout [ 129.912558] Bluetooth: hci4: command tx timeout [ 130.040273] Bluetooth: hci7: command tx timeout [ 130.040532] Bluetooth: hci5: command tx timeout [ 130.040964] Bluetooth: hci6: command tx timeout [ 131.768869] Bluetooth: hci0: command tx timeout [ 131.832044] Bluetooth: hci1: command tx timeout [ 131.896922] Bluetooth: hci3: command tx timeout [ 131.960535] Bluetooth: hci4: command tx timeout [ 131.961205] Bluetooth: hci2: command tx timeout [ 132.088002] Bluetooth: hci5: command tx timeout [ 132.088481] Bluetooth: hci7: command tx timeout [ 132.089351] Bluetooth: hci6: command tx timeout [ 133.815895] Bluetooth: hci0: command tx timeout [ 133.879907] Bluetooth: hci1: command tx timeout [ 133.944146] Bluetooth: hci3: command tx timeout [ 134.008041] Bluetooth: hci2: command tx timeout [ 134.008499] Bluetooth: hci4: command tx timeout [ 134.136981] Bluetooth: hci6: command tx timeout [ 134.137456] Bluetooth: hci5: command tx timeout [ 134.137916] Bluetooth: hci7: command tx timeout [ 188.168683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.174707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.182176] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.191255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.199115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.247426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.250479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.253535] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.263403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.267270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.320513] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.325335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.329170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.346933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.350089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.361842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.368514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.375463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.405967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.435491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.482912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.489300] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.499680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.509952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.545659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.561101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.574399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.585672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.596668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.618588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.623318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.626122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.643647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.653293] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.664605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.683386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.698228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.716747] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.716981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.743129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.265294] Bluetooth: hci0: command tx timeout [ 190.327935] Bluetooth: hci1: command tx timeout [ 190.393318] Bluetooth: hci2: command tx timeout [ 190.520558] Bluetooth: hci3: command tx timeout [ 190.711944] Bluetooth: hci4: command tx timeout [ 190.776893] Bluetooth: hci5: command tx timeout [ 190.840250] Bluetooth: hci6: command tx timeout [ 190.841211] Bluetooth: hci7: command tx timeout [ 192.312173] Bluetooth: hci0: command tx timeout [ 192.375995] Bluetooth: hci1: command tx timeout [ 192.439874] Bluetooth: hci2: command tx timeout [ 192.567906] Bluetooth: hci3: command tx timeout [ 192.759868] Bluetooth: hci4: command tx timeout [ 192.823964] Bluetooth: hci5: command tx timeout [ 192.888230] Bluetooth: hci7: command tx timeout [ 192.888704] Bluetooth: hci6: command tx timeout [ 194.361639] Bluetooth: hci0: command tx timeout [ 194.424072] Bluetooth: hci1: command tx timeout [ 194.487976] Bluetooth: hci2: command tx timeout [ 194.616183] Bluetooth: hci3: command tx timeout [ 194.807927] Bluetooth: hci4: command tx timeout [ 194.872317] Bluetooth: hci5: command tx timeout [ 194.936879] Bluetooth: hci7: command tx timeout [ 194.937738] Bluetooth: hci6: command tx timeout [ 196.407880] Bluetooth: hci0: command tx timeout [ 196.472079] Bluetooth: hci1: command tx timeout [ 196.536224] Bluetooth: hci2: command tx timeout [ 196.664919] Bluetooth: hci3: command tx timeout [ 196.855886] Bluetooth: hci4: command tx timeout [ 196.919877] Bluetooth: hci5: command tx timeout [ 196.985972] Bluetooth: hci6: command tx timeout [ 196.986431] Bluetooth: hci7: command tx timeout [ 250.380419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.389450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.393339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.403882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.409700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.462287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.467513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.470520] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.478459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.485333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.672418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.679732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.691601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.743740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.746616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.750459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.764411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.767107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.770096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.774424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.778405] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.781606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.787373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.791509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.794283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.798189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.800661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.806223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.822930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.826384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.837300] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.841403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.846205] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.853494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.857422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.860318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.876495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.892137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.906393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.921452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.472060] Bluetooth: hci0: command tx timeout [ 252.536565] Bluetooth: hci1: command tx timeout [ 252.857837] Bluetooth: hci3: command tx timeout [ 252.920908] Bluetooth: hci5: command tx timeout [ 252.984169] Bluetooth: hci4: command tx timeout [ 252.984344] Bluetooth: hci7: command tx timeout [ 253.048026] Bluetooth: hci2: command tx timeout [ 253.048038] Bluetooth: hci6: command tx timeout [ 254.521138] Bluetooth: hci0: command tx timeout [ 254.584070] Bluetooth: hci1: command tx timeout [ 254.904551] Bluetooth: hci3: command tx timeout [ 254.968027] Bluetooth: hci5: command tx timeout [ 255.031994] Bluetooth: hci7: command tx timeout [ 255.032744] Bluetooth: hci4: command tx timeout [ 255.095910] Bluetooth: hci6: command tx timeout [ 255.095990] Bluetooth: hci2: command tx timeout [ 256.568860] Bluetooth: hci0: command tx timeout [ 256.632856] Bluetooth: hci1: command tx timeout [ 256.952037] Bluetooth: hci3: command tx timeout [ 257.015862] Bluetooth: hci5: command tx timeout [ 257.080191] Bluetooth: hci4: command tx timeout [ 257.080656] Bluetooth: hci7: command tx timeout [ 257.144038] Bluetooth: hci6: command tx timeout [ 257.144230] Bluetooth: hci2: command tx timeout [ 258.616856] Bluetooth: hci0: command tx timeout [ 258.679944] Bluetooth: hci1: command tx timeout [ 259.001853] Bluetooth: hci3: command tx timeout [ 259.063864] Bluetooth: hci5: command tx timeout [ 259.128029] Bluetooth: hci7: command tx timeout [ 259.128513] Bluetooth: hci4: command tx timeout [ 259.191996] Bluetooth: hci2: command tx timeout [ 259.192053] Bluetooth: hci6: command tx timeout [ 312.787573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.792704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.797006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.810719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.817596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.931049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.940483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.950565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.968277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.978395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.050556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.062624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.074339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.098344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.106279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.165595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.177560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.182573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.197992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.228325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.396280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.399285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.432409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.460749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.476492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.579230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.592353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.646502] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.651259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.657467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.659251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.673080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.698603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.724095] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.726236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.726480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.734565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.737698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.743471] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.752332] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 314.874099] Bluetooth: hci0: command tx timeout [ 315.001092] Bluetooth: hci1: command tx timeout [ 315.191908] Bluetooth: hci2: command tx timeout [ 315.324687] Bluetooth: hci3: command tx timeout [ 315.575900] Bluetooth: hci4: command tx timeout [ 315.832065] Bluetooth: hci5: command tx timeout [ 315.895981] Bluetooth: hci7: command tx timeout [ 315.959960] Bluetooth: hci6: command tx timeout [ 316.920751] Bluetooth: hci0: command tx timeout [ 317.048296] Bluetooth: hci1: command tx timeout [ 317.241101] Bluetooth: hci2: command tx timeout [ 317.367896] Bluetooth: hci3: command tx timeout [ 317.625029] Bluetooth: hci4: command tx timeout [ 317.880317] Bluetooth: hci5: command tx timeout [ 317.944835] Bluetooth: hci7: command tx timeout [ 318.008190] Bluetooth: hci6: command tx timeout [ 318.967954] Bluetooth: hci0: command tx timeout [ 319.097033] Bluetooth: hci1: command tx timeout [ 319.287929] Bluetooth: hci2: command tx timeout [ 319.415930] Bluetooth: hci3: command tx timeout [ 319.672864] Bluetooth: hci4: command tx timeout [ 319.927989] Bluetooth: hci5: command tx timeout [ 319.991970] Bluetooth: hci7: command tx timeout [ 320.057113] Bluetooth: hci6: command tx timeout [ 321.016045] Bluetooth: hci0: command tx timeout [ 321.143877] Bluetooth: hci1: command tx timeout [ 321.337140] Bluetooth: hci2: command tx timeout [ 321.463938] Bluetooth: hci3: command tx timeout [ 321.720138] Bluetooth: hci4: command tx timeout [ 321.976118] Bluetooth: hci5: command tx timeout [ 322.039844] Bluetooth: hci7: command tx timeout [ 322.103855] Bluetooth: hci6: command tx timeout [ 374.807961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.810615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.820200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.830001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.836557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.962856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.965758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.972287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.982452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.987308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.079141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.089842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.101379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.110319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.120532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.285339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.293560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.298049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.331065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.342061] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.457404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.460321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.467609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.472638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.474507] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.482542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.511144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.512626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.520995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.523352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.526476] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.543181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.546334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.568132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.572620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.585461] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.594273] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.613381] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.631189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.653518] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.888012] Bluetooth: hci0: command tx timeout [ 377.079896] Bluetooth: hci1: command tx timeout [ 377.207933] Bluetooth: hci2: command tx timeout [ 377.465431] Bluetooth: hci3: command tx timeout [ 377.591959] Bluetooth: hci4: command tx timeout [ 377.656039] Bluetooth: hci5: command tx timeout [ 377.720398] Bluetooth: hci6: command tx timeout [ 377.784148] Bluetooth: hci7: command tx timeout [ 378.936044] Bluetooth: hci0: command tx timeout [ 379.127867] Bluetooth: hci1: command tx timeout [ 379.255875] Bluetooth: hci2: command tx timeout [ 379.512019] Bluetooth: hci3: command tx timeout [ 379.640036] Bluetooth: hci4: command tx timeout [ 379.704166] Bluetooth: hci5: command tx timeout [ 379.768226] Bluetooth: hci6: command tx timeout [ 379.832761] Bluetooth: hci7: command tx timeout [ 380.984049] Bluetooth: hci0: command tx timeout [ 381.177049] Bluetooth: hci1: command tx timeout [ 381.303859] Bluetooth: hci2: command tx timeout [ 381.560825] Bluetooth: hci3: command tx timeout [ 381.688067] Bluetooth: hci4: command tx timeout [ 381.751880] Bluetooth: hci5: command tx timeout [ 381.816062] Bluetooth: hci6: command tx timeout [ 381.879949] Bluetooth: hci7: command tx timeout [ 383.031857] Bluetooth: hci0: command tx timeout [ 383.223937] Bluetooth: hci1: command tx timeout [ 383.352884] Bluetooth: hci2: command tx timeout [ 383.608877] Bluetooth: hci3: command tx timeout [ 383.735890] Bluetooth: hci4: command tx timeout [ 383.800725] Bluetooth: hci5: command tx timeout [ 383.864549] Bluetooth: hci6: command tx timeout [ 383.927909] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:47:18 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802704fcf8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81354012 RDI=ffffffff85c1cc40 RBP=ffff888027048000 RSP=ffff88802704f848 R8 =0000000000000001 R9 =ffff88802704f8f8 R10=000000000003b53d R11=00000000000070c0 R12=ffff88802704f901 R13=ffff88802704f900 R14=ffff88802704fcd8 R15=ffff88802704f8b8 RIP=ffffffff81354012 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9128f82820 CR3=000000000b641000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888028c07770 RCX=0000000000000001 RDX=ffff888028c08001 RSI=ffff888028c07750 RDI=ffff888028c073f8 RBP=ffff888028c00000 RSP=ffff888028c07370 R8 =0000000000000001 R9 =ffff888028c07428 R10=000000000003b53d R11=00000000000248e5 R12=ffff888028c07401 R13=ffff888028c07430 R14=ffff888028c07750 R15=ffff888028c073e8 RIP=ffffffff815ab8f0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb60025fb70 CR3=00000000289f5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000