Warning: Permanently added '[localhost]:4111' (ECDSA) to the list of known hosts. 2025/05/25 06:24:03 fuzzer started 2025/05/25 06:24:04 dialing manager at localhost:46087 syzkaller login: [ 94.659500] cgroup: Unknown subsys name 'net' [ 94.782924] cgroup: Unknown subsys name 'cpuset' [ 94.827546] cgroup: Unknown subsys name 'rlimit' 2025/05/25 06:24:21 syscalls: 200 2025/05/25 06:24:21 code coverage: enabled 2025/05/25 06:24:21 comparison tracing: enabled 2025/05/25 06:24:21 extra coverage: enabled 2025/05/25 06:24:21 setuid sandbox: enabled 2025/05/25 06:24:21 namespace sandbox: enabled 2025/05/25 06:24:21 Android sandbox: enabled 2025/05/25 06:24:21 fault injection: enabled 2025/05/25 06:24:21 leak checking: enabled 2025/05/25 06:24:21 net packet injection: enabled 2025/05/25 06:24:21 net device setup: enabled 2025/05/25 06:24:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 06:24:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 06:24:21 USB emulation: enabled 2025/05/25 06:24:21 hci packet injection: enabled 2025/05/25 06:24:21 wifi device emulation: enabled 2025/05/25 06:24:21 802.15.4 emulation: enabled 2025/05/25 06:24:21 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 06:24:23 starting 8 fuzzer processes 06:24:23 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x3, 0x400000, 0x2, 0xff}, 0x1, 0x800}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)="1b8307b0560ed6", 0x7, r1}, 0x68) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e21, @remote}}}, 0x88) r2 = syz_open_dev$hiddev(&(0x7f0000000280), 0xddef, 0x200) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) r3 = socket$inet(0x2, 0x800, 0x7) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000300)={0x25, "6bb09fe47fbbdb7d5b0b9c987ef8a161a77451181711a66c71edaad08b8731cb58235fa9f9"}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000340)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x40101) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f00000003c0)) accept$packet(r1, 0x0, &(0x7f0000000400)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440)="f0cf4165d53b2587ab402f863db9ca56a5de633ee8f4db98e360ae95baab1a5f29eec3a8e379fcf81ab3f917f28ccb3b12dea9617ed06eb3073c60574789272872ad03174fae22f821e82e5f1cb4440c1b94bbbc34a5dbbf6f7464a4df1f9735b2f24916c9f6f3eec50850778ce070159443f1ff2d34975836fd7480e0d4cc97074eb62e0b27b1dc256d715a47df5bf86f1f22d9", 0x94, r4}, 0x68) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000580)={0xffffffffffffffff, 0x3, 0xffff, 0x1, 0x40}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="fc89e20544f1ad3cf3d7060209252eeeac23125b8b3c2f2c694fe900db8e428723fc174052d6c7e81386ab413734a3a5e4bd00a43afbf80ad7493a24fd666553d949fccaae6c6a77f0e9", 0x4a, 0x0, &(0x7f0000000640)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 06:24:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000)="ee19d0d1d996d496c40c7c8c61cea4d8eddc24da7054ab51eb6d29a9857df4583cd5c86a48574952fcc058bae3e7d2975bb0c33bbc5e7f0ca7624710c9482267f9743ac83f37bc4ef74633562d30796e1a10c08893", 0x55}, 0x68) socketpair(0x2c, 0x800, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x92, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280), 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000340)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000003c0)={0x1, 0x2, 0x2, 0x8, 0xf64, 0x4ab}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x2202, 0x0) r5 = eventfd(0x6) r6 = syz_open_dev$hidraw(&(0x7f0000000740), 0x843, 0x0) io_submit(0x0, 0x6, &(0x7f0000000900)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x5, r4, &(0x7f0000000440)="b698461cee51f1e8c03f738b768e9e80c413e3864c5adfff9d6d6061bcb3c66734e1304d58c4d2de2e986ad937e749c4a7033aa397726bdb3a15f49784a419dfb847efb80889ba66a1f92aadf0e005e2558f43c3693b66", 0x57, 0xcaed, 0x0, 0x3, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x1000, r3, &(0x7f0000000500)="ef0bb218e2eeda68820e6d75bdb79d9b92c259b0771495dcce73962c2e5ed2", 0x1f, 0x80000000, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000580)="20fcdf586bd4681761dd9ef3d3fe954dc51978f1e5e8866f89cb69299b3ac7e246d1f192ecbdbe51946bcaf97ad0e6da9e9fbb794c3e7a43aa0c9c030d6393f5322a93069caf5109cf5564e93bf2b18fbbd03e3677f49894d95d1ffb56bacb9c17ce33defe9cb5c2233548a3b94353b418e1c043400998c57135a660c08ae21f8ffd6505a63952afa9bb426b68", 0x8d, 0x9, 0x0, 0x3, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f0000000680)="b3f31c7725ebdb3e5ab74aead530e5219bd83b9def2bd2ae5b1a565445ab4c185b89d450ebdd013fba220cc38551c51bcd23a0924fc7e726d77a954c87c27afa1f08e3012f268fe82594d13496a0d36c435857c50e5a0032098a864a730c9f26c2a24cb33e3f473135", 0x69, 0x6, 0x0, 0x2, r3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x3a60, r6, &(0x7f0000000780)="9f65cde40e35ad881e6ac6e62d1e642ee36f91f79e020345e661f30cbf446135e049d09e0bd0f797635ba00e9fe9666eb3d7de96c315ef7c097bc24f117ccbdfcf70f17b35d7d274bc9ec9b7c27cd92d7f895de8a5f9225f94e57b6caf4a855203ab4fc67f24f071cadad3707a55007db8ab98ed57", 0x75, 0x0, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000840)="094730422afe0e9e8743fb3c5391e564b016a967770c968fbc9d3fa68f2d5d4d4e0b68e4fa467ef3d8adb3227008557bb0ce147cacf592f4633bfe5f09e96e9958ce7b121009a539460b8d30b5", 0x4d, 0x6, 0x0, 0x0, r3}]) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000980)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e22, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6, 0x30}) write$hidraw(r6, &(0x7f0000000a00)="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", 0xfb) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000b00)=0x1, &(0x7f0000000b40)=0x2) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000b80)={0x341, "4d5b3fba1cd679c6c6929e8d08dacd811b19fead9f53837fb9e1729cfb7a9a80419d5680b6bb73d9ab815a7b3300299d22b81d92aeb7769986ac981dad9af5e2d11fe25037a436a04478ffa29bafcc5513e0bc170a032a938ecaecac97cfcafeb2e901a9a8e481eca7246cc18ed6b47df8a141e6385c65f69e2f548084a9ef4e523f9ba3200bd5413bb0e473e82f791b841d826e4e3f9febe45722ee4b0b4146e470dc36d677b4c1bac7424a6eef0e9f0d839558ceb11a14260267cf0d02dfcb6d2f1ae35ac9e9c01adab41f21b90f27e4da9d141141691375df77908e12a348c7fee5747e42f84b45ec4ef39b33d5a123eae34505eac290233f79ff03acfbede082be4eb92039ac6e12a28ef9cace04d1452be107426d03edd8d0620984bd4a28ef6d792baddf522ec9dfa1709d06cda7b4d2e5dd1220d63b0958cb70ad882fc74fdc3aa3b57772b19334be00b449eb54a62d831d754b5e78eb53bb0bede776c2c9e10e9744d7aa131e0522e5e3311d849493ec26ea2ca7a515b88385bd4596bbf48de46c56da96cc6ccb72aa87ab9e3f274267074c93af77268817660fc2d07bb3828c76833a845c243fa733f6bb7ef8c7999dc75155fe590bdcc3fe6e2f04470665e6c295e36ed45fa39d0dd085c4d3ffd3489aa8862a0f762b626bd93bb8d306209583bafcc126c5a33fd698a3823f9824467fd885b3f7009e9fc193b22bd92f6a88f736167e78ff74ce2aaca821b2482cb924fc8e1ece99d0209fc2a5bf334cfe9ecf08a743d5441fd778219564f231a5bc7eb25ef1c9e9b91ce254b091131e8bc01214425190df999e416b92a44a988a9de82e2cd420b40e97a87531974693614959963c12f117785b95d86e028fc07780621bc4918c86bb019d7f6473badb144aa799c4d7280090ec83af5a674fd8863c9be2ef60426489780d9f697cbe2277790c3eedd72776c823c73265d5b137ca8d90a116c84e48d0d777fdf56d67f9714282483dfc23c6cc6b9ab3eb28a688ec9d43278b829d29df2846fd1ed8036ea3f4546feac2daf4e91391e4f4bfd655756fd423a6e11848b4ee4b17df87f21bcffbbe349a407b394b0d8fcf32c0af6f87393a124b3d81dfcf81d00a771550cc2b87820ebda9f983b9f2daaeea8a99d16110e0391b1c234cd5aee91c6a5d63"}) 06:24:23 executing program 2: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xeb}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb979}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x352f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1aaa}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c004}, 0x2000080) r3 = socket(0x1f, 0xa, 0x9) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9b}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x200408c1}, 0x14048000) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000880)) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff800000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x5cfa2fd42959f2fa) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000a00)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x3, 0xfff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x40, 0x20, 0xffffff82, 0x3}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe2e6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) accept4$packet(r5, 0x0, &(0x7f0000000c80), 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x98a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040815}, 0x94) 06:24:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@loopback, 0x4e21, 0x800, 0x4e23, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x6, 0x20, 0x8, 0x2, 0x2, 0x0, 0x4c05, 0x7ff}, {0x654, 0x98c, 0x3f, 0xfffffffffffffffa}, 0x2, 0x6e6bb4, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x3502, 0x4, 0x2, 0xff, 0xffff8000, 0x7, 0x1f}}, 0xe8) r1 = accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000300)={0x20, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}}, {{0x2, 0x4e21, @empty}}}, 0x108) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000440)) clock_gettime(0x6, &(0x7f0000000480)) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000004c0)=""/221, &(0x7f00000005c0)=0xdd) r3 = socket$inet(0x2, 0x3, 0x5eb7) accept$inet(r3, &(0x7f0000000600), &(0x7f0000000640)=0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000680)=0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000006c0)={{0x3, 0x2, 0x2c, 0x3, 0x2}, 0x0, 0x9687, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x9, 0x6, 0x100}) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000007c0)={@local, @empty}, &(0x7f0000000800)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001240)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000b80)={0x644, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9125, 0x80, 0x4, 0x8}, {0x65, 0x1, 0x3}, {0x0, 0xf6, 0x6, 0xfffffff8}, {0x8, 0xc1, 0x2, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x60}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc6b}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x20010005}, 0x48050) [ 113.853512] audit: type=1400 audit(1748154263.687:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:24:23 executing program 4: sigaltstack(&(0x7f0000ff9000/0x4000)=nil, 0x0) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x3, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/146, 0x92, 0x0, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) r0 = fork() move_pages(r0, 0x4, &(0x7f00000011c0)=[&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000001200)=[0x4], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], 0x0) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001280)) get_mempolicy(&(0x7f00000012c0), &(0x7f0000001300), 0x9, &(0x7f0000ffd000/0x2000)=nil, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/keys\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000001380)=0x600, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000014c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000013c0)="db5f738111c8148a7ef08ba9fda6269c14c78669dbca1f056f7f018928f978eb3f10795a2ee1bca52767295a7748a1412decca96cccc376cc1c7f893573bc4fff1610c18436db5f0410fb6aa90d4e2ec1cd5c42700d7ad5217e320cc77dcbadc71f8a0425340316c0f4fde5bd58d20f5c05c5c3407e9696a0bcfdfa62cff80eaf67d077ad429cc2247aaa0e835e7afe876a221936dd625b430a8b56ea608970ca89bcf86ac382bee2af4777c3d9a0140bba98b1c14ab35c1dd89a6bfca5ee721ecaf34e720bfa063139d519650dfbe594d720c4428dffff29b39cee0cdc985", 0xdf, r1}, 0x68) r2 = syz_open_dev$hiddev(&(0x7f0000001540), 0x5, 0x422140) read$hiddev(r2, &(0x7f0000001580)=""/4096, 0x1000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/bus/input/devices\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000025c0)=0x7, &(0x7f0000002600)=0x1) r4 = syz_open_dev$hiddev(&(0x7f0000002640), 0x9, 0x44041) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000002680)={0x9e, 0x7b11, 0x0, 0x401}) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000026c0)=""/18) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000002840)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002700)=""/14, 0xe, 0x0, &(0x7f0000002740)=""/251, 0xfb}, &(0x7f0000002880)=0x40) 06:24:23 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xa86d, 0x8200) read$hidraw(r0, &(0x7f0000000040)=""/4, 0x4) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/4096) r1 = syz_open_dev$hidraw(&(0x7f0000001080), 0xec8, 0x8200) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f00000010c0)="9a90afcd7febfa77d7cdfde62a75eff33f0bfaf5461747db55dc7747f5e61f9d8fec1f13d2233e240e573788a281af09e77be3e4ad89ada30f2aa4b55152dc87df411d02d5c155c9c75602522464d7b0e930e47119fdfaa26e7e5d4a8e6f268e5f5fc03e71fd362cadc6b711baf1fe35780e47702309bf2042ad141471240238d46bb326948f65c3dc4689661e1e054f7ef431fabbf8f027") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sysvipc/sem\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000011c0)={'filter\x00', 0x4}, 0x68) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001240)) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000001280)=""/41) r3 = syz_open_dev$hidraw(&(0x7f00000012c0), 0x0, 0x40002) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000001300)="f3cd5304b7514e87da8960da1ccbaaa0695f0fbaf277bd2ab7528a07253ac0f4a2020afa89d6a761b9e0fe457668bce3d9ab428ee50c874b2154124cd9a88df9acc20e6d14bd868547e86a55434a7dd68be5f80af6a7d0535a340391e60f2ddb4cd9fdb5567e4a176201484d18cadc6773ff0755b6db808886fbd95700b9c1fe797ada884224476ec90c1d0dec8613b43ab6ac1c2d5d958099504dedacc2d73c5815073bd50b19647fbd75ab10a1bb1cde26c9b2037bc3a496551ef197cb733b9979af1a7cfe298bd11084ff264f96da8415") getpeername$packet(r2, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001480)=0x14) accept4$packet(r2, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001500)=0x14, 0x0) getpeername$packet(r2, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000015c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001980)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001600)={0x320, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r5}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x320}, 0x1, 0x0, 0x0, 0x8040}, 0x4000400) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000019c0), 0x100, 0x0) read$rfkill(r8, &(0x7f0000001a00), 0x8) accept$packet(r2, 0x0, &(0x7f0000001a40)) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) 06:24:23 executing program 6: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)="49dd2abf8182db88c8dec4cad21d15b2ac5dda829b54c63fd2eeea315cb1d846083cf1010db0f0bf45c44d243cd2e1ba9d3d2b65ac9ba6c66de067435b97bb06a773f711c3803c7b2033b98757bb82ef39bf97791a55573725122848526089b4aeac8ee7ab60117636f6e524cbc7c3dde89398f7927df018d952ab430d2d92d9bff7eb106f437b518c93e2cc140dc1fcbb58fde955cd8da7b0fe97feac26559adb7be0861cbefd296b76be3b8ce9a43c07612f07c95dbc132069d9564cfbc294d85bdca2ade110e814af77cf8238bcce345f2d04bbdaf2", 0xd7}, 0x68) write$rfkill(0xffffffffffffffff, &(0x7f00000001c0)={0x5, 0x5, 0x2, 0x0, 0x1}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), 0x4) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x53, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1, 0x4e23, 0x0, 0x4e23, 0x6, 0xa, 0x80, 0x80, 0x45}, {0x7ff, 0x7, 0x1000, 0x7, 0x4, 0x1000, 0x0, 0x401}, {0x3, 0x4, 0x5, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0xa, @in6=@private1, 0x3505, 0x2, 0x2, 0xff, 0x8, 0x4, 0x7ff}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x602, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10040}, 0x20008001) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socketpair(0x23, 0x5, 0x80000001, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x22, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48011}, 0x40000) r4 = socket(0xb, 0x3, 0x1) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000006c0)=0x1f8, &(0x7f0000000700)=0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000740)={0x800, {{0x2, 0x4e22, @empty}}}, 0x88) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000800)={@multicast2, @initdev}, &(0x7f0000000840)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r6, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 06:24:23 executing program 7: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@dev, @multicast2}, &(0x7f00000000c0)=0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x46, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) read$snapshot(0xffffffffffffffff, &(0x7f0000000180)=""/244, 0xf4) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280)=0x7, &(0x7f00000002c0)=0x2) socketpair(0x23, 0x800, 0xfffffffc, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000340)=0xffff, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x2, 0x3, 0x5073, 0x3, 0x9, 0x7, 0x1, 0x9, 0x6, 0x2, 0x5, 0x20, 0x81, 0x4}) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000400)=0x53, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000480)=0x3, 0x2) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000004c0), &(0x7f0000000500)=0x2) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000540)=""/215) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000640)="abb15695bfc2595c18a772df5e61eba33cbd8432b487b5b3804b6a2d3bc65b23aac29c8d390c7568fb29171c89cf323dc41877ae76921e1eb328996cdc43305d564210cd36578e49c9d4bdbaa475e117670e93fa4662ac7b2a15451e132886c59981f6b6d34363746c54e6960a9a8c0ac4f69b19d01e4d2aa16a2fd8d902afd6410171d6a53c38ee355f4b08fd333b0d60e11ead68952ec2dbda79ca3e32fb7806fe59955f7dd52dac10c00d0095584c29437634c43e2051de05520edc65d40183d5093822d692", 0xc7, r4}, 0x68) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000007c0)="9bbc812c65f09744eb95137a39", 0xd}, 0x68) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000880)=0x8, 0x2) [ 115.239398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.240836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.242082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.245940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.247942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.250799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.251593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.256987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.268172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.279788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.358444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.377706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.384255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.394957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.410445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.421507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.424717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.427605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.441974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.460612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.476932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.482947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.488472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.530456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.534950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.539843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.544377] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.546974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.553480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.559443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.570827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.575140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.577332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.586895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.593194] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.594531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.598726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.607982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.609892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.619861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.325214] Bluetooth: hci1: command tx timeout [ 117.325224] Bluetooth: hci0: command tx timeout [ 117.515676] Bluetooth: hci2: command tx timeout [ 117.579300] Bluetooth: hci3: command tx timeout [ 117.643128] Bluetooth: hci7: command tx timeout [ 117.643256] Bluetooth: hci4: command tx timeout [ 117.707094] Bluetooth: hci5: command tx timeout [ 117.707121] Bluetooth: hci6: command tx timeout [ 119.371288] Bluetooth: hci1: command tx timeout [ 119.371596] Bluetooth: hci0: command tx timeout [ 119.564200] Bluetooth: hci2: command tx timeout [ 119.627175] Bluetooth: hci3: command tx timeout [ 119.692378] Bluetooth: hci7: command tx timeout [ 119.693767] Bluetooth: hci4: command tx timeout [ 119.755261] Bluetooth: hci6: command tx timeout [ 119.755396] Bluetooth: hci5: command tx timeout [ 121.419260] Bluetooth: hci1: command tx timeout [ 121.422318] Bluetooth: hci0: command tx timeout [ 121.612212] Bluetooth: hci2: command tx timeout [ 121.676323] Bluetooth: hci3: command tx timeout [ 121.739085] Bluetooth: hci4: command tx timeout [ 121.739533] Bluetooth: hci7: command tx timeout [ 121.803100] Bluetooth: hci5: command tx timeout [ 121.804376] Bluetooth: hci6: command tx timeout [ 123.468130] Bluetooth: hci0: command tx timeout [ 123.468247] Bluetooth: hci1: command tx timeout [ 123.659154] Bluetooth: hci2: command tx timeout [ 123.724136] Bluetooth: hci3: command tx timeout [ 123.787121] Bluetooth: hci4: command tx timeout [ 123.787424] Bluetooth: hci7: command tx timeout [ 123.851089] Bluetooth: hci6: command tx timeout [ 123.851527] Bluetooth: hci5: command tx timeout [ 177.772886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.779356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.782983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.792481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.806576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.951110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.956367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.957739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.962931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.969861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.971590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.980262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.982734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.983619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.989421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.098132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.104669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.117519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.141658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.152517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.154845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.161503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.164950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.166684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.168381] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.173153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.210676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.240519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.241664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.258882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.281898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.298580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.306207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.315809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.315876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.322272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.330660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.335418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.368921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.376350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.852286] Bluetooth: hci0: command tx timeout [ 180.043348] Bluetooth: hci1: command tx timeout [ 180.044170] Bluetooth: hci2: command tx timeout [ 180.235154] Bluetooth: hci3: command tx timeout [ 180.299151] Bluetooth: hci5: command tx timeout [ 180.363118] Bluetooth: hci4: command tx timeout [ 180.428093] Bluetooth: hci7: command tx timeout [ 180.491381] Bluetooth: hci6: command tx timeout [ 181.900065] Bluetooth: hci0: command tx timeout [ 182.091588] Bluetooth: hci2: command tx timeout [ 182.092707] Bluetooth: hci1: command tx timeout [ 182.283177] Bluetooth: hci3: command tx timeout [ 182.347523] Bluetooth: hci5: command tx timeout [ 182.413414] Bluetooth: hci4: command tx timeout [ 182.475472] Bluetooth: hci7: command tx timeout [ 182.541100] Bluetooth: hci6: command tx timeout [ 183.948086] Bluetooth: hci0: command tx timeout [ 184.140124] Bluetooth: hci2: command tx timeout [ 184.140605] Bluetooth: hci1: command tx timeout [ 184.332137] Bluetooth: hci3: command tx timeout [ 184.396180] Bluetooth: hci5: command tx timeout [ 184.459131] Bluetooth: hci4: command tx timeout [ 184.523209] Bluetooth: hci7: command tx timeout [ 184.588117] Bluetooth: hci6: command tx timeout [ 185.998133] Bluetooth: hci0: command tx timeout [ 186.187423] Bluetooth: hci1: command tx timeout [ 186.188315] Bluetooth: hci2: command tx timeout [ 186.379216] Bluetooth: hci3: command tx timeout [ 186.443485] Bluetooth: hci5: command tx timeout [ 186.507843] Bluetooth: hci4: command tx timeout [ 186.572247] Bluetooth: hci7: command tx timeout [ 186.635837] Bluetooth: hci6: command tx timeout [ 240.545455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.549218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.560500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.574264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.580118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.715063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.722849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.727897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.745244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.748420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.754489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.771444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.773886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.784923] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.794553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.798517] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.808351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.814600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.831695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.833618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.916728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.925383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.942838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.963685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.976973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.125115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.138285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.145749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.174371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.182608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.189607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.198629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.207234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.213683] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.218480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.221630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.277452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.287570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.312405] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.335617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.635102] Bluetooth: hci0: command tx timeout [ 242.892898] Bluetooth: hci1: command tx timeout [ 242.956703] Bluetooth: hci3: command tx timeout [ 242.958077] Bluetooth: hci2: command tx timeout [ 243.083113] Bluetooth: hci4: command tx timeout [ 243.275089] Bluetooth: hci5: command tx timeout [ 243.468123] Bluetooth: hci6: command tx timeout [ 243.533092] Bluetooth: hci7: command tx timeout [ 244.683906] Bluetooth: hci0: command tx timeout [ 244.939229] Bluetooth: hci1: command tx timeout [ 245.003175] Bluetooth: hci3: command tx timeout [ 245.003900] Bluetooth: hci2: command tx timeout [ 245.132113] Bluetooth: hci4: command tx timeout [ 245.323396] Bluetooth: hci5: command tx timeout [ 245.515123] Bluetooth: hci6: command tx timeout [ 245.579393] Bluetooth: hci7: command tx timeout [ 246.732356] Bluetooth: hci0: command tx timeout [ 246.988093] Bluetooth: hci1: command tx timeout [ 247.052310] Bluetooth: hci2: command tx timeout [ 247.052785] Bluetooth: hci3: command tx timeout [ 247.179505] Bluetooth: hci4: command tx timeout [ 247.372186] Bluetooth: hci5: command tx timeout [ 247.564068] Bluetooth: hci6: command tx timeout [ 247.628272] Bluetooth: hci7: command tx timeout [ 248.781568] Bluetooth: hci0: command tx timeout [ 249.036074] Bluetooth: hci1: command tx timeout [ 249.100121] Bluetooth: hci3: command tx timeout [ 249.100563] Bluetooth: hci2: command tx timeout [ 249.228057] Bluetooth: hci4: command tx timeout [ 249.420209] Bluetooth: hci5: command tx timeout [ 249.612181] Bluetooth: hci6: command tx timeout [ 249.676477] Bluetooth: hci7: command tx timeout [ 303.337841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.341751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.344756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.364614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.368907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.463474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.466672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.468872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.474603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.477914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.520209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.525819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.540603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.548772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.563536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.688544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.703943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.706839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.721560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.723464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.737565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.750469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.776640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.831674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.871679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.308939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.312393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.317166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.327416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.348761] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.469173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.472913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.481774] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.491424] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.496839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.506935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.524735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.583578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.600643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.618873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.419142] Bluetooth: hci0: command tx timeout [ 305.548387] Bluetooth: hci1: command tx timeout [ 305.611100] Bluetooth: hci2: command tx timeout [ 305.806403] Bluetooth: hci4: command tx timeout [ 305.932320] Bluetooth: hci3: command tx timeout [ 306.443082] Bluetooth: hci6: command tx timeout [ 306.572671] Bluetooth: hci7: command tx timeout [ 306.763099] Bluetooth: hci5: command tx timeout [ 307.467260] Bluetooth: hci0: command tx timeout [ 307.595115] Bluetooth: hci1: command tx timeout [ 307.660437] Bluetooth: hci2: command tx timeout [ 307.853097] Bluetooth: hci4: command tx timeout [ 307.980063] Bluetooth: hci3: command tx timeout [ 308.491156] Bluetooth: hci6: command tx timeout [ 308.619067] Bluetooth: hci7: command tx timeout [ 308.813091] Bluetooth: hci5: command tx timeout [ 309.516107] Bluetooth: hci0: command tx timeout [ 309.644270] Bluetooth: hci1: command tx timeout [ 309.707223] Bluetooth: hci2: command tx timeout [ 309.899081] Bluetooth: hci4: command tx timeout [ 310.028374] Bluetooth: hci3: command tx timeout [ 310.539242] Bluetooth: hci6: command tx timeout [ 310.668276] Bluetooth: hci7: command tx timeout [ 310.859119] Bluetooth: hci5: command tx timeout [ 311.563461] Bluetooth: hci0: command tx timeout [ 311.692076] Bluetooth: hci1: command tx timeout [ 311.755164] Bluetooth: hci2: command tx timeout [ 311.948249] Bluetooth: hci4: command tx timeout [ 312.075130] Bluetooth: hci3: command tx timeout [ 312.587122] Bluetooth: hci6: command tx timeout [ 312.715135] Bluetooth: hci7: command tx timeout [ 312.907131] Bluetooth: hci5: command tx timeout [ 366.580204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.584984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.587074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.594665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.605418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.608856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.613805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.616824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.622980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.639089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.717373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.728486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.734498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.742664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.747771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.771835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.782727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.785975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.794597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.809559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.841612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.844916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.847588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.853210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.856885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.015801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.027491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.072549] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.104583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.137679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.385824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.457897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.460172] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.468504] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.473982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.771389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.776181] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.778941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.788246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.794835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.715228] Bluetooth: hci0: command tx timeout [ 368.715834] Bluetooth: hci1: command tx timeout [ 368.779329] Bluetooth: hci2: command tx timeout [ 368.907253] Bluetooth: hci4: command tx timeout [ 368.971132] Bluetooth: hci3: command tx timeout [ 369.291085] Bluetooth: hci5: command tx timeout [ 369.547101] Bluetooth: hci6: command tx timeout [ 369.867302] Bluetooth: hci7: command tx timeout [ 370.763962] Bluetooth: hci1: command tx timeout [ 370.764790] Bluetooth: hci0: command tx timeout [ 370.828056] Bluetooth: hci2: command tx timeout [ 370.955181] Bluetooth: hci4: command tx timeout [ 371.019214] Bluetooth: hci3: command tx timeout [ 371.339272] Bluetooth: hci5: command tx timeout [ 371.596119] Bluetooth: hci6: command tx timeout [ 371.915232] Bluetooth: hci7: command tx timeout [ 372.811153] Bluetooth: hci1: command tx timeout [ 372.811661] Bluetooth: hci0: command tx timeout [ 372.876091] Bluetooth: hci2: command tx timeout [ 373.003472] Bluetooth: hci4: command tx timeout [ 373.069033] Bluetooth: hci3: command tx timeout [ 373.387075] Bluetooth: hci5: command tx timeout [ 373.643160] Bluetooth: hci6: command tx timeout [ 373.963114] Bluetooth: hci7: command tx timeout [ 374.859210] Bluetooth: hci0: command tx timeout [ 374.859687] Bluetooth: hci1: command tx timeout [ 374.923091] Bluetooth: hci2: command tx timeout [ 375.051110] Bluetooth: hci4: command tx timeout [ 375.115461] Bluetooth: hci3: command tx timeout [ 375.437024] Bluetooth: hci5: command tx timeout [ 375.691374] Bluetooth: hci6: command tx timeout [ 376.011085] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:29:32 Registers: info registers vcpu 0 RAX=000000625e4851b4 RBX=0000000000000000 RCX=ffffffff812bf69e RDX=ffff8880178dd280 RSI=ffffffff812bf6a7 RDI=0000000000000001 RBP=ffff88806ce36f18 RSP=ffff88806ce08d00 R8 =0000000000000001 R9 =ffffed100d9c119d R10=0000000000000000 R11=0000000000000001 R12=000000625e4851b4 R13=ffff8880178ddcd8 R14=0000000000000000 R15=ffff8880178ddd00 RIP=ffffffff812bf6aa RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb176158368 CR3=0000000024c3d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81a7b33c RCX=ffff88806cf089ec RDX=1ffff1100d9e115e RSI=ffffffff85c1d1c0 RDI=ffffffff81a7b33c RBP=ffff88806cf08af0 RSP=ffff88806cf08a68 R8 =0000000000000001 R9 =ffff88806cf08ad8 R10=000000000003b67d R11=0000000000024ab9 R12=ffff88806cf08b60 R13=0000000000000000 R14=ffff888017b70000 R15=0000000000000000 RIP=ffffffff8142fa7f RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ece74d269 CR3=000000000b647000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000