Warning: Permanently added '[localhost]:58943' (ECDSA) to the list of known hosts. 2024/11/01 10:03:25 fuzzer started 2024/11/01 10:03:26 dialing manager at localhost:45639 syzkaller login: [ 70.237574] cgroup: Unknown subsys name 'net' [ 70.375247] cgroup: Unknown subsys name 'cpuset' [ 70.388868] cgroup: Unknown subsys name 'rlimit' 2024/11/01 10:03:43 syscalls: 200 2024/11/01 10:03:43 code coverage: enabled 2024/11/01 10:03:43 comparison tracing: enabled 2024/11/01 10:03:43 extra coverage: enabled 2024/11/01 10:03:43 setuid sandbox: enabled 2024/11/01 10:03:43 namespace sandbox: enabled 2024/11/01 10:03:43 Android sandbox: enabled 2024/11/01 10:03:43 fault injection: enabled 2024/11/01 10:03:43 leak checking: enabled 2024/11/01 10:03:43 net packet injection: enabled 2024/11/01 10:03:43 net device setup: enabled 2024/11/01 10:03:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/01 10:03:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/01 10:03:43 USB emulation: enabled 2024/11/01 10:03:43 hci packet injection: enabled 2024/11/01 10:03:43 wifi device emulation: enabled 2024/11/01 10:03:43 802.15.4 emulation: enabled 2024/11/01 10:03:43 fetching corpus: 0, signal 0/0 (executing program) 2024/11/01 10:03:44 starting 8 fuzzer processes 10:03:44 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x20}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @ethernet={0x306, @multicast}, @llc={0x1a, 0x102, 0xfc, 0x7, 0x1f, 0x7f, @random="feae6ab808a8"}, @l2tp={0x2, 0x0, @remote}, 0x9, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000080)='ip6tnl0\x00', 0x6, 0x5, 0x6}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xba9b}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xed9, 0x21}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c881) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000540)=""/16, 0x10}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/142, 0x8e}], 0x6, &(0x7f0000000800)=""/157, 0x9d}, 0x3}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/8, 0x8}, {&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/7, 0x7}, {&(0x7f0000000a40)=""/67, 0x43}, {&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/254, 0xfe}, {&(0x7f0000000cc0)=""/217, 0xd9}], 0x7}, 0x1}], 0x2, 0x40000061, &(0x7f0000000ec0)={0x77359400}) syz_open_procfs$namespace(r0, &(0x7f0000000f00)='ns/pid_for_children\x00') r4 = accept4$bt_l2cap(r2, &(0x7f0000000f40)={0x1f, 0x0, @none}, &(0x7f0000000f80)=0xe, 0x80c00) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000fc0)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001040), r1) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff0000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000810) r7 = accept4$packet(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x14, 0x800) accept$packet(r7, 0x0, &(0x7f0000001300)) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3f}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 10:03:44 executing program 2: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x3, 0x1, 0x9}) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x90002013}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x1}, 0x1) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x25}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048810}, 0x10008881) r5 = socket(0x6, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_open_dev$hiddev(&(0x7f0000000500), 0xc7b2, 0x40000) r7 = accept$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000600)={0x3, &(0x7f00000005c0)=[{0x8, 0x4, 0x1d, 0x3c47}, {0x0, 0x7f, 0x81, 0x4}, {0x1c2, 0xc8, 0x88}]}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r9, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x22}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x1c0) r10 = accept4$bt_l2cap(r5, 0x0, &(0x7f0000000780), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f00000007c0)) 10:03:44 executing program 1: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x78b, 0x400}) r1 = syz_open_dev$mouse(&(0x7f0000000400), 0x46, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{0x5, 0x8, 0x5, 0x6}, {0x5, 0x1, 0x50, 0x95}, {0x78a, 0x1, 0xff, 0x400}, {0xfffb, 0x1a, 0x8, 0x9}, {0x8, 0x20, 0x5, 0x4}]}) r2 = syz_io_uring_setup(0x1068, &(0x7f00000004c0)={0x0, 0x1549, 0x8, 0x2, 0x2c7, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r2, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x48}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10804}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x71e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) getpeername$packet(r1, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001a00)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001a40)={0x0, @remote, @loopback}, &(0x7f0000001a80)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001ac0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000001bc0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40051}, 0x8001) r8 = io_uring_setup(0x383d, &(0x7f0000001c00)={0x0, 0x30ee, 0x4, 0x3, 0xe7, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r8, 0x8000000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001cc0)={0x0, &(0x7f0000001c80)}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1a, 0x50, r8, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001d00)={r0, 0x3, 0x9, 0x1}) 10:03:44 executing program 3: r0 = socket(0xb, 0xa, 0x69fecde1) setsockopt$sock_timeval(r0, 0x1, 0x910b328d2c9ae3b4, &(0x7f0000000000), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x39, 0x1, 0x3917fc5e, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000054}, 0x40) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000200)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40028000) recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/208, 0xd0}], 0x1, &(0x7f0000000500)=""/185, 0xb9}, 0x3}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f0000001780)=[{&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/120, 0x78}], 0x3, &(0x7f00000017c0)=""/192, 0xc0}, 0x5}, {{&(0x7f0000001880)=@caif=@dgm, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001900)=""/225, 0xe1}, {&(0x7f0000001a00)=""/99, 0x63}, {&(0x7f0000001a80)=""/52, 0x34}], 0x3, &(0x7f0000001b00)=""/96, 0x60}, 0x3}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001b80)=""/161, 0xa1}, {&(0x7f0000001c40)=""/234, 0xea}, {&(0x7f0000001d40)=""/56, 0x38}, {&(0x7f0000001d80)=""/251, 0xfb}, {&(0x7f0000001e80)=""/227, 0xe3}, {&(0x7f0000001f80)=""/34, 0x22}], 0x6, &(0x7f0000002040)=""/96, 0x60}, 0x4d}, {{&(0x7f00000020c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002140)=""/55, 0x37}, {&(0x7f0000002180)=""/6, 0x6}, {&(0x7f00000021c0)=""/209, 0xd1}, {&(0x7f00000022c0)=""/252, 0xfc}, {&(0x7f00000023c0)=""/114, 0x72}], 0x5}, 0x631c}, {{&(0x7f00000024c0)=@ax25={{0x3, @bcast}, [@remote, @remote, @bcast, @rose, @remote, @bcast, @null, @null]}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002540)=""/236, 0xec}], 0x1, &(0x7f0000002680)=""/218, 0xda}, 0xffffff7f}], 0x6, 0x6162, &(0x7f0000002900)) r4 = syz_open_dev$mouse(&(0x7f0000002940), 0xffffffffffffffff, 0x114800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4110) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4044800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002bc0), r1) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40100}, 0x4000800) r6 = syz_open_dev$mouse(&(0x7f0000002cc0), 0x4d, 0x480000) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r7 = accept4$bt_l2cap(r2, &(0x7f0000002e00)={0x1f, 0x0, @none}, &(0x7f0000002e40)=0xe, 0x800) bind$bt_l2cap(r7, &(0x7f0000002e80)={0x1f, 0x1, @none, 0x2, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000002ec0), &(0x7f0000002f00)=0x6) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000003040)={&(0x7f0000002f40), 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000014) 10:03:44 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x101, 0x40) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x260408c0}, 0x20000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000001c0)={0xa0000004}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x1, 0xe5, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000005200)=[{{&(0x7f0000000240)=@caif=@dgm, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/159, 0x9f}, 0x7}, {{&(0x7f00000003c0)=@nl, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/248, 0xf8}], 0x4, &(0x7f00000007c0)=""/100, 0x64}, 0x6}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)=""/241, 0xf1}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/216, 0xd8}, {&(0x7f0000000c40)=""/246, 0xf6}], 0x5, &(0x7f0000000dc0)=""/163, 0xa3}, 0x2}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f0000001540)=[{&(0x7f0000000f00)=""/4, 0x4}, {&(0x7f0000000f40)=""/101, 0x65}, {&(0x7f0000000fc0)=""/184, 0xb8}, {&(0x7f0000001080)=""/103, 0x67}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/252, 0xfc}, {&(0x7f0000001280)=""/144, 0x90}, {&(0x7f0000001340)=""/207, 0xcf}, {&(0x7f0000001440)=""/217, 0xd9}], 0x9, &(0x7f0000001600)=""/241, 0xf1}, 0xffff0001}, {{&(0x7f0000001700)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001780)=""/140, 0x8c}, {&(0x7f0000001840)=""/83, 0x53}, {&(0x7f00000018c0)=""/44, 0x2c}, {&(0x7f0000001900)=""/202, 0xca}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/224, 0xe0}], 0x6, &(0x7f0000002b80)=""/248, 0xf8}, 0x6}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002c80)=""/107, 0x6b}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/21, 0x15}, {&(0x7f0000002d80)=""/151, 0x97}, {&(0x7f0000002e40)=""/228, 0xe4}, {&(0x7f0000002f40)=""/150, 0x96}], 0x6, &(0x7f0000003080)=""/61, 0x3d}, 0x3}, {{&(0x7f00000030c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)}, {&(0x7f0000004180)=""/6, 0x6}], 0x3, &(0x7f0000004200)=""/4096, 0x1000}, 0x2}], 0x7, 0x10100, &(0x7f00000053c0)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000005400), &(0x7f0000005440)=0x6) r4 = accept4$bt_l2cap(r0, &(0x7f0000005480), &(0x7f00000054c0)=0xe, 0x80000) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000005580)=@req={0x28, &(0x7f0000005540)={'gre0\x00', @ifru_data=&(0x7f0000005500)="c9fcfe8de435dcb43ccefe655bfa58ef26fa8fb4d9fe5fa33817e14012944aca"}}) socket$packet(0x11, 0x3, 0x300) r5 = syz_genetlink_get_family_id$batadv(0xfffffffffffffffe, r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000005680)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005640)={&(0x7f0000005600)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000005780)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005740)={&(0x7f0000005700)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x3}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x349}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x40}}, 0x4000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000005880)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005840)={&(0x7f0000005800)={0x34, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x34}}, 0x20004001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000005900), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000059c0)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005980)={&(0x7f0000005940)={0x38, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff80000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000005a00)='./binderfs2/custom1\x00', 0x803, 0x0) [ 88.069871] audit: type=1400 audit(1730455424.876:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:03:44 executing program 5: socket$inet(0x2, 0x5, 0x4) socketpair(0x28, 0x2, 0x412a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @private=0xa010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x4, {0x2, 0x4e20, @broadcast}, 'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) socketpair(0x1d, 0x5, 0x3, &(0x7f0000004ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004fc0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x28001200}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000840) r4 = accept$packet(r2, &(0x7f0000005000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005040)=0x14) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000005080)=""/243, &(0x7f0000005180)=0xf3) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000051c0), 0x100, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000005200)={0xc, @loopback, 0x4e23, 0x3, 'sed\x00', 0x25, 0x0, 0x3d}, 0x2c) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000005300)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x3c, 0x0, 0xa10, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8b2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000005400)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005440)={0x0, @multicast2, @multicast2}, &(0x7f0000005480)=0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000005580)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x30, 0x0, 0xc3570a36e0e5fc33, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0x3, 0x45}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x26048044) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000055c0)=@req={0x80000001, 0x2d4, 0x0, 0x1}, 0x10) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000005600)={0x0, @ethernet={0x1, @multicast}, @isdn={0x22, 0x8, 0x1, 0x4, 0x3}, @llc={0x1a, 0x12c, 0x3, 0x20, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000005680)=0x5, 0x4) recvmmsg(r3, &(0x7f0000009980)=[{{&(0x7f00000056c0)=@l2, 0x80, &(0x7f0000005940)=[{&(0x7f0000005740)}, {&(0x7f0000005780)=""/24, 0x18}, {&(0x7f00000057c0)=""/161, 0xa1}, {&(0x7f0000005880)=""/74, 0x4a}, {&(0x7f0000005900)=""/54, 0x36}], 0x5, &(0x7f00000059c0)=""/77, 0x4d}}, {{&(0x7f0000005a40)=@xdp, 0x80, &(0x7f0000006b40)=[{&(0x7f0000005ac0)=""/84, 0x54}, {&(0x7f0000005b40)=""/4096, 0x1000}], 0x2, &(0x7f0000006b80)=""/31, 0x1f}, 0x100}, {{&(0x7f0000006bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000006c40)=""/37, 0x25}, {&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/147, 0x93}, {&(0x7f0000007d40)=""/193, 0xc1}], 0x4, &(0x7f0000007e80)=""/196, 0xc4}, 0xffffffff}, {{&(0x7f0000007f80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000008340)=[{&(0x7f0000008000)=""/45, 0x2d}, {&(0x7f0000008040)=""/168, 0xa8}, {&(0x7f0000008100)=""/241, 0xf1}, {&(0x7f0000008200)=""/251, 0xfb}, {&(0x7f0000008300)=""/41, 0x29}], 0x5, &(0x7f00000083c0)=""/210, 0xd2}, 0x89b0}, {{&(0x7f00000084c0)=@nfc_llcp, 0x80, &(0x7f0000009900)=[{&(0x7f0000008540)=""/4096, 0x1000}, {&(0x7f0000009540)=""/65, 0x41}, {&(0x7f00000095c0)=""/115, 0x73}, {&(0x7f0000009640)=""/117, 0x75}, {&(0x7f00000096c0)=""/74, 0x4a}, {&(0x7f0000009740)=""/66, 0x42}, {&(0x7f00000097c0)=""/39, 0x27}, {&(0x7f0000009800)=""/202, 0xca}], 0x8}, 0x1}], 0x5, 0x0, &(0x7f0000009ac0)) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000009c00)={&(0x7f0000009b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000009bc0)={&(0x7f0000009b40)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004080) syz_open_dev$loop(&(0x7f0000009c40), 0x1, 0x200) 10:03:44 executing program 6: syz_io_uring_setup(0x7018, &(0x7f0000000000)={0x0, 0x2f20, 0x0, 0x3, 0x252}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x991e) r2 = socket$inet(0x2, 0x1, 0xfffffff9) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000140)=""/19, &(0x7f0000000180)=0x13) clock_gettime(0x2, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000200)) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x10) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8a1020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, 0x0, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7d}, @void, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7697d3ed913660f73f7c9c1f61f267502191382a6e2616c6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc6ffd5fc0fdaea2554c91bdcc875ed3f3827585707bb2da"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "78583fd75aa1de34d6cae0ed1911fca1af753a17501ee78b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0eab0a49eaa6da82f7f7f3c38843ed8c03b0ec86a74d603b"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e16e7e5969a58b449643f2208f899f203155eff10e3fa6f8"}]]}, 0x104}, 0x1, 0x0, 0x0, 0x4008845}, 0xc1) accept$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) syz_io_uring_submit(r0, r1, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r2, 0x80, &(0x7f00000006c0)=@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3839}}, 0x9) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @fixed}, &(0x7f00000007c0)=0xe, 0x80000) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000800), &(0x7f0000000840)=0x8) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000880)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000008c0)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r4) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040854}, 0x20000001) r7 = socket$inet6(0xa, 0x803, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000a40)) 10:03:44 executing program 7: socketpair(0x2, 0x2, 0x2b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0xc000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2aa6b64c09203564}, 0x20008011) socketpair(0xa, 0x6, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x480a0}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40) r3 = getgid() getgroups(0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xee01, 0xee00, 0x0]) getgroups(0x8, &(0x7f0000000400)=[0xee01, 0x0, 0x0, 0xee01, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f0000000440)=[0xee00, r3, r4, r5, 0x0]) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000480)=0x1000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)={0x5, 0x0, 0x7fff, 0x40, 0x0, 0xff, 0x5}, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) r7 = accept4$bt_l2cap(r2, &(0x7f0000000580)={0x1f, 0x0, @none}, &(0x7f00000005c0)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0xc) bind$packet(r1, &(0x7f0000000680)={0x11, 0xc, r6, 0x1, 0x1f, 0x6, @remote}, 0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r8, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x4100) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r10, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x3e}}}}, ["", "", ""]}, 0x30}}, 0x40000) [ 89.627317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.629858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.631910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.635675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.637894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.638953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.641392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.641468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.646713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.649146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.649961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.653602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.656056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.658234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.660679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.660904] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.663462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.664279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.665778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.668935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.669357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.671448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.673829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.674965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.675173] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.678213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.679741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.681100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.682465] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.684189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.685876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.688328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.689513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.695144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.706659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.709787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.712023] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.713917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.715199] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.726848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.738993] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.740132] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.742231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.756440] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.757401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.763810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.779885] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.782318] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.701932] Bluetooth: hci5: command tx timeout [ 91.766638] Bluetooth: hci1: command tx timeout [ 91.767339] Bluetooth: hci2: command tx timeout [ 91.829729] Bluetooth: hci0: command tx timeout [ 91.830394] Bluetooth: hci6: command tx timeout [ 91.830433] Bluetooth: hci7: command tx timeout [ 91.831492] Bluetooth: hci4: command tx timeout [ 91.831731] Bluetooth: hci3: command tx timeout [ 93.750562] Bluetooth: hci5: command tx timeout [ 93.813863] Bluetooth: hci1: command tx timeout [ 93.815275] Bluetooth: hci2: command tx timeout [ 93.878980] Bluetooth: hci0: command tx timeout [ 93.880512] Bluetooth: hci6: command tx timeout [ 93.881940] Bluetooth: hci3: command tx timeout [ 93.881997] Bluetooth: hci4: command tx timeout [ 93.882378] Bluetooth: hci7: command tx timeout [ 95.797870] Bluetooth: hci5: command tx timeout [ 95.861681] Bluetooth: hci1: command tx timeout [ 95.862202] Bluetooth: hci2: command tx timeout [ 95.925717] Bluetooth: hci6: command tx timeout [ 95.926238] Bluetooth: hci0: command tx timeout [ 95.927279] Bluetooth: hci7: command tx timeout [ 95.927855] Bluetooth: hci4: command tx timeout [ 95.928311] Bluetooth: hci3: command tx timeout [ 97.845748] Bluetooth: hci5: command tx timeout [ 97.910594] Bluetooth: hci2: command tx timeout [ 97.911116] Bluetooth: hci1: command tx timeout [ 97.973783] Bluetooth: hci7: command tx timeout [ 97.974308] Bluetooth: hci3: command tx timeout [ 97.975644] Bluetooth: hci4: command tx timeout [ 97.976115] Bluetooth: hci0: command tx timeout [ 97.976995] Bluetooth: hci6: command tx timeout [ 152.221455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.223846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.229291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.235915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.237597] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.240114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.255886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.261793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.264825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.268394] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.270037] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.274747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.278127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.279796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.281098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.284422] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.290684] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.291981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.407351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.433896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.446067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.476358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.478436] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.495499] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.497748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.515455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.536434] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.536757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.546073] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.550910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.555827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.561492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.563447] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.563559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.581736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.582251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.583709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.584866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.590360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.594085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.600195] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.601206] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.606370] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.608124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.634321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.686008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.715003] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.741010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.293620] Bluetooth: hci1: command tx timeout [ 154.294567] Bluetooth: hci0: command tx timeout [ 154.357759] Bluetooth: hci2: command tx timeout [ 154.549660] Bluetooth: hci3: command tx timeout [ 154.614617] Bluetooth: hci4: command tx timeout [ 154.679606] Bluetooth: hci7: command tx timeout [ 154.741773] Bluetooth: hci5: command tx timeout [ 154.870611] Bluetooth: hci6: command tx timeout [ 156.342589] Bluetooth: hci0: command tx timeout [ 156.343147] Bluetooth: hci1: command tx timeout [ 156.405659] Bluetooth: hci2: command tx timeout [ 156.597670] Bluetooth: hci3: command tx timeout [ 156.662577] Bluetooth: hci4: command tx timeout [ 156.725637] Bluetooth: hci7: command tx timeout [ 156.789610] Bluetooth: hci5: command tx timeout [ 156.919205] Bluetooth: hci6: command tx timeout [ 158.390413] Bluetooth: hci1: command tx timeout [ 158.390442] Bluetooth: hci0: command tx timeout [ 158.453616] Bluetooth: hci2: command tx timeout [ 158.647588] Bluetooth: hci3: command tx timeout [ 158.709614] Bluetooth: hci4: command tx timeout [ 158.773615] Bluetooth: hci7: command tx timeout [ 158.839647] Bluetooth: hci5: command tx timeout [ 158.965792] Bluetooth: hci6: command tx timeout [ 160.452052] Bluetooth: hci1: command tx timeout [ 160.452081] Bluetooth: hci0: command tx timeout [ 160.530907] Bluetooth: hci2: command tx timeout [ 160.693756] Bluetooth: hci3: command tx timeout [ 160.757655] Bluetooth: hci4: command tx timeout [ 160.821813] Bluetooth: hci7: command tx timeout [ 160.887656] Bluetooth: hci5: command tx timeout [ 161.015689] Bluetooth: hci6: command tx timeout [ 214.233010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.234454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.237695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.246685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.248958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.262732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.348023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.349791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.351104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.362333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.365309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.367041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.473201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.481721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.486887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.493777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.505873] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.508029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.540393] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.544180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.546440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.555384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.559554] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.561870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.572749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.576439] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.579953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.585569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.588313] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.590666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.676849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.679307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.681689] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.686024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.688816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.691007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.707242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.746759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.749014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.755257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.759940] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.763184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.768869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.774718] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.777082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.781848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.790790] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.793815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.312732] Bluetooth: hci0: command tx timeout [ 216.437792] Bluetooth: hci1: command tx timeout [ 216.566590] Bluetooth: hci2: command tx timeout [ 216.630747] Bluetooth: hci3: command tx timeout [ 216.693834] Bluetooth: hci4: command tx timeout [ 216.757613] Bluetooth: hci6: command tx timeout [ 216.821597] Bluetooth: hci5: command tx timeout [ 216.885690] Bluetooth: hci7: command tx timeout [ 218.357844] Bluetooth: hci0: command tx timeout [ 218.486529] Bluetooth: hci1: command tx timeout [ 218.615555] Bluetooth: hci2: command tx timeout [ 218.677624] Bluetooth: hci3: command tx timeout [ 218.741864] Bluetooth: hci4: command tx timeout [ 218.805657] Bluetooth: hci6: command tx timeout [ 218.869680] Bluetooth: hci5: command tx timeout [ 218.933865] Bluetooth: hci7: command tx timeout [ 220.406153] Bluetooth: hci0: command tx timeout [ 220.533581] Bluetooth: hci1: command tx timeout [ 220.661602] Bluetooth: hci2: command tx timeout [ 220.726633] Bluetooth: hci3: command tx timeout [ 220.790541] Bluetooth: hci4: command tx timeout [ 220.853623] Bluetooth: hci6: command tx timeout [ 220.917713] Bluetooth: hci5: command tx timeout [ 220.981633] Bluetooth: hci7: command tx timeout [ 222.453598] Bluetooth: hci0: command tx timeout [ 222.581736] Bluetooth: hci1: command tx timeout [ 222.709633] Bluetooth: hci2: command tx timeout [ 222.774541] Bluetooth: hci3: command tx timeout [ 222.837822] Bluetooth: hci4: command tx timeout [ 222.901584] Bluetooth: hci6: command tx timeout [ 222.965929] Bluetooth: hci5: command tx timeout [ 223.030576] Bluetooth: hci7: command tx timeout [ 276.641754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.643408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.645565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.646737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.647856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.648970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.662183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.663314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.667894] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.670826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.671332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.672929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.748916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.757368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.766112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.776822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.781425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.782834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.832563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.834910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.836147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.839435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.840973] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.842049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.936219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.962884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.994712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.001732] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.013204] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.014097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.015833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.040820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.044611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.047671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.050933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.054968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.056284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.057289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.060189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.061633] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.062635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.069092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.117999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.119991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.121182] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.122928] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.122939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.140993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.709762] Bluetooth: hci0: command tx timeout [ 278.710878] Bluetooth: hci1: command tx timeout [ 278.837579] Bluetooth: hci2: command tx timeout [ 278.903570] Bluetooth: hci3: command tx timeout [ 279.095538] Bluetooth: hci7: command tx timeout [ 279.157592] Bluetooth: hci4: command tx timeout [ 279.158612] Bluetooth: hci5: command tx timeout [ 279.222596] Bluetooth: hci6: command tx timeout [ 280.757622] Bluetooth: hci0: command tx timeout [ 280.759310] Bluetooth: hci1: command tx timeout [ 280.885745] Bluetooth: hci2: command tx timeout [ 280.950722] Bluetooth: hci3: command tx timeout [ 281.141795] Bluetooth: hci7: command tx timeout [ 281.207677] Bluetooth: hci5: command tx timeout [ 281.209257] Bluetooth: hci4: command tx timeout [ 281.270568] Bluetooth: hci6: command tx timeout [ 282.806636] Bluetooth: hci1: command tx timeout [ 282.807169] Bluetooth: hci0: command tx timeout [ 282.934964] Bluetooth: hci2: command tx timeout [ 282.997596] Bluetooth: hci3: command tx timeout [ 283.190560] Bluetooth: hci7: command tx timeout [ 283.254601] Bluetooth: hci5: command tx timeout [ 283.256594] Bluetooth: hci4: command tx timeout [ 283.319507] Bluetooth: hci6: command tx timeout [ 284.854883] Bluetooth: hci1: command tx timeout [ 284.856391] Bluetooth: hci0: command tx timeout [ 284.982789] Bluetooth: hci2: command tx timeout [ 285.046743] Bluetooth: hci3: command tx timeout [ 285.238585] Bluetooth: hci7: command tx timeout [ 285.302587] Bluetooth: hci4: command tx timeout [ 285.304272] Bluetooth: hci5: command tx timeout [ 285.366611] Bluetooth: hci6: command tx timeout [ 338.964190] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.978890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.980250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.983192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.986241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.988764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.302233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.304259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.306819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.307886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.309570] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.311664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.313252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.315196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.325416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.332420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.335056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.336656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.341388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.344291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.346772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.348774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.349260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.354127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.355756] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.356426] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.360019] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.363030] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.365102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.367769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.368675] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.370321] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.371309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.371703] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.378914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.381070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.383636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.385768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.389719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.391584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.394369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.429770] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.432265] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.434092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.436934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.473734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.477908] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.482711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.048693] Bluetooth: hci0: command tx timeout [ 341.429645] Bluetooth: hci4: command tx timeout [ 341.429771] Bluetooth: hci2: command tx timeout [ 341.430795] Bluetooth: hci1: command tx timeout [ 341.432500] Bluetooth: hci3: command tx timeout [ 341.495609] Bluetooth: hci7: command tx timeout [ 341.495787] Bluetooth: hci5: command tx timeout [ 341.557682] Bluetooth: hci6: command tx timeout [ 343.094638] Bluetooth: hci0: command tx timeout [ 343.479536] Bluetooth: hci2: command tx timeout [ 343.479581] Bluetooth: hci1: command tx timeout [ 343.480063] Bluetooth: hci3: command tx timeout [ 343.480534] Bluetooth: hci4: command tx timeout [ 343.543865] Bluetooth: hci7: command tx timeout [ 343.543925] Bluetooth: hci5: command tx timeout [ 343.606792] Bluetooth: hci6: command tx timeout [ 345.142792] Bluetooth: hci0: command tx timeout [ 345.525762] Bluetooth: hci3: command tx timeout [ 345.526332] Bluetooth: hci4: command tx timeout [ 345.530988] Bluetooth: hci1: command tx timeout [ 345.531383] Bluetooth: hci2: command tx timeout [ 345.589853] Bluetooth: hci7: command tx timeout [ 345.592510] Bluetooth: hci5: command tx timeout [ 345.654683] Bluetooth: hci6: command tx timeout [ 347.190640] Bluetooth: hci0: command tx timeout [ 347.575600] Bluetooth: hci2: command tx timeout [ 347.576116] Bluetooth: hci3: command tx timeout [ 347.576867] Bluetooth: hci1: command tx timeout [ 347.577316] Bluetooth: hci4: command tx timeout [ 347.637555] Bluetooth: hci5: command tx timeout [ 347.638027] Bluetooth: hci7: command tx timeout [ 347.702606] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 10:08:45 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff813e8f70 RCX=ffffffff86832101 RDX=1ffff110031a7f23 RSI=ffffffff818b0384 RDI=ffff888018d3f7d8 RBP=ffff888018d3f870 RSP=ffff888018d3f7d0 R8 =ffffffff86832192 R9 =ffff888018d3f818 R10=000000000003c001 R11=0000000000023a45 R12=ffff888018d3f8a0 R13=0000000000000000 R14=ffff888015e6b700 R15=0000000000092cc0 RIP=ffffffff81148e90 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f026a9a3170 CR3=0000000026cd2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000003 RBX=ffffffff87efcb90 RCX=ffffffff812fb082 RDX=fffffbfff0fda9e1 RSI=0000000000000000 RDI=ffffffff87efcc56 RBP=ffff8880164aa5c0 RSP=ffff88802a1df948 R8 =0000000000000006 R9 =fffffbfff0fda9e0 R10=ffffffff87ed4f07 R11=000000000026b989 R12=ffff8880164a9b80 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff812fb006 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbc75204540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbc756cc008 CR3=000000002559c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000