Warning: Permanently added '[localhost]:14224' (ECDSA) to the list of known hosts. 2024/10/21 21:31:12 fuzzer started 2024/10/21 21:31:12 dialing manager at localhost:45639 syzkaller login: [ 79.052869] cgroup: Unknown subsys name 'net' [ 79.148474] cgroup: Unknown subsys name 'cpuset' [ 79.161543] cgroup: Unknown subsys name 'rlimit' 2024/10/21 21:31:37 syscalls: 206 2024/10/21 21:31:37 code coverage: enabled 2024/10/21 21:31:37 comparison tracing: enabled 2024/10/21 21:31:37 extra coverage: enabled 2024/10/21 21:31:37 setuid sandbox: enabled 2024/10/21 21:31:37 namespace sandbox: enabled 2024/10/21 21:31:37 Android sandbox: enabled 2024/10/21 21:31:37 fault injection: enabled 2024/10/21 21:31:37 leak checking: enabled 2024/10/21 21:31:37 net packet injection: enabled 2024/10/21 21:31:37 net device setup: enabled 2024/10/21 21:31:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/21 21:31:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/21 21:31:37 USB emulation: enabled 2024/10/21 21:31:37 hci packet injection: enabled 2024/10/21 21:31:37 wifi device emulation: enabled 2024/10/21 21:31:37 802.15.4 emulation: enabled 2024/10/21 21:31:37 fetching corpus: 0, signal 0/0 (executing program) 2024/10/21 21:31:39 starting 8 fuzzer processes 21:31:39 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="72386cfaf70fbe6050de0886654e29f6a2dbef4982e8df10cbc2a39b9039b261ecff4129a835845442d993e85b9ac8a43e3ae75757261be7b7d97bac16b885d348d510ccc7e59e743304a23ad0f456b8c7c6f3f3af20770fda81ef2b2b22deb27e9999cd2967d654ff27944bb684ee83ce0e7e0b5381ec53a36151d5ec7b61be24d3d9db0dec173e381ed16acf90f908bd8493c6a85b71e4757e07eb57332221d76ddfe29b7b01cf11a8df7acf6c0f0c75136bd5129e9f1021f1ed2f9fa028711752f0bec5ab20026af5", 0xca}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000240)) r3 = syz_open_dev$sg(&(0x7f0000000280), 0xa6, 0x101000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x100000000, 0x200000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000340)={0x59, 0x1, 0x9, "4eb66a33bb381322b23cbcc1618a9540c4ee32d476fc78f99cb8ba709c38e15ddf6d6ec7c790dd345c97bdc1bd48eba61f9366620b5e2eeaf254b5296b383c69f18e4d7c77d016aede7753e2d3c4b5a35a566c7bb8c6fbe468"}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) r6 = accept$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000580)=0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f00000005c0)={'HL\x00'}, &(0x7f0000000600)=0x1e) r7 = syz_open_dev$sg(&(0x7f0000000640), 0x4, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000680)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f00000006c0)=0x1, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000700)={{0xa, 0x4e24, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, {0xa, 0x4e23, 0x6, @remote, 0x6}, 0x3, [0x98ce, 0x6a3, 0x400, 0x2ce, 0x800, 0x4, 0x3f, 0x4]}, 0x5c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000780), 0x4) 21:31:39 executing program 1: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x464, 0x100, 0x70bd27, 0x25dfdbfc, "b28c23c96117f9afbf5b4bf28eebc69aa22c4802dad3fc3ac560ba", [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x8, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x40000) socketpair(0x28, 0x6, 0x8000000, &(0x7f0000000240)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008810}, 0x40) socketpair(0x22, 0x3cbd9bdaf894385a, 0x80000000, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa307}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8dc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x40040) r6 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000d00)={0x160, 0x0, &(0x7f0000000ac0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@flat=@handle={0x73682a85, 0x10a, 0x6}, @fda={0x66646185, 0x1, 0x2, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/193, 0xc1, 0x1, 0x1e}}, &(0x7f00000006c0)={0x0, 0x18, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x9, 0x1, 0x3b}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x0, 0x3f}}, &(0x7f0000000780)={0x0, 0x20, 0x38}}, 0x1000}, @request_death={0x400c630e, 0x1}, @exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/138, 0x8a, 0x0, 0x8}, @flat=@weak_binder={0x77622a85, 0x2, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x31}}, &(0x7f0000000900)={0x0, 0x28, 0x40}}, 0x1000}, @free_buffer={0x40086303, r6}, @register_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000a00)={@fda={0x66646185, 0x5, 0x1, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/168, 0xa8, 0x1, 0x2c}, @fda={0x66646185, 0x7, 0x0, 0x26}}, &(0x7f0000000a80)={0x0, 0x20, 0x48}}, 0x1000}], 0xbb, 0x0, &(0x7f0000000c40)="09d6dbd0753bed97f437ede11e2d4861a78647d00899258dfa1011c6d2febd7adab9fdf393a116300bb02d409ffb774fed0bd74b016dc043ed9be629a4d8531a5fb97be5002ed7862c9fa64b1ffd5852bd0bd2aef4f8cd18c71b132e30c7f2fd6edc7d320684e881a99f794f9428f25a125c7bb3cb1f75eec3f291600ea9281e16fcd5b959c7e981abcf55b9374470dd33773d0af511a1a930a4ea0ba88d5b943ed9bceb01648f2afd95fcf3aa847646c2f4bcdca6e3831a68474f"}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x20000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x64, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040009}, 0x40) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000f80)=0x80000000) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000fc0), 0x5a382, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x60, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="48f428901f1c"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbc}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8818}, 0x8000) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000001140)={r0, 0x1, 0x6, @random="3a80527196d4"}, 0x10) 21:31:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x141402, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/155) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000140)="25148ee368ed63a8fc6261fe8887b493ca8c191f61ddec7884e7078784c45951761433e4d819293f6e53640ba68e66cbb87f3a0d886accf8a99c7f526f6896062b34c0f892023f1711c7c8641b50c0ad7a147c414583ae94893e1450f16f6f359cce6f1e2a04032a3e442cc8b094cab57f43e6441b2201fa245ef27dfde2dd0a169adf2924c654a7a4fd2743a2a6693501373780ea994bd8f2bf74f404c74f63bcd4980e26944c05daf9fe5b130b32e01337360e62b4ec31eea67b2bdae352ce1df49c315e137483fb0cef7d334bc489bc961eb38b936b1a474d9cc0db3938ac") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7000000000000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000280)=""/11) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x400) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f00000002c0)="8906bfebc3527f5828f5222dd584a2d57e6b06a48cbc715c30fd1f48c8f4069fc5324f871297f36beae4baaea48da847e5a56b2b50d6f30d1f74a83da44f161f81fead764dcc3286b240ad77bf8de2f992121716dac236668efaf1d4b573c7cf4d96e196a1484879b5438ba061339db4f757dec2a8f0227a5ace466f5351e2ccc34c4f05becd7b0f2e829082f6c37c3578b075104274328a25c6d631a276d7395a007a267f35cd73") r6 = accept4$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x1c, 0x800) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000400)={0xd2, 0x2c, '\x00', [@generic={0x80, 0xf7, "f606f27e1049cc95ff001a7aefd3a5c8e10c6e2594305ded704f8d63ebfc5cffd3e1fa86d80c221f0a7cb3bc6a100374aacb0dac8116313d9bda44c5d2d7af9aaad9dc790f6c6c61251d362995a3d098d561629d5ee4a8c5cb7fba333ee171c8700b9ea3d89dd415c83a906d2e10732ac4947e4711a753e3892b4abe9b4f90ce694439c11a5535194f60d0afd0b246aeed281fb4a2054bfd831383a08224b972e00e38b86d328d71c76382ff12ffbdc20bce9747b4eba5ae4c4380619e378e50041b5d6a266b040f7fbe0dc451f0742d2be4ad37a401d6f13e01f3a557067c25b2b90d0fb69b2c3fac146cd299295d0d77ddd5480d060e"}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x9, [0x4, 0x800, 0x3]}}, @padn, @calipso={0x7, 0x30, {0x0, 0xa, 0x8, 0x8, [0x1, 0x4, 0x3, 0x5, 0x1]}}, @hao={0xc9, 0x10, @empty}]}, 0x170) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000580)={0x1, 0x0, 0xffff, 0xfbbb, 0xf001, 0x20}) getsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f00000005c0)=""/16, &(0x7f0000000600)=0x10) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000640)={0x100, 0x0, 0xd3f0}) 21:31:39 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e20, 0x9, @mcast1, 0x303}, {0xa, 0x4e22, 0x6, @loopback, 0x80000000}, 0x9, [0xfffffbff, 0x6, 0x8, 0x1, 0x400, 0xf0, 0x8, 0x6]}, 0x5c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x8000, @private2, 0xea57}, {0xa, 0x4e22, 0xfffffe01, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x4, [0x7fffffff, 0x1, 0x2, 0xe4, 0x66, 0x9, 0x2, 0x68b]}, 0x5c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000001180), &(0x7f00000011c0)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000001200)={0xa, 0x4e23, 0xf89e, @private2, 0x4}, 0x1c) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001240), 0x40000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000001280)={'icmp6\x00'}, &(0x7f00000012c0)=0x1e) r1 = socket$inet6(0xa, 0x6, 0xffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000001300)={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1}, {0xa, 0x4e22, 0x9, @local, 0x6}, 0x2, [0x9, 0xaa, 0x7765, 0x448, 0x0, 0xa93, 0x7fffffff]}, 0x5c) r2 = accept4$inet6(r0, 0x0, &(0x7f0000001380), 0x800) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f00000013c0)="0401af721ce35c41c14c9e960d6829f2821f005c07eec52c2bfa062223dcbb5925610364da016aeb2880ba7ebbc0520b3aa49a02a973a8dd91c66365ac170368229f90b05bde017717ac26fc3711b08377f9f33629a9f3e8e27de25bf950b28a973a96b8245f7a79d54d0d2cf0618f3b61c234312ce10dcdd93866ef921d3962524e958361bf579bbda38dc81126edf1a5d45e6ff839014842fd0be2d3448a91cdff84", 0xa3) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001480)) getpeername$packet(r1, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001640)=0x14) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001680), 0x200000, 0x0) connect$inet6(r3, &(0x7f00000016c0)={0xa, 0x4e24, 0x9, @local, 0x3}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001700)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x2, 0x0, 0xf, 0x4, 0x8}, &(0x7f0000001740)=0x20) getsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000001780)=""/102, &(0x7f0000001800)=0x66) 21:31:39 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x4e23, 0x5, 0x4e21, 0x18e, 0x2, 0x0, 0x30, 0x2b, r1}, {0xe8c5, 0x100, 0x6, 0x1, 0x9, 0x2, 0x7fff, 0xfffffffffffffffe}, {0x8, 0xb2, 0x1ff, 0x81}, 0x1, 0x6e6bb8, 0x2, 0x0, 0x1}, {{@in=@multicast1, 0x4d5, 0xff}, 0x0, @in=@multicast2, 0x3505, 0x4, 0x1, 0x1f, 0x7, 0x0, 0x4}}, 0xe8) r2 = accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @remote}, 0x10) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) sendto$packet(r0, &(0x7f0000000280)="1f25cc46e731c03fb423c98759f22d9e9a54e9c0c3cd0cf908254f5b641754178b3d873e99", 0x25, 0x20004044, &(0x7f0000000400)={0x11, 0xf8, r3, 0x1, 0x20, 0x6, @random="7eeba0a12b3c"}, 0x14) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000440)=0x5) getpeername$packet(r2, &(0x7f0000000480), &(0x7f00000004c0)=0x14) r4 = syz_open_dev$sg(&(0x7f0000000500), 0xb3, 0x12480) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000540)) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000580)={0x3, 0x22c9e2fcfc3c3635}, 0x4) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000005c0)="2a6e1a946c4b860a446a8135314d94518e016a49ed2334395b4fe4c00ba937a01d59bbb702fbc9cb75b42b4c67c2f0deeddce2d62ad33c0cf9731213c9b50d0bb70b6bd3af4c25627bf953b927e5089beaad87ef4cdd2acbcea951f24c4692bd35e3f3bacb1a94b83bdfda5cccfeca0ce76793a90e0424867532c4b4086bf672494415d4455233b96b3dd914c1835df01dcfa3bd6bd6fdf4b6a7668919816b04874d325966c2e72018750e6324f80f29e4c5c448dd661d3f8976b0ae048de6d8c25f957a29fabbfbf6cbf9f329") ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) r5 = accept$packet(r2, 0x0, &(0x7f00000006c0)) getsockname$packet(r5, &(0x7f0000000700), &(0x7f0000000740)=0x14) select(0x40, &(0x7f0000000780)={0x73, 0x1, 0xfff, 0x5, 0x8, 0x9, 0x6}, &(0x7f00000007c0)={0x1, 0x8001, 0xc0, 0x80, 0x6, 0x0, 0x7f, 0x3}, &(0x7f0000000800)={0x4, 0x100000001, 0x7f, 0x4, 0x0, 0x6, 0x2, 0x6}, &(0x7f0000000840)={0x0, 0x2710}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000880)={r1, 0x1, 0x6, @broadcast}, 0x10) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 21:31:39 executing program 5: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xdf05) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xfffffffffffffffd) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="9bddce846838ae9ef2c45d08421fc070b29e978d1e239ec01e4db872be1ec667324cc393647ebb859ce1ad9f6748f39b6d3da719d46f5ce3192fb394ef5ee408", 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4810) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}, @register_looper], 0x73, 0x0, &(0x7f0000000200)="a03dcbec2dc3bafb00831fefd7f8fc8b37206765f3405658d2faf6c829c2b88f5af1e510fbba0b5db0869d15b7ad3096886431aeb65fd3a59e49027273f5680484aecc28edf335f190331b5d6500db5458099c47ab966c1f0bec8f503ef1a46258509940765e5bd6f79dbf350ead8c2f197a74"}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000300)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000340)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x858}, 0x80) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000019c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001540)={0x438, 0x3f4, 0x1, 0x70bd2d, 0x8, {0x12, 0x1, 0x16, [0x6, 0x3, 0x0, 0x0, 0x2, 0x3ff, 0xfffffc01, 0x400, 0x4, 0x4800000, 0xfffffffe, 0x7fff, 0x400, 0x9, 0x3f, 0x1ff, 0x10001, 0x8, 0x10001, 0x101, 0x401, 0x8, 0x80000001, 0xffffff01, 0x8, 0x9, 0x8001, 0x10001, 0x2, 0xb33, 0x6, 0xfffffffc, 0x8, 0xd195, 0x1000, 0x358, 0x0, 0x7, 0x4, 0x5, 0x0, 0x100, 0xca8, 0x1, 0x1, 0x8, 0x11537936, 0x2, 0x81, 0x800, 0x0, 0x2b, 0xfffffffe, 0x800, 0x7, 0x2, 0xfff, 0x40000000, 0x4, 0x1e, 0xd24, 0x1, 0x1, 0xffffff7f], [0x4507, 0x1ff, 0xff, 0x200, 0x81, 0x0, 0x7, 0x3, 0x3, 0x7ff, 0x10001, 0xc96, 0x400, 0x7fff, 0x4, 0xcf, 0x7, 0x6, 0x8a99, 0x20, 0x62b5, 0x80000001, 0x9, 0xfffffffd, 0x8, 0xffff4754, 0x10000, 0x14, 0x5, 0x9, 0x5742c101, 0x8001, 0x8, 0x6, 0x100, 0xfffffffa, 0x8000, 0x5, 0x3f, 0x5, 0x2, 0xffff3356, 0x101, 0x3ff, 0x1, 0x4, 0x80000000, 0xc32, 0x80000000, 0x7, 0x8, 0x7, 0x40, 0x200, 0xfffffffc, 0x6, 0x80000001, 0x2, 0x0, 0x7, 0xffffffff, 0x5e7, 0xffffffff, 0x8], [0x6, 0x20, 0x9a3, 0x2, 0x4, 0x7, 0xc73, 0x8, 0x9, 0x7, 0x0, 0xfffffff9, 0x30, 0x101, 0x499d, 0x100, 0xffffff00, 0x8, 0x800, 0x0, 0x327, 0x7fff, 0x7, 0x800, 0x7, 0x0, 0x80, 0x101, 0xd6f, 0x5, 0x6, 0xb40e, 0x20, 0x6, 0x7, 0xfffffffc, 0x200, 0x7f5, 0xb, 0x3, 0x0, 0x8, 0x6c67, 0xffff, 0xfff, 0xfffffff9, 0x4, 0x8, 0x1000, 0x4, 0x772, 0x3f, 0xfffffffb, 0x9, 0x4433, 0x5, 0x4, 0x1, 0x2, 0xfffffffe, 0x80000001, 0xa251, 0x10000, 0x200], [0x4, 0x3, 0x50, 0x6, 0x7, 0x4, 0x2, 0x7fff, 0x101, 0x5, 0x3ff, 0x4, 0x3f, 0x2, 0x5, 0x80, 0x3, 0x4, 0x2, 0x44, 0x1, 0x39, 0x5, 0xfffffffb, 0x7, 0x73d, 0x35, 0x4, 0x0, 0x2d3e0522, 0x0, 0x401, 0x40, 0x2, 0x9, 0x97, 0x3, 0x3, 0x3, 0xfff, 0x6, 0x200, 0x6, 0x7ff, 0x1, 0x7, 0x8, 0xcff, 0x9, 0x2, 0x9, 0x4c, 0x80000001, 0x9, 0x5f1, 0x7, 0xc, 0xd0df, 0xfff, 0x8, 0x7, 0x3, 0x2, 0x1f], 0x16, ['.*(6\x00', ',{{.\x9a:\x00', '-,.(\x00', '\x00', '!--\x00']}, ["", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x40000a4}, 0x48005) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000001a00)={0x0, 0x0, {0x0, 0x31, 0x0, 0xf, 0x7, 0x1, 0x5, 0x1f, 0x1}}) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001a80)={0x3}) [ 104.942429] audit: type=1400 audit(1729546299.291:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:31:39 executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x5, 0x1}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x440400, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2c740103, 0x1b, "e09f4e0ea3b001dc2d230167cf0e8dca2cb3c2"}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}}}, &(0x7f0000000240)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000300)=""/215, &(0x7f0000000400)=0xd7) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f8, 0x200, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x14400, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x6e, 0x6, {{0xa, 0x4, 0x1, 0x26, 0x28, 0x65, 0x0, 0xaa, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@private=0xa010100, 0x2}]}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'erspan0\x00', r6, 0x8, 0x8000, 0xf9, 0x1, {{0x22, 0x4, 0x0, 0x8, 0x88, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @private=0xa010102, {[@end, @ssrr={0x89, 0x1f, 0xa2, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x63, 0x0, 0x3, [0x0, 0x80000000, 0x1, 0x564c, 0x3]}, @timestamp_addr={0x44, 0x24, 0x96, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x7}, {@local}, {@private=0xa010102, 0x80}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x81}]}, @lsrr={0x83, 0xf, 0xcd, [@local, @dev={0xac, 0x14, 0x14, 0xe}, @local]}, @timestamp_addr={0x44, 0x4, 0x76, 0x1, 0xb}]}}}}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42010010}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x481100, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000a40)=@req3={0x0, 0x0, 0x1, 0xd3, 0xbd4, 0x8, 0x6}, 0x1c) 21:31:39 executing program 7: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x100, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}}, 0x804) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x92}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4884) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x801) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x110, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd89}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x102010}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004041) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbb2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1ff46115e609"}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044041}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b80), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r6, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x244}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x48001) [ 106.363068] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.374277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.376966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.377868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.380101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.383973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.389019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.391227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.394902] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.397407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.399555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.410849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.420289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.422942] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.428415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.430553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.443984] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.446396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.508228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.514204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.516566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.519817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.538127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.540909] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.542000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.546337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.563973] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.569695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.572864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.574316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.582724] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.584129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.585450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.587007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.589385] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.599378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.605918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.606878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.608072] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.609052] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.610241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.612001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.619910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.623212] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.636767] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.637457] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.639389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.640267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.474025] Bluetooth: hci0: command tx timeout [ 108.474763] Bluetooth: hci1: command tx timeout [ 108.537707] Bluetooth: hci2: command tx timeout [ 108.666661] Bluetooth: hci3: command tx timeout [ 108.730170] Bluetooth: hci6: command tx timeout [ 108.731943] Bluetooth: hci4: command tx timeout [ 108.733944] Bluetooth: hci7: command tx timeout [ 108.735520] Bluetooth: hci5: command tx timeout [ 110.521714] Bluetooth: hci1: command tx timeout [ 110.523282] Bluetooth: hci0: command tx timeout [ 110.585668] Bluetooth: hci2: command tx timeout [ 110.713769] Bluetooth: hci3: command tx timeout [ 110.777729] Bluetooth: hci5: command tx timeout [ 110.778372] Bluetooth: hci7: command tx timeout [ 110.779898] Bluetooth: hci4: command tx timeout [ 110.781771] Bluetooth: hci6: command tx timeout [ 112.569710] Bluetooth: hci1: command tx timeout [ 112.571488] Bluetooth: hci0: command tx timeout [ 112.635653] Bluetooth: hci2: command tx timeout [ 112.761679] Bluetooth: hci3: command tx timeout [ 112.825827] Bluetooth: hci5: command tx timeout [ 112.827752] Bluetooth: hci4: command tx timeout [ 112.829362] Bluetooth: hci7: command tx timeout [ 112.830693] Bluetooth: hci6: command tx timeout [ 114.619630] Bluetooth: hci1: command tx timeout [ 114.621323] Bluetooth: hci0: command tx timeout [ 114.681694] Bluetooth: hci2: command tx timeout [ 114.809718] Bluetooth: hci3: command tx timeout [ 114.873708] Bluetooth: hci7: command tx timeout [ 114.875193] Bluetooth: hci6: command tx timeout [ 114.876708] Bluetooth: hci5: command tx timeout [ 114.878195] Bluetooth: hci4: command tx timeout [ 169.159046] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.175205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.185115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.186428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.190157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.191396] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.193828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.196193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.197369] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.198530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.199868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.201334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.225951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.229502] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.231262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.238373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.240702] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.243836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.290282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.300915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.305976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.310085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.312902] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.314503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.406967] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.408071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.410545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.414898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.415864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.428477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.429289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.431945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.439083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.445959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.446308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.451914] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.453886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.461368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.463539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.474848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.478824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.479853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.481881] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.483022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.498827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.511801] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.514985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.527855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.260694] Bluetooth: hci0: command tx timeout [ 171.261668] Bluetooth: hci1: command tx timeout [ 171.321679] Bluetooth: hci2: command tx timeout [ 171.385723] Bluetooth: hci3: command tx timeout [ 171.513900] Bluetooth: hci7: command tx timeout [ 171.514951] Bluetooth: hci4: command tx timeout [ 171.578693] Bluetooth: hci5: command tx timeout [ 171.579640] Bluetooth: hci6: command tx timeout [ 173.305939] Bluetooth: hci1: command tx timeout [ 173.306494] Bluetooth: hci0: command tx timeout [ 173.370518] Bluetooth: hci2: command tx timeout [ 173.435003] Bluetooth: hci3: command tx timeout [ 173.561794] Bluetooth: hci7: command tx timeout [ 173.562348] Bluetooth: hci4: command tx timeout [ 173.626127] Bluetooth: hci5: command tx timeout [ 173.626706] Bluetooth: hci6: command tx timeout [ 175.355023] Bluetooth: hci0: command tx timeout [ 175.355624] Bluetooth: hci1: command tx timeout [ 175.417761] Bluetooth: hci2: command tx timeout [ 175.481641] Bluetooth: hci3: command tx timeout [ 175.609709] Bluetooth: hci7: command tx timeout [ 175.610264] Bluetooth: hci4: command tx timeout [ 175.673692] Bluetooth: hci6: command tx timeout [ 175.674204] Bluetooth: hci5: command tx timeout [ 177.401896] Bluetooth: hci1: command tx timeout [ 177.402450] Bluetooth: hci0: command tx timeout [ 177.465672] Bluetooth: hci2: command tx timeout [ 177.529723] Bluetooth: hci3: command tx timeout [ 177.657689] Bluetooth: hci4: command tx timeout [ 177.658203] Bluetooth: hci7: command tx timeout [ 177.721710] Bluetooth: hci5: command tx timeout [ 177.722207] Bluetooth: hci6: command tx timeout [ 231.438769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.441165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.445135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.453121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.456709] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.465940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.491226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.497307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.500075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.519788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.522454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.523685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.626366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.628888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.629961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.634195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.638207] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.640016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.641647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.643018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.647174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.657936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.661671] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.664253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.743350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.746793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.748111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.750682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.752438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.753715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.764202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.779198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.797716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.807655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.814175] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.816191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.871279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.872818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.891951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.893186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.898970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.900397] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.915446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.916707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 231.928026] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 231.928943] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 231.948943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.950132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.529740] Bluetooth: hci0: command tx timeout [ 233.593648] Bluetooth: hci1: command tx timeout [ 233.737018] Bluetooth: hci3: command tx timeout [ 233.737068] Bluetooth: hci2: command tx timeout [ 233.785645] Bluetooth: hci4: command tx timeout [ 233.849770] Bluetooth: hci5: command tx timeout [ 234.041780] Bluetooth: hci6: command tx timeout [ 234.042626] Bluetooth: hci7: command tx timeout [ 235.577623] Bluetooth: hci0: command tx timeout [ 235.642836] Bluetooth: hci1: command tx timeout [ 235.771347] Bluetooth: hci3: command tx timeout [ 235.771413] Bluetooth: hci2: command tx timeout [ 235.834627] Bluetooth: hci4: command tx timeout [ 235.899599] Bluetooth: hci5: command tx timeout [ 236.089670] Bluetooth: hci7: command tx timeout [ 236.090710] Bluetooth: hci6: command tx timeout [ 237.627345] Bluetooth: hci0: command tx timeout [ 237.689702] Bluetooth: hci1: command tx timeout [ 237.817774] Bluetooth: hci2: command tx timeout [ 237.817816] Bluetooth: hci3: command tx timeout [ 237.881803] Bluetooth: hci4: command tx timeout [ 237.948702] Bluetooth: hci5: command tx timeout [ 238.138764] Bluetooth: hci6: command tx timeout [ 238.139321] Bluetooth: hci7: command tx timeout [ 239.673702] Bluetooth: hci0: command tx timeout [ 239.737625] Bluetooth: hci1: command tx timeout [ 239.865731] Bluetooth: hci3: command tx timeout [ 239.866631] Bluetooth: hci2: command tx timeout [ 239.930229] Bluetooth: hci4: command tx timeout [ 239.993635] Bluetooth: hci5: command tx timeout [ 240.185684] Bluetooth: hci7: command tx timeout [ 240.185808] Bluetooth: hci6: command tx timeout [ 293.902727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.904481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.906247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.906345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.910812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.912479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.912704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.915452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.916901] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.917413] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.918011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.919219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.966807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.969637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.978602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.983125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.988864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.000415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.019979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.026805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.047773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.052617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.055235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.057267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.168982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.173969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.179392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.219180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.222864] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.231795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.409220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.422771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.435853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.437168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.442505] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.447319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.469373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.474043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.480771] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.487124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.489781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.494472] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.497786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.499428] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.500275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.535995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.536989] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.555820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.993685] Bluetooth: hci1: command tx timeout [ 295.993725] Bluetooth: hci0: command tx timeout [ 296.057655] Bluetooth: hci2: command tx timeout [ 296.186682] Bluetooth: hci3: command tx timeout [ 296.315604] Bluetooth: hci4: command tx timeout [ 296.570030] Bluetooth: hci5: command tx timeout [ 296.634608] Bluetooth: hci7: command tx timeout [ 296.697702] Bluetooth: hci6: command tx timeout [ 298.041688] Bluetooth: hci1: command tx timeout [ 298.044568] Bluetooth: hci0: command tx timeout [ 298.106682] Bluetooth: hci2: command tx timeout [ 298.233871] Bluetooth: hci3: command tx timeout [ 298.361642] Bluetooth: hci4: command tx timeout [ 298.617837] Bluetooth: hci5: command tx timeout [ 298.683578] Bluetooth: hci7: command tx timeout [ 298.746625] Bluetooth: hci6: command tx timeout [ 300.090662] Bluetooth: hci0: command tx timeout [ 300.090684] Bluetooth: hci1: command tx timeout [ 300.154687] Bluetooth: hci2: command tx timeout [ 300.284574] Bluetooth: hci3: command tx timeout [ 300.409785] Bluetooth: hci4: command tx timeout [ 300.668599] Bluetooth: hci5: command tx timeout [ 300.729607] Bluetooth: hci7: command tx timeout [ 300.794805] Bluetooth: hci6: command tx timeout [ 302.137630] Bluetooth: hci1: command tx timeout [ 302.140252] Bluetooth: hci0: command tx timeout [ 302.201678] Bluetooth: hci2: command tx timeout [ 302.329819] Bluetooth: hci3: command tx timeout [ 302.457780] Bluetooth: hci4: command tx timeout [ 302.713719] Bluetooth: hci5: command tx timeout [ 302.777850] Bluetooth: hci7: command tx timeout [ 302.842659] Bluetooth: hci6: command tx timeout [ 353.933074] hrtimer: interrupt took 4007959 ns [ 356.233305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.235765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.242152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.244698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.248846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.254087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.356980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.358916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.360772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.367203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.371128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.372133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.496062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.501790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.502908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.507296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.512345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.514147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.515766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.517984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.521803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.545628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.550005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.556280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.562204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.565769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.567226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.568886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.574218] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.576255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.631384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.638334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.638343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.651620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.659639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.695294] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.719594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.726964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.729240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 356.730972] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 356.732254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.748848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.751930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.757160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.763970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.819464] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 356.824811] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 356.841729] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.330242] Bluetooth: hci0: command tx timeout [ 358.393640] Bluetooth: hci1: command tx timeout [ 358.585831] Bluetooth: hci4: command tx timeout [ 358.586940] Bluetooth: hci2: command tx timeout [ 358.656606] Bluetooth: hci3: command tx timeout [ 358.841694] Bluetooth: hci6: command tx timeout [ 358.842795] Bluetooth: hci5: command tx timeout [ 358.969736] Bluetooth: hci7: command tx timeout [ 360.377642] Bluetooth: hci0: command tx timeout [ 360.441657] Bluetooth: hci1: command tx timeout [ 360.633794] Bluetooth: hci4: command tx timeout [ 360.634376] Bluetooth: hci2: command tx timeout [ 360.698764] Bluetooth: hci3: command tx timeout [ 360.890011] Bluetooth: hci6: command tx timeout [ 360.890606] Bluetooth: hci5: command tx timeout [ 361.018566] Bluetooth: hci7: command tx timeout [ 362.426853] Bluetooth: hci0: command tx timeout [ 362.489619] Bluetooth: hci1: command tx timeout [ 362.681644] Bluetooth: hci4: command tx timeout [ 362.682193] Bluetooth: hci2: command tx timeout [ 362.745650] Bluetooth: hci3: command tx timeout [ 362.937647] Bluetooth: hci5: command tx timeout [ 362.938198] Bluetooth: hci6: command tx timeout [ 363.065611] Bluetooth: hci7: command tx timeout [ 364.473622] Bluetooth: hci0: command tx timeout [ 364.537593] Bluetooth: hci1: command tx timeout [ 364.729849] Bluetooth: hci2: command tx timeout [ 364.730444] Bluetooth: hci4: command tx timeout [ 364.793738] Bluetooth: hci3: command tx timeout [ 364.985901] Bluetooth: hci6: command tx timeout [ 364.986453] Bluetooth: hci5: command tx timeout [ 365.113614] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:36:41 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000020000 RCX=ffffffff812fadc5 RDX=fffffbfff0fda9d5 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff8880096f9b80 RSP=ffff888024e5f3d0 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=00000000000c2f81 R12=ffff8880096fa5c0 R13=ffffffff85c14f00 R14=0000000000000016 R15=0000000000000002 RIP=ffffffff812fadcd RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9f0b16c540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560efeb2dfa8 CR3=000000001b296000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8151fb8b RDX=ffff888015b99b80 RSI=ffffffff8151fc47 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88806cf099c0 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=0000000000000001 R11=00000000000c2f81 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c69768 R15=ffff88800e183600 RIP=ffffffff81390ee0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f00f65836f4 CR3=00000000350ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f00f659247000007f00f6591f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000