Warning: Permanently added '[localhost]:56049' (ECDSA) to the list of known hosts. 2025/04/28 12:47:35 fuzzer started 2025/04/28 12:47:35 dialing manager at localhost:46629 syzkaller login: [ 100.514935] cgroup: Unknown subsys name 'net' [ 100.616879] cgroup: Unknown subsys name 'cpuset' [ 100.646150] cgroup: Unknown subsys name 'rlimit' 2025/04/28 12:47:56 syscalls: 214 2025/04/28 12:47:56 code coverage: enabled 2025/04/28 12:47:56 comparison tracing: enabled 2025/04/28 12:47:56 extra coverage: enabled 2025/04/28 12:47:56 setuid sandbox: enabled 2025/04/28 12:47:56 namespace sandbox: enabled 2025/04/28 12:47:56 Android sandbox: enabled 2025/04/28 12:47:56 fault injection: enabled 2025/04/28 12:47:56 leak checking: enabled 2025/04/28 12:47:56 net packet injection: enabled 2025/04/28 12:47:56 net device setup: enabled 2025/04/28 12:47:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 12:47:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 12:47:56 USB emulation: enabled 2025/04/28 12:47:56 hci packet injection: enabled 2025/04/28 12:47:56 wifi device emulation: enabled 2025/04/28 12:47:56 802.15.4 emulation: enabled 2025/04/28 12:47:56 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 12:47:57 starting 8 fuzzer processes 12:47:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, r0) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='!%\v-\x00', r0) keyctl$negate(0xd, r1, 0x9, r0) r2 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='@-]\xb9$\x00', r1) keyctl$set_timeout(0xf, r2, 0xd99) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r4, r1) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r5, r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r6) r7 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$reject(0x13, r2, 0x7, 0x1, r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x8c4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r6) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 12:47:57 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xeef}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x63f7}]}, 0x54}}, 0x81) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1d000485}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20) r5 = request_key(&(0x7f0000000540)='blacklist\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='batadv\x00', 0x0) keyctl$search(0xa, 0x0, &(0x7f00000004c0)='pkcs7_test\x00', &(0x7f0000000500)={'syz', 0x1}, r5) setxattr$security_evm(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)=@ng={0x4, 0xa, '\"L'}, 0x4, 0x3) keyctl$link(0x8, r5, r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r4) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004810) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040850}, 0x40) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000009c0)=""/188) keyctl$reject(0x13, r5, 0x7, 0xbb22, r5) getsockname$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x140, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a475706d3e5ca45f41c8631d6829d5fb26a19ee60c206e34"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4aac72cd28fe52bb725088d5ebdf503036cee2a10e5818b9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "80286c154e920733bbae4447ba0219e275b74905ad57ce88"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca65c3ece65017d8585e835ec8a25be0c84d306a1257d8fb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "221303d3cb9dff8e79dc1ee360b62f8fde999fe1e78620b1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008054}, 0x4) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000e00)) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000e40), 0x40043, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000e80)={'macvlan0\x00'}) 12:47:57 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={0x0, 0x7d, 0xbe}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-512-ce\x00'}}, &(0x7f00000000c0)="04da4a77dee63080b56129bc8f7dffe98572bf5e178c6b6402e83c9ea68534ab47254a8ffc7ce2a4e43d9695660d45969d4bc4d68b5f5927575bb4b61958a1f00f021dcee82aec996ba42b5af2e03bd853942f58869161f8f6368bce33554e6e8aa3b0ebb9ffa358f9462ee9c7db806b2c90d74a1c0daee7da9414cc82", &(0x7f0000000140)="38e3cfe6668a1f5623f19e1397a035bae64f7b86a745e68dc0a41cc520644364597041a48e907cc1b1bb08ceb08607a41bf4c5ff44d8c4e4ca5016cc10337297da651d2e12c4ffe98a16c5dd1974ed280ec4d797ac204eaefc7b3f1fd9a7e33db3702f57e966873e9a21ff5fed0d452857b6be30c198c56226726be7c638aaa16e8994035655e57cb52e3d46d8c5c5186028802dcfb5c546429bb8a1c23b8f85788d61715079c541948160f58364daebda3934cb467e9699744db45ee3d3") r0 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='sha3-512-ce\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r0, 0x1, 0x5, r1) r2 = request_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='}}]#!*\xd9', r0) keyctl$negate(0xd, r2, 0xfffffffffffffffd, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000400)={r2, 0xfc, 0x3e}, &(0x7f0000000440)={'enc=', 'raw', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f00000004c0)="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", &(0x7f00000005c0)=""/62) keyctl$invalidate(0x15, 0x0) r3 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r3) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000680)={r2, 0x56, 0x70}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'sm3-generic\x00'}}, &(0x7f0000000740)="6fdaf7a22fe318839f5bb3ea4ceae2bf7ccb7c099a9119e0776523d9eae51a0bd896c93030f8e68988ddda4d60b0e8267683a0e04a0fa007a1cad648930d23b4d0962bbe777842967ee04a85b4cbf3693e0936985bc4", &(0x7f00000007c0)=""/112) r4 = request_key(&(0x7f0000000840)='ceph\x00', &(0x7f0000000880)={'syz', 0x1}, &(0x7f00000008c0)='enc=', r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000900)={r4, 0xcf, 0x7b}, &(0x7f0000000940)={'enc=', 'raw', ' hash=', {'sha3-224\x00'}}, &(0x7f00000009c0)="6f09d50fa6106b3af1f98015c599d42930721b6f156fd9deaef20b9bb3490c58f1484217bc6ef075266d931a3a5208139f21dd45965c4c8679bf9ac9c5410d2eea050b83add1994f702d46d4ff15f1d8c517a060adc3af679be7097d336ea4eb38a7ecd35121fcb0b0969978201e84e3b3f232d4cb9d8557f054c91b2bbfd4737be04cd3ca4e1317826446e703cab59b9a6fc8b20ffe5c4b437af7b5467a2ac64ce748f635e672c21ec2f766087af419f485326e3570489d614a77ff5abd8500a5544ea8da5c86e4f83f35bccab203", &(0x7f0000000ac0)=""/123) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0xfffffffffffffffd, 0x0) r5 = geteuid() mount$tmpfs(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x80, &(0x7f0000000c00)={[{@huge_within_size}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x30, 0x30, 0x32, 0x34, 0x39, 0x67, 0x37]}}, {@huge_advise}, {@size={'size', 0x3d, [0x5b]}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$.,'}}, {@obj_user}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) keyctl$reject(0x13, r0, 0x7ff, 0x5, r3) keyctl$update(0x2, r0, &(0x7f0000000d00)="6fffa25c01f67c86f1ed28e5e572ee4cdc914f4777333f1466756674afee6cfbd141557cfc66401c70ff7061e3aad15b200072460929d75475c0cd154a3574ed94709b68d8628d570b1e448f875725fc23aac96218349aec4e6b9e8b36674218cc930676fc364c5598cde5578c356cb91771f14360d9ae945861b58499a8f98b2de193490e3984733aa6", 0x8a) keyctl$link(0x8, r1, r0) 12:47:57 executing program 3: ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x0, 0x20, 0x83, 0xf7, 0x22, 0x9}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101181, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x5ff833e0998c78b0, 0x0) ioctl$CDROMSTART(r1, 0x5308) r2 = memfd_secret(0x80000) r3 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x60002, 0x22) ioctl$CDROMCLOSETRAY(r3, 0x5319) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x3c9000, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000140)=""/152) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x202002, 0x0) ioctl$CDROMCLOSETRAY(r5, 0x5319) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x40000) r6 = syz_open_dev$vcsa(&(0x7f0000000440), 0x3, 0x28ac2) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000480)=""/93) ioctl$CDROMSTART(r4, 0x5308) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x70801, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000540)=[0xdf59bc2, 0x1]) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000000580)=""/49) 12:47:57 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xee35708209c408d6}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x18}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5f7ae3fd}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000080}, 0x20000861) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @xdp={0x2c, 0x8, 0x0, 0x1c}, @phonet={0x23, 0x4, 0x2, 0xc8}, @xdp={0x2c, 0x6, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x7, 0x79}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf65}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={0x0, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, @hci={0x1f, 0x4, 0x3}, @l2tp={0x2, 0x0, @loopback, 0x4}, 0x5, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)='veth0_to_batadv\x00', 0x8, 0x1, 0x7}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={0x0, @xdp={0x2c, 0xc, r1, 0x1f}, @nl=@kern={0x10, 0x0, 0x0, 0x800}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd4c, 0x2, 0x9}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ca}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x5c}}, 0x24) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000900)=0x7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044800}, 0x40) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x84100, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000c00)={&(0x7f0000000b40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff22}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x200000c0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r6) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4044040) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000e00)={0x1, 0x0, 0xaf}) [ 122.832369] audit: type=1400 audit(1745844477.974:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:47:57 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x26}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}}, 0x8044) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000740)={0x98, 0x0, &(0x7f00000005c0)=[@acquire, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd, @flat=@binder={0x73622a85, 0x100a, 0x2}, @fda={0x66646185, 0x6, 0x2, 0x2}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/217, 0xd9, 0x2, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/178, 0xb2, 0x1}}, &(0x7f0000000580)={0x0, 0x18, 0x40}}}], 0xab, 0x0, &(0x7f0000000680)="d9af47f830dfd3149e8d3370f761b959151ffab04ce7633996c58c729ada01d7f426c8e2fabe938d8cfd83aee4039dc5f599bca1b907f6261f55e9f156ab3bc9c951b35e32761df544e034cf1ab35a00f80f403eb2d5d98ad6b603a45a26fed5efca27c3b5b8fc3e3217f13d0031d4c09c2b323728c08d172e9252e26aa5a04a4086cc585ea566792e9a269fdb77a458e33281852fff5fd983bed68b7b467c6d73944f60d9f392287aff6c"}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x0, 0x22) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) r4 = syz_open_dev$mouse(&(0x7f0000000b40), 0x80000000, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000b80)={0x10000003}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000bc0)=""/139) syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000e00), 0x78ab5ff14d4bdee9, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044041}, 0x800) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000f80)=0x80) 12:47:58 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/219, 0xdb, 0xb4b1, &(0x7f0000000140)={0x77359400}) syz_open_dev$evdev(&(0x7f0000000180), 0xb3b3, 0x20000) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x4d4c01) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000200)=[0x1ff, 0x2]) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x216002, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000280)=""/61) r3 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x1, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000300)=[0x1, 0x1]) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000380)=""/83) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x4040, 0x0) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000440)=""/79) syz_open_dev$vcsa(&(0x7f00000004c0), 0xffffffffba542f43, 0x101000) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000500)=""/214) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000600)=0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000680), 0x80080, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000006c0)=""/44) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000700)={0x2, 0x6, 0x200, 0x6b85, 0x0, 0x3}) 12:47:58 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x1}, 0xfffffffffffffff8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0xf, 0x1, {{0x20, 0x1, 0x8}, 0x10001}}, 0x18) r2 = request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='{\x00', r1) keyctl$chown(0x4, r2, 0x0, 0xee00) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r3, 0x3) keyctl$link(0x8, r3, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x8800) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000500)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/custom0\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000680)) [ 124.205006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.211121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.215605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.222072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.229690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.292333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.300074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.315181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.325124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.337677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.339244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.342172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.345117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.347034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.351593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.354852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.358728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.366294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.368873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.374033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.378191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.382963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.401338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.409347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.420963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.426800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.430670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.449006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.455016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.465197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.479661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.483759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.486041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.492202] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.495369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.501897] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.505079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.515660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.535892] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.539205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.285527] Bluetooth: hci0: command tx timeout [ 126.411517] Bluetooth: hci1: command tx timeout [ 126.476809] Bluetooth: hci2: command tx timeout [ 126.540495] Bluetooth: hci4: command tx timeout [ 126.540509] Bluetooth: hci3: command tx timeout [ 126.605176] Bluetooth: hci6: command tx timeout [ 126.605214] Bluetooth: hci7: command tx timeout [ 126.605925] Bluetooth: hci5: command tx timeout [ 128.331729] Bluetooth: hci0: command tx timeout [ 128.460453] Bluetooth: hci1: command tx timeout [ 128.523522] Bluetooth: hci2: command tx timeout [ 128.587589] Bluetooth: hci3: command tx timeout [ 128.588556] Bluetooth: hci4: command tx timeout [ 128.651533] Bluetooth: hci5: command tx timeout [ 128.652101] Bluetooth: hci7: command tx timeout [ 128.652152] Bluetooth: hci6: command tx timeout [ 130.380015] Bluetooth: hci0: command tx timeout [ 130.507543] Bluetooth: hci1: command tx timeout [ 130.573708] Bluetooth: hci2: command tx timeout [ 130.635772] Bluetooth: hci3: command tx timeout [ 130.635796] Bluetooth: hci4: command tx timeout [ 130.699801] Bluetooth: hci5: command tx timeout [ 130.700368] Bluetooth: hci6: command tx timeout [ 130.700910] Bluetooth: hci7: command tx timeout [ 132.427623] Bluetooth: hci0: command tx timeout [ 132.555835] Bluetooth: hci1: command tx timeout [ 132.619656] Bluetooth: hci2: command tx timeout [ 132.684651] Bluetooth: hci4: command tx timeout [ 132.685247] Bluetooth: hci3: command tx timeout [ 132.747524] Bluetooth: hci7: command tx timeout [ 132.748173] Bluetooth: hci5: command tx timeout [ 132.748552] Bluetooth: hci6: command tx timeout [ 184.759610] syz-executor.3 (293) used greatest stack depth: 24232 bytes left [ 186.903596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.906847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.909844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.924218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.928507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.223924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.229940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.231989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.235750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.239127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.244737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.247706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.250244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.264197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.268340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.292706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.298561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.307941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.313807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.318680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.339489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.362173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.368143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.371384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.378803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.381062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.387589] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.393655] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.395740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.397189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.397582] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.408808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.420825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.424103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.463735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.465000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.468919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.491068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.492444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.499177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.003616] Bluetooth: hci0: command tx timeout [ 189.259603] Bluetooth: hci1: command tx timeout [ 189.387802] Bluetooth: hci2: command tx timeout [ 189.451909] Bluetooth: hci3: command tx timeout [ 189.579885] Bluetooth: hci6: command tx timeout [ 189.581025] Bluetooth: hci5: command tx timeout [ 189.582315] Bluetooth: hci4: command tx timeout [ 189.644033] Bluetooth: hci7: command tx timeout [ 191.052697] Bluetooth: hci0: command tx timeout [ 191.307835] Bluetooth: hci1: command tx timeout [ 191.435624] Bluetooth: hci2: command tx timeout [ 191.499904] Bluetooth: hci3: command tx timeout [ 191.627917] Bluetooth: hci6: command tx timeout [ 191.628856] Bluetooth: hci4: command tx timeout [ 191.629339] Bluetooth: hci5: command tx timeout [ 191.692458] Bluetooth: hci7: command tx timeout [ 193.100159] Bluetooth: hci0: command tx timeout [ 193.356339] Bluetooth: hci1: command tx timeout [ 193.484743] Bluetooth: hci2: command tx timeout [ 193.547718] Bluetooth: hci3: command tx timeout [ 193.675569] Bluetooth: hci5: command tx timeout [ 193.676158] Bluetooth: hci4: command tx timeout [ 193.676900] Bluetooth: hci6: command tx timeout [ 193.739524] Bluetooth: hci7: command tx timeout [ 195.147527] Bluetooth: hci0: command tx timeout [ 195.404842] Bluetooth: hci1: command tx timeout [ 195.531642] Bluetooth: hci2: command tx timeout [ 195.595540] Bluetooth: hci3: command tx timeout [ 195.725028] Bluetooth: hci5: command tx timeout [ 195.726569] Bluetooth: hci6: command tx timeout [ 195.727124] Bluetooth: hci4: command tx timeout [ 195.787796] Bluetooth: hci7: command tx timeout [ 249.630906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.639270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.641503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.649857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.653004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.718500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.720823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.722571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.724596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.727916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.733191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.738096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.740363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.750209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.752917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.873281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.876835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.879090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.886076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.889196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.976919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.978214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.981151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.986090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.988765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.993081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.998861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.006941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.013189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.015024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.021344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.026559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.030235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.032340] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.046340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.065040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.113169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.131808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.152690] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.179695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.723550] Bluetooth: hci0: command tx timeout [ 251.787668] Bluetooth: hci2: command tx timeout [ 251.852569] Bluetooth: hci1: command tx timeout [ 251.917569] Bluetooth: hci3: command tx timeout [ 252.107563] Bluetooth: hci7: command tx timeout [ 252.172489] Bluetooth: hci6: command tx timeout [ 252.173625] Bluetooth: hci4: command tx timeout [ 252.300678] Bluetooth: hci5: command tx timeout [ 253.772080] Bluetooth: hci0: command tx timeout [ 253.835782] Bluetooth: hci2: command tx timeout [ 253.900809] Bluetooth: hci1: command tx timeout [ 253.963705] Bluetooth: hci3: command tx timeout [ 254.156824] Bluetooth: hci7: command tx timeout [ 254.220467] Bluetooth: hci6: command tx timeout [ 254.221056] Bluetooth: hci4: command tx timeout [ 254.347917] Bluetooth: hci5: command tx timeout [ 255.821489] Bluetooth: hci0: command tx timeout [ 255.883887] Bluetooth: hci2: command tx timeout [ 255.949467] Bluetooth: hci1: command tx timeout [ 256.011544] Bluetooth: hci3: command tx timeout [ 256.203513] Bluetooth: hci7: command tx timeout [ 256.267781] Bluetooth: hci6: command tx timeout [ 256.268473] Bluetooth: hci4: command tx timeout [ 256.395978] Bluetooth: hci5: command tx timeout [ 257.867719] Bluetooth: hci0: command tx timeout [ 257.931501] Bluetooth: hci2: command tx timeout [ 257.995533] Bluetooth: hci1: command tx timeout [ 258.059695] Bluetooth: hci3: command tx timeout [ 258.252542] Bluetooth: hci7: command tx timeout [ 258.316962] Bluetooth: hci6: command tx timeout [ 258.318536] Bluetooth: hci4: command tx timeout [ 258.443506] Bluetooth: hci5: command tx timeout [ 312.416075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.422710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.425868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.431289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.436547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.554830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.559665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.561715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.568031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.571170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.585347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.588849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.600784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.612272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.614711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.770139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.840268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.845972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.870997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.888168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.894848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.906107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.908506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.910946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.915735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.919466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.925673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.927622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.939554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.940630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.941251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.946266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.953253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.953361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.985920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.997978] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.000237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.010470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.017583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.020908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.507553] Bluetooth: hci0: command tx timeout [ 314.636791] Bluetooth: hci1: command tx timeout [ 314.700235] Bluetooth: hci2: command tx timeout [ 315.019822] Bluetooth: hci3: command tx timeout [ 315.083951] Bluetooth: hci6: command tx timeout [ 315.085124] Bluetooth: hci4: command tx timeout [ 315.147763] Bluetooth: hci7: command tx timeout [ 315.148758] Bluetooth: hci5: command tx timeout [ 316.555614] Bluetooth: hci0: command tx timeout [ 316.684808] Bluetooth: hci1: command tx timeout [ 316.747517] Bluetooth: hci2: command tx timeout [ 317.067608] Bluetooth: hci3: command tx timeout [ 317.133440] Bluetooth: hci4: command tx timeout [ 317.133507] Bluetooth: hci6: command tx timeout [ 317.195823] Bluetooth: hci5: command tx timeout [ 317.196433] Bluetooth: hci7: command tx timeout [ 318.603552] Bluetooth: hci0: command tx timeout [ 318.731519] Bluetooth: hci1: command tx timeout [ 318.796792] Bluetooth: hci2: command tx timeout [ 319.115506] Bluetooth: hci3: command tx timeout [ 319.179509] Bluetooth: hci4: command tx timeout [ 319.179776] Bluetooth: hci6: command tx timeout [ 319.243786] Bluetooth: hci7: command tx timeout [ 319.244973] Bluetooth: hci5: command tx timeout [ 320.652550] Bluetooth: hci0: command tx timeout [ 320.782096] Bluetooth: hci1: command tx timeout [ 320.843767] Bluetooth: hci2: command tx timeout [ 321.164444] Bluetooth: hci3: command tx timeout [ 321.227539] Bluetooth: hci4: command tx timeout [ 321.227583] Bluetooth: hci6: command tx timeout [ 321.291794] Bluetooth: hci5: command tx timeout [ 321.291912] Bluetooth: hci7: command tx timeout [ 375.520017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.526002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.527474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.531657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.535701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.591300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.600077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.611259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.621117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.626795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.672168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.675135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.680207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.701875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.707905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.774930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.786924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.793257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.803997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.807791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.839350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.848324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.852859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.869960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.888238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.895281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.904819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.908638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.915544] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.939747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.990143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.992615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.994134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.999212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.003666] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.221735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.234778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.237041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.316136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.321903] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.547634] Bluetooth: hci0: command tx timeout [ 377.676523] Bluetooth: hci1: command tx timeout [ 377.803592] Bluetooth: hci2: command tx timeout [ 377.867730] Bluetooth: hci3: command tx timeout [ 377.997553] Bluetooth: hci5: command tx timeout [ 378.059844] Bluetooth: hci7: command tx timeout [ 378.123508] Bluetooth: hci4: command tx timeout [ 378.380584] Bluetooth: hci6: command tx timeout [ 379.595664] Bluetooth: hci0: command tx timeout [ 379.724011] Bluetooth: hci1: command tx timeout [ 379.851632] Bluetooth: hci2: command tx timeout [ 379.915609] Bluetooth: hci3: command tx timeout [ 380.043525] Bluetooth: hci5: command tx timeout [ 380.108731] Bluetooth: hci7: command tx timeout [ 380.171474] Bluetooth: hci4: command tx timeout [ 380.427543] Bluetooth: hci6: command tx timeout [ 381.643716] Bluetooth: hci0: command tx timeout [ 381.771584] Bluetooth: hci1: command tx timeout [ 381.899555] Bluetooth: hci2: command tx timeout [ 381.963614] Bluetooth: hci3: command tx timeout [ 382.092510] Bluetooth: hci5: command tx timeout [ 382.155503] Bluetooth: hci7: command tx timeout [ 382.219542] Bluetooth: hci4: command tx timeout [ 382.475963] Bluetooth: hci6: command tx timeout [ 383.691789] Bluetooth: hci0: command tx timeout [ 383.820423] Bluetooth: hci1: command tx timeout [ 383.947767] Bluetooth: hci2: command tx timeout [ 384.011538] Bluetooth: hci3: command tx timeout [ 384.140433] Bluetooth: hci5: command tx timeout [ 384.205140] Bluetooth: hci7: command tx timeout [ 384.267802] Bluetooth: hci4: command tx timeout [ 384.523544] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:53:04 Registers: info registers vcpu 0 RAX=ffff88802eddfb38 RBX=00007fdcc470f000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff88802eddfb38 RDI=ffff88802eddfab8 RBP=ffff88802eddfb80 RSP=ffff88802eddf8c8 R8 =0000000000000001 R9 =0000000000000000 R10=ffff88802eddfb38 R11=0000000000000001 R12=00007fdcc4711000 R13=ffff88802eddfb38 R14=ffff88802eddf948 R15=0000000000000002 RIP=ffffffff81a38c52 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faf121f61f0 CR3=0000000034934000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00007f2d68d00d40 RBX=00007f2d68d1d510 RCX=00007f2d68cac000 RDX=000000000026455c RSI=00007f2d68f7dc58 RDI=00007f2d68d311f0 RBP=00007ffcba943df0 RSP=00007ffcba943cf0 R8 =00007f2d68d311f0 R9 =0000000000000001 R10=00000000000490f8 R11=00007f2d68fc8510 R12=0000000000000000 R13=0000000000000000 R14=00007f2d69002180 R15=0000000000000010 RIP=00007f2d68fe2c1d RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2d68abe540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2d68d00000 CR3=0000000028c20000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000