Warning: Permanently added '[localhost]:24068' (ECDSA) to the list of known hosts. 2025/05/31 19:19:05 fuzzer started 2025/05/31 19:19:06 dialing manager at localhost:34361 syzkaller login: [ 94.402940] cgroup: Unknown subsys name 'net' [ 94.542168] cgroup: Unknown subsys name 'cpuset' [ 94.599446] cgroup: Unknown subsys name 'rlimit' 2025/05/31 19:19:24 syscalls: 216 2025/05/31 19:19:24 code coverage: enabled 2025/05/31 19:19:24 comparison tracing: enabled 2025/05/31 19:19:24 extra coverage: enabled 2025/05/31 19:19:24 setuid sandbox: enabled 2025/05/31 19:19:24 namespace sandbox: enabled 2025/05/31 19:19:24 Android sandbox: enabled 2025/05/31 19:19:24 fault injection: enabled 2025/05/31 19:19:24 leak checking: enabled 2025/05/31 19:19:24 net packet injection: enabled 2025/05/31 19:19:24 net device setup: enabled 2025/05/31 19:19:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 19:19:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 19:19:24 USB emulation: enabled 2025/05/31 19:19:24 hci packet injection: enabled 2025/05/31 19:19:24 wifi device emulation: enabled 2025/05/31 19:19:24 802.15.4 emulation: enabled 2025/05/31 19:19:24 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 19:19:26 starting 8 fuzzer processes 19:19:26 executing program 0: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) r1 = accept4(r0, 0x0, &(0x7f00000001c0), 0x80800) sendmsg$802154_raw(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14, &(0x7f0000000280)={&(0x7f0000000240)="3138e0e2a775d9a5716973cc84d96e2733b33683e339e7242d1e214635816dd0f6fad7fe8eebeb96272705442f83ad3f", 0x30}, 0x1, 0x0, 0x0, 0x400c811}, 0x4008800) r2 = accept4(r1, &(0x7f0000000300)=@nl=@proc, &(0x7f0000000380)=0x80, 0x800) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000003c0)={0x8, 0x6, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, @mcast1]}, 0x38) r3 = socket$inet6(0xa, 0x80000, 0x2) r4 = accept4$inet6(r3, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x1c, 0x80000) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={@mcast2, 0x3e}) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000004c0)=@gcm_128={{}, "d2da49061367816b", "e484573197b03d8cd2b9ddc3fa80aab1", "1293d69e", "686e54531dd871e7"}, 0x28) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000500), &(0x7f0000000540)=0x4) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = accept4$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14, 0x80000) r7 = accept4(r6, 0x0, &(0x7f0000000600), 0x0) sendmsg$802154_raw(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000780)={&(0x7f0000000680)="2cae589760ad18f7356a53fccb7a1361cd56cf8bf84c088959a58b9c1d22acfb616b590ffbd7c454dd65a84fd575ba3570c16ae48d88cbdb1bb6a5295a474002fb1d257dca9b8eba8c8f1395c89608870ff1689aee58dbe6fabe11cf5dea4959c8acf489a52ae185851d311bcb580de4fe022793f1c1a83da69005e93cd385912682386f66770f42071c3170ad27eb263d8a2fe46cfc508750156e3195148ce1f43acd153213fd402e9d5ece67ee660d0f102d2abb5cf9f8bba9fdfbd2cf1214fe30609dc75d0cfc32d3830fb3ab6a0d406386279648918fb2ae57fb3cbad979f4db02c1a9a50ee14ffc2b518e330ad5c943c5", 0xf3}, 0x1, 0x0, 0x0, 0x82}, 0x40000) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000800)) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000c40)={0x87, 0x1b, &(0x7f0000000840)="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"}) bind$802154_raw(r7, &(0x7f0000000c80)={0x24, @none={0x0, 0x1}}, 0x14) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000d00)=0x1c) 19:19:26 executing program 1: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x204, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x45}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcd64}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004014}, 0x4001) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80800) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x20, 0x2}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x54}}, 0xc0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x57f6f194, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x10040000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfb, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x40880) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x80880, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000800)=0x8001) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport}, {@privport}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz2\x00'}}, {@fowner_gt}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, '^(,'}}, {@subj_user={'subj_user', 0x3d, '['}}, {@dont_appraise}]}}) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000a00)={0x0, "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"}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000f00)={@mcast1, 0x59, r1}) 19:19:26 executing program 2: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10100108}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe8e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x40) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x4400, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2e, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004815}, 0x20000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x4002, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, 0x453, 0x2, 0x70bd2c, 0x25dfdbfc, "ec95c0ef5257066667159107557828cbc11672b302a91ee6c04188b4172dbee76d3576440b325d4287f0e1f95caf8f6620567b68bdee0e08a02b0332bb130c10c315d75a4a", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x4004804}, 0x20008000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0x8000, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x142}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x800) write$binfmt_elf32(r2, &(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1, 0x6, 0x9, 0x1, 0x2, 0x3e, 0x84fdf65a, 0x165, 0x38, 0xb3, 0x1ff, 0x0, 0x20, 0x2, 0x9, 0x28, 0x6dd}, [{0x6474e551, 0x40, 0x10000, 0x3ff, 0x1, 0x8, 0xfff, 0x81}], "b2e1cb3a5baeca817978a4638d52ea550e2620def49290d5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa70) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000016c0), 0x406801, 0x0) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x4c, 0x464, 0x600, 0x70bd2d, 0x7, "d919afd2e2ff8a10ac8323ba4975bd649bdac1898cf3b300c7533ebd4e27d29c8e068d4f5ca2a886f2d0c681ca5529eb6126b3ba7a011ed79545c440", ["", "", "", ""]}, 0x4c}}, 0x80) add_key$keyring(&(0x7f0000001840), &(0x7f0000001880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) io_uring_setup(0x4277, &(0x7f00000018c0)={0x0, 0xc021, 0x2, 0x0, 0x1ee}) [ 114.442825] audit: type=1400 audit(1748719166.743:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:19:26 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80, 0x800) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x800003, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x2000006, 0x2010, 0xffffffffffffffff, 0x10000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x8000000) r2 = getpgid(0x0) r3 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80800) kcmp(r2, 0x0, 0x4, r3, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0xffffffffffffffff) r4 = getpgid(0x0) kcmp(r4, r2, 0x3, r1, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r1, 0x8000000) pkey_free(0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x30, r1, 0x8000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7b}) sendmsg$AUDIT_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfb, {0x12, 0x1, 0x3, r4, 0x1, 0x0, 0x9038, 0x5, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x3494fb291051e90c}, 0x40000c0) openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4040) 19:19:26 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x44c, 0x3f3, 0x8, 0x70bd2a, 0x25dfdbfc, {0x5, 0x1, 0x14, [0x7, 0x7e2, 0x0, 0x50, 0x8, 0x7fff, 0x4, 0x80, 0x800, 0x4, 0xfffffff7, 0x80000001, 0xfff, 0x3, 0xfc8, 0x9, 0x30, 0x2, 0x1ff, 0x60, 0x8000, 0xfffffffa, 0x3, 0x5, 0x7, 0xfffffffb, 0x4, 0x3, 0x0, 0x3f, 0x0, 0x10001, 0x0, 0xffff, 0x5, 0x7, 0x0, 0x6, 0xffff, 0x2, 0x2, 0x7ff, 0x2, 0x9, 0xffff, 0x942, 0x2, 0x557f, 0x2, 0x6, 0x3, 0x5, 0xb779, 0xaf85, 0x0, 0x2, 0x400, 0xec7, 0x1, 0x0, 0x3, 0xc62, 0xfffffe00, 0x8001], [0x3, 0x3, 0x401, 0x2, 0xc0, 0x8, 0x0, 0x2, 0xc, 0x0, 0x9, 0xeb3, 0x30c, 0x1, 0x200, 0x9, 0x9, 0x6, 0x101, 0x40, 0x5, 0x401, 0x8, 0x8, 0x1, 0x40, 0x7, 0x1, 0x7, 0x4, 0x63fd259a, 0x0, 0x9, 0x8, 0x8, 0x8, 0x5, 0x5, 0xffffffe1, 0x452, 0x6, 0x9, 0x3, 0x4, 0x6, 0x2, 0x6, 0xf5b2, 0x7, 0x1, 0xffffffff, 0x10000, 0x0, 0x8000, 0x3, 0x9ec, 0xc2, 0xffff, 0x0, 0x2, 0x73f1, 0x6, 0x3, 0x9], [0x9, 0x52, 0x81, 0x3000, 0xfffffc01, 0xe7, 0xffffffff, 0x9, 0x2, 0xfff, 0x0, 0x7, 0x1, 0xffff, 0x1, 0xffffff81, 0x6, 0x81, 0x7fff, 0x9def, 0x80000001, 0x2, 0x80000001, 0x7, 0x9, 0x4, 0x3, 0x3f, 0x8, 0x1c000, 0x6, 0xa3, 0x2, 0x0, 0x1e, 0x2, 0x20, 0x1, 0x4, 0xc4e8, 0x7, 0x3, 0x6, 0x101, 0x9, 0xef4, 0xe351, 0x1000, 0x1e9, 0x0, 0x3, 0x5, 0x8, 0x4, 0x9, 0x10000, 0xfff, 0x89, 0x2, 0x9, 0x200, 0x5, 0x7, 0x4], [0x3, 0xe16, 0x1, 0x81, 0x200, 0x400, 0xfffffff8, 0x20, 0x1, 0x101, 0x0, 0x5, 0x8, 0x2, 0x400, 0x2, 0x2, 0x80, 0x8001, 0x3ff, 0x10001, 0x4, 0x9, 0x100, 0xfff, 0x100, 0x6, 0x8, 0x4, 0x9, 0xee3, 0x2, 0x4cf, 0x9, 0x9, 0x80000001, 0xfff, 0x3, 0x2, 0x400, 0x400, 0x2, 0x3, 0xb46c, 0x8000, 0x2, 0x7, 0xffff, 0x4, 0x7, 0xff, 0x7, 0x5, 0x9000, 0x6, 0x1f, 0x400, 0x5, 0x7, 0x400, 0x1, 0x81, 0x8, 0x8], 0x2b, ['\x00', 'freezer.state\x00', 'freezer.state\x00', 'freezer.state\x00']}, ["", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x8c0}, 0x400c000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000600)='memory.pressure\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc393}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000005) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0x920, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r4 = socket(0x8, 0x1, 0x3988) accept4$unix(r4, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e, 0x80000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x481, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x613}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe9540a07}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000d80)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$KDSETLED(r0, 0x4b32, 0x10000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e00), 0x88000, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) 19:19:26 executing program 5: r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6110}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40001) r1 = geteuid() sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x200, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040804}, 0x8000) semtimedop(0xffffffffffffffff, &(0x7f0000000280)=[{0x2, 0x1, 0x800}, {0x4, 0x5b, 0x2000}, {0x1, 0x4, 0x1000}, {0x3, 0x9, 0x2800}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}) r2 = semget(0x1, 0x4, 0x25) semtimedop(r2, &(0x7f0000000300)=[{0x1, 0x8001}, {0x3, 0x0, 0x1800}, {0x2, 0xfff7, 0x1000}, {0x4, 0x0, 0x1000}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x1c, 0x800) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1008000, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}, {@access_uid={'access', 0x3d, r1}}, {@access_any}, {@cache_fscache}, {@access_any}, {@fscache}], [{@seclabel}, {@uid_eq={'uid', 0x3d, r1}}, {@context={'context', 0x3d, 'root'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user}, {@uid_gt={'uid>', r1}}, {@euid_eq={'euid', 0x3d, r1}}, {@euid_eq={'euid', 0x3d, r1}}, {@obj_role={'obj_role', 0x3d, 'broadcast-link\x00'}}, {@appraise}]}}) r4 = getpgid(r0) r5 = semget(0x0, 0x3, 0x1) r6 = geteuid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000600)={{0x0, r1, 0xee01, r6, 0xffffffffffffffff, 0x167, 0x8}, 0x9ceb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x3e9, 0x400, 0x70bd2d, 0x25dfdbfb, {0x20, 0x1, 0x2, r4, 0x9, 0x510f, 0x1, 0x4, 0x0, 0x5c}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000780)={'nat\x00', 0x41, "cc9448434dac192d80088dee906ec0e8b50dc7476a8dc1975e22147523b641ac76491ef97c61ac3e27ea4e7fac18dba891442ec3492e71c4363a8002fa71fcf332"}, &(0x7f0000000800)=0x65) getpeername$inet6(r3, &(0x7f0000000840)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000880)=0x1c) r7 = accept4(r3, &(0x7f00000008c0)=@ieee802154={0x24, @long}, &(0x7f0000000940)=0x80, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000980)={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast1, 0x19c9, 0x5, 0x9, 0x100, 0x8, 0x200}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000a00)={'ipvs\x00'}, &(0x7f0000000a40)=0x1e) 19:19:26 executing program 6: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x200, 0x8, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000200)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r3 = socket(0x3, 0x6, 0x101) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$KDSETLED(r1, 0x4b32, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000044) openat$cgroup_freezer_state(r2, &(0x7f0000000580), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000600)=0xc) io_uring_setup(0x5d94, &(0x7f0000000640)={0x0, 0x4852, 0x10, 0x0, 0x221}) 19:19:26 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_io_uring_setup(0x670a, &(0x7f0000000000)={0x0, 0xff1b, 0x0, 0x2, 0x238, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4000, @fd=r1, 0xfffffffffffff001, &(0x7f0000000100)=""/179, 0xb3, 0x12, 0x1}, 0x80000001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r1, 0x8000000) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240)='THAWED\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r4 = geteuid() mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@fscache}, {@cache_mmap}, {@access_client}, {@access_user}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@obj_user={'obj_user', 0x3d, '^(/{'}}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_lt={'uid<', r4}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e, 0x800) keyctl$get_persistent(0x16, r3, 0xfffffffffffffffa) openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) accept4(r5, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000680)=0x80, 0x1000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x4040080) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x0, 0x0, r3}, {0x4, 0x8, 0x1, 0xeb2f, 0x7, 0x4, 0xfff9, 0x7fff}, {0x2, 0x3028e88f, 0x100000001, 0x3c6}, 0x9, 0x6e6bb0, 0x1, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d6, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3503, 0xd, 0x2, 0x7, 0x10001, 0x7, 0x6}}, 0xe8) ptrace$poke(0x4, 0x0, &(0x7f0000000900), 0x101) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000940)=0xffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e22, 0x1, 0x4e21, 0x20, 0xa, 0x80, 0x40, 0x32, 0x0, r4}, {0x401, 0x3da9, 0x200, 0x401, 0x2, 0x9, 0xfffffffffffeffff}, {0xfffffffffffffffb, 0x6, 0x0, 0x2}, 0x1, 0x6e6bba, 0x1, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x5f}, 0xa, @in6=@private0, 0x0, 0x7, 0x0, 0x9, 0x9, 0x80000000, 0x3}}, 0xe8) [ 115.793537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.796107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.797466] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.802689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.805535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.984636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.990242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.992311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.000776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.006776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.011553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.016042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.018145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.038679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.040490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.043549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.044392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.048500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.069089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.070621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.072333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.085303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.086976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.088757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.092558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.096502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.102244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.109763] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.112918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.152829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.156132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.180554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.184534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.198371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.198592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.202792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.207440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.211056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.217136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.223245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.869303] Bluetooth: hci0: command tx timeout [ 118.060162] Bluetooth: hci2: command tx timeout [ 118.124951] Bluetooth: hci5: command tx timeout [ 118.189007] Bluetooth: hci6: command tx timeout [ 118.189697] Bluetooth: hci1: command tx timeout [ 118.251962] Bluetooth: hci3: command tx timeout [ 118.316043] Bluetooth: hci4: command tx timeout [ 118.316090] Bluetooth: hci7: command tx timeout [ 119.917931] Bluetooth: hci0: command tx timeout [ 120.108320] Bluetooth: hci2: command tx timeout [ 120.172100] Bluetooth: hci5: command tx timeout [ 120.236070] Bluetooth: hci6: command tx timeout [ 120.236458] Bluetooth: hci1: command tx timeout [ 120.300143] Bluetooth: hci3: command tx timeout [ 120.364337] Bluetooth: hci7: command tx timeout [ 120.365199] Bluetooth: hci4: command tx timeout [ 121.964059] Bluetooth: hci0: command tx timeout [ 122.156227] Bluetooth: hci2: command tx timeout [ 122.220093] Bluetooth: hci5: command tx timeout [ 122.283993] Bluetooth: hci6: command tx timeout [ 122.284036] Bluetooth: hci1: command tx timeout [ 122.349039] Bluetooth: hci3: command tx timeout [ 122.411983] Bluetooth: hci4: command tx timeout [ 122.413662] Bluetooth: hci7: command tx timeout [ 124.012006] Bluetooth: hci0: command tx timeout [ 124.204060] Bluetooth: hci2: command tx timeout [ 124.268335] Bluetooth: hci5: command tx timeout [ 124.332503] Bluetooth: hci6: command tx timeout [ 124.332521] Bluetooth: hci1: command tx timeout [ 124.396487] Bluetooth: hci3: command tx timeout [ 124.460204] Bluetooth: hci7: command tx timeout [ 124.460324] Bluetooth: hci4: command tx timeout [ 178.297579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.306646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.307456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.312418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.315319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.322388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.327186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.331438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.343834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.369165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.418013] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.427325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.431328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.443255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.453337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.455836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.456719] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.462177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.463437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.468310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.469564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.471673] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.473201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.477615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.483304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.492327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.492404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.493742] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.498373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.500330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.509603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.515295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.515419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.520236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.520399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.550061] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.552070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.578178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.593276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.597455] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.395983] Bluetooth: hci0: command tx timeout [ 180.460067] Bluetooth: hci1: command tx timeout [ 180.523967] Bluetooth: hci2: command tx timeout [ 180.588006] Bluetooth: hci3: command tx timeout [ 180.588793] Bluetooth: hci4: command tx timeout [ 180.589455] Bluetooth: hci5: command tx timeout [ 180.716291] Bluetooth: hci6: command tx timeout [ 180.717252] Bluetooth: hci7: command tx timeout [ 182.445189] Bluetooth: hci0: command tx timeout [ 182.508933] Bluetooth: hci1: command tx timeout [ 182.573142] Bluetooth: hci2: command tx timeout [ 182.637989] Bluetooth: hci5: command tx timeout [ 182.638429] Bluetooth: hci4: command tx timeout [ 182.638847] Bluetooth: hci3: command tx timeout [ 182.765232] Bluetooth: hci7: command tx timeout [ 182.765681] Bluetooth: hci6: command tx timeout [ 184.492947] Bluetooth: hci0: command tx timeout [ 184.556126] Bluetooth: hci1: command tx timeout [ 184.621053] Bluetooth: hci2: command tx timeout [ 184.685049] Bluetooth: hci3: command tx timeout [ 184.685498] Bluetooth: hci4: command tx timeout [ 184.685980] Bluetooth: hci5: command tx timeout [ 184.812198] Bluetooth: hci6: command tx timeout [ 184.812628] Bluetooth: hci7: command tx timeout [ 186.541215] Bluetooth: hci0: command tx timeout [ 186.603935] Bluetooth: hci1: command tx timeout [ 186.669030] Bluetooth: hci2: command tx timeout [ 186.734117] Bluetooth: hci3: command tx timeout [ 186.734563] Bluetooth: hci5: command tx timeout [ 186.736083] Bluetooth: hci4: command tx timeout [ 186.861181] Bluetooth: hci6: command tx timeout [ 186.861622] Bluetooth: hci7: command tx timeout [ 240.657271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.662491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.666676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.674335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.677369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.681597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.682859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.690178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.731493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.738827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.747357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.762349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.768767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.774527] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.779565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.783810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.794481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.800599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.805837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.810192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.019223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.027381] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.047401] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.056304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.066177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.072395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.094169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.102524] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.103508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.105907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.114997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.119558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.123818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.131588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.145333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.157241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.173484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.206604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.278595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.282382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.733935] Bluetooth: hci1: command tx timeout [ 242.796613] Bluetooth: hci0: command tx timeout [ 242.860380] Bluetooth: hci3: command tx timeout [ 242.860563] Bluetooth: hci2: command tx timeout [ 243.243976] Bluetooth: hci6: command tx timeout [ 243.307983] Bluetooth: hci5: command tx timeout [ 243.308018] Bluetooth: hci4: command tx timeout [ 243.372968] Bluetooth: hci7: command tx timeout [ 244.780334] Bluetooth: hci1: command tx timeout [ 244.845213] Bluetooth: hci0: command tx timeout [ 244.907969] Bluetooth: hci2: command tx timeout [ 244.909327] Bluetooth: hci3: command tx timeout [ 245.291971] Bluetooth: hci6: command tx timeout [ 245.355955] Bluetooth: hci4: command tx timeout [ 245.356195] Bluetooth: hci5: command tx timeout [ 245.420570] Bluetooth: hci7: command tx timeout [ 246.827974] Bluetooth: hci1: command tx timeout [ 246.893904] Bluetooth: hci0: command tx timeout [ 246.956010] Bluetooth: hci3: command tx timeout [ 246.956046] Bluetooth: hci2: command tx timeout [ 247.339985] Bluetooth: hci6: command tx timeout [ 247.403972] Bluetooth: hci4: command tx timeout [ 247.405194] Bluetooth: hci5: command tx timeout [ 247.469202] Bluetooth: hci7: command tx timeout [ 248.875953] Bluetooth: hci1: command tx timeout [ 248.939958] Bluetooth: hci0: command tx timeout [ 249.003998] Bluetooth: hci3: command tx timeout [ 249.004022] Bluetooth: hci2: command tx timeout [ 249.388996] Bluetooth: hci6: command tx timeout [ 249.452061] Bluetooth: hci5: command tx timeout [ 249.452187] Bluetooth: hci4: command tx timeout [ 249.517125] Bluetooth: hci7: command tx timeout [ 302.848173] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.854424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.857256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.864824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.874657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.003653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.014489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.018658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.031482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.036509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.131970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.141266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.144466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.156359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.167770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.234822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.241412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.251850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.253688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.257429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.260948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.269424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.280550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.285032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.286627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.351114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.355625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.364402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.366189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.394675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.395690] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.397567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.411197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.416053] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.430171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.436407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.455756] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.463544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.471834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.479135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.941192] Bluetooth: hci0: command tx timeout [ 305.067972] Bluetooth: hci1: command tx timeout [ 305.260060] Bluetooth: hci2: command tx timeout [ 305.388281] Bluetooth: hci4: command tx timeout [ 305.451955] Bluetooth: hci3: command tx timeout [ 305.516091] Bluetooth: hci5: command tx timeout [ 305.580147] Bluetooth: hci7: command tx timeout [ 305.580383] Bluetooth: hci6: command tx timeout [ 306.988153] Bluetooth: hci0: command tx timeout [ 307.115954] Bluetooth: hci1: command tx timeout [ 307.308987] Bluetooth: hci2: command tx timeout [ 307.436143] Bluetooth: hci4: command tx timeout [ 307.502116] Bluetooth: hci3: command tx timeout [ 307.563996] Bluetooth: hci5: command tx timeout [ 307.629941] Bluetooth: hci7: command tx timeout [ 307.629963] Bluetooth: hci6: command tx timeout [ 309.036012] Bluetooth: hci0: command tx timeout [ 309.165128] Bluetooth: hci1: command tx timeout [ 309.357965] Bluetooth: hci2: command tx timeout [ 309.484044] Bluetooth: hci4: command tx timeout [ 309.549166] Bluetooth: hci3: command tx timeout [ 309.611997] Bluetooth: hci5: command tx timeout [ 309.676947] Bluetooth: hci7: command tx timeout [ 309.677180] Bluetooth: hci6: command tx timeout [ 311.085243] Bluetooth: hci0: command tx timeout [ 311.213299] Bluetooth: hci1: command tx timeout [ 311.406977] Bluetooth: hci2: command tx timeout [ 311.533113] Bluetooth: hci4: command tx timeout [ 311.596966] Bluetooth: hci3: command tx timeout [ 311.660371] Bluetooth: hci5: command tx timeout [ 311.724222] Bluetooth: hci7: command tx timeout [ 311.724734] Bluetooth: hci6: command tx timeout [ 365.252965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.258370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.266086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.277782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.284582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.506811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.509858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.513121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.524526] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.536447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.627020] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.636552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.659036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.662605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.674464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.677680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.707395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.714387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.735150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.735398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.746333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.758602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.766460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.786665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.790435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.813750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.833908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.835085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.846300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.848776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.859507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.871666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.877709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.880839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.906408] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.298182] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.334776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.345513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.377695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.410588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.339958] Bluetooth: hci0: command tx timeout [ 367.595962] Bluetooth: hci1: command tx timeout [ 367.917184] Bluetooth: hci3: command tx timeout [ 367.980278] Bluetooth: hci2: command tx timeout [ 368.044304] Bluetooth: hci4: command tx timeout [ 368.044982] Bluetooth: hci5: command tx timeout [ 368.045021] Bluetooth: hci6: command tx timeout [ 368.492054] Bluetooth: hci7: command tx timeout [ 369.389903] Bluetooth: hci0: command tx timeout [ 369.643972] Bluetooth: hci1: command tx timeout [ 369.965917] Bluetooth: hci3: command tx timeout [ 370.027946] Bluetooth: hci2: command tx timeout [ 370.092414] Bluetooth: hci5: command tx timeout [ 370.092982] Bluetooth: hci4: command tx timeout [ 370.093411] Bluetooth: hci6: command tx timeout [ 370.541147] Bluetooth: hci7: command tx timeout [ 371.437040] Bluetooth: hci0: command tx timeout [ 371.691965] Bluetooth: hci1: command tx timeout [ 372.012107] Bluetooth: hci3: command tx timeout [ 372.077025] Bluetooth: hci2: command tx timeout [ 372.139958] Bluetooth: hci4: command tx timeout [ 372.141047] Bluetooth: hci6: command tx timeout [ 372.141072] Bluetooth: hci5: command tx timeout [ 372.588088] Bluetooth: hci7: command tx timeout [ 373.483966] Bluetooth: hci0: command tx timeout [ 373.739948] Bluetooth: hci1: command tx timeout [ 374.061681] Bluetooth: hci3: command tx timeout [ 374.125127] Bluetooth: hci2: command tx timeout [ 374.188881] Bluetooth: hci5: command tx timeout [ 374.189319] Bluetooth: hci6: command tx timeout [ 374.189739] Bluetooth: hci4: command tx timeout [ 374.636097] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:24:34 Registers: info registers vcpu 0 RAX=ffffffff81a460e6 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888035caf601 RSI=ffff888035caf6d0 RDI=ffff888035caf6d0 RBP=ffff888035caf1a0 RSP=ffff888035caf0c8 R8 =ffffffff86c306b2 R9 =ffff888035caf188 R10=000000000003b6bd R11=00000000000c3b7f R12=ffff888035caf1a8 R13=ffff888035caf190 R14=ffff888035caf6d8 R15=ffff888035caf148 RIP=ffffffff84b66c40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f83a6648310 CR3=0000000024b39000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000006cf08a01 RBX=ffffffff81604940 RCX=ffff88806cf0897c RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff888016a51f7c RBP=ffff88806cf01000 RSP=ffff88806cf089f8 R8 =0000000000000001 R9 =ffff88806cf08a68 R10=000000000003b6bd R11=0000000000024ac5 R12=ffff88806cf08a01 R13=ffff88806cf08a70 R14=ffff88806cf08d98 R15=ffff88806cf08a28 RIP=ffffffff81353d98 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd9c17171f0 CR3=0000000030359000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000