Warning: Permanently added '[localhost]:11650' (ECDSA) to the list of known hosts. 2024/10/22 20:11:47 fuzzer started 2024/10/22 20:11:47 dialing manager at localhost:45639 syzkaller login: [ 66.175612] cgroup: Unknown subsys name 'net' [ 66.285680] cgroup: Unknown subsys name 'cpuset' [ 66.304578] cgroup: Unknown subsys name 'rlimit' 2024/10/22 20:12:04 syscalls: 201 2024/10/22 20:12:04 code coverage: enabled 2024/10/22 20:12:04 comparison tracing: enabled 2024/10/22 20:12:04 extra coverage: enabled 2024/10/22 20:12:04 setuid sandbox: enabled 2024/10/22 20:12:04 namespace sandbox: enabled 2024/10/22 20:12:04 Android sandbox: enabled 2024/10/22 20:12:04 fault injection: enabled 2024/10/22 20:12:04 leak checking: enabled 2024/10/22 20:12:04 net packet injection: enabled 2024/10/22 20:12:04 net device setup: enabled 2024/10/22 20:12:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/22 20:12:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/22 20:12:04 USB emulation: enabled 2024/10/22 20:12:04 hci packet injection: enabled 2024/10/22 20:12:04 wifi device emulation: enabled 2024/10/22 20:12:04 802.15.4 emulation: enabled 2024/10/22 20:12:04 fetching corpus: 0, signal 0/0 (executing program) 2024/10/22 20:12:06 starting 8 fuzzer processes 20:12:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x9a101) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000100)=""/10) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/75) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000001c0)) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x11, r1, 0x8000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x1, 0x2, {0x0, r5}, 0x75, 0x2, 0x0, {0x0, 0x0, r2}}, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000002, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1}, 0x2) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000280)=[0x800, 0x5]) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) msync(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4051}, 0x40) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x100000) 20:12:06 executing program 1: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = eventfd2(0xab6, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x110, r0, 0xe4831000) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x20, 0x111a40) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000e, 0x810, r1, 0x3ff) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) syz_open_dev$usbmon(&(0x7f0000000040), 0x81, 0x20800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000080)="28508e1e8df6e384fea5203d6374c3d6b75a2ec26df313ff672b286f507f92651b566f3ca9e0c50f6df80f966f5a4835cf24ad4d00750f13b4de43f8df5c9f79d38cf94fd5c738b96f28d91c4d1366d974f45e670f25efd2d527ca437fc815d1487512e233e50d7d39b339df1797da994df4615a797710065e16d3b2b6b15aa84622c97e19e8677efc3145494e60a140b4eedf14cdfaf8ff5e14b4d67b5ff5c32ec12cf7c370e50fec4d17e2fd47a82063a97415629724b5039f9d971c149d9bbe34467196a88884eeeaf772cb53a03c8b25755570d3495df0", 0xd9}, 0x68) move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000200)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil], &(0x7f0000000240)=[0x41], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) sched_getscheduler(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f00000002c0)="a829bb029136d4f9cb39121915b31f0bc8dd2b8055194aa3ea9e708efbcbd529c9fc34146757e044b3d01e823dedaef122ce9171760256c9ed218a85fd28f78bd3b6d9c2e0089eddef9f3ad2f2233bb66263193be55d509c7096aceca1552f756e071dc902140b8eebf5f87790a76de7e174eb94ce02e78d6ec8fc322ee32ad9291f79fcc58f2e49dc3ff3007a403c38ba302b8e8e88428632a0ab16563af67d6236077c576201b3587a49780d3fb0651adc5ef5d85d1f6cca2894a9b06f424cdb13d23f500b946ad655c5d1e564f50ff602b7df4d19946c8b762e520a1fc8157f8650d805c4f9c0028c5707024b", 0xee, r1}, 0x68) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000440)=""/94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/138, 0x8a, 0x1, &(0x7f0000000580)=""/24, 0x18}, &(0x7f0000000600)=0x40) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000c, 0x4000010, r1, 0x2151f000) mmap$usbmon(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x300000a, 0x14010, r1, 0x5) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/242, 0xf2, 0x0, &(0x7f0000000740)=""/2, 0x2}, &(0x7f00000007c0)=0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) mincore(&(0x7f0000fee000/0x4000)=nil, 0x4000, &(0x7f0000000840)=""/27) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 20:12:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x149200, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/157) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0xf2b3, 0xc00) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{r2, r3/1000+60000}, 0x15, 0x2, 0x8001}, {{r4, r5/1000+60000}, 0x5, 0x6, 0x1}, {{r6, r7/1000+60000}, 0x1, 0x5, 0x5}, {{r8, r9/1000+60000}, 0x0, 0x1, 0x4}, {{}, 0x12, 0x8, 0x1000}], 0x78) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000002c0)=""/63) clock_getres(0x4, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000340), 0x1) clock_getres(0x3, &(0x7f0000000380)) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001600)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r10, 0x0, &(0x7f00000015c0)={&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="6d3966b3916bd13544f3b72c95f8676d4d25b38bf2f8cf891456f094eeccd16a38944d8be0296201c869ae994459c4bab5f72c4596c8786619aedd95a57e0f5bd13276a99f862bc3a7d48b0fb0205258692a52945fcc3b5f4cef76938d3e450e939b6657102486e30aaa7539a1c07e544df633edf51aaa444591dd30fc9e2145", 0x80}, {&(0x7f0000000500)="ce", 0x1}], 0x2, &(0x7f0000000580)=[{0x1010, 0x10e, 0x1, "c03d2f2e0bac516df3ea056378112be8386583043631141646a6644d1be7ff4f12134ac6cc82aaac7f3881bff267dacac493a2663119f39855d1e248ddcada2818927f8a18e8f1decd9defe5459a7f0277fdb3d140d17a0dabef969416d7f947b83e216f82aff6290d46e90c11dd83c0bb1a5f0a60d7a36ccf6aab3f4dbda2b651560bc037bcc057fefee0ed23d5a85e40de56900d3cc544954e7588f6da3ac47106e612a704b5cacee97170626d3bdb87ec877207f275f81f4a1621232a4cb85b06f9d42668c1e17bd990382d2130d5ba437aa826db77f3a218599d9759c35d93f4ba672039996f20ad65a88d1f42299fa731617231fc52ddb6c394cdc9d52a6e57033a8dcd815222ce80ab9bae8d4bd82f771aa2c0b9b3ba38027391532735fdadcca95cd9435e1c9a3b876d2dd8221bc283c459ef87601d0c80a438ae9aa1438b05f4799d379e1e267aa9e93e895a1db608c0f1c8151177fd8e3b674a8c553f2312673918f70da21ab00cc40ce23bbe5e415b5f818cabde57f7643d4c1dcc2768c5f8ef2d3bc54b7bd066fb1053f71042d1d191972affefaa04ed98cb40fe745def6c9d2c92999fd5b3b2bba162d374c1b43dd83f60df5f4563162d57b6072a8f9cd1f5725abc02b6e4a12ca397851f0f9764a65cadb598a86f899f9a6e558946357277b0f0cde33706266e019257ab1ed5e4c92201031db9f1be6d47d43a56e43dfadad94aaa30725b41a3289a07a118f68965507555de317fa0fef418b79d6d8f4455020da9294dc541b8a0e7c29c55bdf12f40e4edd3553cfc06c27bce5509b89d6e9d34183d4e091ec67da554a2128ca49fdd3fb7eff23170b960c849974ce5136d423608fc7c60064d9332c5bac32748994e2e3db40767cbf4c45cf44e08250dde092e0be36017eacb1716e15fc9cef612e2c690962ec4ae31d5396c898fcdeab98275f89cdf8f4a8718cdb7fc272f2f3e18393e883669c989b4e81a12953037ecce696d25485175f4b01771218999fca898de2927aef6325fcf5ae9db2bcfce2166b3abb37995925e48f9af34dfd643ae3df4851b59c0fd00a9c5045d92317ce97fecd0ed8f2a542ca9235c27de5744ed4fd16af547937f6cefe1f60d9aec1df22731f02f6f69adc12ec9d2fb1815b620cdf5b0c183eb5c9a7bfd7ab757bcde2bc9af049a38fec91b49ec1a75876a2acf6af011ce00e2d7e79ba714aca54c1972203061866f9ecc1e46aca0790f6788d426f5f040fef0f25a75c83073876c8322dcac4bd8ef8fd5f9cde677b7d2cd7efd65694b1863044f9966b95a6d65be48944981e5b711d8adedba2f56229250bfb3cf94ecf52b1bf794146d0dda0e8f68483626dc5839422ed66cefa77953f190b9787a48c51dac8ec1117c3fdae782892ae35d2aa5f715f142b2c66b2cadfc60664b66a356b8672d5e9e466d0c234c746f41d6935bcf0c7b9f627d3ac512cf09bc4a5f4b1550a557abe3b04eebc3af4cb7470bd421d9e9c02304750106a4ff93799fdcca989ef8094730835218308b8d66109ad9e7c8a95a5d2cd3a9998c3c86002cccccbe8cf76b11f08342feb38144031a1521842a42860082a2482ca32fb269e7760e9305109cc036fe4a0d0853bd8ae2cf1f3e053fa8924138658531799cc306c980a115eb9597759b3c806f703b1c317da7992282cbcc3eba5b6cf90a5e25d30170d7e881910eb503c7a207a6be01e9d890695631688ac6da28d1015728b67773dae3c00537f232613eb09e61cf99e7845da8dc0878a6d8f3dc09a9de946bf074f4596aa546c77b1e50fbfa97b6e3db430382e502ef462c5543953c538b8da87f5fc9c499952f877c8fcff64abbd825b7859467c69908c355d1d885bf57e595713282170c488f7ded502cd67320f92d4b90442e31565141dfb832ef7439ca5a96b632a7c6a9032331313bca092505ecfcb95ce9e02415354daa2055f86e93d5850a6818a9af75e179b0e319c021d99bd8a67efdb3d1ca8a09f96223be738a7f9291a22961d92490bcefbd410fa565720b64b89fdf07df838f11c3ea9a3fa60c434ca87bf96a6774536701b9127c7f563588df76b5a0d8ba557cd6098f7ae5f7da198e59488bdd53f64eb03d85790463c34cca7295fe04d8aa18107d1d5f3403329dc1ad2ca1de60326042c7f173deedd52c0631179200f6d241e34bb94b8678c8392e9edc9604b339305224a59cc1b385d7990cf26f021f2ef5e3c0860334526e7da341f588ab840230b95a0eea3b43bf172997094ffa56e91afe2936d96c5fd1a148ab5c8ff598afecdc7f63e37ba1eef1853e23650b815df6440bd3c56f6538120a01418c08c583396dcfa2afb69ea9a6e451d8ccb3ebe27f54e3ac3ac0b66571457607fa014edd222aedb0258424587a5a4b84bf06f839557cf9c810d1323fcaf0b00bf0f863c68ec4452f9e59bb2dc877eb02f9ec0abd7f0a306c7b64f665c98eef1276d7d605638529c71a5cb416181ecd02dbcd16b87c7f2ad94980cee36461b6082d73a0142a8881b83991b2abccc04379f8e099bc9f594c261747e05dad1487c3264704be74498909bb345e08318f5f06665ddedc0a31a94c5c14358d68979e44e5a2635ede93448f20ebb9af165aabb99c609e610cda97ef7adbaf371981cfddd0cb19a7e41495e01ab5b06253864b9aa2bb4adc4428300bf18cfa00b8b61ed452ec87102cec8ec6aceb27eacc79d09b49505e975bbf2d27874527d12bbef099684aa13c0f55c804a6680b47aa9f76cd593ce10710119e277a801adb8b2220f487e23729751f851fcdfcceeb9bb3d1d52025450de6e4bdb3c273dec696e1209a77db65baa199cb5246173c9de3c741c1dd00e1d06786449d5199ef46b84280a7276c890575be8fcf3fbc8c329c0440bde7b103b1d81523c05e46d4fe5448b9ade06d3300bd596bc8a56d7d683d23ca289ce19d81947ed904eeb20f77978bd8ebe4b9532c8d48b72351bfd78157db2d9d48be4d7b6f5bb0a3c4241d5771c3864d98fc93fea4d3cc0ace68b0db3e4b9961dec79d5a8a2fcee067937ee990f263e19e56f47b2e68cdcccca411d299c5a98ed6721b7df3ed7392fbfe59a58d0e6f5846ce538e50b6ce1762cb043efac3c74094bf34bc3a388ca2700639ad9055fc05c3f1ebcde38f7582a21b6e0c60ca458600083f2e6d80f34b8e3334e0f69df55ddde6a97e7bb6866c6a611c85aae7b9ed4e62bee50f84460613fd7caee25ace3cc32cdd03fa5536692176f269a004c63fad1fa5de826f869fa171fb56224d1031b54a7791761d45c11a1a749d753f4ab39aea2bb30beec5e72c9cd247f62d36400072e60006bd45f361a3c82896648db4b9fa72d0acb82100a31fa23ce30de35a10e8d27804f014ea3476cfea17b43c7f2d31b83258f0fae351aec65ef0c60ebfa9e28512a414398915c59cb079f0f8ca3e7d33ffacd8b529e001327a6938098e3139d0f910387d937db5ae6fff39c80cb9e5305f68e7a549f212031dc0caa0980bae6618d0d019a75821698d33dbf09ec00ece2ff5139a660f9d1c26c27f9f987387196c1bfc479f37b61d0159c7393eae3b7d043da9de0eb1913348439b812238f09fcd3ad788ec6e1f44274e58282878a433ee15997cb1e93c517e8cc1f94e22e5481bfe088e549b6f5d970af4223157fb585e7633d10835f8e00a7e96dac28e00a4cc4cd6400bfe6939b60e38ef1441e1434d874a5b978d51e9816a170bb4204200e88e3b8861bc30513f4023cbca0c149aab8d27b0723009752332d1621dec6131768bc3b99f51ce170382bbeeaba0476319917d19283b253d333b52dcdd8492aac04764fc06e9b883895597d5514c7eb53f55c1dc41b79b0c1f33858760084ce3d43334f273b1a3ee4169592c7e60a808f1479eb0803ad60afa7f97bd8ff4b589fd98c3e0670b206fb6ec6b0e750a8e050d598e8f439d905bab0fc81f800d01cacdba0bc141dab6d02d0b0bdb15e16cacd906c679f9f3a7ccd47d4a5eeb1a6372177e8b1b1ecd5848b249d147f9576113b69cf1531d87d04f533500520017007ad415fda03b69517e8bf1388429254de5b35192dc54097b171b10dd74b2401fe53da3beb47d0d80ba8a863157b9d4c521825714da29d2b886748c5055811483a611c9d2e9ca8da5a7eb637d84fc0718143c6451abe63c24150e31b9fcee1e864869d7d7707bcb044dd498c90695d8f66256796964a0258cf4669738f2e63a1ff6ba2f69ac10b7878523d47005b491c17e3bc42d1843227702df077718d561e5baad068128c646d68684ea7861fb0c28b436d54dedc1693d9bd9eef5f93fafda881645d6220cf84c005be4d7d4d9653d6033b56054b453ddd490f8aca4e6c348847ca91f6dd11a5c3400af6de81ff9e893672a19f12bbce97f0a32e86aba8171ce2eb3e3918ad3a5d2a81a6e3e003c9405b77df30b52cd9c99c126735bbc19c41a1f8bda7f4b734da266743805ec57740dfad71f709db95efe474b7f80799e1de11f8ae56976982f509168af81ac7c6de21c449ada1ec36daf26813e3f13fdace56013a55daa4f75da244620cd3dd061d4cfb4336efeccb586b7eba47e26d7d8dff19201ca21d076cb358a6303fefad4ca84e1e0dcdd1a2dabb8f4368ef215c3380aff7dcd6912397b859bf523b91dc4ff4c2a20a963eb8409c2d6c755e68eb7e8fc9ad253d679ecc7f070c44746be651addd72118daa8046b34e16b38dd2548119367a7d40658421e3dea242a048fcc3acc1b5aa0a7a82556b4976dfdddd482e52c2b0a80fc4b2ba06b75405d7449867e28bd42272f1b2f50e2713aee4c010762bfc33f34e5099ecaa5cd02883c29c59d20e605d372f240221fb0d3231f50ca8b8b86f33e3df6011147189378d8dbb2d37d11de02f047e7838591baaf99adf641f719e5d6447041f8a15e06676460e36036f3f0fa66256790ea02bad30d5cb59f778e68b07b7e87400ce9425d52ebf85b37056c2a9dda56eb5885dfe41782a0e69357cbab6982c2180e357933960a2a009d5caa63098d2847ac3e97e44140652ed7239b9b75673858a18bdc5c2eddf10d6265ff7279626e525e2863aa8165b51f49478432cf622e283fa5e620c99fa384d6c080ebf77d5a2225b502fa8ce94a79414e4320e67d2fa9412cf9690a0589b8bb7918cbe939e7048f606f800d4fd19cc3ffe04f1f7b1b8b35ba46135389623a172018f388c3dd2fc35171e94c85ae42474053d7edcf2740d28d99f21d08e331b6a4771efa27750c432f824efa49a9e08761a368d6951a909df3d0baec2eb2aebfea2537a4e10a031f14b9c380287b03ec10733b6db4c8cd052308a72b826ab07697fe0669da7dce8c8b6abbfc6fcd18e61c6fe3c3cc2ae85307078c608564bd2a2e32e96ed731e8994c748c3042ef8b1343b955b37e684d8ecd0bd5b4a21535e20a9199672beef0444509023407bce29f63302142f02ea3dcc12b61a5563039012a23614dfd0de61d7633d8368cd8ae84548ee9fe30f8dfbd1bd8bb1750e996a461f8a70c6a87f1800882dff7c1ee85538dcdee45d600d77553a7b63e7269af74e517bbf824e7506ca1f224389c9bf5a1bef41e4ccbe11b19e77c767919c07b5ea1e0fb7f1325dbd83f8a76c79fed0f5dc025746a25c7e082838df79880c7d19eca88d28406e6fc02d8e21cbcf3907272fe1f0a4043acafd1229df6ec46c69ce9f1e4e62dadd6e87dd84627f7f50ef63669d53bfc6bebc4e71f044296ae434a29c41f5f2bab4fb0790eb7a03957c65bd610"}], 0x1010}, 0x0, 0x20040081, 0x1}, 0x6) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001640)=""/70) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f00000016c0)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @vsock={0x28, 0x0, 0xffffffff}, @rc={0x1f, @none, 0x20}, 0x1, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x9, 0x7, 0x2}) futex(&(0x7f0000001740)=0x2, 0x8, 0x2, &(0x7f0000001780), &(0x7f00000017c0)=0x1, 0x1) syz_open_dev$evdev(&(0x7f0000001800), 0x0, 0x8000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000018c0)={0x52, 0x6, 0x9, {0x6, 0x6}, {0x4f23, 0x3}, @ramp={0x3, 0x1, {0x8, 0x6, 0xfffe, 0x5}}}) 20:12:06 executing program 3: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0xac4d8000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x80000001, 0x8, 0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/169) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x20b, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) shmget$private(0x0, 0x2000, 0x54001ca3, &(0x7f0000ffb000/0x2000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000280)="db", 0x1}, 0x68) r1 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ff7000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x2000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x101, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) shmat(0x0, &(0x7f0000ff8000/0x2000)=nil, 0x7000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x0, &(0x7f0000000600)=""/64, 0x40}, &(0x7f0000000680)=0x40) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000700)={@initdev, @remote}, &(0x7f0000000740)=0xc) [ 84.221261] audit: type=1400 audit(1729627926.408:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1e18d22c}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@empty, @loopback, 0x0}, &(0x7f0000000300)=0xc) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000a00}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x48041) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000a5}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) r5 = socket$inet(0x2, 0x802, 0x4) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000580)={@broadcast, @loopback}, &(0x7f00000005c0)=0xc) r6 = socket(0x15, 0x80006, 0x2e744c71) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x3a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000800}, 0x810) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5f2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 20:12:06 executing program 4: r0 = io_uring_setup(0x5e50, &(0x7f0000000000)={0x0, 0x509a, 0x0, 0x3, 0x3e3}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, r0, 0x8000000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xad25}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24008884) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20100020}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x4000081) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4d97}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x400, 0x0, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000d5) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000007c0), 0x1) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45bf}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x13}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xce731bcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x400c000}, 0x11) r6 = syz_open_dev$evdev(&(0x7f00000009c0), 0x8, 0x100) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000a00)=""/39) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r8, 0x320, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4b7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004801}, 0x14) 20:12:06 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x301001) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/149) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2a4a01, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/119) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000200)=""/95) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f00000002c0)=""/188) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0xffffffffffffffff) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000380)=""/126) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000400)={0x8, 0xf40, 0x0, 0x7, 0x6, 0x3}) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000440)={0x3, 0xb9, 0x5, 0x9, 0xc0, 0x800}) r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x2, 0x101801) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000580)={0x15, 0x9b, &(0x7f00000004c0)="5996eae586e651310e07e05a0189eff1fdbffb8fe6466383b5bc92f961007bc9a6f8c4272541619ba4111837accb5b9478317f6a42758d9f2edb78569d109dbee8476db0e7ac2f8101cff2238b30f3049c5e9384608d8d0a047144f70a21fac6a9e47264d9c6e3e54ba861f891159bf4107bb385412883d467c41ff336f0a735b5451901a735176ab84a4b4b334b9d5d15f2d81c3a870f3819fa62"}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) write$evdev(r5, &(0x7f0000000600)=[{{0x0, 0xea60}, 0x3, 0x0, 0xffff8000}, {{0x77359400}, 0x12, 0x8, 0x1}, {{0x77359400}, 0x370f321de0e45e65, 0x8, 0x4}], 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001700)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000001680)=""/76, 0x4c}, &(0x7f0000001740)=0x40) openat$bsg(0xffffffffffffff9c, &(0x7f0000001780), 0x40001, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x4b44, 0x0) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000001800)=""/32) 20:12:06 executing program 7: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/58) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x100) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x80000000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/16) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x2000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{r3, r4/1000+60000}, 0x16, 0x65a, 0xfffffc00}, {{0x77359400}, 0x4, 0x969b, 0x401}, {{0x77359400}, 0x0, 0xffff, 0x5}, {{}, 0x11, 0xfa3c, 0x81}, {{0x77359400}, 0x16, 0x4, 0x7}, {{r5, r6/1000+10000}, 0x4, 0x5, 0x1}], 0x90) request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='{\x00', 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000380), 0x8, 0x80000) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f00000003c0)=0x6) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$EVIOCGVERSION(r8, 0x80044501, &(0x7f0000000440)=""/115) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f00000004c0)=r8, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/custom1\x00', 0x800, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/105) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000005c0)={0x80000000, 0x0, 0x1, 0x1ff, 0x1, 0x71ff}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x2000)=nil) [ 85.613539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.615733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.617511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.618763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.621459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.622481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.628105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.630063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.631337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.632676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.635254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.637480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.638601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.644422] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.649665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.689314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.691950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.695123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.697537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.699128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.702401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.729689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.732452] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.734939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.759066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.762397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.763668] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.766269] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.767563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.768910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.772211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.775665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.776745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.778399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.781507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.785621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.786820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.789596] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.790669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.799883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.801779] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.804551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.806293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.808002] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.809377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.812613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.821486] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.822750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.705833] Bluetooth: hci0: command tx timeout [ 87.706657] Bluetooth: hci1: command tx timeout [ 87.769259] Bluetooth: hci2: command tx timeout [ 87.833268] Bluetooth: hci3: command tx timeout [ 87.834272] Bluetooth: hci5: command tx timeout [ 87.897266] Bluetooth: hci4: command tx timeout [ 87.897799] Bluetooth: hci6: command tx timeout [ 87.898350] Bluetooth: hci7: command tx timeout [ 89.753758] Bluetooth: hci1: command tx timeout [ 89.754331] Bluetooth: hci0: command tx timeout [ 89.817256] Bluetooth: hci2: command tx timeout [ 89.881353] Bluetooth: hci5: command tx timeout [ 89.881822] Bluetooth: hci3: command tx timeout [ 89.945309] Bluetooth: hci7: command tx timeout [ 89.946759] Bluetooth: hci6: command tx timeout [ 89.948138] Bluetooth: hci4: command tx timeout [ 91.801346] Bluetooth: hci0: command tx timeout [ 91.802908] Bluetooth: hci1: command tx timeout [ 91.865415] Bluetooth: hci2: command tx timeout [ 91.930225] Bluetooth: hci3: command tx timeout [ 91.931657] Bluetooth: hci5: command tx timeout [ 91.993284] Bluetooth: hci7: command tx timeout [ 91.994801] Bluetooth: hci4: command tx timeout [ 91.996121] Bluetooth: hci6: command tx timeout [ 93.849632] Bluetooth: hci0: command tx timeout [ 93.850260] Bluetooth: hci1: command tx timeout [ 93.913303] Bluetooth: hci2: command tx timeout [ 93.977465] Bluetooth: hci5: command tx timeout [ 93.978005] Bluetooth: hci3: command tx timeout [ 94.041670] Bluetooth: hci4: command tx timeout [ 94.042246] Bluetooth: hci6: command tx timeout [ 94.042696] Bluetooth: hci7: command tx timeout [ 148.400924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.402679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.404115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.405808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.407382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.408656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.416515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.420582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.422686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.424749] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.424760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.426501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.433367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.434968] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.436483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.436660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.455936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.459599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.465477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.482713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.492342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.496421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.497742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.500546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.502183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.520606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.523268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.529307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.530999] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.532748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.551561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.552638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.600560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.602221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.603526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.606321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.607902] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.609062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.632632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.635615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.637130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.647807] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.654606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.694714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.706546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.801700] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.818811] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.832509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.489619] Bluetooth: hci2: command tx timeout [ 150.489631] Bluetooth: hci0: command tx timeout [ 150.490034] Bluetooth: hci1: command tx timeout [ 150.617361] Bluetooth: hci5: command tx timeout [ 150.618352] Bluetooth: hci3: command tx timeout [ 150.681261] Bluetooth: hci4: command tx timeout [ 150.809277] Bluetooth: hci6: command tx timeout [ 150.937290] Bluetooth: hci7: command tx timeout [ 152.565364] Bluetooth: hci2: command tx timeout [ 152.566010] Bluetooth: hci0: command tx timeout [ 152.567315] Bluetooth: hci1: command tx timeout [ 152.665400] Bluetooth: hci5: command tx timeout [ 152.665448] Bluetooth: hci3: command tx timeout [ 152.729250] Bluetooth: hci4: command tx timeout [ 152.857313] Bluetooth: hci6: command tx timeout [ 152.985652] Bluetooth: hci7: command tx timeout [ 154.585500] Bluetooth: hci1: command tx timeout [ 154.585573] Bluetooth: hci0: command tx timeout [ 154.585987] Bluetooth: hci2: command tx timeout [ 154.713245] Bluetooth: hci5: command tx timeout [ 154.713263] Bluetooth: hci3: command tx timeout [ 154.777329] Bluetooth: hci4: command tx timeout [ 154.905852] Bluetooth: hci6: command tx timeout [ 155.035191] Bluetooth: hci7: command tx timeout [ 156.633231] Bluetooth: hci2: command tx timeout [ 156.634279] Bluetooth: hci0: command tx timeout [ 156.646740] Bluetooth: hci1: command tx timeout [ 156.761355] Bluetooth: hci5: command tx timeout [ 156.761967] Bluetooth: hci3: command tx timeout [ 156.825461] Bluetooth: hci4: command tx timeout [ 156.955366] Bluetooth: hci6: command tx timeout [ 157.081351] Bluetooth: hci7: command tx timeout [ 210.480825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.485289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.494408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.500797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.503518] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.506849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.661465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.666016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.668282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.679609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.684837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.686929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.718910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.727448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.730272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.736661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.741362] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.744915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.746783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.759821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.764433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.766483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.771269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.773086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.776386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.778452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.787368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.793460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.796492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.799086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.799441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.806294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.817853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.845337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.849337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.854581] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.856408] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.857666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.858450] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.877393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.879815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.881812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.884470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.888638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.890457] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.891523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.891548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.900339] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.571315] Bluetooth: hci0: command tx timeout [ 212.761271] Bluetooth: hci1: command tx timeout [ 212.825394] Bluetooth: hci2: command tx timeout [ 212.890218] Bluetooth: hci4: command tx timeout [ 212.890897] Bluetooth: hci5: command tx timeout [ 212.891537] Bluetooth: hci3: command tx timeout [ 212.953252] Bluetooth: hci6: command tx timeout [ 213.017704] Bluetooth: hci7: command tx timeout [ 214.617236] Bluetooth: hci0: command tx timeout [ 214.811173] Bluetooth: hci1: command tx timeout [ 214.873335] Bluetooth: hci2: command tx timeout [ 214.937226] Bluetooth: hci4: command tx timeout [ 214.937742] Bluetooth: hci3: command tx timeout [ 214.939202] Bluetooth: hci5: command tx timeout [ 215.001241] Bluetooth: hci6: command tx timeout [ 215.065582] Bluetooth: hci7: command tx timeout [ 216.665267] Bluetooth: hci0: command tx timeout [ 216.858960] Bluetooth: hci1: command tx timeout [ 216.921312] Bluetooth: hci2: command tx timeout [ 216.985346] Bluetooth: hci5: command tx timeout [ 216.985880] Bluetooth: hci4: command tx timeout [ 216.986235] Bluetooth: hci3: command tx timeout [ 217.049279] Bluetooth: hci6: command tx timeout [ 217.113273] Bluetooth: hci7: command tx timeout [ 218.713234] Bluetooth: hci0: command tx timeout [ 218.906237] Bluetooth: hci1: command tx timeout [ 218.971164] Bluetooth: hci2: command tx timeout [ 219.033359] Bluetooth: hci5: command tx timeout [ 219.034953] Bluetooth: hci3: command tx timeout [ 219.035228] Bluetooth: hci4: command tx timeout [ 219.098214] Bluetooth: hci6: command tx timeout [ 219.162394] Bluetooth: hci7: command tx timeout [ 272.832022] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.842018] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.844477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.846805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.849086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.856067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.860253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.863316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.865994] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.868235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.883896] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.894380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.950513] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.957259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.962233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.989955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.024414] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.025737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.091711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.098919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.100385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.107332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.121388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.129461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.130259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.141984] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.145794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.146767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.151693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.159844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.161678] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.162740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.163583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.169063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.170063] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.171757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.178926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.181937] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.184245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.201500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.204837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.207474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.238049] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.248291] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.251478] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.252057] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.253482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.275293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.906667] Bluetooth: hci1: command tx timeout [ 274.976006] Bluetooth: hci0: command tx timeout [ 275.097243] Bluetooth: hci2: command tx timeout [ 275.226789] Bluetooth: hci3: command tx timeout [ 275.289251] Bluetooth: hci5: command tx timeout [ 275.289264] Bluetooth: hci4: command tx timeout [ 275.353230] Bluetooth: hci6: command tx timeout [ 275.353258] Bluetooth: hci7: command tx timeout [ 276.953200] Bluetooth: hci1: command tx timeout [ 277.018289] Bluetooth: hci0: command tx timeout [ 277.148013] Bluetooth: hci2: command tx timeout [ 277.275173] Bluetooth: hci3: command tx timeout [ 277.337283] Bluetooth: hci5: command tx timeout [ 277.337301] Bluetooth: hci4: command tx timeout [ 277.401338] Bluetooth: hci7: command tx timeout [ 277.402186] Bluetooth: hci6: command tx timeout [ 279.003165] Bluetooth: hci1: command tx timeout [ 279.065216] Bluetooth: hci0: command tx timeout [ 279.194187] Bluetooth: hci2: command tx timeout [ 279.321279] Bluetooth: hci3: command tx timeout [ 279.385227] Bluetooth: hci5: command tx timeout [ 279.386571] Bluetooth: hci4: command tx timeout [ 279.452175] Bluetooth: hci6: command tx timeout [ 279.452338] Bluetooth: hci7: command tx timeout [ 281.068157] Bluetooth: hci1: command tx timeout [ 281.113229] Bluetooth: hci0: command tx timeout [ 281.256190] Bluetooth: hci2: command tx timeout [ 281.369504] Bluetooth: hci3: command tx timeout [ 281.433343] Bluetooth: hci5: command tx timeout [ 281.433379] Bluetooth: hci4: command tx timeout [ 281.499283] Bluetooth: hci7: command tx timeout [ 281.499313] Bluetooth: hci6: command tx timeout [ 335.353070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.357854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.358817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.360834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.367932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.368973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.369247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.371411] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.372555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.374557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.387368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.388710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.417752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.419334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.420451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.422966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.424933] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.426218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.460229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.462428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.464412] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.466714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.473841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.475518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.476714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.479935] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.483590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.483689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.492680] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.497361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.535443] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.538304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.551801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.567784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.570982] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.573821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.581560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.585827] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.588015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.628424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.641519] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.643540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.688549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.709300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.711860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.776575] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.778646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.782360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.433484] Bluetooth: hci2: command tx timeout [ 337.434404] Bluetooth: hci1: command tx timeout [ 337.434593] Bluetooth: hci0: command tx timeout [ 337.564215] Bluetooth: hci4: command tx timeout [ 337.625341] Bluetooth: hci3: command tx timeout [ 337.626639] Bluetooth: hci7: command tx timeout [ 337.754230] Bluetooth: hci5: command tx timeout [ 337.818517] Bluetooth: hci6: command tx timeout [ 339.481347] Bluetooth: hci0: command tx timeout [ 339.481787] Bluetooth: hci1: command tx timeout [ 339.481869] Bluetooth: hci2: command tx timeout [ 339.609205] Bluetooth: hci4: command tx timeout [ 339.674199] Bluetooth: hci7: command tx timeout [ 339.674234] Bluetooth: hci3: command tx timeout [ 339.801379] Bluetooth: hci5: command tx timeout [ 339.865192] Bluetooth: hci6: command tx timeout [ 341.529303] Bluetooth: hci0: command tx timeout [ 341.530849] Bluetooth: hci2: command tx timeout [ 341.530901] Bluetooth: hci1: command tx timeout [ 341.657235] Bluetooth: hci4: command tx timeout [ 341.721227] Bluetooth: hci3: command tx timeout [ 341.722779] Bluetooth: hci7: command tx timeout [ 341.851211] Bluetooth: hci5: command tx timeout [ 341.914255] Bluetooth: hci6: command tx timeout [ 343.577548] Bluetooth: hci1: command tx timeout [ 343.579258] Bluetooth: hci2: command tx timeout [ 343.580573] Bluetooth: hci0: command tx timeout [ 343.706167] Bluetooth: hci4: command tx timeout [ 343.770404] Bluetooth: hci3: command tx timeout [ 343.772282] Bluetooth: hci7: command tx timeout [ 343.898353] Bluetooth: hci5: command tx timeout [ 343.962374] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:17:16 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86825948 RDX=1ffff1100d9c135c RSI=1ffff1100d9c135a RDI=ffff88806ce09ae0 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a08 R8 =ffffffff8682594c R9 =ffff88806ce09ab8 R10=000000000003c001 R11=00000000000218e4 R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff888027cf79d8 R15=ffff88806ce09a78 RIP=ffffffff811499b9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f62e3390028 CR3=0000000025fa6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88806cf3ba40 RCX=ffff888022b01c00 RDX=1ffff110012daa78 RSI=0000000000000000 RDI=ffff8880096d53a8 RBP=ffff8880096d5300 RSP=ffff88806cf09d40 R8 =00000000000002d1 R9 =ffff88806cf3bac8 R10=0000000000000001 R11=00000000b8fbaf46 R12=0000000000000000 R13=ffffffff863f34b8 R14=ffff8880096d53c0 R15=ffff88806cf3bbb8 RIP=ffffffff8127c7f2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feceae6a8e0 CR3=0000000033ac2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000