Warning: Permanently added '[localhost]:54448' (ECDSA) to the list of known hosts. 2025/06/05 13:38:28 fuzzer started 2025/06/05 13:38:29 dialing manager at localhost:42669 syzkaller login: [ 103.811209] cgroup: Unknown subsys name 'net' [ 103.988416] cgroup: Unknown subsys name 'cpuset' [ 104.069849] cgroup: Unknown subsys name 'rlimit' 2025/06/05 13:38:51 syscalls: 200 2025/06/05 13:38:51 code coverage: enabled 2025/06/05 13:38:51 comparison tracing: enabled 2025/06/05 13:38:51 extra coverage: enabled 2025/06/05 13:38:51 setuid sandbox: enabled 2025/06/05 13:38:51 namespace sandbox: enabled 2025/06/05 13:38:51 Android sandbox: enabled 2025/06/05 13:38:51 fault injection: enabled 2025/06/05 13:38:51 leak checking: enabled 2025/06/05 13:38:51 net packet injection: enabled 2025/06/05 13:38:51 net device setup: enabled 2025/06/05 13:38:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/05 13:38:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/05 13:38:51 USB emulation: enabled 2025/06/05 13:38:51 hci packet injection: enabled 2025/06/05 13:38:51 wifi device emulation: enabled 2025/06/05 13:38:51 802.15.4 emulation: enabled 2025/06/05 13:38:51 fetching corpus: 0, signal 0/0 (executing program) 2025/06/05 13:38:53 starting 8 fuzzer processes 13:38:53 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x4c4c, 0xfffffffffffffffe, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x7, 0x0, 0x4) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r3 = syz_io_uring_complete(r2) select(0x40, &(0x7f0000000100)={0x6, 0x7, 0xffffffff, 0xffffffff, 0x1000, 0x30, 0x0, 0x36b543e}, &(0x7f0000000140)={0x9, 0x8, 0x9, 0x3, 0x12b, 0x200, 0x2b3, 0x14b}, &(0x7f0000000180)={0x4, 0x7f, 0x1, 0x0, 0x9, 0x85, 0xff, 0x8}, &(0x7f00000001c0)={0x77359400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) recvmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000240)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000480)=""/180, 0xb4}], 0x4, &(0x7f0000000580)=""/174, 0xae}, 0x3}, {{&(0x7f0000000640)=@pppoe, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/61, 0x3d}], 0x2, &(0x7f00000007c0)=""/136, 0x88}, 0x3}], 0x2, 0x40000000, &(0x7f0000000900)={0x77359400}) io_setup(0x9, &(0x7f0000000940)=0x0) io_pgetevents(r6, 0x8, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0xffff]}, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000a40)=0x200, 0x0, 0x4) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x810, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000084) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000c00), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001480)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f0000000d40)={0x6f4, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b}}, {0x8, 0x7, 0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6bfa, 0x0, 0x1, 0x401}, {0x0, 0x5, 0x7f, 0x265}, {0x20, 0x1, 0x2}, {0xe875, 0x3f, 0xb1, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}]}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13:38:53 executing program 1: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4acd, 0x737b, 0xac1, 0xb91, 0x3, "8a3825e13f5f15c97218d4b3d696a3c6d7ddb6", 0x2, 0xccf8}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x80, 0x8, 0x3, 0x1, 0x1f, "ab2d314358aa07f83132800d2e03197b1e5bfa", 0x400, 0xff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x220002, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x22}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff24}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff26b}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f00000002c0)) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x20) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000300)) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000340)=0x4) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000780)={0x3, 0x1, 0x18, 0x20, 0x56, &(0x7f0000000380)}) r8 = ioctl$TIOCGPTPEER(r5, 0x5441, 0xfffffffffffffff9) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000bc0)={0x2, 0x1, 0x14, 0x1d, 0xe6, &(0x7f00000007c0)="8f7a70298cd3b3a4531a8645f60e5fb81d641a3f530794ef6b008f84c83d84349522992ec4e240d01d9420f2cc6d14f64cc5b75ce3a02bf050288a4b268e0c9cbf1bdb44ac41a0c64436fcbafda59acca488e0c41f792e381681e818752ab069b0560ab5a906ffbcbdb3601437b6d6e4ec5331dfa7e7f60fd1302eb9690299da7f2fd2a9e105d6220219a9ca223562de21547da1166de9c4551efd0f41e8e791be2747218b0fa61c531119e7b22313bc0fea5b03b7fcb7251386d8854b942891a57c57be284c4e451061758bd3b026b71b9bdd6c237d51e1a89f167a26b067f2b4e165bb1b5522585cf4dfa108ba67dde534acc61a5a1fd94cc120a3017d92215e0dd0cadd3b09aa3720a698fd1744db9b0b98cc23328350fff94445c42e1b562e8e892db6518c42c2eeaa37271e270a92196a419cbe55663203e57dd1cddc904cf391c3a148639a53815d7518efb53c2275c6a30fc1604e32ddf8365344d48ca180e3b5991300be08976241a2694a68d7b7a237cefa2ed2345eed82532546bb6a16a39a28b58b9fcb9ead110cb0b0a6388652ba49c5503dd0aa1103d992a080543e266e741c44bbc4f25f9ee6916940af49143c4d0d0356f47cedb4f56aea7ac9f64c0c506b37ec9c98a1dc7dedeb1e25954940d2ec9651c11fe8518c93a7bb66ededd36fff090a547fbb1d215859c5c8bd98c08ba1056d9a65f05283929456d09dac5daa47ec647c5c0d7a9d6073e4102ef92abb05a4b64c84bdb68100dde95fd5144ff2e38aee5ca7a7ea438b5209b1f0372afb29dc0a351ad67d82f8ce76630107ce222e5f57a5f6c368fc2f4c10b4e99f8974a1788b0eb8fe688cf07045b6929e5276c266b469b923ee44b2fdf1f0bbbf36bc2d026bbf971c2b7f279ddf8b70e666190fca4b675551b9ef671b93812273863a54a5dcc856e9d39f194d6fc113cafffbe98c9573cc640fa9735f4508340345e8a3555b3dac0bd5c897fb1a96bafebe424cc9c1095490246acc4ed7cdfad6f4f4467b081dca520adf16c76b4df83e2a45a80f996a6aea0b87ef72c810e38f034059c45f29528ffc0608e918ed0fdf23cf31bd587eb44da375974ea4402ba06459616d00eb55e1580ec6f1196168ec2276094bb518c20f9167a7b8f9853d4238cd43c5338d7322cd9baa7e07ea16ac53801e8138ff15bcde38e9d5b3aa10c722294207ac19c699c5e58e50ab1d84b37cc47d4cb0abb551fb80d0cb0c504e5ec285fa1366adaefee71d60092c807ae876884970c55969cf434aa63230f9f5b182256f75fc4f4cd22387ccf7688612e514cf9eeef85e25cb02c355566fe587b7d9c05c38bf736b03b7537dff01c5ebe99c59e8625ef29feeae3e1200d3d139f1cdb8701ffd1ff7d6e34ab187b9ed7194ffa980e646a7cbdb5fba8fbdfff2a0b288f096e5df437c6ec39e276fc6"}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000c00)) 13:38:53 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20) syz_io_uring_setup(0xa60, &(0x7f0000000080)={0x0, 0xc80c, 0x2, 0x3, 0x20d, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x9}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4dc9d879e527"}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c8993622be52112932adf5dcd6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "23c0fac5"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @key_params=[@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xc, 0x4, "bdf6428f9d35379e"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a9fedf90573f1d9586925713da"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57b4cfe825"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9aa858cf231f4e3303f004a01a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "65a8ce1095"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x138}, 0x1, 0x0, 0x0, 0x200408c5}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x40c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x13, 0x3, "0a4771853c73bc90caf8421a34d922"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x83, 0x3, "60387cf5f113aba0a2ec8e2e1575a1989bdf963b1d87d76d4c744a6ae8c118a0600aa4a24a8fd3559d29305159d22b8c363de4bd355aaf8d4a324ae770de020ce4d2db4a413910b2c830bfe8b927fd80c9e6db03e68fa061d4c7cc80f6cc7c2c75be80cd247ab78c3ddc35d7431e7558a6ce763f2501674ddbbf355b05b156"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x71, 0x3, "3bd5f0d6336952cee04cab0ddf32cb9c1a7d23bde0294e8239138add6e3200cf21d19f295310fb25bd3d3dfee0c4f211e961391248bd075ddc2ed3e23d148fc51eeb291baf8a4566927399f5bfcdd929826e57e1c4a24ad55377cbaabe0e2ae77b4a795a06977c8b90a638c9e6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "0fcb6f1f3f1daa4505d0140a8325b3b9dd98d78c1b77dde93e729f014d386f"}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2ab}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x486}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x60f}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x136}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x594c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf633}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe179}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b221795}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37c000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4}, 0x84) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa49}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2056}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040010}, 0x8044) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1dc, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa3c}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffbed}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6d65}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x404e804c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x179c000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x891) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00), 0x80, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000d40)={0x6, 0x3, 0x71f1, 0x1, 0x4, "41aa90996d0bad365f12cb0a11dceb870a3248", 0x8, 0x5}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000ec0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/75, 0x4b, 0x1, &(0x7f0000000e00)=""/151, 0x97}, &(0x7f0000000f00)=0x40) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x80, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2506dc0516"}]]}, 0x80}}, 0x4) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4, 0x40) r4 = fsmount(r3, 0x1, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r6) 13:38:53 executing program 3: prctl$PR_SET_FP_MODE(0x2d, 0x1) sched_getparam(0x0, &(0x7f0000000000)) pause() ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x1f, 0x118, 0x4, 0xf334, 0x100, 0x7}) prctl$PR_SET_FP_MODE(0x2d, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000000) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x3, 0x20, 0x197, &(0x7f0000000100)}) r2 = eventfd(0x11a) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000540)) read$eventfd(r2, &(0x7f0000000580), 0x8) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000005c0)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000600)=0x1000) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000640)) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000700)={0x3, &(0x7f00000006c0)=[{0xd88, 0x1, 0x2, 0x1}, {0x9, 0xfc, 0x3, 0xffffffff}, {0x800, 0x0, 0x6, 0x7}]}) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x2004) [ 127.797776] audit: type=1400 audit(1749130733.443:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:38:53 executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x20100) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000040)=""/133) r1 = syz_io_uring_complete(0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000100)=""/108) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x94913, r1, 0x8000000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='/dev/hidraw#\x00', 0x0, r1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)=@buf={0xdf, &(0x7f00000001c0)="e3d8e071d4b5c2d827c87b64b2f10403ef8d18c5be84e89282c4c247615300a174fa2e44bd459c2ce5d776107be10ab86e147842c090ed3c89264a9419c79a6d0c2fa6d2493c3bf7d1311d607a1ecc747d3e8e533c63c64e93e8d69413f4c67812aa51ce490df23d1db228fd2d15f5a9a89fb410f7a86464becc320a0996aead2c8a9cb1d5f48723c31ab0d4d4b4b257b061d929093ee32afb71cd8be4be5ee21b8947674f6563e1dc410f56da8e0b807c0cff23ba5d2419e5c96a240738ee1eead87a837890d5934461117976a1f4ee10193a7b025fef55c22c76b605e672"}) r3 = fsmount(r1, 0x0, 0xe) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='/dev/hidraw#\x00', 0x0, r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380)="2036d4e4b798fb22c29b5b5bc5dd234e26202e2ff400057b0ab82669c6488b151b7e8d353536424878b6dc58f28cc86cd5c2bf1d88cc2473c2fbe38df902dd14eb5a7855dfa192d7ce0822e7b3176a610af7e740", 0x54, r1}, 0x68) r5 = fsmount(r3, 0x849acba0852af47d, 0x70) fsmount(r5, 0x0, 0x174) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000480)={0x1000000, 0x80}) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfaa) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000004c0)={0x1000, 0x5, 0x0, 0x3ff, 0x81, 0x20}) r7 = syz_io_uring_complete(r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/111, 0x6f, 0x1, &(0x7f0000000580)=""/29, 0x1d}, &(0x7f0000000600)=0x40) syz_genetlink_get_family_id$team(&(0x7f0000000640), r5) remap_file_pages(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000000, 0x3f, 0x1000) 13:38:53 executing program 6: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000500)={0x3, 0x0, 0x1f, 0x3, 0xf0, &(0x7f0000000100)}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000540)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000580)={0x80000000, 0x9, 0x40, 0x5, 0x8, "4b8fd73dc62dd7eb901abd082e769979fd1ea6", 0x400, 0x101}) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000009c0)={0x2, 0x1, 0x1b, 0x3, 0x15a, &(0x7f00000005c0)="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"}) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000a00)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x400000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000a80)=""/40) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000ac0)=0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000b00)) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000b40)) 13:38:53 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe0001, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = syz_io_uring_setup(0x1897, &(0x7f0000000080)={0x0, 0xd90c, 0x8, 0x2, 0x3df}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f00000002c0)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}, 0x7) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x1, 0x1, 0x1}, 0x400) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000003c0)={0xc0, "f866825d9a87aaa08b960ca0efcbd82ab689bc5726d296612194c5f0eeff47264fabc4b69c3a7c13c391a94278251cb1dd545ff5af4bb7c7504f670090c69c88"}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40010) io_uring_setup(0x7d8f, &(0x7f0000000580)={0x0, 0xd23b, 0x1, 0x0, 0x146}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x40500, 0x0) get_mempolicy(&(0x7f0000000640), &(0x7f0000000680), 0x7, &(0x7f0000ffb000/0x4000)=nil, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0ad3ff2ca230"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x2, 0x0) 13:38:53 executing program 5: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) sigaltstack(&(0x7f0000fed000/0x13000)=nil, &(0x7f0000000080)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000000c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000180)="ce630737f98da26ab1168bdb3ae65fee73d35b98e3c2b641513bd7dbc229ff01a6119bfb4a8000aca2cfc43a3b617b41cd7ffa5ba295b3704e9bdffcd42c1ef6d70efe906e6eb953c0107288667fceb00b1b65fc2c5d51951b72ccbdcfc4d371afa88a7ca003fbf93169b8e02b4f89d8695782698ededab7b9ee0212b02fd3afd1694710d90d56566fc3f6fb42ea4483a55019dbb76df51d4a6d0aa01f5d22340b03ef159ae1cd36dac1cea244f152fd617700e2cf490ad6fef97dffe21044dcdf46cbc8693e958fe580b37f5738b667fd32d108dca524f0e4ad", 0xda}, 0x68) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000300)=""/89) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000380)) remap_file_pages(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x2000004, 0x5, 0x40) get_mempolicy(&(0x7f00000003c0), &(0x7f0000000400), 0xac8, &(0x7f0000ff9000/0x3000)=nil, 0x3) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000440)) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) r1 = io_uring_setup(0x4b9d, &(0x7f0000000480)={0x0, 0x4cc4, 0x8, 0x0, 0x11f}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x8000000) [ 129.231889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.234230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.235643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.252652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.261623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.356621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.359169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.373345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.376328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.381830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.382962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.386429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.387357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.389250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.390692] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.393520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.402589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.406093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.406197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.424045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.444370] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.450227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.452241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.456033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.457586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.461478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.468255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.469077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.471559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.474997] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.483120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.487313] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.491061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.492883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.499145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.514164] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.515091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.523026] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.528721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.530043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.324443] Bluetooth: hci0: command tx timeout [ 131.452811] Bluetooth: hci3: command tx timeout [ 131.453425] Bluetooth: hci1: command tx timeout [ 131.516097] Bluetooth: hci2: command tx timeout [ 131.580422] Bluetooth: hci4: command tx timeout [ 131.582149] Bluetooth: hci5: command tx timeout [ 131.582818] Bluetooth: hci6: command tx timeout [ 131.643808] Bluetooth: hci7: command tx timeout [ 133.371820] Bluetooth: hci0: command tx timeout [ 133.500729] Bluetooth: hci1: command tx timeout [ 133.501264] Bluetooth: hci3: command tx timeout [ 133.563926] Bluetooth: hci2: command tx timeout [ 133.627920] Bluetooth: hci5: command tx timeout [ 133.628496] Bluetooth: hci6: command tx timeout [ 133.630740] Bluetooth: hci4: command tx timeout [ 133.693088] Bluetooth: hci7: command tx timeout [ 135.421853] Bluetooth: hci0: command tx timeout [ 135.548216] Bluetooth: hci1: command tx timeout [ 135.548886] Bluetooth: hci3: command tx timeout [ 135.612421] Bluetooth: hci2: command tx timeout [ 135.675749] Bluetooth: hci6: command tx timeout [ 135.677282] Bluetooth: hci4: command tx timeout [ 135.678207] Bluetooth: hci5: command tx timeout [ 135.740166] Bluetooth: hci7: command tx timeout [ 137.467771] Bluetooth: hci0: command tx timeout [ 137.595799] Bluetooth: hci3: command tx timeout [ 137.596370] Bluetooth: hci1: command tx timeout [ 137.660058] Bluetooth: hci2: command tx timeout [ 137.724122] Bluetooth: hci5: command tx timeout [ 137.724756] Bluetooth: hci4: command tx timeout [ 137.725231] Bluetooth: hci6: command tx timeout [ 137.787968] Bluetooth: hci7: command tx timeout [ 192.121193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.122802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.126957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.131572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.145583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.178345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.184945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.186368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.192928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.203285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.219989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.221440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.239470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.251213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.252911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.254835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.258069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.262064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.263162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.266130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.267503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.269570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.272572] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.274042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.276963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.279235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.281967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.284244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.292191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.293330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.302137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.306536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.307034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.308490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.321106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.322477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.327626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.329314] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.349394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.351493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.236210] Bluetooth: hci0: command tx timeout [ 194.299808] Bluetooth: hci3: command tx timeout [ 194.300422] Bluetooth: hci1: command tx timeout [ 194.363798] Bluetooth: hci7: command tx timeout [ 194.364471] Bluetooth: hci6: command tx timeout [ 194.428194] Bluetooth: hci5: command tx timeout [ 194.428871] Bluetooth: hci2: command tx timeout [ 194.429423] Bluetooth: hci4: command tx timeout [ 196.284307] Bluetooth: hci0: command tx timeout [ 196.347990] Bluetooth: hci1: command tx timeout [ 196.348509] Bluetooth: hci3: command tx timeout [ 196.412083] Bluetooth: hci6: command tx timeout [ 196.412585] Bluetooth: hci7: command tx timeout [ 196.476708] Bluetooth: hci4: command tx timeout [ 196.477213] Bluetooth: hci2: command tx timeout [ 196.477738] Bluetooth: hci5: command tx timeout [ 198.332048] Bluetooth: hci0: command tx timeout [ 198.395797] Bluetooth: hci1: command tx timeout [ 198.396303] Bluetooth: hci3: command tx timeout [ 198.460515] Bluetooth: hci7: command tx timeout [ 198.461099] Bluetooth: hci6: command tx timeout [ 198.524200] Bluetooth: hci5: command tx timeout [ 198.524986] Bluetooth: hci2: command tx timeout [ 198.525469] Bluetooth: hci4: command tx timeout [ 200.379753] Bluetooth: hci0: command tx timeout [ 200.446215] Bluetooth: hci3: command tx timeout [ 200.448009] Bluetooth: hci1: command tx timeout [ 200.508080] Bluetooth: hci6: command tx timeout [ 200.508578] Bluetooth: hci7: command tx timeout [ 200.572029] Bluetooth: hci5: command tx timeout [ 200.572537] Bluetooth: hci2: command tx timeout [ 200.573087] Bluetooth: hci4: command tx timeout [ 254.570476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.573277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.574888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.586193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.595557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.627248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.629053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.633919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.640381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.647106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.747879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.751535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.754873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.761082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.770231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.802058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.810293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.814385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.817420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.827121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.831939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.870996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.872795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.878270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.880537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.951483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.959007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.960993] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.961453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.965043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.968098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.974362] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.977011] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.988151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.002593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.005913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.008225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.028409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.037069] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.045996] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.636912] Bluetooth: hci0: command tx timeout [ 256.700248] Bluetooth: hci1: command tx timeout [ 256.827771] Bluetooth: hci2: command tx timeout [ 256.891772] Bluetooth: hci3: command tx timeout [ 256.956082] Bluetooth: hci4: command tx timeout [ 257.083960] Bluetooth: hci5: command tx timeout [ 257.084617] Bluetooth: hci7: command tx timeout [ 257.148926] Bluetooth: hci6: command tx timeout [ 258.684157] Bluetooth: hci0: command tx timeout [ 258.748781] Bluetooth: hci1: command tx timeout [ 258.877188] Bluetooth: hci2: command tx timeout [ 258.940116] Bluetooth: hci3: command tx timeout [ 259.003719] Bluetooth: hci4: command tx timeout [ 259.132797] Bluetooth: hci7: command tx timeout [ 259.134397] Bluetooth: hci5: command tx timeout [ 259.195747] Bluetooth: hci6: command tx timeout [ 260.733136] Bluetooth: hci0: command tx timeout [ 260.796736] Bluetooth: hci1: command tx timeout [ 260.925164] Bluetooth: hci2: command tx timeout [ 260.990740] Bluetooth: hci3: command tx timeout [ 261.051724] Bluetooth: hci4: command tx timeout [ 261.181095] Bluetooth: hci7: command tx timeout [ 261.182822] Bluetooth: hci5: command tx timeout [ 261.245723] Bluetooth: hci6: command tx timeout [ 262.780998] Bluetooth: hci0: command tx timeout [ 262.844974] Bluetooth: hci1: command tx timeout [ 262.971751] Bluetooth: hci2: command tx timeout [ 263.036100] Bluetooth: hci3: command tx timeout [ 263.099765] Bluetooth: hci4: command tx timeout [ 263.228792] Bluetooth: hci5: command tx timeout [ 263.230131] Bluetooth: hci7: command tx timeout [ 263.293065] Bluetooth: hci6: command tx timeout [ 317.265554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.267504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.269357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.277402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.284096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.613356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.618906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.622106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.623862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.630891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.632019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.634570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.636391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.639940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.648004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.668596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.682597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.686846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.723984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.728579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.731576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.733244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.736652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.738283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.741716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.776241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.777238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.785118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.791438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.800409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.802568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.803632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.804703] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.811826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.814386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.820269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.821486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.822472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.826273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.830400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.357756] Bluetooth: hci0: command tx timeout [ 319.676075] Bluetooth: hci2: command tx timeout [ 319.676094] Bluetooth: hci1: command tx timeout [ 319.868319] Bluetooth: hci4: command tx timeout [ 319.868401] Bluetooth: hci3: command tx timeout [ 319.932248] Bluetooth: hci5: command tx timeout [ 319.996413] Bluetooth: hci7: command tx timeout [ 320.059761] Bluetooth: hci6: command tx timeout [ 321.403954] Bluetooth: hci0: command tx timeout [ 321.724013] Bluetooth: hci1: command tx timeout [ 321.724102] Bluetooth: hci2: command tx timeout [ 321.916000] Bluetooth: hci4: command tx timeout [ 321.916755] Bluetooth: hci3: command tx timeout [ 321.979796] Bluetooth: hci5: command tx timeout [ 322.044837] Bluetooth: hci7: command tx timeout [ 322.107890] Bluetooth: hci6: command tx timeout [ 323.453861] Bluetooth: hci0: command tx timeout [ 323.771839] Bluetooth: hci1: command tx timeout [ 323.771939] Bluetooth: hci2: command tx timeout [ 323.963809] Bluetooth: hci3: command tx timeout [ 323.964332] Bluetooth: hci4: command tx timeout [ 324.027750] Bluetooth: hci5: command tx timeout [ 324.092018] Bluetooth: hci7: command tx timeout [ 324.156136] Bluetooth: hci6: command tx timeout [ 325.499965] Bluetooth: hci0: command tx timeout [ 325.819993] Bluetooth: hci1: command tx timeout [ 325.822711] Bluetooth: hci2: command tx timeout [ 326.011868] Bluetooth: hci4: command tx timeout [ 326.011894] Bluetooth: hci3: command tx timeout [ 326.076742] Bluetooth: hci5: command tx timeout [ 326.140173] Bluetooth: hci7: command tx timeout [ 326.204719] Bluetooth: hci6: command tx timeout [ 380.086818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.088736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.090819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.093975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.112834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.321335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.323861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.325192] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.328759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.332231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.368370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.371379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.374333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.378539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.381889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.428211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.440945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.460536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.461096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.471468] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.501498] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.506014] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.510861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.516266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.529188] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.531348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.540831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.544907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.547182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.551082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.553736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.557412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.564084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.566279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.588457] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.595852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.599065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.609265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.609311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.630368] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.140811] Bluetooth: hci0: command tx timeout [ 382.395748] Bluetooth: hci1: command tx timeout [ 382.461139] Bluetooth: hci2: command tx timeout [ 382.652001] Bluetooth: hci3: command tx timeout [ 382.716077] Bluetooth: hci4: command tx timeout [ 382.716338] Bluetooth: hci5: command tx timeout [ 382.717784] Bluetooth: hci6: command tx timeout [ 382.780743] Bluetooth: hci7: command tx timeout [ 384.190751] Bluetooth: hci0: command tx timeout [ 384.443940] Bluetooth: hci1: command tx timeout [ 384.514102] Bluetooth: hci2: command tx timeout [ 384.700744] Bluetooth: hci3: command tx timeout [ 384.763844] Bluetooth: hci4: command tx timeout [ 384.764360] Bluetooth: hci5: command tx timeout [ 384.764891] Bluetooth: hci6: command tx timeout [ 384.828074] Bluetooth: hci7: command tx timeout [ 386.236056] Bluetooth: hci0: command tx timeout [ 386.492795] Bluetooth: hci1: command tx timeout [ 386.556099] Bluetooth: hci2: command tx timeout [ 386.747845] Bluetooth: hci3: command tx timeout [ 386.811793] Bluetooth: hci4: command tx timeout [ 386.812322] Bluetooth: hci6: command tx timeout [ 386.813390] Bluetooth: hci5: command tx timeout [ 386.875971] Bluetooth: hci7: command tx timeout [ 388.285938] Bluetooth: hci0: command tx timeout [ 388.540703] Bluetooth: hci1: command tx timeout [ 388.604034] Bluetooth: hci2: command tx timeout [ 388.796029] Bluetooth: hci3: command tx timeout [ 388.859771] Bluetooth: hci6: command tx timeout [ 388.860272] Bluetooth: hci4: command tx timeout [ 388.861052] Bluetooth: hci5: command tx timeout [ 388.924733] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:43:57 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88803247fe08 RCX=ffffffff84abf7c9 RDX=ffff8880155d1b80 RSI=0000000000000000 RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffff88803247fd20 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888024c6bc80 R13=0000000000000000 R14=ffff88803247fe45 R15=0000000000000002 RIP=ffffffff817385f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd3a9eac540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd3aa379000 CR3=00000000172bd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff818c704c RDX=ffff88802f660000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff888025c1fc40 RSP=ffff888025c1fab8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000001 R12=0000000000000006 R13=0000000000000006 R14=0000000000000003 R15=ffff888025c1fd88 RIP=ffffffff81738ac0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdc4da2f368 CR3=00000000340fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000