Warning: Permanently added '[localhost]:1215' (ECDSA) to the list of known hosts. 2025/06/21 07:06:32 fuzzer started 2025/06/21 07:06:33 dialing manager at localhost:33119 syzkaller login: [ 106.342493] cgroup: Unknown subsys name 'net' [ 106.530385] cgroup: Unknown subsys name 'cpuset' [ 106.576432] cgroup: Unknown subsys name 'rlimit' 2025/06/21 07:06:46 syscalls: 202 2025/06/21 07:06:46 code coverage: enabled 2025/06/21 07:06:46 comparison tracing: enabled 2025/06/21 07:06:46 extra coverage: enabled 2025/06/21 07:06:46 setuid sandbox: enabled 2025/06/21 07:06:46 namespace sandbox: enabled 2025/06/21 07:06:46 Android sandbox: enabled 2025/06/21 07:06:46 fault injection: enabled 2025/06/21 07:06:46 leak checking: enabled 2025/06/21 07:06:46 net packet injection: enabled 2025/06/21 07:06:46 net device setup: enabled 2025/06/21 07:06:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 07:06:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 07:06:46 USB emulation: enabled 2025/06/21 07:06:46 hci packet injection: enabled 2025/06/21 07:06:46 wifi device emulation: enabled 2025/06/21 07:06:46 802.15.4 emulation: enabled 2025/06/21 07:06:46 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 07:06:48 starting 8 fuzzer processes 07:06:48 executing program 0: io_uring_enter(0xffffffffffffffff, 0x7806, 0xb3a8, 0x1, &(0x7f0000000000)={[0x7f]}, 0x8) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x8001, 0x7f, 0x2, 0xe1b, 0x18, "fb82737cdcfa143369f3372a59ad2613d6dd6f"}) r0 = io_uring_setup(0x665a, &(0x7f0000000080)={0x0, 0xf03d, 0x20, 0x3, 0xf5}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0x20010, r0, 0x10000000) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x5, 0x1f}) r2 = io_uring_setup(0x65cc, &(0x7f0000000140)={0x0, 0x522d, 0x8, 0x2, 0x147, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x8000000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) r3 = io_uring_setup(0x269d, &(0x7f0000000200)={0x0, 0xd665, 0x8, 0x1, 0x1f0, 0x0, r0}) r4 = socket(0x23, 0x0, 0x2) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r4, r1, r2, r2, r2, 0xffffffffffffffff, r1], 0x7) ioctl$TCGETS(r1, 0x5401, &(0x7f00000002c0)) r5 = syz_io_uring_setup(0x670c, &(0x7f0000000300)={0x0, 0x794d, 0x10, 0x3, 0x118}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000080) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x50, r3, 0x0) syz_io_uring_setup(0x739e, &(0x7f0000000540)={0x0, 0x4711, 0x0, 0x3, 0x214, 0x0, r5}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8}}, 0x3) 07:06:48 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) r4 = syz_io_uring_setup(0xa8e, &(0x7f0000000240)={0x0, 0x331f, 0x0, 0x3, 0x145}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000340)=r0, 0x1) r5 = socket(0xd, 0xa, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', r2, 0x4, 0x5, 0x0, 0x10000, 0x49, @private0, @empty, 0x20, 0x20, 0x1000, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x200, 0x453c, {{0x2a, 0x4, 0x1, 0x2, 0xa8, 0x65, 0x0, 0x1f, 0x29, 0x0, @empty, @empty, {[@noop, @timestamp={0x44, 0x24, 0x45, 0x0, 0x4, [0x10001, 0x0, 0x0, 0xffff0001, 0x7, 0xffff, 0x4, 0x0]}, @lsrr={0x83, 0xb, 0xac, [@local, @multicast2]}, @lsrr={0x83, 0xb, 0x60, [@local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0xc, 0x1, 0x0, [{@broadcast}, {@multicast2, 0x6}, {@loopback, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x3}, {@remote, 0x1}, {@remote, 0x2}]}, @end, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x1, [0x40, 0x8000, 0x5, 0x400, 0x3]}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x408c1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000b80)={0x3, 0x0, 0x2, 0x5, 0x1f0, &(0x7f0000000780)}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000c00)=r8, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/194, 0xc2}, {&(0x7f0000000d80)=""/53, 0x35}, {&(0x7f0000000dc0)=""/176, 0xb0}, {&(0x7f0000000e80)=""/165, 0xa5}], 0x5) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000fc0)={0x81, 0x226}) 07:06:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x5c, 0xffffbd5d, 0x48, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x700, 0x1, 0x0, 0x7}}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc6b}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008070}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8a36}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c4}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x889}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000006c0)={0xb6, 0x9, 0x400, 0x4000}) r6 = socket(0xf, 0x80000, 0x7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4048000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x32}]}, 0x2c}}, 0x4044841) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000ac0)=@buf) 07:06:48 executing program 3: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) io_uring_setup(0x1481, &(0x7f0000000000)={0x0, 0x3f75, 0x20, 0x0, 0x3b8}) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4004001) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)={'c', ' *:* ', 'r\x00'}, 0x8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000240)={0x1, 0x13, 0x13, 0x5, 0xb, 0x6, 0x4, 0x20, 0x1}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r3 = syz_io_uring_setup(0x66a2, &(0x7f00000004c0)={0x0, 0x1df, 0x1, 0x0, 0x365}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x2010, r3, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffe) syz_io_uring_submit(0x0, r4, &(0x7f00000005c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x628) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x90a3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x91) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40480) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044}, 0x40) 07:06:48 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2a5d7a5ac5a5"}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4018040) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x20, 0x47, 0x7, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, 0x20, 0x80, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x60}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44804}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000980)={0x1, &(0x7f0000000940)=[{0x5, 0x1f, 0x9e, 0x3ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000009c0)={0x0, 0x0, r3, 0x5}) ioctl$sock_ifreq(r3, 0x8936, &(0x7f0000000a40)={'veth0_macvtap\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f0000000a00)={0xd55, 0x1}}}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x41020000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd60}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r7, 0x538, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x4004000) ioctl$sock_ifreq(r3, 0x891a, &(0x7f0000000dc0)={'xfrm0\x00', @ifru_map}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa8, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 121.349413] audit: type=1400 audit(1750489608.386:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:06:48 executing program 5: r0 = getegid() getgroups(0x5, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00, r0, 0xee01, 0xee00]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x48002) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$KDDISABIO(r2, 0x4b37) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r2], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000200)) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "83434bcc", {0x1, 0x2, 0x1, 0x4, 0xe9}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x5, 0x12) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000340)={0x0, 0x5}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x1304, &(0x7f0000001340)={[{0xca, 0x4e00, "efcf38e14a3a524c2c8e3b37e860c1739935076f5eee2429e4baa76afa02e0aba41de9d275704d13de847b747a47a31adb11cba8631f989d927b0cdc191b5c774ac982a87f04dac70552cf7f15e5e85fdb912ecee6e5bb7f739854ca9b48d681f0574a499b720f34da74f0fdad09d38ed8a8360b6b638b7f301eb514c430faab53107b9fd680c60a1c1cf838405c8655c7fd4b80067618fbc62465782f42cc50a3a1841acb621b2a6ea653235ea69a22a2050a83592aa84a7a5bd80e1d053b529aeff4771d656cd5a1ad"}, {0xa, 0x4e00, "35bdf2d0d101a09acbba"}, {0x1000, 0x4e00, "9b79904dcb3d3b0f6636c8edf5d46a6421a2cb8437b4b84353bb9afe881b9e242ec03abb719d61d8737ab9aed549845a729f0bee8bc45dfe7a91fbfd6d152b5f3ecbafa2d2286daaefde60948b27f8532f0e3fabc529a34b43c2d7e8903c4528ccc01ca41e38f8ff83ec512923a73b1777aaec7f2855761062e093be44d057e5749ac4f3c4f96f303dc75bf39e03055b392ab21bc0a22b932dc4cff5a38e9b7cbe816b8b0b589c5116b8b4f8c443ae0d4469e0dcd1b0e4c00f8aa4092d340d55f1c630c8c129df5847c03f8f5f241ee3b431e0d22cd374af1c163c3a6b45aceb65d551b06b3cddd354725bfa2d219287663a6292192e72338420d2599b62bc4db2c3d168b3d1b3d13295503faff55ff6de6ea72cb83ad59db71144fa13f71762623bbc35f099825171b30b69cf22cbb7f45cf98f0c0b73415bb7c68589e2e8efb1e4378ba13d923b9a0708759a90527148e3065ef3655b6de698c19a79e2f44d6e3beb21bd202f76dc884b034dd3064264b1b3e075d010deb81170a0dd02b4457645facd11a61f66e09bc2ddf9961d8373b0d1ad54856d08654536bae1c22cea16e194ad1da04dcfb117964466f0a17a0139f6e6d3af737863e16117175ce140895045f9f82e272e8a9232240e08fc12a8c14546aea988bae9768e26751ba3917c08fc7b1b025465076660d8ad7a79866056d3ffb93ecbb57b8b7dc75db8a0c3a51c4f27c314d9c54400bfa9d9626cd969abfb12c539277ace7e1656b6c8f1251a44e7d66e858b783f3b2b105d2e218608b65f1adc8bbc24577c376494776c4613cd6a1694485e0d314f2ee3ebf5b7899c60ee6d49930d643c3ba1d430f2a5eeead830d29c2e74c2a4af85b76ee44615f039c022d6756383317687d31eebf834039f6c247ed7a8845972bf45ea625c27e4813485916ea59af7db992ff324f65c4e2353a3d6c2305ce7c6d9c1e2d9155cf8558c5ad6c0eb919288ff2681ac196e3a1dde151ecbaef664b40b84bf537458eb75d06d4f6f3e8a0f1d5177f465ed71ac6db5093f1edac68244692d297b77ddbc2e24bc1e46968129d75c036649f73708cbe1de575690e16e2f83420a0cc6e52c86f820d7a7d5e94fe90aeddee7b85e9f9a74bc3ba4926e3b0e0d767bd4aba657fa1713aae335a78f7c7697550a1a875c5a66ca57ba5e1196b277648526ffd280755f8445067ce32e04a8ca45a7436a4d6ec9a23efc6540f98d7b51ca8fe8845d9204e90d71cc2cd3e9aa98ae8646a951ac6fb1bc58c7d5363de057f5eaa3ed90fc2e7930f119043b1ff84828d2510e0b1c0cd5c324a940a1005134bf46963e3f55824609313017f5a86153a4d6278397e3774a7b0537c81add8c4cfa88ee7e1feefe54e62faa6708d555e8867398ea9de643e1146fd51e25d1fb4a0e12e861227e1a098fac263f0cb8ff4aef56658ebf51dc425c6c164799c01cc2f408c3f971feb1b58dcbcff3c3cf469b9feb4c50357280f04effd65f7c820d18f6daf96020e4e12266c45f7be5ca3482911f6527af53763216fe493c0df0542311ce917add2f5920092270d99c1479d51d26eaa4eed09d22991ecbc1e3edad822cb280ad1548808edc667633be10e4311abbb502c84468736e98ea0b68fef908c7d00d4e5fb0c64c3c787c1e526ea174cf6230b6bafb13c3c28efe4a536903e33ee05ced6efa8a5668d188e67b43d481266534811670281e747df4d4c67a5fcf37eaec17bd58064dbfde88693fa1b1aa38f3bcf11e8c137c2b8eb304d9c71b404ae39a7d6bd16bd44fb909ccfabf00ee6f046e37857522f0cbc0090e06e57ae12405b25de44bacb20348fea8d098e79d6e0e76fe174f14d0803cc234a8ce5405ef134338c506e0cf5f8d89e57dcdf9027ee44ca6ced5ed2140408ae1c04ef75dfd09fc2156d30f9478ac8072136af4bb6d09069945bf0eb1779904de08205684e1e40c162be7f074ca6e081baaeedb8b69e4111f488905bc326ed5b242cc865f05c5610cfddf571256a43f7a88de964e12e15769a8c57a1d069a8a13d1c9d2279bce34b12c1a7f58c93f722c4efb33498b824aa95c379cc952cd128273f6959e110ee991131b59358f40aac7bd70130e567d943dc32c09c2a687b4bfa61ff9a795dbe04dee4d06436d4593ee24d11043129bf1a69978a72ff9f9f9aacc4cf3bf340642ae8d07bc2b22fbd7ffb667391fb84c884a415b9627b83a1118865de5e2265d8d96ed15a3faff2ba3ca09feb7da7987fde11e08e7f43e35acafb67818071467456e25e9de7dce6780969abf99e7b46297bb7332156c008ff419332f2ce8c331037798f7749c7c468dc8ae4ebcf56f2d344289abd83f74a0ce849eb706d266634531042aac6b8091eaba7c774f187f6bed106073126e119fe14d6adc02a71da35c349902e68340767426274b9ef04d85732381c93c18779500551afc7d60fb0b3060f2dcc6792fc901d1925828af5ac711b2d67c8ec8cd794c12c6b779dbde63ccf3ee8a78453b22a5062d4794c809c5929a480210c9d26c90e65827b54e246f8960a024ce0f0081df75eea1cd1a246987581eb52531a916d09d7a1637700aa46446a247a9560640a450ba37071dd5e24fab230091cf89b22f7d91253e01be140469b38add37ae4701a66eb666870b839ecbe447d9a93dd775877c15a0beec66c07b071fe418b5ff38c5b21bcd9bf73a2f1ac7acc8f5d83e7a36970254ab08b366fa48697b38ccfd864b5197b985b6b2091306f14bedac0b73aa0873d44c217c8d43e46f088b1a9112f4b75e986fb1243da2f3a8b35d1d45557c467ecf7fd4599c9e0a723e07877fb1aa43f687e6440d2b79eaf799f8e8047b449d18b82d74bbd40f922d8ee56d0df4d4f05c068bbd36cd75b968a87fe0c53677cf006f2f963e77beb5c85bd9084499dee18b7040d16e19e5973ded21dd1203536c8340df290efb9a7478eab47253dd8e0e8d248eee9ee22872ab0a4fddba004a6fb3de9df9b5303df82943ff151ca1544fa169519cafbb9ee25ab9d630a8f2cef262769b8d4d312bd2a072fca514d72cefb634580b75b101d79e469c53c617be2298fdf4f984d11d2f6aa6c7207c0884354eddce32069485032f5eb96d79ad3cc36a9fceecfc212efde56f1a542da20d69a25a88afb9380075fadc091a0fab4624e4475ba0b49bd69968442fa4ab0d03cb02743fad089b254ae2b2b2a855034f624ac8ed498a3f2fa39663198ad2bef7bbec30379861cc3482a49c9f844e5a5eb1f304242f196b66779fece9f654ec5dc36ef0bcb50961f888f2e1d26f0899b4db5fec6c4c01ce0bc15db71ceadfe396ab94329aa73ac1d1160341b82ebe65a445876903f1ba91d0b2ebf1457282c12e92047be8628b50793f09f3156ca502f97b04f08dc025105bc3b169b9580f1ee070c07c9b0515a650e1f7d11c1375b2514226263efd6fbb534881f44cddf717d2f62ab5d2d7482ff41dc13a2f7a50f99aa974509be33770470fe0660c016f1f1bf329f1ab518bc70576d68eacf2cab41f220a6147ef6f353f1f5a13920852d45e61f2803f96d0cf6283615d1c6e1ee2a50620ad7df21303e48fc51a7eb02ea055e61ccf7ea0539e4521ef841025fd7cc76b903952b325a5b1a48b2fb631974311bd4963b5486dbb5e0f2afd0a2e4bd033dc92edc51651a76b6bc6f9685220b2ddaa6246317a787ab9025b569f20662381af63c1a7567b4a54ffa5e8aec5239356004c13263abf304a395b6ad10ba8fa902e01331126da4a05429ae3fb590584e485ec45c1fbd90ba899b0d247cc5c638a63b0a0a6a900b01bc9cbac446ff003c1df67b515dcdf972eff52d0d107de418786d5c7af880785281e61c14f4b1ba4483c12c5ec4b9ed652a1c9b797b5f33e127e69c57ff883b799a6e9d334c1c9f6a3d556636cbca0710dde66f766592011f7f65ee679c368eefecd2a297e9877a317f3e3eee08387980613ed7e88f85d6b63bf86eabc7ac1829b2a9009d83dc70be669c519e80ceb261bab81954ac6dcdd67f505a5046ae34455c65359a1b53b4f9c3550d29bceb277f14e1d79a1bd566f1428735090bbb9a81d4f6674e171df5dde6ddf9b5a0823b0ccf89b456dfc1f8145490470433fa526a7ea25446026f806bdff1fbee91b87d3d2f8236d5203f3ba5f44715992c2cae5cd0650ccbd26b0f20e1e964a47e16bd2c71e0b84db02d4944949486ba7d06eb04a19f0984354c80cd48b02bd2a3bd981c53111772df44e14204d2c9f86125bf999030b830fa6d3d4aed3fb04ca959fd498917805e6a9741a39cafb9461db78f4b98ed2b2d55d70f30722ac31bdc1f35c0bc0075aa3ce92114c8c437ed118f3cea8e67afa7ff717795f8db1313c4741c6f972b93dfba2f1e62df1ca0c0858412b4575be139d9d9b3a3e5a75443cd53946c8b62470c8c098e055bce3cdc5aed19606b7699c29d05eab5630f8f1f0e45affc90dd47699dfeea6c96ea7324e80add45458285277043f313f8facbab8b1fa0335d1e83072acf72be250ece5d53ac3f33e99f18bbf72b5d164c18aa2d30a3d83e7285cf0ed234931a172e03da0c32bbfd16c06b949fe962a95955c6ea56600b9e9a584c2a4eb4e583bd6bf13e40485dfc35f150cd03378329a0d92ee9b601e039349d6524f6b095d375e74a1aecb45ba9e643dbc74d7ad35f9a07f11714172a6f30c5fa3b9b49ff779dce95bbac5471c7b6d8257a6be73da4d5e5130ca6fee4670719e11af73352af7c8523129c0fedb6ce245edffc49995bb835536c9a9ca4e09ac6d256cbeae92309d41ef07a4c33813f2e0a2093f63b0d438abc4504c47d7aaf435f194873cc16bdc1bb46cb266f52a5a16acb361ead4108e87903e39a6c980d6ed731953e1a7274435b1249bf54fca882b89e5aefb9361322287b388b2b5425b12934916e2cafad7121b5e8db35bd34e9d3e61cc81289f810d3b46c373f8b86db273b66980dc749906a0ae4a8ca8a30fe9e5e89cf20b585b94a82f6cd757d7e6cd6710c4edd8760c6625b06545eb09e4169479ff5e187ccea9bb821a9d0cd8a9e818bf496cf77e410b26e1dff1bdc0e4a4a2f782c074837b99149694470c4d8de4b04cf4d394277afed8432569884a7bf4adb88347e3fef2cd1dc6c995966ce4e72b9773ded25fb718b612419d84dcdc5f4382ddb1b5b4dccfffb0fb01cef91b4c83719b50af3c18b77cdc441bf0be25eeb5e9ac009b4f1d0d57fcae785f67e498114fa54717c6db9b90e97f65ec3e3fe98b10b48e20029d8871865ee2bd06eff8f44a7e8e505044ffe736841fb96cacf83c64a7c238fbf2c903ffb88c7c68a7c4361d50734a9746b35cbbf398c850e1c02977f69bbf6b2153be51a94ec2798b3f5c91e0c7d45c44406ae3f25f16f1c9728ddac695529901af3a30eee92d1366d404b7c231008b5c0b497fadd96f79df6332175574018ddbb0b08de298db6245a7488d46dbfc4a428f7e191c730a6c639ab4e3c5276da2ba6899386129fdd220ce4419c1e07f4272947ce80b8433faaaa05c0245a8d873dfc88af785e791903b7f19f722d42a929e3889c5f8177c3b7b72f342e5759e0e8e4981ecca8a8b615c369e291ed6f864a14e3718fa8ae542add297d6e93a039b1b12653ab3ce6e98ac645649bf47bfbe448c90154996f5b0e7910233ad2e6389fb0850347e5ccaada19d8cc3a0692d1416a736b566aeb7d77f547898082483d91fd6f29661bd189f3e54d97d599ec204a0d2775a46f9194aa515250a8d7328077eccf3f395a7a272"}, {0x5c, 0x4e00, "bba3bc908f2aac1c0dc8e349bd7bb0a436d039ebd0819997510df3a591dc2c52199b9732e89a937b5ffb1a8a3cea4c2a8fe57f523357dfebbeeaf0734bf139caaa79d09d9d7909df19ff7e4d32e1e8b4474378da5d4deb2d16968518"}, {0xdc, 0x4e00, "e3c360a56e3d271a7e06aa69e842a87535de779bb89658a52cb2cf1e0c04650a202bbfe715799d180d668ca65653d407560aef227002d4eb32be1501ad91f6ca29d8690bb5bb9abab4d124a6d737ab4af7efe633fa74fc9c8d433d8b17189010fc6a039d845d6a7b4078e5954f6e1aef9c578638c43cb84a226ea4e52dc6159b6f91a41ddf1feb5e75afbf72fb4efb5788c9648d0c7aa15f8d1258d53c04ff0843995fa399ddc46d07660378124f134e6a40c16365f58c82f4af1bc65460b26540e7c2864484821735f55345a6bcf6739d55ca1036579d09ed51cc08"}, {0xdc, 0x4e00, "04c72aa8bc70ac54ae779749ceb04907651464c6a5700e23379f28430f07e9ab6099b6ed6c0a757865ba5935adc46ff5923c3f15dab5196fca02ca2f938c02c4a4ed1c7e6cbe76b4e09a34aacbeb911770c8a4d40f840f831c5780a69feed05325f5d69a24b102f044467faea72085e08ba06b86dbafb38d2e7a833ec9a98e68c8e7ca10e7090824079bd5170835a394540b83f0ace813226cf8c4c165af20dbd077263b80a50fbda0599959879e6f1308c36d06678d58e3bb0671daea73406ae6a8bbdf1223d5cb38e5ec1d28a16c31b4e69946cd0dd1fc66c07657"}]}) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000002a80)={0x3, 0x1, 0x16, 0x8, 0x13a, &(0x7f0000002680)}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001000}, 0x8000) io_uring_setup(0x2e1, &(0x7f0000002c40)={0x0, 0x8276, 0x4, 0x1, 0x28d}) 07:06:48 executing program 6: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x310, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000801}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x30}}, 0x480c1) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000002c0)=0x80) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6af}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x98}}, 0x24040800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x8800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}}, 0x40) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x5202abd15305fa1e}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x94, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:checkpolicy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004845}, 0x4008004) 07:06:48 executing program 7: ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x40) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x1f, 0x8, 0x1a8, &(0x7f0000000080)}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x3ff, 0x5, 0x3, 0x9}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x60001, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x112, 0xffffffffffffffff, 0x10000000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x40200, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000005c0)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000600)={0x8, 0x1, 0x3, 0x1f, 0x1, "9dc982df89343cb9ca67bb6521e66fda16165b", 0x7, 0x4ca}) syz_open_dev$rtc(&(0x7f0000000640), 0x1f, 0x105100) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000680)={0x17, 0x2, 0x15, 0x10, 0x4, 0x79, 0x4, 0xb3}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x408000, 0x0) ioctl$RTC_VL_CLR(r4, 0x7014) [ 122.853324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.857033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.860707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.868895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.876854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.880087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.888489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.896067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.897275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.899740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.908269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.909275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.917193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.921430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.925053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.927320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.929967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.935624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.938328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.939118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.946949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.958825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.960454] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.963021] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.967282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.971253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.986974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.995929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.998488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.000384] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.003040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.004859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.010828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.021785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.023808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.042451] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.096037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.106024] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.124459] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.138393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.925900] Bluetooth: hci0: command tx timeout [ 124.988673] Bluetooth: hci1: command tx timeout [ 125.052693] Bluetooth: hci2: command tx timeout [ 125.052851] Bluetooth: hci4: command tx timeout [ 125.116727] Bluetooth: hci5: command tx timeout [ 125.116863] Bluetooth: hci3: command tx timeout [ 125.117302] Bluetooth: hci7: command tx timeout [ 125.245083] Bluetooth: hci6: command tx timeout [ 126.975787] Bluetooth: hci0: command tx timeout [ 127.037737] Bluetooth: hci1: command tx timeout [ 127.100679] Bluetooth: hci4: command tx timeout [ 127.102000] Bluetooth: hci2: command tx timeout [ 127.164663] Bluetooth: hci3: command tx timeout [ 127.164688] Bluetooth: hci5: command tx timeout [ 127.165386] Bluetooth: hci7: command tx timeout [ 127.292872] Bluetooth: hci6: command tx timeout [ 129.020688] Bluetooth: hci0: command tx timeout [ 129.085770] Bluetooth: hci1: command tx timeout [ 129.149042] Bluetooth: hci2: command tx timeout [ 129.149205] Bluetooth: hci4: command tx timeout [ 129.214564] Bluetooth: hci7: command tx timeout [ 129.214597] Bluetooth: hci3: command tx timeout [ 129.215052] Bluetooth: hci5: command tx timeout [ 129.340629] Bluetooth: hci6: command tx timeout [ 131.068702] Bluetooth: hci0: command tx timeout [ 131.132618] Bluetooth: hci1: command tx timeout [ 131.196598] Bluetooth: hci2: command tx timeout [ 131.197926] Bluetooth: hci4: command tx timeout [ 131.261497] Bluetooth: hci3: command tx timeout [ 131.261979] Bluetooth: hci7: command tx timeout [ 131.262399] Bluetooth: hci5: command tx timeout [ 131.389995] Bluetooth: hci6: command tx timeout [ 183.298177] syz-executor.6 (287) used greatest stack depth: 24912 bytes left [ 183.382326] syz-executor.7 (288) used greatest stack depth: 24544 bytes left [ 185.613492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.619801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.621398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.630314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.636469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.667509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.672796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.674673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.677336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.678928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.686074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.690022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.692922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.696468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.699927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.755970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.772975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.784350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.809466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.813419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.814856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.819352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.823959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.824260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.857901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.888228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.915283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.924779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.928165] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.936144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.943117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.947792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.949158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.954428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.954810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.957010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.960952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.970256] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.972807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.985830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.709693] Bluetooth: hci0: command tx timeout [ 187.772613] Bluetooth: hci2: command tx timeout [ 187.772648] Bluetooth: hci1: command tx timeout [ 187.964699] Bluetooth: hci4: command tx timeout [ 188.029507] Bluetooth: hci6: command tx timeout [ 188.029894] Bluetooth: hci3: command tx timeout [ 188.092610] Bluetooth: hci7: command tx timeout [ 188.092634] Bluetooth: hci5: command tx timeout [ 189.756597] Bluetooth: hci0: command tx timeout [ 189.820603] Bluetooth: hci2: command tx timeout [ 189.821858] Bluetooth: hci1: command tx timeout [ 190.013870] Bluetooth: hci4: command tx timeout [ 190.077636] Bluetooth: hci6: command tx timeout [ 190.078061] Bluetooth: hci3: command tx timeout [ 190.140768] Bluetooth: hci7: command tx timeout [ 190.141616] Bluetooth: hci5: command tx timeout [ 191.805633] Bluetooth: hci0: command tx timeout [ 191.871573] Bluetooth: hci1: command tx timeout [ 191.871606] Bluetooth: hci2: command tx timeout [ 192.061856] Bluetooth: hci4: command tx timeout [ 192.125891] Bluetooth: hci3: command tx timeout [ 192.126325] Bluetooth: hci6: command tx timeout [ 192.188726] Bluetooth: hci5: command tx timeout [ 192.189300] Bluetooth: hci7: command tx timeout [ 193.852670] Bluetooth: hci0: command tx timeout [ 193.917063] Bluetooth: hci1: command tx timeout [ 193.917879] Bluetooth: hci2: command tx timeout [ 194.110025] Bluetooth: hci4: command tx timeout [ 194.173895] Bluetooth: hci6: command tx timeout [ 194.173931] Bluetooth: hci3: command tx timeout [ 194.237070] Bluetooth: hci7: command tx timeout [ 194.237083] Bluetooth: hci5: command tx timeout [ 248.276419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.282014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.287830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.298958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.305473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.404110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.426662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.449413] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.456604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.461798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.548773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.561167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.567395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.576160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.624067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.631416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.635261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.639373] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.652208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.657880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.905998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.912853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.960224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.997097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.024988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.105742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.137067] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.144453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.149931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.152259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.169198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.203692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.206964] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.213804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.217281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.225259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.275441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.276997] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.297757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.304495] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.365733] Bluetooth: hci0: command tx timeout [ 250.493638] Bluetooth: hci1: command tx timeout [ 250.684938] Bluetooth: hci3: command tx timeout [ 250.748609] Bluetooth: hci2: command tx timeout [ 251.132621] Bluetooth: hci4: command tx timeout [ 251.325642] Bluetooth: hci5: command tx timeout [ 251.452732] Bluetooth: hci6: command tx timeout [ 251.452973] Bluetooth: hci7: command tx timeout [ 252.412769] Bluetooth: hci0: command tx timeout [ 252.542725] Bluetooth: hci1: command tx timeout [ 252.732743] Bluetooth: hci3: command tx timeout [ 252.796872] Bluetooth: hci2: command tx timeout [ 253.181047] Bluetooth: hci4: command tx timeout [ 253.372618] Bluetooth: hci5: command tx timeout [ 253.500847] Bluetooth: hci7: command tx timeout [ 253.501189] Bluetooth: hci6: command tx timeout [ 254.463007] Bluetooth: hci0: command tx timeout [ 254.588882] Bluetooth: hci1: command tx timeout [ 254.780621] Bluetooth: hci3: command tx timeout [ 254.846675] Bluetooth: hci2: command tx timeout [ 255.228799] Bluetooth: hci4: command tx timeout [ 255.420613] Bluetooth: hci5: command tx timeout [ 255.548645] Bluetooth: hci7: command tx timeout [ 255.549910] Bluetooth: hci6: command tx timeout [ 256.508619] Bluetooth: hci0: command tx timeout [ 256.637835] Bluetooth: hci1: command tx timeout [ 256.829055] Bluetooth: hci3: command tx timeout [ 256.893871] Bluetooth: hci2: command tx timeout [ 257.276587] Bluetooth: hci4: command tx timeout [ 257.468666] Bluetooth: hci5: command tx timeout [ 257.596992] Bluetooth: hci6: command tx timeout [ 257.597023] Bluetooth: hci7: command tx timeout [ 311.183836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.187642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.191203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.197442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.202767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.251841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.256007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.258184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.259646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.263653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.265173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.269913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.272345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.278991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.286067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.412321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.423131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.435300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.447999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.453986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.614657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.617723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.621770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.632339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.634632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.686973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.701312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.711441] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.720086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.724732] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.728947] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.744400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.746086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.753221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.758096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.764969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.771679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.784967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.848372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.883615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.279746] Bluetooth: hci0: command tx timeout [ 313.340713] Bluetooth: hci2: command tx timeout [ 313.342047] Bluetooth: hci1: command tx timeout [ 313.533668] Bluetooth: hci3: command tx timeout [ 313.725655] Bluetooth: hci5: command tx timeout [ 313.853981] Bluetooth: hci7: command tx timeout [ 313.917846] Bluetooth: hci4: command tx timeout [ 314.044697] Bluetooth: hci6: command tx timeout [ 315.324731] Bluetooth: hci0: command tx timeout [ 315.388904] Bluetooth: hci2: command tx timeout [ 315.389569] Bluetooth: hci1: command tx timeout [ 315.580660] Bluetooth: hci3: command tx timeout [ 315.772977] Bluetooth: hci5: command tx timeout [ 315.900675] Bluetooth: hci7: command tx timeout [ 315.964874] Bluetooth: hci4: command tx timeout [ 316.092836] Bluetooth: hci6: command tx timeout [ 317.372660] Bluetooth: hci0: command tx timeout [ 317.436791] Bluetooth: hci2: command tx timeout [ 317.437243] Bluetooth: hci1: command tx timeout [ 317.628957] Bluetooth: hci3: command tx timeout [ 317.820746] Bluetooth: hci5: command tx timeout [ 317.948861] Bluetooth: hci7: command tx timeout [ 318.012802] Bluetooth: hci4: command tx timeout [ 318.141597] Bluetooth: hci6: command tx timeout [ 319.420590] Bluetooth: hci0: command tx timeout [ 319.485579] Bluetooth: hci2: command tx timeout [ 319.486072] Bluetooth: hci1: command tx timeout [ 319.677735] Bluetooth: hci3: command tx timeout [ 319.868890] Bluetooth: hci5: command tx timeout [ 319.997582] Bluetooth: hci7: command tx timeout [ 320.060624] Bluetooth: hci4: command tx timeout [ 320.188790] Bluetooth: hci6: command tx timeout [ 373.790912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.795057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.798179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.806320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.814484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.028141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.031175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.035155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.043129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.050470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.168305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.177862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.180787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.197837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.203003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.260679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.278848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.282016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.300029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.311376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.458014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.471780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.479932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.492026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.499997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.550136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.551882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.557954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.560208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.590817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.596032] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.611068] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.621832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.633784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.661089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.662837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.663676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.684075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.699068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.726937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.868609] Bluetooth: hci0: command tx timeout [ 376.125907] Bluetooth: hci1: command tx timeout [ 376.252608] Bluetooth: hci2: command tx timeout [ 376.381924] Bluetooth: hci3: command tx timeout [ 376.765574] Bluetooth: hci6: command tx timeout [ 376.828632] Bluetooth: hci4: command tx timeout [ 376.829643] Bluetooth: hci7: command tx timeout [ 376.892991] Bluetooth: hci5: command tx timeout [ 377.916744] Bluetooth: hci0: command tx timeout [ 378.172708] Bluetooth: hci1: command tx timeout [ 378.300689] Bluetooth: hci2: command tx timeout [ 378.428988] Bluetooth: hci3: command tx timeout [ 378.813548] Bluetooth: hci6: command tx timeout [ 378.877883] Bluetooth: hci7: command tx timeout [ 378.877970] Bluetooth: hci4: command tx timeout [ 378.940892] Bluetooth: hci5: command tx timeout [ 379.966751] Bluetooth: hci0: command tx timeout [ 380.220938] Bluetooth: hci1: command tx timeout [ 380.348595] Bluetooth: hci2: command tx timeout [ 380.478828] Bluetooth: hci3: command tx timeout [ 380.862674] Bluetooth: hci6: command tx timeout [ 380.924591] Bluetooth: hci7: command tx timeout [ 380.925799] Bluetooth: hci4: command tx timeout [ 380.989807] Bluetooth: hci5: command tx timeout [ 382.013588] Bluetooth: hci0: command tx timeout [ 382.269776] Bluetooth: hci1: command tx timeout [ 382.396846] Bluetooth: hci2: command tx timeout [ 382.525603] Bluetooth: hci3: command tx timeout [ 382.909553] Bluetooth: hci6: command tx timeout [ 382.974554] Bluetooth: hci4: command tx timeout [ 382.974585] Bluetooth: hci7: command tx timeout [ 383.038593] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 07:11:51 Registers: info registers vcpu 0 RAX=ffff8880164e5d18 RBX=ffff888015ba5280 RCX=ffffffff813912f1 RDX=00000000000003c0 RSI=ffff88801522d7b8 RDI=ffff8880164e6118 RBP=ffff8880171c79f0 RSP=ffff8880171c7878 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888030291b80 R13=ffff888015ba5280 R14=0000000000800100 R15=0000000000000000 RIP=ffffffff84b29e40 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005569cb44b4c8 CR3=000000000eb8d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000ff000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888030293700 RCX=0000000000000002 RDX=00000000882f2f01 RSI=0000000000000000 RDI=ffffffff85c1cc40 RBP=ffff888030294158 RSP=ffff8880237ff250 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81518ce1 RFL=00000817 [-O--APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f09c9cf9540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09c9dca710 CR3=00000000344e3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff0000000000000000000000ff00 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000