Warning: Permanently added '[localhost]:59949' (ECDSA) to the list of known hosts. 2023/08/21 03:17:54 fuzzer started 2023/08/21 03:17:55 dialing manager at localhost:46849 syzkaller login: [ 108.101808] cgroup: Unknown subsys name 'net' [ 108.287024] cgroup: Unknown subsys name 'rlimit' [ 120.551187] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/21 03:18:09 syscalls: 209 2023/08/21 03:18:09 code coverage: enabled 2023/08/21 03:18:09 comparison tracing: enabled 2023/08/21 03:18:09 extra coverage: enabled 2023/08/21 03:18:09 setuid sandbox: enabled 2023/08/21 03:18:09 namespace sandbox: enabled 2023/08/21 03:18:09 Android sandbox: enabled 2023/08/21 03:18:09 fault injection: enabled 2023/08/21 03:18:09 leak checking: enabled 2023/08/21 03:18:09 net packet injection: enabled 2023/08/21 03:18:09 net device setup: enabled 2023/08/21 03:18:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/21 03:18:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/21 03:18:09 USB emulation: enabled 2023/08/21 03:18:09 hci packet injection: enabled 2023/08/21 03:18:09 wifi device emulation: enabled 2023/08/21 03:18:09 802.15.4 emulation: enabled 2023/08/21 03:18:09 fetching corpus: 0, signal 0/0 (executing program) 2023/08/21 03:18:10 starting 8 fuzzer processes 03:18:10 executing program 0: r0 = pkey_alloc(0x0, 0x2) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000048}, 0x4004800) pkey_mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2000008, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, r1) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) pkey_free(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/123, 0x7b, 0x1, &(0x7f0000000180)=""/116, 0x74}, &(0x7f0000000240)=0x40) pkey_free(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xd, 0x2, 0x24, @mcast2, @mcast1, 0x10, 0x20, 0x4, 0x3}}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x20040886) r4 = pkey_alloc(0x0, 0x2) pkey_free(r4) pkey_alloc(0x0, 0x3) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000480)={0x0, 0xc30, 0x1, 0x5, 0x8, 0x40}) io_uring_setup(0x6cef, &(0x7f00000004c0)={0x0, 0xb2e, 0x10, 0x2, 0x2dd}) r5 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000011, r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x1c}}, 0x0) 03:18:10 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x840) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x31, 0x7, 0x0, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8, 0x1, 0x9, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x204, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x88d0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000007c0)) r7 = syz_open_dev$vcsu(&(0x7f0000000800), 0x8, 0x111980) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r8, 0x809, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000c00)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/143, 0x8f, 0x0, &(0x7f0000000b40)=""/166, 0xa6}, &(0x7f0000000c40)=0x40) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000c80)=@gcm_256={{0x303}, "6df8369549d46f7d", "284517791cc9c5fd92ab22e2d0e9f83dfd54c163b908593d0d33a70ec0e0dd41", "eb97e974", "a787a09abdcf701a"}, 0x38) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r9, 0x6, 0x1a, &(0x7f0000000cc0)="ea1b94467c1293beddfaa6809eb7a67dfd15ce5a0ab2b74847580f667d52308d12c7d5c194515a6de538a832d13992eed576b775fa7080ad5f8f4dbb71fbb2649539256f7b04ba793f8e4d4b1c3e9fcc1137a4ee431cf3c28d7f98447818138d403904d9963f749690c46f477cfcd6e5180d0f887ae92ba3ac33392ac03f86ba33acd3eea69491cfdc85f8f9897a6a55752bd21a433b317025171d533e630659dcadd5f9b37d76675602876e79fdb43112b7886ec14fb9d3f9e98f0f8df0f86b66400dbddc0091", 0xc7) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x85b}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 03:18:10 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xd60, 0x20000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/59) eventfd2(0x800, 0x0) r1 = fsopen(&(0x7f0000000080)='ext2\x00', 0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x4]) r2 = fsmount(r0, 0x0, 0xf9) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000100)='sync\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x962d338a80a6e113}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffff}, @ETHTOOL_A_EEE_HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x811}, 0x4001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x708000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r5 = fsmount(r0, 0x0, 0x80) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000540)='veth1_to_bond\x00', &(0x7f0000000580)='./file0\x00', r5) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044011}, 0x40) r6 = getpid() getpgid(r6) r7 = fsmount(r5, 0x1, 0x4) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000780)={&(0x7f0000000700), &(0x7f0000000740)=""/47, 0x2f}) 03:18:10 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/71) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)=""/54) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xb6bac8e1cee4afe0}, 0x4c50) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/129) shmctl$SHM_UNLOCK(r0, 0xc) shmget(0x2, 0x9000, 0x2, &(0x7f0000ff5000/0x9000)=nil) r2 = shmget(0x1, 0x4000, 0x1002, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40001) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff6000/0x4000)=nil) r4 = shmget$private(0x0, 0x1000, 0x54002002, &(0x7f0000ffa000/0x1000)=nil) shmat(r4, &(0x7f0000ff4000/0x3000)=nil, 0x1000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40008814}, 0x20048004) [ 121.691213] audit: type=1400 audit(1692587890.066:6): avc: denied { execmem } for pid=268 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:18:10 executing program 3: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) pipe2$9p(&(0x7f0000000000), 0x84000) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x4, 0x3, 0x7f, 0x7f, 0x8, 0xffff}) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x2, 0x7fe0, 0x1, 0x9, 0x4, 0x2, 0x8}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x10000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000180)="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", 0x1000) r2 = fspick(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001180)='-]\\\x00', 0x0, r2) r3 = syz_open_dev$vcsu(&(0x7f0000001200), 0xd9, 0x2000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4048011) mmap$binder(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x11, r3, 0x5) r5 = fsmount(r3, 0x1, 0x70) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f00000013c0)={0x100, 0x1, 0x3, 0x9, 0x9, 0x8}) socketpair(0x22, 0x5, 0xd09f, &(0x7f0000001400)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000001440), 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001480)='dctcp-reno\x00', 0xb) 03:18:10 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe0}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3) socketpair(0x2c, 0x5, 0x401, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008805}, 0xc0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x8c) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000500)=""/189) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r6, 0x1, 0x70bd27, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x240490c4}, 0x4000054) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000780)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) 03:18:10 executing program 6: shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/4096) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001000)=""/30) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000001040)=""/61) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x18090}, 0x4000000) r2 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000011c0)=""/96) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x40}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000013c0)=""/162) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4e63f0da2c9b1db6}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x95) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r5) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x4c, r7, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xd9}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x11, 0xffffffffffffffff, 0xfffffffffffffffb) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x84, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf0}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3a}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 03:18:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}}, 0xc004010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x84}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xc60c4d8753182b2e}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000007c0)={@empty, 0x0}, &(0x7f0000000800)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@rand_addr, 0x0}, &(0x7f0000000880)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x160, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x357ea01e776eb846}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000014) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000b00)=0x2, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x884) [ 122.881187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.884566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.887123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.892386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.899262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.901353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.097192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.104550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.106689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.147387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.170339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.183000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.198553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.202093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.208072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.215664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.219016] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.226962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.968355] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 124.969656] Bluetooth: hci0: command 0x0409 tx timeout [ 125.096606] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 125.223026] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 125.223171] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 125.225198] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 125.286926] Bluetooth: hci3: command 0x0409 tx timeout [ 125.350901] Bluetooth: hci4: command 0x0409 tx timeout [ 127.014890] Bluetooth: hci0: command 0x041b tx timeout [ 127.335915] Bluetooth: hci3: command 0x041b tx timeout [ 127.400117] Bluetooth: hci4: command 0x041b tx timeout [ 127.552881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.554908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.555775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.557877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.559153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.560742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.932460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.941179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.942724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.955596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.963756] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.968264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.288765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.291218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.328347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.342326] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.346809] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 128.356089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.065024] Bluetooth: hci0: command 0x040f tx timeout [ 129.384732] Bluetooth: hci3: command 0x040f tx timeout [ 129.447475] Bluetooth: hci4: command 0x040f tx timeout [ 129.638918] Bluetooth: hci1: command 0x0409 tx timeout [ 130.024215] Bluetooth: hci2: command 0x0409 tx timeout [ 130.280071] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 130.344906] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 130.471427] Bluetooth: hci6: command 0x0409 tx timeout [ 131.112073] Bluetooth: hci0: command 0x0419 tx timeout [ 131.432925] Bluetooth: hci3: command 0x0419 tx timeout [ 131.496255] Bluetooth: hci4: command 0x0419 tx timeout [ 131.687876] Bluetooth: hci1: command 0x041b tx timeout [ 132.072254] Bluetooth: hci2: command 0x041b tx timeout [ 132.519956] Bluetooth: hci6: command 0x041b tx timeout [ 133.734940] Bluetooth: hci1: command 0x040f tx timeout [ 133.756029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 133.765224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 133.775679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 133.823148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 133.862131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 133.863297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.118877] Bluetooth: hci2: command 0x040f tx timeout [ 134.567881] Bluetooth: hci6: command 0x040f tx timeout [ 135.719187] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 135.784134] Bluetooth: hci1: command 0x0419 tx timeout [ 135.975926] Bluetooth: hci7: command 0x0409 tx timeout [ 136.167450] Bluetooth: hci2: command 0x0419 tx timeout [ 136.616066] Bluetooth: hci6: command 0x0419 tx timeout [ 138.023433] Bluetooth: hci7: command 0x041b tx timeout [ 138.713365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.723301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.737340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.757199] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.764670] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.769159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.070907] Bluetooth: hci7: command 0x040f tx timeout [ 140.840909] Bluetooth: hci5: command 0x0409 tx timeout [ 142.119034] Bluetooth: hci7: command 0x0419 tx timeout [ 142.887180] Bluetooth: hci5: command 0x041b tx timeout [ 144.935879] Bluetooth: hci5: command 0x040f tx timeout [ 146.983575] Bluetooth: hci5: command 0x0419 tx timeout [ 185.354249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.358893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.361082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.367623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.370621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.374252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.401323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.403405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.406488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.411536] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.414741] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.416472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.431945] Bluetooth: hci3: command 0x0409 tx timeout [ 187.494890] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 187.496453] Bluetooth: hci0: command 0x0409 tx timeout [ 189.479003] Bluetooth: hci3: command 0x041b tx timeout [ 189.542979] Bluetooth: hci0: command 0x041b tx timeout [ 191.528002] Bluetooth: hci3: command 0x040f tx timeout [ 191.592368] Bluetooth: hci0: command 0x040f tx timeout [ 192.040161] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 192.231342] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 192.359004] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 192.491104] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 193.575535] Bluetooth: hci3: command 0x0419 tx timeout [ 193.638876] Bluetooth: hci0: command 0x0419 tx timeout [ 195.267294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.268629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.269479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.275410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.277759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 195.279349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.280382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.284202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.293194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.317379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.334073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 195.340983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.342391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.355041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.369977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.379226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.386589] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 195.390136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.646906] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 197.352113] Bluetooth: hci4: command 0x0409 tx timeout [ 197.353204] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 197.478979] Bluetooth: hci2: command 0x0409 tx timeout [ 197.543010] Bluetooth: hci7: command 0x0409 tx timeout [ 199.399280] Bluetooth: hci4: command 0x041b tx timeout [ 199.529919] Bluetooth: hci2: command 0x041b tx timeout [ 199.591010] Bluetooth: hci7: command 0x041b tx timeout [ 199.868493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.878188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.884281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.915342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.925058] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.947093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.109654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.130307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.131903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.185192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.188620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 200.190741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.477707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.489237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.504237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.549168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.555517] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.565318] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.447170] Bluetooth: hci4: command 0x040f tx timeout [ 201.575869] Bluetooth: hci2: command 0x040f tx timeout [ 201.639873] Bluetooth: hci7: command 0x040f tx timeout [ 202.023531] Bluetooth: hci1: command 0x0409 tx timeout [ 202.343900] Bluetooth: hci5: command 0x0409 tx timeout [ 202.664988] Bluetooth: hci6: command 0x0409 tx timeout [ 203.495051] Bluetooth: hci4: command 0x0419 tx timeout [ 203.623858] Bluetooth: hci2: command 0x0419 tx timeout [ 203.687941] Bluetooth: hci7: command 0x0419 tx timeout [ 204.071868] Bluetooth: hci1: command 0x041b tx timeout [ 204.391018] Bluetooth: hci5: command 0x041b tx timeout [ 204.713849] Bluetooth: hci6: command 0x041b tx timeout [ 206.118892] Bluetooth: hci1: command 0x040f tx timeout [ 206.438867] Bluetooth: hci5: command 0x040f tx timeout [ 206.759183] Bluetooth: hci6: command 0x040f tx timeout [ 208.169232] Bluetooth: hci1: command 0x0419 tx timeout [ 208.487890] Bluetooth: hci5: command 0x0419 tx timeout [ 208.808221] Bluetooth: hci6: command 0x0419 tx timeout [ 249.191884] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 249.512415] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 251.950817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.970971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.976089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.025090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.048258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.052297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.120027] Bluetooth: hci0: command 0x0409 tx timeout [ 254.310937] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 256.167905] Bluetooth: hci0: command 0x041b tx timeout [ 256.891823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.893729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.900122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.910346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.918181] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.930572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.159557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.168878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.178950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.190733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.198092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.200204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.216330] Bluetooth: hci0: command 0x040f tx timeout [ 258.984036] Bluetooth: hci2: command 0x0409 tx timeout [ 259.046895] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 259.239874] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 259.303921] Bluetooth: hci4: command 0x0409 tx timeout [ 260.263900] Bluetooth: hci0: command 0x0419 tx timeout [ 261.031942] Bluetooth: hci2: command 0x041b tx timeout [ 261.352302] Bluetooth: hci4: command 0x041b tx timeout [ 261.440818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.446212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.450287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.479279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.496195] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 261.501467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.845694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.849648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.870091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.876136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.877560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 261.878443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.016714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.028669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.032230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.043209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.047153] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 262.061182] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.079889] Bluetooth: hci2: command 0x040f tx timeout [ 263.079897] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 263.399084] Bluetooth: hci4: command 0x040f tx timeout [ 263.593391] Bluetooth: hci3: command 0x0409 tx timeout [ 263.976074] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 263.977262] Bluetooth: hci5: command 0x0409 tx timeout [ 264.167905] Bluetooth: hci7: command 0x0409 tx timeout [ 265.126998] Bluetooth: hci2: command 0x0419 tx timeout [ 265.449935] Bluetooth: hci4: command 0x0419 tx timeout [ 265.639209] Bluetooth: hci3: command 0x041b tx timeout [ 266.022927] Bluetooth: hci5: command 0x041b tx timeout [ 266.215222] Bluetooth: hci7: command 0x041b tx timeout [ 266.582791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.586677] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.591454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.610105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.641085] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 266.651095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.688300] Bluetooth: hci3: command 0x040f tx timeout [ 267.881876] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 268.070981] Bluetooth: hci5: command 0x040f tx timeout [ 268.263863] Bluetooth: hci7: command 0x040f tx timeout [ 268.711908] Bluetooth: hci6: command 0x0409 tx timeout [ 269.737807] Bluetooth: hci3: command 0x0419 tx timeout [ 270.118899] Bluetooth: hci5: command 0x0419 tx timeout [ 270.310898] Bluetooth: hci7: command 0x0419 tx timeout [ 270.760160] Bluetooth: hci6: command 0x041b tx timeout [ 271.181741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.183709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.187600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.194301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.205670] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.209116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.807871] Bluetooth: hci6: command 0x040f tx timeout [ 273.319110] Bluetooth: hci1: command 0x0409 tx timeout [ 274.855153] Bluetooth: hci6: command 0x0419 tx timeout [ 275.366876] Bluetooth: hci1: command 0x041b tx timeout [ 277.415137] Bluetooth: hci1: command 0x040f tx timeout [ 279.462872] Bluetooth: hci1: command 0x0419 tx timeout [ 316.327295] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 319.437411] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.441213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.448169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.491436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.501072] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.507298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.598479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.604148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.611140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.616744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.618779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 319.651581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.999101] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 321.574964] Bluetooth: hci2: command 0x0409 tx timeout [ 321.766934] Bluetooth: hci4: command 0x0409 tx timeout [ 323.170469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.180345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.185328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.195086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.219255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.225276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.622929] Bluetooth: hci2: command 0x041b tx timeout [ 323.706758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.716238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.720294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.750261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.765358] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 323.768502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.785861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.805798] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.816129] Bluetooth: hci4: command 0x041b tx timeout [ 323.836755] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.918469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.934860] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 323.937203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.286947] Bluetooth: hci0: command 0x0409 tx timeout [ 325.415891] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 325.671089] Bluetooth: hci2: command 0x040f tx timeout [ 325.863083] Bluetooth: hci5: command 0x0409 tx timeout [ 325.863403] Bluetooth: hci4: command 0x040f tx timeout [ 326.054951] Bluetooth: hci7: command 0x0409 tx timeout [ 327.334921] Bluetooth: hci0: command 0x041b tx timeout [ 327.720052] Bluetooth: hci2: command 0x0419 tx timeout [ 327.911272] Bluetooth: hci4: command 0x0419 tx timeout [ 327.912231] Bluetooth: hci5: command 0x041b tx timeout [ 328.103076] Bluetooth: hci7: command 0x041b tx timeout [ 328.727782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.744241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.746912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.756421] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.796260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 328.801214] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.383053] Bluetooth: hci0: command 0x040f tx timeout [ 329.959236] Bluetooth: hci5: command 0x040f tx timeout [ 330.151177] Bluetooth: hci7: command 0x040f tx timeout [ 330.470997] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 330.855413] Bluetooth: hci6: command 0x0409 tx timeout [ 331.432359] Bluetooth: hci0: command 0x0419 tx timeout [ 332.007425] Bluetooth: hci5: command 0x0419 tx timeout [ 332.199924] Bluetooth: hci7: command 0x0419 tx timeout [ 332.728303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.731103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.732504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.749467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.751916] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.761616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.902961] Bluetooth: hci6: command 0x041b tx timeout [ 333.382763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.394088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.397535] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.401350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.416148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.417555] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.825926] Bluetooth: hci1: command 0x0409 tx timeout [ 334.951977] Bluetooth: hci6: command 0x040f tx timeout [ 335.526930] Bluetooth: hci3: command 0x0409 tx timeout [ 336.871458] Bluetooth: hci1: command 0x041b tx timeout [ 336.998887] Bluetooth: hci6: command 0x0419 tx timeout [ 337.574870] Bluetooth: hci3: command 0x041b tx timeout [ 338.918884] Bluetooth: hci1: command 0x040f tx timeout [ 339.625080] Bluetooth: hci3: command 0x040f tx timeout [ 340.966882] Bluetooth: hci1: command 0x0419 tx timeout [ 341.671028] Bluetooth: hci3: command 0x0419 tx timeout [ 381.691757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.709538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.736807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.751162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.754977] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 381.783476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.398925] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 383.846934] Bluetooth: hci4: command 0x0409 tx timeout [ 385.894888] Bluetooth: hci4: command 0x041b tx timeout [ 386.588592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.596820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.602959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.626196] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.628676] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.631089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.942898] Bluetooth: hci4: command 0x040f tx timeout [ 388.326900] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 388.584057] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 388.711028] Bluetooth: hci2: command 0x0409 tx timeout [ 388.775123] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 389.990886] Bluetooth: hci4: command 0x0419 tx timeout [ 390.759976] Bluetooth: hci2: command 0x041b tx timeout [ 390.784556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.789792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.791653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.798279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.799585] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 390.801226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.448674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 391.453358] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 391.454326] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 391.459810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 391.467405] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 391.469816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 391.633636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.635701] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.647722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.654790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.664674] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 391.696726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.231034] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 392.807920] Bluetooth: hci2: command 0x040f tx timeout [ 392.871755] Bluetooth: hci5: command 0x0409 tx timeout [ 393.512995] Bluetooth: hci6: command 0x0409 tx timeout [ 393.767291] Bluetooth: hci1: command 0x0409 tx timeout [ 394.482798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.485377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.487075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.491076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.493499] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.495671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.854897] Bluetooth: hci2: command 0x0419 tx timeout [ 394.918881] Bluetooth: hci5: command 0x041b tx timeout [ 395.560867] Bluetooth: hci6: command 0x041b tx timeout [ 395.814953] Bluetooth: hci1: command 0x041b tx timeout [ 396.520436] Bluetooth: hci0: command 0x0409 tx timeout [ 396.966917] Bluetooth: hci5: command 0x040f tx timeout [ 397.606898] Bluetooth: hci6: command 0x040f tx timeout [ 397.673787] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 397.863695] Bluetooth: hci1: command 0x040f tx timeout [ 398.121902] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 398.567899] Bluetooth: hci0: command 0x041b tx timeout [ 399.016295] Bluetooth: hci5: command 0x0419 tx timeout [ 399.655152] Bluetooth: hci6: command 0x0419 tx timeout [ 399.910888] Bluetooth: hci1: command 0x0419 tx timeout [ 400.615237] Bluetooth: hci0: command 0x040f tx timeout [ 401.117321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.119949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.130244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.163272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.197497] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 401.206648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.374103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 401.375706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 401.376826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 401.381061] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 401.382402] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 401.386093] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 402.664854] Bluetooth: hci0: command 0x0419 tx timeout [ 403.302910] Bluetooth: hci3: command 0x0409 tx timeout [ 403.431592] Bluetooth: hci7: command 0x0409 tx timeout [ 405.351017] Bluetooth: hci3: command 0x041b tx timeout [ 405.481446] Bluetooth: hci7: command 0x041b tx timeout [ 407.400945] Bluetooth: hci3: command 0x040f tx timeout [ 407.527555] Bluetooth: hci7: command 0x040f tx timeout [ 409.448876] Bluetooth: hci3: command 0x0419 tx timeout [ 409.574947] Bluetooth: hci7: command 0x0419 tx timeout VM DIAGNOSIS: 03:23:14 Registers: info registers vcpu 0 RAX=ffffea00006327c0 RBX=ffff888018c9fbe0 RCX=ffff88800844f780 RDX=ffff888098c9fbe0 RSI=ffff888033379be0 RDI=ffff88800844f780 RBP=0000000000000000 RSP=ffff88802625fb48 R8 =ffff888018c9fbe0 R9 =0000000000000000 R10=ffffea0000ccde40 R11=00000000000d000a R12=dffffc0000000000 R13=ffff88802625fb88 R14=0000000000000000 R15=ffff888033379be0 RIP=ffffffff81836c03 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1bb24b427c CR3=00000000302fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249 XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801441f6c8 RCX=0000000000000000 RDX=ffff88800eaf51c0 RSI=ffffffff8113be63 RDI=0000000000000006 RBP=ffffffff8616a87e RSP=ffff88801441f640 R8 =0000000000000006 R9 =ffffffff818a7f4a R10=ffffffff818a7e40 R11=0000000000000000 R12=0000000000000001 R13=ffffffff818a7f4a R14=ffff88801441f709 R15=0000000000023ad7 RIP=ffffffff814d916b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005572df7b9fa8 CR3=000000001adee000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000