syzkaller login: [ 97.801342] hrtimer: interrupt took 2972724 ns Warning: Permanently added '[localhost]:16273' (ECDSA) to the list of known hosts. 2025/06/24 13:01:00 fuzzer started 2025/06/24 13:01:00 dialing manager at localhost:37113 [ 106.141994] cgroup: Unknown subsys name 'net' [ 106.310330] cgroup: Unknown subsys name 'cpuset' [ 106.382018] cgroup: Unknown subsys name 'rlimit' 2025/06/24 13:01:15 syscalls: 200 2025/06/24 13:01:15 code coverage: enabled 2025/06/24 13:01:15 comparison tracing: enabled 2025/06/24 13:01:15 extra coverage: enabled 2025/06/24 13:01:15 setuid sandbox: enabled 2025/06/24 13:01:15 namespace sandbox: enabled 2025/06/24 13:01:15 Android sandbox: enabled 2025/06/24 13:01:15 fault injection: enabled 2025/06/24 13:01:15 leak checking: enabled 2025/06/24 13:01:15 net packet injection: enabled 2025/06/24 13:01:15 net device setup: enabled 2025/06/24 13:01:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/24 13:01:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/24 13:01:15 USB emulation: enabled 2025/06/24 13:01:15 hci packet injection: enabled 2025/06/24 13:01:15 wifi device emulation: enabled 2025/06/24 13:01:15 802.15.4 emulation: enabled 2025/06/24 13:01:15 fetching corpus: 0, signal 0/0 (executing program) 2025/06/24 13:01:17 starting 8 fuzzer processes 13:01:17 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x14b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2ec3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x745e9a218bc43525}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x14040054) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008080) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4000880) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x27}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) setxattr$security_ima(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)=@md5={0x1, "f12c15c19e73f911a3328a79463478a4"}, 0x11, 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000800)={@ipv4={""/10, ""/2, @remote}}, &(0x7f0000000840)=0x14) lsetxattr$trusted_overlay_redirect(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900)='./file1\x00', 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000014c0)={@private0, 0x0}, &(0x7f0000001500)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000001600)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8080088}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x59}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xcc}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x40041) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x3f}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x20044800) 13:01:17 executing program 2: r0 = msgget$private(0x0, 0x4) msgsnd(r0, &(0x7f0000000000)={0x1, "1ed8dcda4f59a37125736dc9a29a0168a4d871656111426e304f806530428c8152661315fe26240eb7e00f688dff756eb534210282b628487532060890a538d2145b169b16dae17a23"}, 0x51, 0x0) r1 = msgget(0x3, 0x1a) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000080)=""/100) r2 = msgget$private(0x0, 0x40) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/172) msgsnd(0xffffffffffffffff, &(0x7f00000001c0)={0x2, "c572f0d3e61693a6ad8c1e044189e459c0c0ff8d40dbd884b60065bd1de3bd39866add1114ead7772a1f4d2198fc76c00c4f0458dd5934694cfc19d17713eb88ba66593c1cb09b98e3506028ae118fa155b1775bc9000fee2754163499358c0c6881f6df0387278b75814ae7ac3692df59175843ebe82f426bd5e0f14b32"}, 0x86, 0x800) r3 = msgget(0x1, 0x2) msgsnd(r3, &(0x7f0000000280)={0x1, "cf45e8684e79f84542e374cd7706a7fa72a9ecdb866966d449cc88f74b62f1e1fdf047e7f28f0809e530e248bde5a6042307e6e897d3cc096314e74b26db83c7a81c6a4b35eb8912381e76dd1a0751b9fc92de7700c0094a46a9376bf8ec0b363ba2bf5ed9c6eaec08191bd9907855"}, 0x77, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/240) r4 = msgget$private(0x0, 0x60c) msgctl$IPC_RMID(r4, 0x0) getegid() r5 = msgget(0x2, 0x200) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000400)=""/47) msgctl$IPC_RMID(r5, 0x0) r6 = msgget(0x3, 0x110) msgsnd(r6, &(0x7f0000000440)={0x2, "3bd1e9f8bcb67f0e87185f63e1508ea1d8e4959d7fdddf663b"}, 0x21, 0x800) msgget$private(0x0, 0x602) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000480)=""/226) 13:01:17 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @ax25={0x3, @default}, @llc={0x1a, 0x4, 0x1, 0xec, 0xe0, 0xff, @remote}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000100)='ipvlan0\x00', 0x6, 0x6, 0x6}) getsockname(r0, &(0x7f00000001c0)=@xdp, &(0x7f0000000240)=0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x36f6a6efe0078a65, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x227}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000048) symlinkat(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000007c0)={@mcast1, 0x4e, r1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000800), 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0xcba28cca56d14695, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20044015) r2 = accept(r0, &(0x7f0000000a00)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000a80)=0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000ac0)={'IDLETIMER\x00'}, &(0x7f0000000b00)=0x1e) r3 = socket$inet6(0xa, 0x4, 0x1f) accept4(r3, &(0x7f0000000b40)=@rc={0x1f, @fixed}, &(0x7f0000000bc0)=0x80, 0x800) r4 = syz_io_uring_setup(0x7622, &(0x7f0000000c00)={0x0, 0xa629, 0x10, 0x1, 0x9e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000c80), &(0x7f0000000cc0)) r5 = eventfd2(0x200, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000d00)=r5, 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x20008011) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000004540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 13:01:17 executing program 3: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x201, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000040) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@empty, 0x26, r0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40410}, 0x40080) lsetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@random={'user.', '-\x00'}, &(0x7f00000004c0)='\x00', 0x1, 0x3) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e21, 0x10001, @empty, 0x7}, {0xa, 0x4e24, 0x3ff, @empty, 0x3f}, 0x1f, [0xa5, 0x7, 0x3, 0x5, 0x3ff, 0x5, 0xfdb, 0x9]}, 0x5c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = accept(r3, &(0x7f00000005c0)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000640)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040811}, 0x40040c0) setxattr$security_ima(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), &(0x7f0000000840)=@md5={0x1, "c7860b44de61ed1be8bc7cd886e5dc99"}, 0x11, 0x1) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040014}, 0x44014) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000880) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b00)=""/179, 0xb3}, {&(0x7f0000000bc0)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/150, 0x96}, {&(0x7f0000000d80)=""/190, 0xbe}, {&(0x7f0000000e40)=""/191, 0xbf}, {&(0x7f0000000f00)=""/185, 0xb9}], 0x6) 13:01:17 executing program 4: r0 = eventfd2(0x800, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r0, 0x1) eventfd2(0xffffffff, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r0, 0x1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00'}, {0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0xffc0, [0x58d460, 0x5, 0xfff, 0x6, 0x7, 0x4, 0x3, 0x8]}, 0x5c) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000140)=""/4096) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000001140)=""/172) eventfd2(0x0, 0x80800) bind(r1, &(0x7f0000001200)=@nfc={0x27, 0x0, 0x2}, 0x80) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000201}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x8800) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000013c0), 0x100, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000001400)=r3, 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000001440)=[r1], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4400}, 0x4040) add_key$user(&(0x7f00000015c0), &(0x7f0000001600)={'syz', 0x2}, &(0x7f0000001640)="6c696eb44bf6e4489336679ebf78315e32e210878e75abf99e434794bf05079fd5b8b12065d73e7ab418455b36facd35c4770db17212652456122285335867478bc935be006877c62c202f30dbd63d410cb24b08496761ef400de4476abac04ca47aa84b3d34", 0x66, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 122.101333] audit: type=1400 audit(1750770077.165:7): avc: denied { execmem } for pid=275 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:01:17 executing program 5: lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '!\x00'}, &(0x7f0000000080)=':!&\x00', 0x4, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = accept4(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000180)=0x80, 0x80800) r2 = accept4(r1, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) recvmmsg(r2, &(0x7f000000b2c0)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/135, 0x87}, {&(0x7f00000015c0)=""/146, 0x92}, {&(0x7f0000001680)=""/214, 0xd6}, {&(0x7f0000001780)=""/225, 0xe1}], 0x6, &(0x7f0000001900)=""/4096, 0x1000}, 0xc9d}, {{&(0x7f0000002900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002980)=""/71, 0x47}], 0x1, &(0x7f0000002a40)=""/131, 0x83}, 0x1ff}, {{&(0x7f0000002b00)=@phonet, 0x80, &(0x7f0000004080)=[{&(0x7f0000002b80)=""/224, 0xe0}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/193, 0xc1}, {&(0x7f0000003d80)=""/211, 0xd3}, {&(0x7f0000003e80)=""/225, 0xe1}, {&(0x7f0000003f80)=""/106, 0x6a}, {&(0x7f0000004000)=""/70, 0x46}], 0x7, &(0x7f0000004100)=""/2, 0x2}, 0xc57}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004140)=""/126, 0x7e}, {&(0x7f00000041c0)}, {&(0x7f0000004200)=""/137, 0x89}, {&(0x7f00000042c0)=""/30, 0x1e}], 0x4, &(0x7f0000004340)=""/212, 0xd4}, 0x20}, {{&(0x7f0000004440)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005940)=[{&(0x7f00000044c0)=""/60, 0x3c}, {&(0x7f0000004500)=""/161, 0xa1}, {&(0x7f00000045c0)=""/68, 0x44}, {&(0x7f0000004640)=""/30, 0x1e}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/215, 0xd7}, {&(0x7f0000005780)=""/205, 0xcd}, {&(0x7f0000005880)=""/186, 0xba}], 0x8, &(0x7f00000059c0)=""/246, 0xf6}, 0x2}, {{&(0x7f0000005ac0)=@un=@abs, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005b40)=""/3, 0x3}, {&(0x7f0000005b80)=""/138, 0x8a}, {0xfffffffffffffffe}, {&(0x7f0000005c40)=""/117, 0x75}, {&(0x7f0000005cc0)=""/183, 0xb7}, {&(0x7f0000005d80)=""/165, 0xa5}, {&(0x7f0000005e40)=""/33, 0x21}], 0x7}, 0x5}, {{&(0x7f0000005f00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000006180)=[{&(0x7f0000005f80)=""/194, 0xc2}, {&(0x7f0000006080)=""/141, 0x8d}, {&(0x7f0000006140)=""/61, 0x3d}], 0x3, &(0x7f00000061c0)=""/252, 0xfc}, 0x1f}, {{&(0x7f00000062c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000008880)=[{&(0x7f0000006340)=""/159, 0x9f}, {&(0x7f0000006400)=""/207, 0xcf}, {&(0x7f0000006500)=""/123, 0x7b}, {&(0x7f0000006580)=""/245, 0xf5}, {&(0x7f0000006680)=""/157, 0x9d}, {&(0x7f0000006740)=""/3, 0x3}, {&(0x7f0000006780)=""/32, 0x20}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f00000087c0)=""/170, 0xaa}], 0xa}, 0xc8d}, {{&(0x7f0000008940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f000000acc0)=[{&(0x7f00000089c0)=""/4096, 0x1000}, {&(0x7f00000099c0)=""/234, 0xea}, {&(0x7f0000009ac0)=""/201, 0xc9}, {&(0x7f0000009bc0)=""/4096, 0x1000}, {&(0x7f000000abc0)=""/209, 0xd1}], 0x5, &(0x7f000000ad40)=""/214, 0xd6}, 0x8000}, {{&(0x7f000000ae40)=@generic, 0x80, &(0x7f000000b140)=[{&(0x7f000000aec0)=""/175, 0xaf}, {&(0x7f000000af80)=""/35, 0x23}, {&(0x7f000000afc0)=""/12, 0xc}, {&(0x7f000000b000)=""/212, 0xd4}, {&(0x7f000000b100)=""/55, 0x37}], 0x5, &(0x7f000000b1c0)=""/248, 0xf8}, 0xcb}], 0xa, 0x40000003, &(0x7f000000b540)={0x77359400}) mount$tmpfs(0x0, &(0x7f000000b580)='./file0\x00', &(0x7f000000b5c0), 0x200400, &(0x7f000000b600)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}, {@huge_always}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x35, 0x38, 0x38, 0x38, 0x3, 0x63], 0x2d, [0x65, 0x32, 0x66, 0x35], 0x2d, [0x39, 0x64, 0x66, 0x33], 0x2d, [0x66, 0x0, 0x32, 0x39], 0x2d, [0x33, 0x37, 0x64, 0x34, 0x30, 0x36, 0x61, 0x30]}}}, {@dont_measure}, {@dont_hash}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '%}{)[,%-\''}}, {@obj_type={'obj_type', 0x3d, 'os2.'}}]}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f000000b6c0), r2) r5 = creat(&(0x7f000000b7c0)='./file0\x00', 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f000000b900)={&(0x7f000000b800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000000b8c0)={&(0x7f000000b840)={0x5c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x27a3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c880}, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000b940), r1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b980), 0x0, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f000000ba80)={&(0x7f000000b9c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f000000ba00)=""/92, 0x5c}) r7 = creat(&(0x7f000000bb80)='./file0\x00', 0x82) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f000000bc80)={&(0x7f000000bbc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000bc40)={&(0x7f000000bc00)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) lsetxattr$security_selinux(&(0x7f000000bcc0)='./file0\x00', &(0x7f000000bd00), &(0x7f000000bd40)='/usr/sbin/ntpd\x00', 0xf, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x0, 0xa9) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f000000bec0)={&(0x7f000000bdc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000be80)={&(0x7f000000be00)={0x48, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044085}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f000000c000)={&(0x7f000000bf00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000bfc0)={&(0x7f000000bf40)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555d}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x1010) 13:01:17 executing program 6: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/102, 0x66}) r0 = inotify_init1(0x81000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r1 = socket(0x1a, 0x1, 0x42a) r2 = accept(r1, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80) r3 = accept$inet6(r2, 0x0, &(0x7f0000000200)) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)={0x7fff, {{0xa, 0x4e20, 0xffff8000, @empty, 0x1}}, 0x1, 0x5, [{{0xa, 0x4e24, 0xe3, @remote, 0x3}}, {{0xa, 0x4e24, 0x2, @remote, 0x3b}}, {{0xa, 0x4e21, 0x4, @loopback, 0x7}}, {{0xa, 0x4e21, 0xffff, @mcast2, 0xe5b5}}, {{0xa, 0x4e21, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xe69a}}]}, 0x310) getcwd(&(0x7f0000000580)=""/83, 0x53) syz_open_dev$usbmon(&(0x7f0000000600), 0x7, 0x82080) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2a}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}}, 0x4804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) r6 = socket(0x26, 0x800, 0x4) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x84, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x29bc81b2425634a1}, 0x8) lsetxattr$security_capability(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)=@v2={0x2000000, [{0x2, 0x7f}, {0x9, 0x8}]}, 0x14, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x4c, r4, 0x701, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xbc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x40) accept4(r1, &(0x7f0000000e40)=@phonet, &(0x7f0000000ec0)=0x80, 0x800) 13:01:17 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x859}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x3c}}, 0x20048000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000805) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200c0000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xfc}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x40}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xb2000811}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "b8eb87b56257e34b1fe9d4653d130ad8"}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "2869dde0d24848ddc07cc8a9f53c9fef"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}}, 0x800) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20040080) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "52324e428cf101667abf054d667e74dc"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9f690922cc59c50c82558e77786e0bec"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "060f37a873cdb564a4fa5d35773cdf273a15e656dd60a39e0ac64633dbe6352f"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x84, 0x0, 0x213, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r4, 0x4, 0x10000, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000040) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240400c4}, 0x40840) [ 123.553841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.556938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.559119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.564173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.566845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.574957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.577472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.579980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.582659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.584637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.587710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.592523] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.601093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.605087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.606144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.631270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.633488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.636681] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.640074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.641474] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.644195] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.671703] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.673107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.680166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.681309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.682956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.689983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.691937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.699821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.708119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.713033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.714494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.716020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.718346] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.720394] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.734655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.746925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.748121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.752142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.755150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.642166] Bluetooth: hci2: command tx timeout [ 125.642896] Bluetooth: hci1: command tx timeout [ 125.705804] Bluetooth: hci0: command tx timeout [ 125.770179] Bluetooth: hci5: command tx timeout [ 125.770921] Bluetooth: hci4: command tx timeout [ 125.771476] Bluetooth: hci3: command tx timeout [ 125.833811] Bluetooth: hci7: command tx timeout [ 125.834397] Bluetooth: hci6: command tx timeout [ 127.688938] Bluetooth: hci1: command tx timeout [ 127.689463] Bluetooth: hci2: command tx timeout [ 127.752794] Bluetooth: hci0: command tx timeout [ 127.817041] Bluetooth: hci3: command tx timeout [ 127.817533] Bluetooth: hci5: command tx timeout [ 127.818089] Bluetooth: hci4: command tx timeout [ 127.880851] Bluetooth: hci6: command tx timeout [ 127.881310] Bluetooth: hci7: command tx timeout [ 129.736889] Bluetooth: hci2: command tx timeout [ 129.737463] Bluetooth: hci1: command tx timeout [ 129.801571] Bluetooth: hci0: command tx timeout [ 129.864922] Bluetooth: hci4: command tx timeout [ 129.865444] Bluetooth: hci5: command tx timeout [ 129.866060] Bluetooth: hci3: command tx timeout [ 129.928862] Bluetooth: hci7: command tx timeout [ 129.929373] Bluetooth: hci6: command tx timeout [ 131.785041] Bluetooth: hci1: command tx timeout [ 131.785607] Bluetooth: hci2: command tx timeout [ 131.848841] Bluetooth: hci0: command tx timeout [ 131.912905] Bluetooth: hci3: command tx timeout [ 131.913442] Bluetooth: hci5: command tx timeout [ 131.913950] Bluetooth: hci4: command tx timeout [ 131.977049] Bluetooth: hci7: command tx timeout [ 131.977621] Bluetooth: hci6: command tx timeout [ 186.391474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.393641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.395917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.402195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.405841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.520889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.530346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.531915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.534499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.538110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.540216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.541531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.543349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.566226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.579660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.622449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.637075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.644665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.659079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.663314] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.673372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.695961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.711163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.729943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.758151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.764483] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.766461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.768242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.770073] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.772701] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.775801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.786690] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.798308] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.802391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.804957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.807455] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.830022] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.851390] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.855573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.859297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.489821] Bluetooth: hci0: command tx timeout [ 188.616898] Bluetooth: hci1: command tx timeout [ 188.618071] Bluetooth: hci2: command tx timeout [ 188.745347] Bluetooth: hci3: command tx timeout [ 188.872918] Bluetooth: hci5: command tx timeout [ 188.874641] Bluetooth: hci6: command tx timeout [ 188.874765] Bluetooth: hci4: command tx timeout [ 188.937246] Bluetooth: hci7: command tx timeout [ 190.536840] Bluetooth: hci0: command tx timeout [ 190.666917] Bluetooth: hci1: command tx timeout [ 190.667433] Bluetooth: hci2: command tx timeout [ 190.794082] Bluetooth: hci3: command tx timeout [ 190.923031] Bluetooth: hci4: command tx timeout [ 190.923410] Bluetooth: hci5: command tx timeout [ 190.924433] Bluetooth: hci6: command tx timeout [ 190.985040] Bluetooth: hci7: command tx timeout [ 192.584813] Bluetooth: hci0: command tx timeout [ 192.713037] Bluetooth: hci2: command tx timeout [ 192.713567] Bluetooth: hci1: command tx timeout [ 192.842009] Bluetooth: hci3: command tx timeout [ 192.970867] Bluetooth: hci5: command tx timeout [ 192.971362] Bluetooth: hci6: command tx timeout [ 192.972771] Bluetooth: hci4: command tx timeout [ 193.034791] Bluetooth: hci7: command tx timeout [ 194.633924] Bluetooth: hci0: command tx timeout [ 194.761566] Bluetooth: hci1: command tx timeout [ 194.762029] Bluetooth: hci2: command tx timeout [ 194.888912] Bluetooth: hci3: command tx timeout [ 195.016947] Bluetooth: hci6: command tx timeout [ 195.016980] Bluetooth: hci4: command tx timeout [ 195.017422] Bluetooth: hci5: command tx timeout [ 195.080819] Bluetooth: hci7: command tx timeout [ 248.987622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.005036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.006494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.013359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.032474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.111031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.117079] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.118452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.122592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.126347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.131238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.135967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.139079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.144069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.154049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.313463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.318994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.331696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.341442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.348884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.404970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.428261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.446557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.456536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.474009] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.487618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.492267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.505081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.508751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.509242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.512917] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.516151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.531436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.539070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.544021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.552482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.562854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.663021] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.671375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.678917] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.080894] Bluetooth: hci0: command tx timeout [ 251.144822] Bluetooth: hci1: command tx timeout [ 251.208848] Bluetooth: hci2: command tx timeout [ 251.401048] Bluetooth: hci3: command tx timeout [ 251.598889] Bluetooth: hci4: command tx timeout [ 251.599095] Bluetooth: hci6: command tx timeout [ 251.656801] Bluetooth: hci5: command tx timeout [ 251.784817] Bluetooth: hci7: command tx timeout [ 253.128818] Bluetooth: hci0: command tx timeout [ 253.193872] Bluetooth: hci1: command tx timeout [ 253.256853] Bluetooth: hci2: command tx timeout [ 253.449812] Bluetooth: hci3: command tx timeout [ 253.641778] Bluetooth: hci6: command tx timeout [ 253.642324] Bluetooth: hci4: command tx timeout [ 253.705033] Bluetooth: hci5: command tx timeout [ 253.834224] Bluetooth: hci7: command tx timeout [ 255.176879] Bluetooth: hci0: command tx timeout [ 255.242075] Bluetooth: hci1: command tx timeout [ 255.305416] Bluetooth: hci2: command tx timeout [ 255.497751] Bluetooth: hci3: command tx timeout [ 255.689809] Bluetooth: hci4: command tx timeout [ 255.690354] Bluetooth: hci6: command tx timeout [ 255.755082] Bluetooth: hci5: command tx timeout [ 255.882002] Bluetooth: hci7: command tx timeout [ 257.225066] Bluetooth: hci0: command tx timeout [ 257.290778] Bluetooth: hci1: command tx timeout [ 257.354028] Bluetooth: hci2: command tx timeout [ 257.544903] Bluetooth: hci3: command tx timeout [ 257.739830] Bluetooth: hci6: command tx timeout [ 257.739850] Bluetooth: hci4: command tx timeout [ 257.801103] Bluetooth: hci5: command tx timeout [ 257.928896] Bluetooth: hci7: command tx timeout [ 311.830594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.854794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.860507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.870481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.884433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.963487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.966428] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.972051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.981014] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.984963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.031419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.040078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.046220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.052649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.060046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.093479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.097117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.107261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.115061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.122076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.175674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.203937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.226069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.231648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.234130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.235268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.241621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.243162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.247561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.249854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.265141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.270263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.271967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.275651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.278127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.319868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.342181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.352279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.355541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.362198] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.929874] Bluetooth: hci0: command tx timeout [ 314.056835] Bluetooth: hci1: command tx timeout [ 314.121872] Bluetooth: hci2: command tx timeout [ 314.184843] Bluetooth: hci3: command tx timeout [ 314.376830] Bluetooth: hci5: command tx timeout [ 314.441898] Bluetooth: hci6: command tx timeout [ 314.442650] Bluetooth: hci7: command tx timeout [ 314.504906] Bluetooth: hci4: command tx timeout [ 315.976820] Bluetooth: hci0: command tx timeout [ 316.105853] Bluetooth: hci1: command tx timeout [ 316.168989] Bluetooth: hci2: command tx timeout [ 316.232835] Bluetooth: hci3: command tx timeout [ 316.425227] Bluetooth: hci5: command tx timeout [ 316.489187] Bluetooth: hci6: command tx timeout [ 316.489774] Bluetooth: hci7: command tx timeout [ 316.555676] Bluetooth: hci4: command tx timeout [ 318.024880] Bluetooth: hci0: command tx timeout [ 318.153341] Bluetooth: hci1: command tx timeout [ 318.217059] Bluetooth: hci2: command tx timeout [ 318.280825] Bluetooth: hci3: command tx timeout [ 318.472891] Bluetooth: hci5: command tx timeout [ 318.537887] Bluetooth: hci6: command tx timeout [ 318.538396] Bluetooth: hci7: command tx timeout [ 318.600821] Bluetooth: hci4: command tx timeout [ 320.072929] Bluetooth: hci0: command tx timeout [ 320.202278] Bluetooth: hci1: command tx timeout [ 320.265033] Bluetooth: hci2: command tx timeout [ 320.328825] Bluetooth: hci3: command tx timeout [ 320.521766] Bluetooth: hci5: command tx timeout [ 320.585155] Bluetooth: hci7: command tx timeout [ 320.585672] Bluetooth: hci6: command tx timeout [ 320.649025] Bluetooth: hci4: command tx timeout [ 374.688592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.690667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.696346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.710098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.713574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.811389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.814483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.817168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.820463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.824054] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.892497] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.902271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.909377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.910849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.917464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.930083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.947037] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.957403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.968970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.970513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.000836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.018560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.025415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.026652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.027519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.043406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.059899] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.061203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.062042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.066451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.080922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.084324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.111280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.119230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.131680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.151368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.153608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.155594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.185330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.196393] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.776908] Bluetooth: hci0: command tx timeout [ 376.904839] Bluetooth: hci1: command tx timeout [ 377.225237] Bluetooth: hci3: command tx timeout [ 377.225979] Bluetooth: hci2: command tx timeout [ 377.290791] Bluetooth: hci4: command tx timeout [ 377.356267] Bluetooth: hci5: command tx timeout [ 377.356372] Bluetooth: hci7: command tx timeout [ 377.356957] Bluetooth: hci6: command tx timeout [ 378.824999] Bluetooth: hci0: command tx timeout [ 378.954055] Bluetooth: hci1: command tx timeout [ 379.273308] Bluetooth: hci2: command tx timeout [ 379.273424] Bluetooth: hci3: command tx timeout [ 379.337921] Bluetooth: hci4: command tx timeout [ 379.402866] Bluetooth: hci7: command tx timeout [ 379.404562] Bluetooth: hci6: command tx timeout [ 379.404761] Bluetooth: hci5: command tx timeout [ 380.874104] Bluetooth: hci0: command tx timeout [ 381.001886] Bluetooth: hci1: command tx timeout [ 381.320954] Bluetooth: hci3: command tx timeout [ 381.323777] Bluetooth: hci2: command tx timeout [ 381.384854] Bluetooth: hci4: command tx timeout [ 381.449116] Bluetooth: hci5: command tx timeout [ 381.449600] Bluetooth: hci6: command tx timeout [ 381.450927] Bluetooth: hci7: command tx timeout [ 382.920824] Bluetooth: hci0: command tx timeout [ 383.049574] Bluetooth: hci1: command tx timeout [ 383.368857] Bluetooth: hci2: command tx timeout [ 383.370403] Bluetooth: hci3: command tx timeout [ 383.432790] Bluetooth: hci4: command tx timeout [ 383.496869] Bluetooth: hci5: command tx timeout [ 383.497429] Bluetooth: hci6: command tx timeout [ 383.498579] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:06:19 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e5630000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88802d9e7798 RDI=ffff88806ce31850 RBP=ffff88802d9e0000 RSP=ffff88806ce089f8 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b53d R11=00000000000c30c3 R12=ffff88806ce08a01 R13=ffff88806ce08ac0 R14=ffff88802d9e7798 R15=ffff88806ce08a78 RIP=ffffffff815ab920 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc6ab55a260 CR3=000000001cbe8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880321a3700 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88802b1a6fc0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000021664 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246 RIP=ffffffff8151b022 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5e84c00000 CR3=000000002bbf9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000