Starting Update UTMP about System Runlevel Changes... [ OK ] Finished Update UTMP about System Runlevel Changes. [ 62.315854] audit: type=1400 audit(1736095220.648:6): avc: denied { checkpoint_restore } for pid=223 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:30210' (ECDSA) to the list of known hosts. 2025/01/05 16:40:26 fuzzer started 2025/01/05 16:40:27 dialing manager at localhost:34561 syzkaller login: [ 69.741484] cgroup: Unknown subsys name 'net' [ 69.830112] cgroup: Unknown subsys name 'cpuset' [ 69.848108] cgroup: Unknown subsys name 'rlimit' 2025/01/05 16:40:45 syscalls: 205 2025/01/05 16:40:45 code coverage: enabled 2025/01/05 16:40:45 comparison tracing: enabled 2025/01/05 16:40:45 extra coverage: enabled 2025/01/05 16:40:45 setuid sandbox: enabled 2025/01/05 16:40:45 namespace sandbox: enabled 2025/01/05 16:40:45 Android sandbox: enabled 2025/01/05 16:40:45 fault injection: enabled 2025/01/05 16:40:45 leak checking: enabled 2025/01/05 16:40:45 net packet injection: enabled 2025/01/05 16:40:45 net device setup: enabled 2025/01/05 16:40:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/05 16:40:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/05 16:40:45 USB emulation: enabled 2025/01/05 16:40:45 hci packet injection: enabled 2025/01/05 16:40:45 wifi device emulation: enabled 2025/01/05 16:40:45 802.15.4 emulation: enabled 2025/01/05 16:40:45 fetching corpus: 0, signal 0/0 (executing program) 2025/01/05 16:40:47 starting 8 fuzzer processes 16:40:47 executing program 0: io_setup(0x6, &(0x7f0000000000)=0x0) clone3(&(0x7f0000000280)={0x100000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x26}, &(0x7f0000000100)=""/158, 0x9e, &(0x7f00000001c0)=""/107, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, &(0x7f0000000300)="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", 0xfb, 0x2c, 0x0, 0x22ef362ceadc94c3}, &(0x7f0000000440)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = eventfd(0x3f) r4 = timerfd_create(0x7, 0x800) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x9, 0x1, {0x0, r3}, 0x4, 0x2, 0x1, {0x0, 0x0, r4}}, 0x40000000) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000004c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@migrate={0x7c, 0x21, 0x8, 0x70bd29, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@multicast1, 0x4e24, 0x7, 0x4e20, 0xffff, 0x2, 0x0, 0x0, 0x21, 0x0, 0xee00}, 0x6e6bbd, 0x2}, [@lifetime_val={0x24, 0x9, {0x800, 0x5, 0x2, 0x10000}}, @tfcpad={0x8, 0x16, 0x7f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24044001}, 0x8041) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000640)=r3, 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r6 = syz_io_uring_complete(r2) ioctl$CDROMREADMODE1(r6, 0x530d, &(0x7f00000006c0)={0x7f, 0x7, 0x0, 0x1, 0xff, 0x12}) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000001140)) io_setup(0x8000, &(0x7f0000001180)=0x0) r8 = eventfd2(0x0, 0x0) io_submit(r7, 0x4, &(0x7f0000001540)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x8, 0x200, r5, &(0x7f00000011c0)="fe668f082ab5bbd791646c0fed6feb1dfff34e5bfd883b18a8f93406f03a3ea7cc41ef6c5c9b06ba4a9b97d869280d266d9048e19db0bac0416d79b380b5d0def1e77510239065f300e4aa6ec70f8008815e4af1811bbffc07887121328d4927e6c137df7cd4190a948085eead8dbd107892932856a1aeac0a36871377cc55240bd623e693e73175", 0x88, 0x0, 0x0, 0x1, r8}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x6, 0xda82, r6, &(0x7f00000012c0)="ac520dd6a2a0a16139195ee91853b9d63ddec79a325fd3bca61466660ef3f792fe18a7a7e3e4785576ba624d1051a4a39b97152cfede466fa24073df1e781ed77c715da2efdec26629c3c30b8b17b32129b5bce940d3e551cf972196b6c3741d49084667e7e50cc8161f848ea1b2c3c897c944ff66f20ce323a5c2ab4fb5f47e411a2e88fe864337fcdb30e796dd25be41cad6482e80249d92dbec81e2bf8b5670a5dec633", 0xa5, 0x2, 0x0, 0x3, r6}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0x570e, r4, &(0x7f00000013c0)="1faacf99ce103dd9dbcc30682151c2f63a1cd4769f04c5376710b7df76483c1b6d205c42cdb2481d49ae5132a58d0040ad9352beedecd2f3", 0x38, 0x829, 0x0, 0x0, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0xc000, r1, &(0x7f0000001440)="b0821c950ae433c3935becdf40cb3f748308f9982bc032233e9d31ca916b08330c81b6570c319c0be4bf460dd286fb6dcb618e9ea0b808c2ebd78b3f35b24c1940af5d51bb3fd89c662e4e87245b9099964017526290fa11698fac76982df90e419d8ce35b9c51b5b623aed9c3b7199d2490e136ea091ed8334fa4accf0072c46dd66c45e32cf257e56f1e", 0x8b, 0x9}]) syz_io_uring_setup(0xd1d, &(0x7f0000001580)={0x0, 0x8de5, 0x10, 0x1, 0x2d}, &(0x7f0000f40000/0x4000)=nil, &(0x7f0000e3f000/0x3000)=nil, &(0x7f0000001600), &(0x7f0000001640)) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000001680)) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f00000016c0)={0x0, 0x1, {0x0, 0x16, 0xa, 0xd, 0x5, 0xffff, 0x6, 0x44}}) 16:40:47 executing program 1: r0 = socket(0x6, 0x4, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x11}, 0x4) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x1, 0x7, 0x80000000, 0x3, {{0x1e, 0x4, 0x0, 0x5, 0x78, 0x67, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x34, 0x3, [{0x2, 0x6, "c6d6df94"}, {0x5, 0xe, "891913b4c33e68acb6f8370e"}, {0x7, 0xe, "695bb36915caac324136b122"}, {0x6, 0xc, "f9652422dfe95c2c8c4e"}]}, @lsrr={0x83, 0x1b, 0xaf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @loopback, @loopback, @multicast1]}, @lsrr={0x83, 0x13, 0xbf, [@empty, @private=0xa010101, @broadcast, @local]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', r2, 0x7, 0x20, 0xcb6, 0x800, {{0x17, 0x4, 0x0, 0x4, 0x5c, 0x65, 0x0, 0x66, 0x29, 0x0, @broadcast, @private=0xa010102, {[@ssrr={0x89, 0x27, 0xbe, [@private=0xa010101, @remote, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @broadcast, @multicast1]}, @ssrr={0x89, 0x1f, 0xdf, [@local, @private=0xa010100, @local, @local, @multicast1, @multicast2, @private=0xa010102]}]}}}}}) connect$802154_dgram(r0, &(0x7f0000000380)={0x24, @short={0x2, 0x1fffd}}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) ioctl$RTC_WIE_ON(r3, 0x700f) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7833}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x44885) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000700)) recvmmsg$unix(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000a40)=""/36, 0x24}], 0x4, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/104, 0x68}, {&(0x7f0000000c40)=""/71, 0x47}, {&(0x7f0000000cc0)=""/236, 0xec}, {&(0x7f0000000dc0)=""/39, 0x27}, {&(0x7f0000000e00)=""/179, 0xb3}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/33, 0x21}], 0x7, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001080)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x3, 0x22, &(0x7f0000001200)={0x0, 0x3938700}) ioctl$CDROMREADMODE2(r7, 0x530c, &(0x7f0000001240)={0x2, 0x2, 0x49, 0x7, 0x8, 0x7f}) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000001cc0)={0x8}, 0x4) 16:40:47 executing program 2: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r2 = getpgrp(0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0xee00, 0xffffffffffffffff, r1, 0xee01, 0x0, 0x9}, 0x800, 0x80, 0x40, 0x0, 0xffffffffffffffff, r2}) io_setup(0x8000, &(0x7f0000000140)=0x0) io_destroy(r3) io_pgetevents(r3, 0x2, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x5]}, 0x8}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000300)={0x10000, 0x7, 0x1}) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000340)) io_setup(0x5, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) io_pgetevents(r4, 0x5f, 0x2, &(0x7f00000003c0)=[{}, {}], &(0x7f0000000440)={r5, r6+10000000}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000480)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000004c0)) io_setup(0xef9, &(0x7f0000000500)=0x0) io_pgetevents(r7, 0x3, 0x2, &(0x7f0000000540)=[{}, {}], 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={[0x9]}, 0x8}) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000600)={0x3, 0x5, 0x1}) r8 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x20800) ioctl$BLKGETSIZE(r8, 0x1260, &(0x7f0000000680)) [ 88.870391] audit: type=1400 audit(1736095247.207:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:40:47 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0xc8161649b8ba8136, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)="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", 0xfb, 0x40000, 0x1}, 0x10000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4028010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044005}, 0x20000804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x10000, 0x6, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x68, 0x0, 0x3f, 0x29, 0x0, @local, @empty, {[@generic={0x83, 0xa, "ec9c6b6d157a2e61"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0xffffffc1, 0x2, {{0x41, 0x4, 0x1, 0x38, 0x104, 0x65, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0x3a, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0x51f}, {@loopback, 0x7fff}, {@multicast1, 0x7}, {@loopback, 0x36}, {@remote, 0x7}, {@local, 0x1000}, {@broadcast, 0x6a88}]}, @ssrr={0x89, 0x1b, 0xaa, [@dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @empty, @rand_addr=0x64010102]}, @noop, @timestamp={0x44, 0xc, 0xa6, 0x0, 0xc, [0x1, 0x0]}, @timestamp={0x44, 0x8, 0x67, 0x0, 0x4, [0x8ed6]}, @generic={0x88, 0xf, "1e9c38fd87cfea75a127ebb44d"}, @end, @lsrr={0x83, 0x13, 0xda, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x57, 0x3, 0x7, [{@loopback, 0x7fffffff}, {@multicast1, 0x3ff}, {@loopback, 0xffff0001}, {@multicast1, 0x20}, {@loopback, 0xdbd}]}, @lsrr={0x83, 0x2b, 0x15, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, @private=0xa010102, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x10, 0x8, 0xe2b3, 0xffffffff, {{0x6, 0x4, 0x1, 0x3b, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @private=0xa010101, {[@generic={0x82, 0x3, "cd"}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x40020) r8 = syz_io_uring_complete(0x0) getpeername$packet(r8, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) r9 = syz_io_uring_complete(0x0) ioctl$BLKSECTGET(r9, 0x1267, &(0x7f0000000900)) clone3(&(0x7f0000000d80)={0x100000000, &(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00), {0xe}, &(0x7f0000000c40)=""/107, 0x6b, &(0x7f0000000cc0)=""/74, &(0x7f0000000d40)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r2}}, 0x58) clone3(&(0x7f0000000e40)={0x13000100, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0), {0x1f}, &(0x7f0000000a00)=""/158, 0x9e, &(0x7f0000000ac0)=""/130, &(0x7f0000000e00)=[r10, 0x0], 0x2, {r9}}, 0x58) 16:40:47 executing program 4: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {r0, r1+60000000}}, &(0x7f0000000100)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{}, {r2, r3+10000000}}, &(0x7f00000002c0)) ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000300)={0x7, 0x1, 0x4, 0x2}) r4 = socket(0x0, 0xa, 0x8) recvmmsg$unix(r4, &(0x7f0000001140)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000740)=""/23, 0x17}], 0x5, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/189, 0xbd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/207, 0xcf}, {&(0x7f0000000bc0)=""/248, 0xf8}, {&(0x7f0000000cc0)=""/34, 0x22}, {&(0x7f0000000d00)=""/250, 0xfa}, {&(0x7f0000000e00)=""/46, 0x2e}], 0x5, &(0x7f0000000ec0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/201, 0xc9}, {&(0x7f0000001000)=""/60, 0x3c}], 0x2, &(0x7f0000001080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x4, 0x2, &(0x7f0000001240)) ioctl$CDROMREADAUDIO(r5, 0x530e, &(0x7f0000001300)={@lba, 0x1, 0x43, &(0x7f0000001280)=""/67}) r6 = syz_io_uring_complete(0x0) recvmmsg$unix(r6, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001340)=""/201, 0xc9}, {&(0x7f0000001440)=""/237, 0xed}, {&(0x7f0000001540)=""/134, 0x86}], 0x3, &(0x7f0000001640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001700)=""/69, 0x45}, {&(0x7f0000001780)=""/33, 0x21}, {&(0x7f00000017c0)=""/6, 0x6}], 0x3}}, {{&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/182, 0xb6}, {&(0x7f0000002980)=""/5, 0x5}, {&(0x7f00000029c0)=""/36, 0x24}], 0x4, &(0x7f0000002a40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b00)=""/144, 0x90}, {&(0x7f0000002bc0)=""/107, 0x6b}], 0x2, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002d80)=""/177, 0xb1}, {&(0x7f0000002e40)=""/123, 0x7b}, {&(0x7f0000002ec0)=""/226, 0xe2}], 0x3, &(0x7f0000003000)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000003140), 0x6e, &(0x7f0000003280)=[{&(0x7f00000031c0)=""/162, 0xa2}], 0x1, &(0x7f00000032c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000003340), 0x6e, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/166, 0xa6}, {&(0x7f0000003480)=""/213, 0xd5}, {&(0x7f0000003580)=""/56, 0x38}], 0x3}}, {{&(0x7f0000003600), 0x6e, &(0x7f0000004980)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/182, 0xb6}, {&(0x7f0000004740)=""/238, 0xee}, {&(0x7f0000004840)=""/234, 0xea}, {&(0x7f0000004940)=""/20, 0x14}], 0x5, &(0x7f0000004a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000004ac0), 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004b40)=""/83, 0x53}, {&(0x7f0000004bc0)=""/167, 0xa7}], 0x2, &(0x7f0000004cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000004d40), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000004dc0)=""/190, 0xbe}], 0x1, &(0x7f0000004ec0)}}], 0xa, 0x10002, &(0x7f0000005180)={0x77359400}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000051c0), 0x20000, 0x0) recvmmsg$unix(r8, &(0x7f0000007180)=[{{&(0x7f0000005200)=@abs, 0x6e, &(0x7f00000053c0)=[{&(0x7f0000005280)=""/173, 0xad}, {&(0x7f0000005340)=""/104, 0x68}], 0x2, &(0x7f0000005400)}}, {{&(0x7f0000005440), 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)=""/241, 0xf1}], 0x1, &(0x7f0000005600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000005780), 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005800)=""/82, 0x52}, {&(0x7f0000005880)=""/4, 0x4}, {&(0x7f00000058c0)=""/211, 0xd3}, {&(0x7f00000059c0)=""/127, 0x7f}, {&(0x7f0000005a40)=""/30, 0x1e}, {&(0x7f0000005a80)=""/220, 0xdc}, {&(0x7f0000005b80)=""/234, 0xea}, {&(0x7f0000005c80)=""/200, 0xc8}, {&(0x7f0000005d80)=""/47, 0x2f}, {&(0x7f0000005dc0)=""/242, 0xf2}], 0xa, &(0x7f0000005f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4096, 0x1000}], 0x1, &(0x7f0000007080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}], 0x4, 0x1, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000007280), 0x200020000, 0x400080) ioctl$MON_IOCQ_RING_SIZE(r9, 0x9205) ioctl$CDROMSUBCHNL(r7, 0x530b, &(0x7f00000072c0)={0x1, 0x3, 0x4, 0x7, 0x2b, 0x30, @lba=0xd5, @msf={0x4, 0xf5, 0x13}}) 16:40:47 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x30, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x9a010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x475586ee6f83a28f}, 0x0) migrate_pages(0xffffffffffffffff, 0x7, &(0x7f0000000040)=0xb8f6, &(0x7f0000000080)=0x6) syz_usb_disconnect(0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x20010, 0xffffffffffffffff, 0x10000000) syz_usb_ep_read(0xffffffffffffffff, 0xff, 0xe8, &(0x7f00000000c0)=""/232) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000001c0)=""/110) wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000001840)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x5, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa8}}], 0x1, 0x2000, 0x0) wait4(r8, &(0x7f0000001880), 0x1, &(0x7f00000018c0)) syz_io_uring_setup(0x121a, &(0x7f0000001980)={0x0, 0x6df5, 0x20, 0x2, 0xc0, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001a00)=0x0, &(0x7f0000001a40)) syz_io_uring_submit(r9, r1, &(0x7f0000001ac0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000001a80)={0x77359400}, 0x1, 0x1}, 0x80000001) ioctl$CDROM_SELECT_DISK(r4, 0x5322, 0x7f) r10 = socket(0x2a, 0x5, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r10) write$tcp_congestion(r3, &(0x7f0000001b40)='reno\x00', 0x5) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000003440)={{0x3, r5, r6, 0x0, 0xee00, 0x40, 0x205}, 0x1, 0x4, 0xfffffffffffffffd, 0x6, r8, r7, 0xb69}) 16:40:47 executing program 6: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x5, 0xee}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000080)) r0 = syz_io_uring_complete(0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x1) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)) r1 = syz_io_uring_complete(0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x800}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$CDROMSTART(r2, 0x5308) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000001c0)={0x20, 0x6, 0x0, [{0x4, 0x6, 0x4, 0x8, 0x10, 0x5, 0x1}, {0x7fe, 0x8001, 0x9, 0x3f, 0xff, 0x7, 0x26}, {0x0, 0x8, 0xfffffffffffffff7, 0x20, 0x40, 0x3, 0xfb}, {0x3, 0x8001, 0x6, 0x7, 0x4, 0x7f, 0x80}, {0x5, 0x3ff, 0x9, 0x40, 0x7f, 0x1f}, {0x1f, 0x400, 0x100000000, 0x8, 0x3f, 0xf8, 0x4}]}) r3 = clone3(&(0x7f0000000640)={0x100, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x22}, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/49, &(0x7f0000000600)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = getpgrp(0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x2000, 0x0) clone3(&(0x7f0000000740)={0x100000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x39}, &(0x7f0000000440)=""/59, 0x3b, &(0x7f0000000480)=""/36, &(0x7f00000006c0)=[r3, 0xffffffffffffffff, r4], 0x3, {r5}}, 0x58) r6 = syz_io_uring_complete(0x0) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f00000007c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000940), 0x2, 0x0) 16:40:47 executing program 7: io_setup(0x2, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000080)="3006cdb3ffa8ca6b85f96b37a281ecdd12", 0x11, 0x3, 0x0, 0x5}, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000140)=0x0) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x46, 0xffffffffffffffff, &(0x7f0000000180)="061dd1048c420bd56eb308abed0c2c6f870526c595531d32212b00aa0ac0c676177626c4f29009a03df2da65e3770f196535362b315a329e970414e5b7577abd5b594f50cc0247ef5e3cf92b3094dae590ee8f7d969977b8684a835f321a436bf464718733ab58cb6dc660bc2729f56705ea", 0x72, 0x1}, &(0x7f0000000240)) io_setup(0x2, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000002c0), 0x1) io_setup(0x4, &(0x7f0000000300)=0x0) io_pgetevents(r2, 0x401, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440), 0x8}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = eventfd(0x7fff) io_submit(0x0, 0x3, &(0x7f00000007c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0xfffa, r3, &(0x7f00000004c0)="296288be96379e93ac5c5d502c01cab777332c75b7275c07daa087e230a8804c93fa8ffeeb5ae0777afd9686f5eb93da7c05252e4733c29d15e5e204c4a89ca66a4456000116cacddfd3c6c7adfc8a37c628f97768e8b2bfc525bc65624f057f5be8ff0088ca0d6740c8beab3d3f052e8b7ad3d397e1e1e33f8f45562f1d43ffdb7f17f634a798", 0x87, 0x10000, 0x0, 0x3, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x81, 0xffffffffffffffff, &(0x7f0000000600)="25390e300f81262a56cea55094bfdb718980a89dd5455a593626e6e2ae58f603e353388d8f4bf314e0c9df7370ea246c72dd8147c1fb", 0x36, 0x2, 0x0, 0x1, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="3ef6dc6f8bdc8642b2068baaa0126002c951eaed4035f46fdbf99af1e90a2790f68925083574b484331c7b68ef5dc6b69abe0adc63b03fc7c5ead5e77e7f2f6b7f210a0b9df3d56e3cd3b8544df42d334366cbc4de9805f5c2e28ced0056bc6da54408f16b89b8332782fe0e7089b0c364dd44711a0ccb4a45f0ffc29a0ffb93c2f766b62dc42200f245d0aa2428f6bdcee8635018077b0caa996a8c75439ace7b725c31affc3ca3ec99cb5838778e304098416e21f3e2afb1fc1b7474aaa76fc78fd8ede09ba7d36d", 0xc9, 0x7f}]) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x101101, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x2400c004) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x40, 0x0) r8 = syz_io_uring_setup(0x35b0, &(0x7f0000000980)={0x0, 0xa549, 0x2, 0x3, 0x1d7, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) syz_io_uring_setup(0x1db7, &(0x7f0000000a80)={0x0, 0xed06, 0x20, 0x1, 0xf2, 0x0, r8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000b00), &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000b80)) [ 90.021244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.024150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.025433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.032397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.037262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.038708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.207634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.209988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.211163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.216422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.220693] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.221977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.314198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.324009] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.333015] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.353218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.356164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.360041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.361174] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.363127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.366638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.373041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.381870] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.406006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.406869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.409303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.410499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.423222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.426172] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.427510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.471241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.477316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.480815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.489106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.494145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.502166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.525321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.527411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.538875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.543240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.546943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.552057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.554092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.575452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.596789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.628203] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.632977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.635075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.115169] Bluetooth: hci0: command tx timeout [ 92.241757] Bluetooth: hci1: command tx timeout [ 92.434203] Bluetooth: hci2: command tx timeout [ 92.434769] Bluetooth: hci3: command tx timeout [ 92.497780] Bluetooth: hci4: command tx timeout [ 92.625819] Bluetooth: hci5: command tx timeout [ 92.626281] Bluetooth: hci6: command tx timeout [ 92.692925] Bluetooth: hci7: command tx timeout [ 94.161970] Bluetooth: hci0: command tx timeout [ 94.289739] Bluetooth: hci1: command tx timeout [ 94.481794] Bluetooth: hci3: command tx timeout [ 94.482238] Bluetooth: hci2: command tx timeout [ 94.546713] Bluetooth: hci4: command tx timeout [ 94.673747] Bluetooth: hci5: command tx timeout [ 94.673769] Bluetooth: hci6: command tx timeout [ 94.737775] Bluetooth: hci7: command tx timeout [ 96.209726] Bluetooth: hci0: command tx timeout [ 96.338733] Bluetooth: hci1: command tx timeout [ 96.529786] Bluetooth: hci2: command tx timeout [ 96.530242] Bluetooth: hci3: command tx timeout [ 96.596689] Bluetooth: hci4: command tx timeout [ 96.721775] Bluetooth: hci6: command tx timeout [ 96.722786] Bluetooth: hci5: command tx timeout [ 96.787739] Bluetooth: hci7: command tx timeout [ 98.258145] Bluetooth: hci0: command tx timeout [ 98.385951] Bluetooth: hci1: command tx timeout [ 98.577999] Bluetooth: hci3: command tx timeout [ 98.578505] Bluetooth: hci2: command tx timeout [ 98.642740] Bluetooth: hci4: command tx timeout [ 98.770805] Bluetooth: hci5: command tx timeout [ 98.770890] Bluetooth: hci6: command tx timeout [ 98.836729] Bluetooth: hci7: command tx timeout [ 153.257318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.264432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.276290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.288530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.292261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.296342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.382623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.385707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.388063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.396364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.400599] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.402781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.435068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.441119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.446004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.468704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.475952] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.478123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.622146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.658470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.661935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.686095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.691281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.693277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.826913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.839452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.841985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.849523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.853517] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.856249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.859927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.871515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.882914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.894079] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.901010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.903277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.950006] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.975251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.980008] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.003708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.005550] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.018099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.038013] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.046064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.051355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.063268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.065767] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.071085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.345863] Bluetooth: hci0: command tx timeout [ 155.473866] Bluetooth: hci1: command tx timeout [ 155.537747] Bluetooth: hci2: command tx timeout [ 156.049789] Bluetooth: hci4: command tx timeout [ 156.050619] Bluetooth: hci7: command tx timeout [ 156.051217] Bluetooth: hci5: command tx timeout [ 156.051770] Bluetooth: hci3: command tx timeout [ 156.306566] Bluetooth: hci6: command tx timeout [ 157.393753] Bluetooth: hci0: command tx timeout [ 157.521855] Bluetooth: hci1: command tx timeout [ 157.585708] Bluetooth: hci2: command tx timeout [ 158.097823] Bluetooth: hci4: command tx timeout [ 158.098303] Bluetooth: hci7: command tx timeout [ 158.099179] Bluetooth: hci3: command tx timeout [ 158.099609] Bluetooth: hci5: command tx timeout [ 158.353724] Bluetooth: hci6: command tx timeout [ 159.441973] Bluetooth: hci0: command tx timeout [ 159.569737] Bluetooth: hci1: command tx timeout [ 159.634709] Bluetooth: hci2: command tx timeout [ 160.145779] Bluetooth: hci7: command tx timeout [ 160.146261] Bluetooth: hci5: command tx timeout [ 160.146723] Bluetooth: hci3: command tx timeout [ 160.147126] Bluetooth: hci4: command tx timeout [ 160.401721] Bluetooth: hci6: command tx timeout [ 161.489849] Bluetooth: hci0: command tx timeout [ 161.617727] Bluetooth: hci1: command tx timeout [ 161.681725] Bluetooth: hci2: command tx timeout [ 162.193902] Bluetooth: hci4: command tx timeout [ 162.194427] Bluetooth: hci3: command tx timeout [ 162.195737] Bluetooth: hci5: command tx timeout [ 162.196165] Bluetooth: hci7: command tx timeout [ 162.449722] Bluetooth: hci6: command tx timeout [ 215.717525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.719437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.725395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.730168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.731470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.732454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.808109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.809526] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.810568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.814794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.823164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.824552] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.825592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.838528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.839444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.874821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.875524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.880199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.893968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.895325] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.896238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.898809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.903306] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.906159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.970123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.972705] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.974590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.997182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.000452] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.006881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.032051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.041053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.045068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.046393] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.056841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.061446] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.063254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.065592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.071953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.076150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.078003] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.079398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.172967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.230896] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.658074] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.702777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.710087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.717207] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.745710] Bluetooth: hci0: command tx timeout [ 217.873918] Bluetooth: hci2: command tx timeout [ 217.937860] Bluetooth: hci1: command tx timeout [ 218.002681] Bluetooth: hci3: command tx timeout [ 218.129772] Bluetooth: hci4: command tx timeout [ 218.130609] Bluetooth: hci6: command tx timeout [ 218.705913] Bluetooth: hci5: command tx timeout [ 218.770701] Bluetooth: hci7: command tx timeout [ 219.793753] Bluetooth: hci0: command tx timeout [ 219.921815] Bluetooth: hci2: command tx timeout [ 219.985883] Bluetooth: hci1: command tx timeout [ 220.049845] Bluetooth: hci3: command tx timeout [ 220.177733] Bluetooth: hci4: command tx timeout [ 220.178222] Bluetooth: hci6: command tx timeout [ 220.753793] Bluetooth: hci5: command tx timeout [ 220.817712] Bluetooth: hci7: command tx timeout [ 221.841695] Bluetooth: hci0: command tx timeout [ 221.969720] Bluetooth: hci2: command tx timeout [ 222.035678] Bluetooth: hci1: command tx timeout [ 222.098903] Bluetooth: hci3: command tx timeout [ 222.225764] Bluetooth: hci4: command tx timeout [ 222.226258] Bluetooth: hci6: command tx timeout [ 222.801804] Bluetooth: hci5: command tx timeout [ 222.865913] Bluetooth: hci7: command tx timeout [ 223.890773] Bluetooth: hci0: command tx timeout [ 224.017826] Bluetooth: hci2: command tx timeout [ 224.081860] Bluetooth: hci1: command tx timeout [ 224.146222] Bluetooth: hci3: command tx timeout [ 224.273800] Bluetooth: hci6: command tx timeout [ 224.274291] Bluetooth: hci4: command tx timeout [ 224.849881] Bluetooth: hci5: command tx timeout [ 224.913739] Bluetooth: hci7: command tx timeout [ 278.120171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.123219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.131166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.134458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.135371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.138732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.140347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.143745] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.148024] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.151010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.160133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.163332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.374246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.379344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.387511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.401068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.409024] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.410758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.443905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.445915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.450774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.468253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.474938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.477422] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.480030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.488911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.533440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.545744] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.548407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.555311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.561545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.561913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.567052] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.569839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.579534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.582463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.594495] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.599007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.604462] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.605971] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.611433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.613597] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.615131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.641744] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.675074] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.695993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.739002] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.767001] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.209734] Bluetooth: hci0: command tx timeout [ 280.211012] Bluetooth: hci1: command tx timeout [ 280.466666] Bluetooth: hci2: command tx timeout [ 280.530713] Bluetooth: hci3: command tx timeout [ 280.658732] Bluetooth: hci5: command tx timeout [ 280.659528] Bluetooth: hci4: command tx timeout [ 280.721777] Bluetooth: hci6: command tx timeout [ 280.849715] Bluetooth: hci7: command tx timeout [ 282.258671] Bluetooth: hci1: command tx timeout [ 282.259166] Bluetooth: hci0: command tx timeout [ 282.513738] Bluetooth: hci2: command tx timeout [ 282.577983] Bluetooth: hci3: command tx timeout [ 282.706329] Bluetooth: hci4: command tx timeout [ 282.707313] Bluetooth: hci5: command tx timeout [ 282.770675] Bluetooth: hci6: command tx timeout [ 282.898009] Bluetooth: hci7: command tx timeout [ 284.306757] Bluetooth: hci0: command tx timeout [ 284.307307] Bluetooth: hci1: command tx timeout [ 284.562724] Bluetooth: hci2: command tx timeout [ 284.627798] Bluetooth: hci3: command tx timeout [ 284.754678] Bluetooth: hci5: command tx timeout [ 284.755142] Bluetooth: hci4: command tx timeout [ 284.817753] Bluetooth: hci6: command tx timeout [ 284.947030] Bluetooth: hci7: command tx timeout [ 286.355005] Bluetooth: hci1: command tx timeout [ 286.356039] Bluetooth: hci0: command tx timeout [ 286.610698] Bluetooth: hci2: command tx timeout [ 286.674967] Bluetooth: hci3: command tx timeout [ 286.803589] Bluetooth: hci4: command tx timeout [ 286.804322] Bluetooth: hci5: command tx timeout [ 286.866766] Bluetooth: hci6: command tx timeout [ 286.996716] Bluetooth: hci7: command tx timeout [ 340.580477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.583793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.589031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.600254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.605410] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.608580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.891859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.895411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.898226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.910847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.915929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.923081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.925954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.929237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.940089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.970784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.996103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.000199] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.002289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.005403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.012008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.013336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.021792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.032045] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.045820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.070307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.073278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.081224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.083325] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.085290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.087000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.090413] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.100977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.101121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.106904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.107891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.117182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.119820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.120234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.127147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.150469] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.170174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.300217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.307388] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.317028] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.328462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.383179] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.406379] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.673891] Bluetooth: hci0: command tx timeout [ 342.993826] Bluetooth: hci1: command tx timeout [ 343.185753] Bluetooth: hci4: command tx timeout [ 343.186098] Bluetooth: hci3: command tx timeout [ 343.186754] Bluetooth: hci2: command tx timeout [ 343.249790] Bluetooth: hci5: command tx timeout [ 343.313792] Bluetooth: hci6: command tx timeout [ 343.505692] Bluetooth: hci7: command tx timeout [ 344.721671] Bluetooth: hci0: command tx timeout [ 345.041688] Bluetooth: hci1: command tx timeout [ 345.233852] Bluetooth: hci4: command tx timeout [ 345.234377] Bluetooth: hci3: command tx timeout [ 345.234419] Bluetooth: hci2: command tx timeout [ 345.297676] Bluetooth: hci5: command tx timeout [ 345.361709] Bluetooth: hci6: command tx timeout [ 345.554014] Bluetooth: hci7: command tx timeout [ 346.770085] Bluetooth: hci0: command tx timeout [ 347.090359] Bluetooth: hci1: command tx timeout [ 347.282290] Bluetooth: hci2: command tx timeout [ 347.282387] Bluetooth: hci4: command tx timeout [ 347.283118] Bluetooth: hci3: command tx timeout [ 347.346803] Bluetooth: hci5: command tx timeout [ 347.409717] Bluetooth: hci6: command tx timeout [ 347.603864] Bluetooth: hci7: command tx timeout [ 348.817688] Bluetooth: hci0: command tx timeout [ 349.137691] Bluetooth: hci1: command tx timeout [ 349.329942] Bluetooth: hci4: command tx timeout [ 349.330445] Bluetooth: hci3: command tx timeout [ 349.331032] Bluetooth: hci2: command tx timeout [ 349.393803] Bluetooth: hci5: command tx timeout [ 349.457858] Bluetooth: hci6: command tx timeout [ 349.649742] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:45:55 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffea00001dc900 RCX=ffffffff819ed726 RDX=fffff9400003b927 RSI=0000000000000004 RDI=ffffea00001dc930 RBP=0000000000000001 RSP=ffff8880269f7838 R8 =0000000000000001 R9 =fffff9400003b926 R10=ffffea00001dc933 R11=0000000000000000 R12=ffffea00001dc900 R13=0000000000000000 R14=ffff88801691a0e0 R15=ffff8880269f79d0 RIP=ffffffff819ed72d RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f4c4161f0 CR3=0000000034028000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff815ee470 RCX=0000000000000001 RDX=ffff888009737f60 RSI=ffff888009737f38 RDI=ffff888009737880 RBP=ffff888009737908 RSP=ffff888009737870 R8 =0000000000000001 R9 =ffff8880097378b0 R10=000000000003aab6 R11=0000000000003c85 R12=ffff888009737938 R13=0000000000000000 R14=ffff888009715340 R15=ffff88802795d510 RIP=ffffffff812d1bdd RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffbb4d7e710 CR3=000000002605e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000