Warning: Permanently added '[localhost]:16498' (ECDSA) to the list of known hosts. 2025/06/02 12:18:06 fuzzer started 2025/06/02 12:18:07 dialing manager at localhost:34361 syzkaller login: [ 93.635313] cgroup: Unknown subsys name 'net' [ 93.763484] cgroup: Unknown subsys name 'cpuset' [ 93.806638] cgroup: Unknown subsys name 'rlimit' 2025/06/02 12:18:21 syscalls: 203 2025/06/02 12:18:21 code coverage: enabled 2025/06/02 12:18:21 comparison tracing: enabled 2025/06/02 12:18:21 extra coverage: enabled 2025/06/02 12:18:21 setuid sandbox: enabled 2025/06/02 12:18:21 namespace sandbox: enabled 2025/06/02 12:18:21 Android sandbox: enabled 2025/06/02 12:18:21 fault injection: enabled 2025/06/02 12:18:21 leak checking: enabled 2025/06/02 12:18:21 net packet injection: enabled 2025/06/02 12:18:21 net device setup: enabled 2025/06/02 12:18:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/02 12:18:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/02 12:18:21 USB emulation: enabled 2025/06/02 12:18:21 hci packet injection: enabled 2025/06/02 12:18:21 wifi device emulation: enabled 2025/06/02 12:18:21 802.15.4 emulation: enabled 2025/06/02 12:18:21 fetching corpus: 0, signal 0/0 (executing program) 2025/06/02 12:18:23 starting 8 fuzzer processes 12:18:23 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x81, 0xfff, 0x6, 0x8001, 0x4, 0x9, 0xf0, 0x4, 0x5, 0x1, 0x3f, 0x4, 0x100000000, 0xffffffffffffffff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}}, 0x60000004) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x5}, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x243901, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000440)="6ce34de9ef88457cb090718b2a41801cec1c4f3f560919ec560808e6b96bfc30ef4f1ccdef2ff824a011739328f20e4a8cd02c6d5b73c7db005edf102f38e9019eb9f34e61f1446f0284dfaaeb5a5134ee44f08f961f67453a0d8ff09b7a7790dc27cce84a7851045cd41aedd871aff8ee997500e28df047ecf71532823552e4f5c7d4f5b074ef089cfbf4a486367d5f28639a3c4a27981a0c741b03079b658bea299e1d9ec6d06ae07caaa3bd403caf3090a2df5b94a69de70de4cddeb981089de5b628ac6b129bba240c0d") r5 = syz_open_dev$loop(&(0x7f0000000540), 0x5, 0x105000) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x12, 0x3, 0x18, "66c71885b882a8145b46631b887413beba5ae323f94cd5ec6d7b71528c224d57ed8e0f861cc6101bcc965ef40acbd6726a100d2f80c7327b0ecf14507cbb97b6", "767c18dae66588dd4f27f4cf3773d670ee99ce3b6145ced28f805110da2afb7a5762840c8090f98d6f89327e8fdb449f0a6ad5424ef997f17fce4e5abcb56539", "e4cce357acd943b71d2d38661f5aa77f14ab1625196f8579f75b5a18505cb890", [0x7, 0xff]}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x10202, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2b, 0x88f, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400}, 0x4004804) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000007c0)={@dev, @multicast2}, &(0x7f0000000800)=0xc) 12:18:23 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x9, 0x2, 0x9, 0xfff, 0xffff, 0xffff, 0x9b8, 0x2, 0x0, 0x1, 0x3, 0x20, 0x3, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000280)=0x7, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x200240, 0x0) connect$bt_sco(r2, &(0x7f0000000300), 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0xc3fd, 0x8, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x36}, 0x10, 0x10, 0xec, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x29, 0xc9, 0x8, 0x6, 0x48, @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8000, 0x80, 0x9, 0x9c4}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f00000004c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000500)={0x7511ed76}, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000540)={{r1, 0x2, 0x3, 0x2, 0x836, 0x8, 0x224, 0x3f, 0x3, 0x200, 0x8, 0x7, 0x8, 0x8000, 0xffffffff00000000}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000600)={{r5, 0xff, 0x3, 0x5, 0x7, 0x3ff, 0xfffffffffffffff9, 0x2, 0x4f, 0x7, 0x100, 0x8d2d000, 0x5, 0x1, 0x74d}}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x80200, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f00000016c0)={'ip6gre0\x00', &(0x7f0000001640)={'sit0\x00', 0x0, 0x2f, 0x8, 0x20, 0xffffff80, 0x4, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x4, 0x200}}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000001700)={{0x2f, @private=0xa010100, 0x4e21, 0x1, 'dh\x00', 0x27, 0x100, 0xa}, {@loopback, 0x4e24, 0x3, 0x2, 0x72, 0x7f}}, 0x44) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001800)={'syztnl1\x00', &(0x7f0000001780)={'ip6gre0\x00', r7, 0x29, 0x64, 0xfe, 0x4, 0x1, @loopback, @empty, 0x7800, 0x3a7dc0a25a5c0263, 0x10001, 0x200020}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001840)={{r1, 0x0, 0x7f, 0x6, 0x8000, 0x800, 0x7, 0x1, 0xc7, 0x8, 0x1, 0x5, 0x4, 0x8, 0x3}}) 12:18:23 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x841}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x28}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c085) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004044) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x40040) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5811}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x20040080) prctl$PR_GET_SECUREBITS(0x1b) socketpair(0x1a, 0x1, 0x6aa, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}]}, 0x24}}, 0x24004000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4000800) 12:18:23 executing program 3: r0 = syz_io_uring_complete(0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0xbc, @remote, 0x4e21, 0x3, 'fo\x00', 0x21, 0x2, 0x7e}, 0x2c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0) r2 = syz_io_uring_setup(0x6b08, &(0x7f0000000080)={0x0, 0xae2b, 0x4, 0x1, 0x15d, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1e17, &(0x7f0000000180)={0x0, 0xa0ff, 0x4, 0x1, 0x106, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = syz_io_uring_complete(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x100000c, 0x20010, r4, 0x8000000) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x0, 0x1a90a168, 0x9, 0x9, 0x7], 0x2, &(0x7f0000000280)=[{}, {}], 0x0, [{}, {}]}, 0x98) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000003c0)={@loopback, @local}, &(0x7f0000000400)=0xc) write$P9_RXATTRWALK(r0, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0xdd3}, 0xf) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x44021) socketpair(0x1a, 0x5, 0x3, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) r8 = io_uring_setup(0x67d9, &(0x7f0000000680)={0x0, 0xad18, 0x20, 0x2, 0x18e}) io_uring_setup(0x623c, &(0x7f0000000700)={0x0, 0xbc28, 0x20, 0x3, 0x2bb, 0x0, r8}) [ 110.047374] audit: type=1400 audit(1748866703.759:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:18:23 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1cc8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8000000, 0x100, 0x0, 0x3, 0x1b, 0xc, "13181c35b0a2f5e9fa5660da738dbcda5ccce97e0e0562ea938c92b231d252867069c4f75234669feed1ae6ff4605d147f2aa9691d44f07b24fc7954ec5f2aa2", "12d480a10d5388af23e00b392b5a6b42ec74fb0a1c2e292709fa7c651314f275fcd401531b32296a406f6d3e4bdd5ddff730868018f5f5ba97bf323b0c03a03c", "343314d76099da7784cc32f500e0c1bcd1f6285219e3deabe35a776b6f272e68", [0x9, 0x6f0a]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x4d, 0x4, 0x40, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r2, 0x4, 0x80, 0x9, 0xcb2, 0x0, @mcast1, @local, 0x7800, 0x40, 0x5, 0x85}}) read$rfkill(0xffffffffffffffff, &(0x7f0000000480), 0x8) socketpair(0x0, 0x1, 0x5, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x29, 0x7f, 0x0, 0x5, 0x1, @private0, @mcast1, 0x7800, 0x7800, 0x3ff80000, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r3, 0x2f, 0x8, 0x2, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x1, 0x40, 0x9, 0x80000001}}) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000800)={{0x0, 0x8, 0x7fffffff, 0x1f, 0x8001, 0x5, 0xff, 0x0, 0x4, 0x48, 0x5, 0xfffffffffffffff9, 0x8001, 0xea5f, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000008c0)={@empty, @remote, 0x0}, &(0x7f0000000900)=0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6tnl0\x00', r8, 0x2f, 0x40, 0x9, 0x1, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x80, 0x40, 0x1, 0x319e8081}}) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000a00)=0x1, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000a40)=0x2, 0x4) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) 12:18:23 executing program 5: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/60, &(0x7f0000000040)=0x3c) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000000c0)=""/88, &(0x7f0000000140)=0x58) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbc}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x24048891}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008850) socketpair(0x3b, 0x4, 0xfb69, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040811}, 0x4000) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000700), &(0x7f0000000740)=0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000780), 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, @none}, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000800)={'broute\x00', 0x0, 0x0, 0x0, [0x3f, 0xb07a, 0x6, 0x7, 0x0, 0x8]}, &(0x7f0000000880)=0x78) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80100100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'broute\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x70}}, 0x2004c4d5) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 12:18:23 executing program 6: r0 = syz_io_uring_complete(0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) syz_io_uring_setup(0x73f7, &(0x7f00000000c0)={0x0, 0x8b09, 0x8, 0x1, 0xde, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) keyctl$set_reqkey_keyring(0xe, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x2f, 0x3b, 0x1, 0xcd, 0x0, @remote, @remote, 0x7800, 0xf808, 0x7, 0xffffffff}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6afb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x62, 0x200, 0x0, 0x6, 0x1d, 0x1c, "eb141ff2f8009b3d4efd4edd3716dc7f0c54d56e2590a6abf1a12fdafb6b6fba677f9a4ebb25c7d8926dbebe5a080439a055e258f2508848f461b72cfc09bb38", "0d3b09a444f04e7e3c173571124e219326fbbbd74848b97561173eb5a65b029340ef0555034be690a61f8589b67216a10dd932e70a3cd60a0459873d1b65de31", "4d82dd308d84adcb9b23c452aedcc68b18eada77c852dbdce31461a4849800b3", [0x7ec, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"ed0be89b65c1e8f4805d80c167ee3d16", 0x0, 0x0, {0x5, 0x1}, {0x1, 0x255}, 0xfe2f, [0xc5c, 0x25c95dfd, 0x4, 0xfffffffffffffffc, 0x2, 0x7, 0xb56, 0x100000001, 0xffff, 0x8e, 0x5, 0x3f, 0x6, 0x325f, 0x7, 0x2]}) syz_open_dev$usbmon(&(0x7f0000000600), 0x130356e9, 0x200400) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) 12:18:23 executing program 7: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@loopback, @rand_addr, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)='vxcan1\x00', 0x7, 0x0, 0x8}) getuid() r1 = getuid() getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x61e6130302b4eaf7}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1d84}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}}, 0x405) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffff, 0x2, 0x2, 0x3, 0x9, 0x800]}, &(0x7f0000000380)=0x78) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) setreuid(r1, r3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl0\x00', r0, 0x4, 0x8, 0x0, 0xfff, 0x3f, @loopback, @dev={0xfe, 0x80, '\x00', 0xf}, 0xf880, 0x10, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', r4, 0xd06a61b94fd45f12, 0x5, 0x20, 0x4, 0x40, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x700, 0x6, 0x4}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000680)=0x2, 0x4) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000006c0)={@multicast1, @local, @multicast1}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', r2, 0x2f, 0x2, 0x3a, 0x1, 0x61, @empty, @mcast1, 0x8, 0x8000, 0x8001, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', r4, 0x2f, 0x9, 0x3, 0x8bec, 0x0, @private0, @mcast1, 0x80, 0x8000, 0x2, 0x930b}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@local, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000009c0)=0xe8) [ 111.612815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.620510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.647826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.659761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.665812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.696080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.701093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.704304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.724974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.729867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.741811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.749353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.763864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.786306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.794778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.804230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.829001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.831431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.841812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.845781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.853458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.857113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.860586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.864159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.866476] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.870998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.875061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.875578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.879886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.889159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.892656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.896058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.898443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.913917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.917511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.932810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.942917] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.955224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.964188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.984086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.694301] Bluetooth: hci0: command tx timeout [ 113.758123] Bluetooth: hci1: command tx timeout [ 113.949728] Bluetooth: hci2: command tx timeout [ 114.013832] Bluetooth: hci5: command tx timeout [ 114.013910] Bluetooth: hci4: command tx timeout [ 114.015271] Bluetooth: hci3: command tx timeout [ 114.077853] Bluetooth: hci6: command tx timeout [ 114.142099] Bluetooth: hci7: command tx timeout [ 115.743061] Bluetooth: hci0: command tx timeout [ 115.805678] Bluetooth: hci1: command tx timeout [ 115.998587] Bluetooth: hci2: command tx timeout [ 116.062054] Bluetooth: hci3: command tx timeout [ 116.062566] Bluetooth: hci4: command tx timeout [ 116.063153] Bluetooth: hci5: command tx timeout [ 116.125901] Bluetooth: hci6: command tx timeout [ 116.191582] Bluetooth: hci7: command tx timeout [ 117.790873] Bluetooth: hci0: command tx timeout [ 117.854595] Bluetooth: hci1: command tx timeout [ 118.045600] Bluetooth: hci2: command tx timeout [ 118.109610] Bluetooth: hci5: command tx timeout [ 118.109641] Bluetooth: hci4: command tx timeout [ 118.110610] Bluetooth: hci3: command tx timeout [ 118.173741] Bluetooth: hci6: command tx timeout [ 118.238609] Bluetooth: hci7: command tx timeout [ 119.838586] Bluetooth: hci0: command tx timeout [ 119.902617] Bluetooth: hci1: command tx timeout [ 120.093639] Bluetooth: hci2: command tx timeout [ 120.157682] Bluetooth: hci3: command tx timeout [ 120.158139] Bluetooth: hci5: command tx timeout [ 120.158624] Bluetooth: hci4: command tx timeout [ 120.222571] Bluetooth: hci6: command tx timeout [ 120.285601] Bluetooth: hci7: command tx timeout [ 171.879330] syz-executor.1 (282) used greatest stack depth: 24912 bytes left [ 171.898654] syz-executor.2 (283) used greatest stack depth: 24896 bytes left [ 174.581636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.586762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.592381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.598458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.603443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.773740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.777997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.781476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.788412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.790982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.795308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.800282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.803962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.840811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.852969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.855926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.855946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.862589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.867205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.869475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.871324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.882999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.883785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.896841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.907485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.928419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.936057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.939179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.969033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.980592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.076448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.079017] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.080336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.106506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.111209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.116112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.129800] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.142724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.197789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.202685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.670644] Bluetooth: hci0: command tx timeout [ 176.861722] Bluetooth: hci1: command tx timeout [ 176.989653] Bluetooth: hci4: command tx timeout [ 176.989800] Bluetooth: hci2: command tx timeout [ 176.990986] Bluetooth: hci3: command tx timeout [ 177.053748] Bluetooth: hci5: command tx timeout [ 177.181683] Bluetooth: hci6: command tx timeout [ 177.310974] Bluetooth: hci7: command tx timeout [ 178.718779] Bluetooth: hci0: command tx timeout [ 178.911611] Bluetooth: hci1: command tx timeout [ 179.037617] Bluetooth: hci2: command tx timeout [ 179.038596] Bluetooth: hci3: command tx timeout [ 179.038681] Bluetooth: hci4: command tx timeout [ 179.101676] Bluetooth: hci5: command tx timeout [ 179.231742] Bluetooth: hci6: command tx timeout [ 179.357751] Bluetooth: hci7: command tx timeout [ 180.765718] Bluetooth: hci0: command tx timeout [ 180.957703] Bluetooth: hci1: command tx timeout [ 181.085608] Bluetooth: hci4: command tx timeout [ 181.086122] Bluetooth: hci3: command tx timeout [ 181.086613] Bluetooth: hci2: command tx timeout [ 181.149851] Bluetooth: hci5: command tx timeout [ 181.277612] Bluetooth: hci6: command tx timeout [ 181.405597] Bluetooth: hci7: command tx timeout [ 182.815757] Bluetooth: hci0: command tx timeout [ 183.006881] Bluetooth: hci1: command tx timeout [ 183.135552] Bluetooth: hci2: command tx timeout [ 183.136034] Bluetooth: hci3: command tx timeout [ 183.136471] Bluetooth: hci4: command tx timeout [ 183.197929] Bluetooth: hci5: command tx timeout [ 183.325980] Bluetooth: hci6: command tx timeout [ 183.453671] Bluetooth: hci7: command tx timeout [ 236.714352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.720230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.727504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.739376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.750483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.862964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.867114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.870963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.886033] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.895050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.967340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.970903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.975767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.982840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.984099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.988967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.995410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.005231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.011022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.034659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.038883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.042305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.047078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.056387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.065451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.115823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.124423] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.125997] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.129594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.141935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.146734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.149357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.150067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.152473] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.156060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.157886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.159981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.178709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.180255] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.182863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.814689] Bluetooth: hci0: command tx timeout [ 238.942670] Bluetooth: hci1: command tx timeout [ 239.069836] Bluetooth: hci2: command tx timeout [ 239.134720] Bluetooth: hci4: command tx timeout [ 239.197638] Bluetooth: hci3: command tx timeout [ 239.197667] Bluetooth: hci6: command tx timeout [ 239.261780] Bluetooth: hci5: command tx timeout [ 239.261818] Bluetooth: hci7: command tx timeout [ 240.862555] Bluetooth: hci0: command tx timeout [ 240.991726] Bluetooth: hci1: command tx timeout [ 241.117807] Bluetooth: hci2: command tx timeout [ 241.183563] Bluetooth: hci4: command tx timeout [ 241.245688] Bluetooth: hci3: command tx timeout [ 241.246185] Bluetooth: hci6: command tx timeout [ 241.311004] Bluetooth: hci5: command tx timeout [ 241.311489] Bluetooth: hci7: command tx timeout [ 242.911570] Bluetooth: hci0: command tx timeout [ 243.037723] Bluetooth: hci1: command tx timeout [ 243.165890] Bluetooth: hci2: command tx timeout [ 243.229848] Bluetooth: hci4: command tx timeout [ 243.293929] Bluetooth: hci6: command tx timeout [ 243.294421] Bluetooth: hci3: command tx timeout [ 243.358908] Bluetooth: hci7: command tx timeout [ 243.359381] Bluetooth: hci5: command tx timeout [ 244.957802] Bluetooth: hci0: command tx timeout [ 245.086567] Bluetooth: hci1: command tx timeout [ 245.213608] Bluetooth: hci2: command tx timeout [ 245.277976] Bluetooth: hci4: command tx timeout [ 245.341624] Bluetooth: hci3: command tx timeout [ 245.342112] Bluetooth: hci6: command tx timeout [ 245.405803] Bluetooth: hci7: command tx timeout [ 245.406280] Bluetooth: hci5: command tx timeout [ 297.303194] syz-executor.4 (5118) used greatest stack depth: 24544 bytes left [ 299.259230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.263012] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.267086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.272227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.275418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.277916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.286385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.289841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.297174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.298743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.320009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.325860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.332876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.353271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.361038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.471626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.485730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.490188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.492870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.506094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.508157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.510283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.513009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.525076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.538259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.597959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.604159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.608108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.620292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.624299] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.627139] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.637910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.638104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.646057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.646284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.649045] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.652269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.663168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.689896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.699251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.343592] Bluetooth: hci0: command tx timeout [ 301.344332] Bluetooth: hci1: command tx timeout [ 301.406574] Bluetooth: hci2: command tx timeout [ 301.598867] Bluetooth: hci4: command tx timeout [ 301.599828] Bluetooth: hci3: command tx timeout [ 301.725910] Bluetooth: hci7: command tx timeout [ 301.789632] Bluetooth: hci6: command tx timeout [ 301.790235] Bluetooth: hci5: command tx timeout [ 303.390567] Bluetooth: hci1: command tx timeout [ 303.391068] Bluetooth: hci0: command tx timeout [ 303.453592] Bluetooth: hci2: command tx timeout [ 303.645612] Bluetooth: hci4: command tx timeout [ 303.646107] Bluetooth: hci3: command tx timeout [ 303.773644] Bluetooth: hci7: command tx timeout [ 303.839710] Bluetooth: hci6: command tx timeout [ 303.840159] Bluetooth: hci5: command tx timeout [ 305.437656] Bluetooth: hci0: command tx timeout [ 305.438146] Bluetooth: hci1: command tx timeout [ 305.502536] Bluetooth: hci2: command tx timeout [ 305.693784] Bluetooth: hci3: command tx timeout [ 305.694283] Bluetooth: hci4: command tx timeout [ 305.821611] Bluetooth: hci7: command tx timeout [ 305.885926] Bluetooth: hci5: command tx timeout [ 305.886413] Bluetooth: hci6: command tx timeout [ 307.485667] Bluetooth: hci1: command tx timeout [ 307.486144] Bluetooth: hci0: command tx timeout [ 307.549593] Bluetooth: hci2: command tx timeout [ 307.741888] Bluetooth: hci4: command tx timeout [ 307.742371] Bluetooth: hci3: command tx timeout [ 307.869608] Bluetooth: hci7: command tx timeout [ 307.933625] Bluetooth: hci6: command tx timeout [ 307.934060] Bluetooth: hci5: command tx timeout [ 361.714783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.719189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.724909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.737088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.743468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.964194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.967186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.969469] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.977626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.985851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.051059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.058418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.067191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.082608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.086973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.182379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.186887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.191287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.239261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.245955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.444860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.452917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.455182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.460672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.466157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.533977] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.538994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.544071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.551075] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.560814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.567986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.578618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.615844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.618125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.672430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.708895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.766080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.785193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.792775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.799098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.805606] Bluetooth: hci0: command tx timeout [ 364.061611] Bluetooth: hci1: command tx timeout [ 364.317783] Bluetooth: hci4: command tx timeout [ 364.317926] Bluetooth: hci2: command tx timeout [ 364.574795] Bluetooth: hci3: command tx timeout [ 364.701606] Bluetooth: hci6: command tx timeout [ 364.893676] Bluetooth: hci5: command tx timeout [ 364.957605] Bluetooth: hci7: command tx timeout [ 365.853682] Bluetooth: hci0: command tx timeout [ 366.109826] Bluetooth: hci1: command tx timeout [ 366.365645] Bluetooth: hci4: command tx timeout [ 366.366934] Bluetooth: hci2: command tx timeout [ 366.623317] Bluetooth: hci3: command tx timeout [ 366.750876] Bluetooth: hci6: command tx timeout [ 366.942773] Bluetooth: hci5: command tx timeout [ 367.006833] Bluetooth: hci7: command tx timeout [ 367.901592] Bluetooth: hci0: command tx timeout [ 368.158996] Bluetooth: hci1: command tx timeout [ 368.413835] Bluetooth: hci2: command tx timeout [ 368.413918] Bluetooth: hci4: command tx timeout [ 368.669623] Bluetooth: hci3: command tx timeout [ 368.798602] Bluetooth: hci6: command tx timeout [ 368.992841] Bluetooth: hci5: command tx timeout [ 369.053806] Bluetooth: hci7: command tx timeout [ 369.952565] Bluetooth: hci0: command tx timeout [ 370.208547] Bluetooth: hci1: command tx timeout [ 370.461863] Bluetooth: hci4: command tx timeout [ 370.463680] Bluetooth: hci2: command tx timeout [ 370.717770] Bluetooth: hci3: command tx timeout [ 370.845823] Bluetooth: hci6: command tx timeout [ 371.037668] Bluetooth: hci5: command tx timeout [ 371.102579] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:23:25 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff110069e6fa7 RCX=0000000000000002 RDX=0000000000000000 RSI=ffff888008c647c0 RDI=ffff8880173483fc RBP=ffff888008c647c0 RSP=ffff888034f37c90 R8 =0000000000000000 R9 =fffff9400011dbe0 R10=0000000000000000 R11=0000000000000001 R12=ffffea00008edf00 R13=0000000000000cc0 R14=0000000000000001 R15=ffffffff818cfb90 RIP=ffffffff81b0af1d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2253cd0540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2254182130 CR3=0000000032c26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000001 RBX=ffff88802fbb7e00 RCX=0000000000000001 RDX=ffff88802fbb8000 RSI=ffff88802fbb7de0 RDI=ffff88802fbb7848 RBP=ffff88802fbb0000 RSP=ffff88802fbb77c8 R8 =0000000000000001 R9 =ffff88802fbb7878 R10=000000000003b6bd R11=0000000000007cbf R12=ffff88802fbb7801 R13=ffff88802fbb7880 R14=ffff88802fbb7de0 R15=ffff88802fbb7838 RIP=ffffffff8135553f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe28f9a1dc8 CR3=000000000dd4c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff000000000000000000000000 XMM01=62696c00312e312e6f732e6f74707972 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000004700352e32 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000