Warning: Permanently added '[localhost]:8945' (ECDSA) to the list of known hosts. 2024/10/25 01:58:48 fuzzer started 2024/10/25 01:58:48 dialing manager at localhost:45639 syzkaller login: [ 65.870007] cgroup: Unknown subsys name 'net' [ 65.937384] cgroup: Unknown subsys name 'cpuset' [ 65.993376] cgroup: Unknown subsys name 'rlimit' 2024/10/25 01:59:06 syscalls: 226 2024/10/25 01:59:06 code coverage: enabled 2024/10/25 01:59:06 comparison tracing: enabled 2024/10/25 01:59:06 extra coverage: enabled 2024/10/25 01:59:06 setuid sandbox: enabled 2024/10/25 01:59:06 namespace sandbox: enabled 2024/10/25 01:59:06 Android sandbox: enabled 2024/10/25 01:59:06 fault injection: enabled 2024/10/25 01:59:06 leak checking: enabled 2024/10/25 01:59:06 net packet injection: enabled 2024/10/25 01:59:06 net device setup: enabled 2024/10/25 01:59:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/25 01:59:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/25 01:59:06 USB emulation: enabled 2024/10/25 01:59:06 hci packet injection: enabled 2024/10/25 01:59:06 wifi device emulation: enabled 2024/10/25 01:59:06 802.15.4 emulation: enabled 2024/10/25 01:59:06 fetching corpus: 0, signal 0/0 (executing program) 2024/10/25 01:59:08 starting 8 fuzzer processes 01:59:08 executing program 0: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x200, 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x0, 0x1, 0x1, 0x9}}}, 0xb) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x40000) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x44002, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x440c4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20040804) io_cancel(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x2800, r1, &(0x7f00000004c0)="8e90fe4a98c14066", 0x8, 0x7, 0x0, 0x2, r1}, &(0x7f0000000540)) syz_io_uring_setup(0x67f7, &(0x7f0000000580)={0x0, 0x574c, 0xc7184694989b97ca, 0x0, 0x397, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) openat$cgroup(r1, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r1}, {0x8, 0x1, r7}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80800}, 0x4048000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001040)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000980)={0x658, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x378, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}.++,,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/proc/key-users\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#/[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$K#\xbf\xae[/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xc3-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "726d3494102901dc346d3c91e93fa12fbbc378763d653fa286e6e8202906d3fe342c79465663cd7e3442244a1bfc683d41fc5a466baa531e24405939e20719ad567e7880f42cecf460e0821efbfe1bc6aa1458fcca63c88044d4248f26ea091249d7ff0b001888acddd5d908b5fa07"}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "3adf778d684b4c3ca0c917"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e88}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',:%-@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "b174601209bcf24c1cedab41caf99d9d956e3d1cf56eb1a6da704f5b097ff385e4c597363583fbac3824e8dd4ab2199d8dcfe5d39bd432b82434baecf7c613a92c1524c46f492a5a9885581b78c5edb052bdec3d85694947842ea77be6da3d891a483f529e6c"}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x25, 0x2, 'blkio.bfq.io_wait_time_recursive\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%$\\\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/proc/bus/input/devices\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-\'-\x13-{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x94($[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x2a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9b9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\x89\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(#[^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '})]*\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x25, 0x2, 'blkio.bfq.io_wait_time_recursive\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe01}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd517}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x176d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "4caae75e46074fb1b140214885c6b017f3cafe78629f50fe16ff6379d29ba21e6b147ab954f68a8da658748287f31e6f5fdf1c48b2935c63607912c81b3389b54a916e80b0831a1352448b9bc5cbb00eff89f4b1bc4d99bf86f34ba60cd1c9e3293552fdf8a952750574b2bd3da6bb03e2eb9f38e0dca3bf47bfc500df76e5e5250ec72ee2c95186b33fcd3807eadd259c57363f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "c1337163c26caf542c2a3863fa7e792ee29a5803a5a69bea6aa1c4914d2a3b84e304e5d631728de85542f64c9c9abe7bb95a9fb857ccba40f5ecb25b8677adcf82f8af58332098e25fc8352f3690ed4ae67f51dee8ae59dc5d0b266ed832da8d45ce0e41ee79acf34dc48c28af2debee039b017af4a814147500aed57b048156c1ed400d30"}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 01:59:08 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000000)="f5eb343629f8fb74ff01972c5f579a00bd7e7b0abb27133e0fc795648e089f43444b0917ee363c1e57af11d579184aeb3698faf52b830b6edee2eca385dff519549f68618cdd34bf5e42e7f4567790ddb0c52a93de3899a059c77cdedbafdea76abc00b7b6cf84c492b49884b2a2c23ee09220ff14a392014604050543e303b1b1529b7334", 0x85}, 0x68) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) r0 = syz_io_uring_setup(0x7414, &(0x7f0000000180)={0x0, 0x982e, 0x0, 0x2, 0x5}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000280)="89b8eaf6f5d613b2764fdba41c0f057c1508dba062c7f232f997f512d039e2aaf345a0974eeeea46e03153", 0x2b, 0x100, 0x0, 0x2}, &(0x7f0000000300)) io_destroy(0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x29, 0x3f, 0x3, 0x7fff, 0x35, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x0, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x70}}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'sit0\x00', r2, 0x29, 0x4, 0x6e, 0x9, 0x49, @empty, @private2, 0x8000, 0x10, 0x100, 0x5}}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) r4 = socket(0x22, 0x2, 0x80000001) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]}, 0x40}}, 0x890) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x20}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x9, 0xfff8, 0x1, 0x65, 0x3, 0x5, 0x9, 0x100, 0x4]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/stat\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000a00)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/27, 0x1b, 0x0, &(0x7f00000009c0)=""/64, 0x40}, &(0x7f0000000a40)=0x40) r7 = fork() ptrace$cont(0x7, r7, 0x1, 0x1) 01:59:08 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8004}, 0x4048050) move_pages(0x0, 0x7, &(0x7f00000001c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000200)=[0x80, 0x9], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x9, &(0x7f0000ff7000/0x9000)=nil, 0x6) shmget(0x1, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x13, r1, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget(0x3, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r3 = syz_io_uring_setup(0x6c9b, &(0x7f0000000300)={0x0, 0x5662, 0x2, 0x1, 0x19c, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x880, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f6, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x44) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x40010, r3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000540)={0x24, @long={0x3, 0x3}}, 0x14) r5 = fcntl$getown(r4, 0x9) move_pages(r5, 0x5, &(0x7f0000000580)=[&(0x7f0000f11000/0x2000)=nil, &(0x7f0000b8e000/0x4000)=nil, &(0x7f0000e28000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000f04000/0x1000)=nil], &(0x7f00000005c0)=[0x5, 0x5, 0xaa9, 0x7], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) io_submit(0x0, 0x5, &(0x7f0000000a80)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000640)="87f29f9814110e753775e9741502dad52ad36a89163f93cbeafa9c87358ee9f9969dde174fac0d502544a2bf30", 0x2d, 0x62, 0x0, 0x2, r1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f00000006c0)="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", 0xfe, 0x1, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x2, r4, &(0x7f0000000800)="c5135c2263494d91c9c0d5255e98d5fa13689d8048ab155d96030a0862c56cff139d71cad57f723c49ccd9bb467d7a572429d67f9b7e4229e415b64ca479d1a8c16379f2c6d2f1103349d39f8a2f9920242f8cda", 0x54, 0x1, 0x0, 0x2, r1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0xffff, 0xffffffffffffffff, &(0x7f00000008c0)="b05249db0f180ab65d9deb1c6ce10a81950aa8b8e66a69ebad06b50375750023fcf44d3882c07210c5b0e7ffe250aa359c8b78e3c31b9925f3b53d4cd7d73a4458c299fbdaa28a0b8ece91ab75790be27af88cf405ec88149b6095c156ea16bb9d869d099dbd0fe537aefadaa3a8ef99583523fac76df9939ac9843be71532091fce80b240d4e48e8b1116820b16f457388c6674a9a5fcadc44e22e99a25879680c6d7a1e37367c261b429c0fb3aa542778627c57d65e38c64da7c401705f8d8a47a0d1f72b68a7ea373f4460d5ec8f2e38caafb3cb55afde06f3fce576a3489fd0af0cbc74eddc49a9811409d5105816732c946f2e0", 0xf6, 0xfffffffffffffffa, 0x0, 0x2, r4}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xff00, r1, &(0x7f0000000a00)="d665b924f1ff7df321e675e56d021bea15369670e0c8ff164b4d974f0a57381f450faa3ed9b983bf8d75197fb5e7f344689d", 0x32, 0x0, 0x0, 0x1, r1}]) 01:59:08 executing program 2: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x7d}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000040)="d3c1d337f49923865c790362c3f42b9d524b4c1c5ffb1bcd569a7c9e1023b6462b11012fa52086d70479d4fd0e28d35d2f24cbeab776492ae1f79ee472b9a6b1d07a2deeedd1c96267353c5cb79e8d93f3357446f2898727dc98ce0fb6de978055383c9c47f6c7ccffd74e0176f5034335b3c8bd0814e4e8060bfb0f160d1c2971b389") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffab3}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = openat$cgroup_subtree(r1, &(0x7f0000000280), 0x2, 0x0) io_cancel(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x7ff, r3, &(0x7f00000002c0)="fba90eb5a4f7d5a35adae961fab98943a6b53450b46e8c308ffa972ec8854832dcd2950e700c5aeb4649232d8c2a9fd7b25d41b74078168f9537ffbef3ec443cc057d068c691da028e7dbc1c5c8c2b38436de9d6fbaef908e6f8cbc8c2bc30712efd2bc26c615dad55323879e1345bd6f90d8c55dcf352ec95b3614eb2e834839b5578832483ccd2dca9d20499f52fa618363a2c42d734868c80285701", 0x9d, 0x7, 0x0, 0x3, r1}, &(0x7f00000003c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x52}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x4800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x1, &(0x7f0000000580)=""/39, 0x27}, &(0x7f0000000600)=0x40) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x18af}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1e4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x2404c804}, 0x8000) 01:59:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x31}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc15}]}, 0x28}, 0x1, 0x0, 0x0, 0xc042}, 0x4000010) r4 = openat$cgroup_ro(r2, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4081) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x7, 0x200, 0x16, @private1, @rand_addr=' \x01\x00', 0x8700, 0x8000, 0xab, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r6, 0x7, 0x10, 0x7, 0x2, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x68, 0x0, 0x7f, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0xf2, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2]}, @lsrr={0x83, 0x7, 0x1f, [@rand_addr=0x64010101]}, @lsrr={0x83, 0x17, 0x4d, [@local, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010102]}]}}}}}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.dequeue\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5b6, 0x1b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000400}, 0x4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1a8, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_FRAME={0x130, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @broadcast, @random="079ac9d07e48", {0x1, 0xff}}, @ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x2000, 0x0, @random=0xffff, @val, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0x7ff, 0x40, 0x0, 0x1f, 0x0, 0x1, 0x1}, 0x400, 0x5, 0x3f}}, [{0xdd, 0xea, "1d4afc1d655014429301e5ecd2883898010ae617c6aade41d06b6d498c5ff34d0f6f3c51bfe9289f73f3c4b19b9ed00e7c09e5047bd1913982a1481a219de3b6f69fe42e152381227ae42c80448ddfef284bf0a9b8ffb95fb9c38d9658dd60ac6b2a2e8bf2d23c2e3195dad134fcd425274c203e1589b06a88cde884a33d51a2e070b1fa28e588a5f78051ee644350529f03e45843b3b51c9ce34478d5b8040f65abcbe376df4750b401ced0447562be1f171b014aee2c36d1aa5761969495210399d4b182d6ad6124f5c1a7760047d7830a47834b95571e7a1d0aa64bad8e5f3fb485d39509b81511f6"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x9, 0x5, 0xfff, 0x400, 0x2]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb4f}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r0, 0x11, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c884}, 0x60008009) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4008880) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r9, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x14}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd3b}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x115f}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) [ 84.969319] audit: type=1400 audit(1729821548.354:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:59:08 executing program 7: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@loopback, 0x3f}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"c8aadacc678d95fc302e0778bc0f9f56", 0x0, 0x0, {0x80, 0xc8}, {0x55e, 0x290da6fa}, 0x39de, [0x9, 0xce3, 0x400000000000000, 0x3, 0xffffffffffff8d5f, 0x641, 0x1, 0xf74, 0xfffffffffffffff8, 0x80000000, 0x4, 0x3d3a, 0x0, 0x1ff, 0x7, 0x1]}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000280)={"485bee7a6b7f4b104e195d7e18c15152", r5, r6, {0x1, 0x9}, {0x4a1, 0x3}, 0xa6b, [0xbe9, 0x1, 0x101, 0x7, 0x6, 0x3f, 0x2, 0x5, 0x4, 0xee4, 0x2, 0x2, 0xfff, 0x5, 0x2, 0x7f11]}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x845}, 0x8000840) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x22e520d6e099ccff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000011) io_setup(0x96c6, &(0x7f0000000640)=0x0) r9 = socket$inet6(0xa, 0x6, 0x5) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) io_cancel(r8, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x5, r9, &(0x7f0000000680)="97e07eec7fe1d19cde091d4adde6e2db55454c59bb7d195dab93071f9d5537d7ebd23d9c1952129737ff455b783c594c2eabcc31eca2a8b298e9e9905d1de77bc3485d55e9b55fa07497bafb", 0x4c, 0x5, 0x0, 0x1, r10}, &(0x7f0000000780)) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r11, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x250, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1e, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x4, @void, @void, @void}}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x60}}]}, @NL80211_ATTR_IE={0x38, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x5, 0x3f}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb3, 0x6}}, @mesh_chsw={0x76, 0x6, {0x4, 0xa0, 0xb, 0x1000}}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x3, @device_b, 0x40, "", 0x6, 0x1, @broadcast, 0x7}}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@link_id={0x65, 0x12, {@random="4c432aab7da3", @device_a, @device_b}}, @dsss={0x3, 0x1, 0xc8}, @random={0x9, 0xaa, "4dddafcd10365384149dfadef04634d5c698410ee5ea9994379e299fec05207e6be344eadb8daad8ac491a84fb60b5e1b28f21b7ffd6f544d1025d200d5acd10851a5fe44f90b3e590e1026e8bcf80567ff8ed20a157665e575ba8e4125cb2a98dd3ed861f87a1e4fc3309a2fa45b54d8795f740656568aa814cd689a19d1062ddf7490b48708294d9386b0c98da74afdb40d634af6fdfac655375d56eb2d9002933f726038921788495"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "1ea65c7e4af9"}, @NL80211_ATTR_FILS_ERP_RRK={0xc4, 0xfc, "4d2181abd70508f238a974fce720b69b5c918d51bb30be7336fd3ee049462c148b32b2da7b44f73043b29da74b4036c817cf8a00c26b0f841b157eba3f4629d134bf4c4cf38f6ed2e06ebe071a156ca37af937c6402a2d1dce485dfb50c7a6a6d54a5d533c28367744f819e7d24e5a223edefed234a3474b3b76b1f54cd633b4872e10cfac1858151ad825204cd349311497006c4dfb0ae7924cfa480ffed52adcdba327e144286b2e6ccce345cdb98020cf2c0e3435f0e59ee8af80526e3da0"}, @NL80211_ATTR_FILS_ERP_REALM={0x24, 0xfa, "2360f0136d73bcb45e61b9074ad8e72e3355a6c476abee04727e862a8ec36740"}], @NL80211_ATTR_IE={0x27, 0x2a, [@mic={0x8c, 0x18, {0x4ac, "2d4a80b132ab", @long="60bc7d03a20af6f34741e5e74d8b2e33"}}, @challenge={0x10, 0x1, 0xb0}, @erp={0x2a, 0x1, {0x1}}, @supported_rates={0x1, 0x1, [{0x36}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000030e}, 0xc, &(0x7f0000001c00)={&(0x7f0000001180)={0xa48, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x99}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0xa48}, 0x1, 0x0, 0x0, 0xc000}, 0x8000000) 01:59:08 executing program 5: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xc1, 0xc5, "1d3dae441198d553f80bf63a31b32d8525e5acb23f782326fe64ebeee2b756315fddc34f00193c164c791e472ff44865854bab1836c69a9293f06e523aa3bdfa31cb09cf3007fb7d1266e9bb0a2106610cf8e57d2cabc29575e1ba0863351cb46c2645f6fe29f1dd7457ce739e85f45d1a94d2f4aaa3bbfe66d8135517656cb34bb0b30f2ee3101022cc37002bebe52aa24582f7ad77d38b21fa90ebd2f7d0b45258f34f752493b11ddaeb5f9f6672d2f205c809d2a8988aa8d2735169"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "d8a64f26c9ffd455d032b98a4be8f220b17e95d1699fab95c39ececd9fba7738d7068208a4c0277f21d2dbd2f14f9c54691453bc91548ecaa81ec9a82a85ac6aa491817396634c3775d302d4bda9f4c10790ddfff4667e488938a89f33aa3b1633f095b8d7731850ae59373240d462e8f3dcecf26529304475d1b19252a84b43e7900e03eb1fea4dc642b789696d8747ed667743e38257d86e0d580f5a3eec119abd6781bf0860664bae579432272b92e9190806eaf6813376b4223822f8d189f8fe79d117789d767a09f5f0c9a4b4b1ba831733c6473575eeb569cf9f937673f05ddefe7fcb5e3c8f9433"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8040}, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x16}}}}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "326196f8f3ce66d418c7"}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x11, 0x4, "74d1e0405a1491d83a25cc3fe8"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4011) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4010) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3f8, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8008000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000009c0)={@empty, @dev}, &(0x7f0000000a00)=0xc) io_setup(0x7f, &(0x7f0000000a40)=0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d00), 0x200000, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000f00), 0x400200, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f80), 0x10b080, 0x0) io_submit(r5, 0x7, &(0x7f0000001100)=[&(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x800, r4, &(0x7f0000000a80)="aa19205c863b6b99151e7e763256b6b50ac7462cc2c79fceddfc2af51b2d7c8c854da91e0129a6108c4d89d74fabc77e99d956c3b6dcc3db2021bb4ad33203a77d7ad041f5b7a5a240781a161bfd2808fabaf090ae28cf07ed9d9e3cf0fa42937108bc9c32f1a64794a2343bad0c5b4a15e236739c68cbf4887b327f0715cb083461e3f8cb5be604ce4140e1938e45302f67ded1c166bf479fd00de0fad8ce5f682ec631452362e1abd9f60ae3282159345157250fb247515cad2107ce6eb613a83fae3cb88486721a35ddb963", 0xcd, 0x5, 0x0, 0x3, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x8, 0x454, r3, &(0x7f0000000bc0)="8f0d679581494ebde79e48bbaa3bb5c62cffad1ee07af3c9f9cbf2590b6efccc1755c30f6ec74581158015a991b6e86e459f53ff151c8e6c45fb34b259d574284b36168422296e34f702104cde58bb78600ee3c6677fc4497e55afa01957b0d073d8dd647e79d98464d970b812084c1af59ddba067", 0x75, 0x7, 0x0, 0x2, r6}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0xcc72, r1, &(0x7f0000000cc0)="4c6d9fde3eee3ecbad1cb41604b00b4f4cccec51dabcea55bd17405160db321c5ae6f762d0043154447b09f94a233e5d5e900c3a4a", 0x35, 0x200, 0x0, 0x3, r7}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f0000000d80)="b05b7880d9d5c815d4dab39dcb69", 0xe, 0x5}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x1, 0xb592, r8, &(0x7f0000000e00)="107133c1740e790b9a6d256592816b6902d318d968fccce2f6cf0cba98ba059f2c1d47b7808ecf8ce58f95d1689ebcdcca0e6b619be74b242fef2691374080bfdedf10362e3299f64dfcaf18141911824dfe9a134f0c8e70b0b7cb90b1a66be4743ca7ccdb8d7abca85f47880d6ca8813e7233e57cf12502ca728b674312a5b9c3b2eceb4b37b15c5947112dab073729b97610098cb4e0904914b5c12bafc83075546a1db52aa3c0e1c36a84c4717f7d33ca682e15e825a856f72221e7314c871d1574fa46bb167fca2f94821576518d5f3a10e69e7085f1c0c763d1fd5d61", 0xdf, 0x2f7, 0x0, 0x4, r9}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x2, 0x7, r10, &(0x7f0000000fc0)="105cc97367719e5c3896386143cefeda71bb9ed1f9597bb05dcf9aa4faa41871c74ec5", 0x23, 0x7, 0x0, 0x6}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000001080)="6e51ab64f5e05afe389d90218c4d0280e0676f53df0b6a9b61fb35d05492585b81d7c075f8c81a8f14be4c6a85a424196ba63de9a858fe53048c", 0x3a, 0x8, 0x0, 0x2, r2}]) 01:59:08 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), 0x4) socket$inet(0x2, 0x2, 0xfffffffc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfa, 0x14}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = socket(0x25, 0x4, 0x9) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8080) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x810400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf77}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0x9, 0x6]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x757}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040850) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x4002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xc0860000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040810}, 0x80) [ 86.374707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.396660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.397977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.403595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.404425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.413650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.422596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.424104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.432705] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.433610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.435105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.436897] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.438000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.438841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.440001] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.441743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.447676] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.452307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.507443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.515788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.519318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.520274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.521004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.523180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.526424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.528384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.530006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.532100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.533377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.542166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.543365] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.545070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.549938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.555308] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.562362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.565626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.566410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.571759] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.574011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.583808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.587714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.594253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.596768] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.599144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.601372] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.604337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.623660] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.630770] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.520577] Bluetooth: hci1: command tx timeout [ 88.521272] Bluetooth: hci2: command tx timeout [ 88.521948] Bluetooth: hci0: command tx timeout [ 88.647723] Bluetooth: hci4: command tx timeout [ 88.648735] Bluetooth: hci3: command tx timeout [ 88.649304] Bluetooth: hci5: command tx timeout [ 88.650032] Bluetooth: hci7: command tx timeout [ 88.651424] Bluetooth: hci6: command tx timeout [ 90.573283] Bluetooth: hci1: command tx timeout [ 90.575919] Bluetooth: hci0: command tx timeout [ 90.577947] Bluetooth: hci2: command tx timeout [ 90.695675] Bluetooth: hci6: command tx timeout [ 90.696170] Bluetooth: hci3: command tx timeout [ 90.697001] Bluetooth: hci5: command tx timeout [ 90.697512] Bluetooth: hci4: command tx timeout [ 90.697536] Bluetooth: hci7: command tx timeout [ 92.615645] Bluetooth: hci2: command tx timeout [ 92.615673] Bluetooth: hci0: command tx timeout [ 92.616122] Bluetooth: hci1: command tx timeout [ 92.744174] Bluetooth: hci7: command tx timeout [ 92.744592] Bluetooth: hci4: command tx timeout [ 92.744820] Bluetooth: hci5: command tx timeout [ 92.745065] Bluetooth: hci3: command tx timeout [ 92.745448] Bluetooth: hci6: command tx timeout [ 94.663550] Bluetooth: hci1: command tx timeout [ 94.664599] Bluetooth: hci0: command tx timeout [ 94.664630] Bluetooth: hci2: command tx timeout [ 94.791684] Bluetooth: hci3: command tx timeout [ 94.792154] Bluetooth: hci6: command tx timeout [ 94.792209] Bluetooth: hci5: command tx timeout [ 94.792248] Bluetooth: hci4: command tx timeout [ 94.792289] Bluetooth: hci7: command tx timeout [ 149.113874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.117208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.118744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.122560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.124601] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.125835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.139709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.148313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.150360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.162124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.164009] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.165215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.209051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.211746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.214224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.231138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.244904] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.248759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.336077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.350824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.356785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.387597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.394686] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.400913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.468720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.485767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.487895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.520117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.526839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.528164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.902691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.915545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.917793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.918899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.922773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.926710] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.927888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.946208] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.956276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.975977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.976874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.980938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.995022] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.032118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.033965] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.039720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.047882] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.051092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.175687] Bluetooth: hci0: command tx timeout [ 151.239608] Bluetooth: hci1: command tx timeout [ 151.303693] Bluetooth: hci2: command tx timeout [ 151.559654] Bluetooth: hci4: command tx timeout [ 151.560734] Bluetooth: hci3: command tx timeout [ 152.008723] Bluetooth: hci7: command tx timeout [ 152.135781] Bluetooth: hci6: command tx timeout [ 152.136712] Bluetooth: hci5: command tx timeout [ 153.223702] Bluetooth: hci0: command tx timeout [ 153.288582] Bluetooth: hci1: command tx timeout [ 153.351535] Bluetooth: hci2: command tx timeout [ 153.608572] Bluetooth: hci4: command tx timeout [ 153.609135] Bluetooth: hci3: command tx timeout [ 154.055673] Bluetooth: hci7: command tx timeout [ 154.183779] Bluetooth: hci6: command tx timeout [ 154.184298] Bluetooth: hci5: command tx timeout [ 155.271557] Bluetooth: hci0: command tx timeout [ 155.335732] Bluetooth: hci1: command tx timeout [ 155.399624] Bluetooth: hci2: command tx timeout [ 155.656012] Bluetooth: hci3: command tx timeout [ 155.656579] Bluetooth: hci4: command tx timeout [ 156.104269] Bluetooth: hci7: command tx timeout [ 156.231668] Bluetooth: hci5: command tx timeout [ 156.232205] Bluetooth: hci6: command tx timeout [ 157.319605] Bluetooth: hci0: command tx timeout [ 157.384500] Bluetooth: hci1: command tx timeout [ 157.449517] Bluetooth: hci2: command tx timeout [ 157.703594] Bluetooth: hci3: command tx timeout [ 157.704136] Bluetooth: hci4: command tx timeout [ 158.151622] Bluetooth: hci7: command tx timeout [ 158.279686] Bluetooth: hci6: command tx timeout [ 158.280217] Bluetooth: hci5: command tx timeout [ 211.286937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.290246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.292393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.295924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.300047] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.301698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.344369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.348652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.352158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.358174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.365286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.367790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.370046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.379743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.382822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.389339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.403234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.405998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.474917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.477565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.479906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.502100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.505345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.537174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.571122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.579227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.594525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.618977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.624128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.627504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.631623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.645183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.650879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.652331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.672056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.674355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.675136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.678098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.683673] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.684948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.685730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.692297] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.694144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.695355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.727007] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.727076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.751624] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.761775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.384068] Bluetooth: hci0: command tx timeout [ 213.448926] Bluetooth: hci2: command tx timeout [ 213.450118] Bluetooth: hci1: command tx timeout [ 213.639682] Bluetooth: hci3: command tx timeout [ 213.703518] Bluetooth: hci4: command tx timeout [ 213.767832] Bluetooth: hci7: command tx timeout [ 213.832520] Bluetooth: hci5: command tx timeout [ 213.959686] Bluetooth: hci6: command tx timeout [ 215.433077] Bluetooth: hci0: command tx timeout [ 215.496901] Bluetooth: hci1: command tx timeout [ 215.497601] Bluetooth: hci2: command tx timeout [ 215.688518] Bluetooth: hci3: command tx timeout [ 215.751504] Bluetooth: hci4: command tx timeout [ 215.816700] Bluetooth: hci7: command tx timeout [ 215.880608] Bluetooth: hci5: command tx timeout [ 216.007622] Bluetooth: hci6: command tx timeout [ 217.479552] Bluetooth: hci0: command tx timeout [ 217.545491] Bluetooth: hci1: command tx timeout [ 217.545983] Bluetooth: hci2: command tx timeout [ 217.736610] Bluetooth: hci3: command tx timeout [ 217.799862] Bluetooth: hci4: command tx timeout [ 217.864482] Bluetooth: hci7: command tx timeout [ 217.928508] Bluetooth: hci5: command tx timeout [ 218.056616] Bluetooth: hci6: command tx timeout [ 219.528466] Bluetooth: hci0: command tx timeout [ 219.591722] Bluetooth: hci2: command tx timeout [ 219.592258] Bluetooth: hci1: command tx timeout [ 219.783573] Bluetooth: hci3: command tx timeout [ 219.848029] Bluetooth: hci4: command tx timeout [ 219.911937] Bluetooth: hci7: command tx timeout [ 219.976061] Bluetooth: hci5: command tx timeout [ 220.103941] Bluetooth: hci6: command tx timeout [ 273.676600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.677970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.679593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.681993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.683638] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.684898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.806665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.811717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.813681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.819093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.822212] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.823477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.941927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.943647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.944865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.947539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.958959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.959083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.966184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.967262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.969326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.970342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.971809] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.973149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.029806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.035389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.042790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.065112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.070179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.071250] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.077670] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.084569] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.089932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.096662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.099844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.100990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.109027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.127705] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.133668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.152346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.157106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.158733] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.159750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.164811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.172536] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.175650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.186243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.191833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.719519] Bluetooth: hci0: command tx timeout [ 275.848548] Bluetooth: hci1: command tx timeout [ 276.039522] Bluetooth: hci3: command tx timeout [ 276.103574] Bluetooth: hci2: command tx timeout [ 276.231689] Bluetooth: hci4: command tx timeout [ 276.231794] Bluetooth: hci5: command tx timeout [ 276.359941] Bluetooth: hci6: command tx timeout [ 276.360197] Bluetooth: hci7: command tx timeout [ 277.767499] Bluetooth: hci0: command tx timeout [ 277.895636] Bluetooth: hci1: command tx timeout [ 278.087721] Bluetooth: hci3: command tx timeout [ 278.152595] Bluetooth: hci2: command tx timeout [ 278.279501] Bluetooth: hci5: command tx timeout [ 278.280853] Bluetooth: hci4: command tx timeout [ 278.407657] Bluetooth: hci7: command tx timeout [ 278.408192] Bluetooth: hci6: command tx timeout [ 279.816742] Bluetooth: hci0: command tx timeout [ 279.943668] Bluetooth: hci1: command tx timeout [ 280.135776] Bluetooth: hci3: command tx timeout [ 280.203509] Bluetooth: hci2: command tx timeout [ 280.330467] Bluetooth: hci4: command tx timeout [ 280.330984] Bluetooth: hci5: command tx timeout [ 280.457709] Bluetooth: hci6: command tx timeout [ 280.458228] Bluetooth: hci7: command tx timeout [ 281.863612] Bluetooth: hci0: command tx timeout [ 281.991502] Bluetooth: hci1: command tx timeout [ 282.185457] Bluetooth: hci3: command tx timeout [ 282.247517] Bluetooth: hci2: command tx timeout [ 282.375683] Bluetooth: hci5: command tx timeout [ 282.376713] Bluetooth: hci4: command tx timeout [ 282.503791] Bluetooth: hci7: command tx timeout [ 282.504503] Bluetooth: hci6: command tx timeout [ 336.208660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.213897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.219595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.236351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.248204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.250870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.251921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.253276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.258602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.259608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.261874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.263470] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.265170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.286820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.294888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.303806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.307579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.312081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.342990] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.350284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.353517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.356303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.366565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.369448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.391159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.400788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.409075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.410564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.413761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.414597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.416281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.429924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.445727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.509188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.517735] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.520056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.540092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.543656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.550149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.555172] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.577195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.586247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.587876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.598993] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.609986] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.613130] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.615035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.630260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.312495] Bluetooth: hci0: command tx timeout [ 338.314197] Bluetooth: hci2: command tx timeout [ 338.376517] Bluetooth: hci1: command tx timeout [ 338.504280] Bluetooth: hci3: command tx timeout [ 338.505055] Bluetooth: hci4: command tx timeout [ 338.633107] Bluetooth: hci5: command tx timeout [ 338.695563] Bluetooth: hci7: command tx timeout [ 338.696846] Bluetooth: hci6: command tx timeout [ 340.359730] Bluetooth: hci2: command tx timeout [ 340.361163] Bluetooth: hci0: command tx timeout [ 340.423746] Bluetooth: hci1: command tx timeout [ 340.553466] Bluetooth: hci3: command tx timeout [ 340.553944] Bluetooth: hci4: command tx timeout [ 340.680629] Bluetooth: hci5: command tx timeout [ 340.743512] Bluetooth: hci6: command tx timeout [ 340.744037] Bluetooth: hci7: command tx timeout [ 342.408613] Bluetooth: hci0: command tx timeout [ 342.409154] Bluetooth: hci2: command tx timeout [ 342.474435] Bluetooth: hci1: command tx timeout [ 342.599552] Bluetooth: hci4: command tx timeout [ 342.600949] Bluetooth: hci3: command tx timeout [ 342.729258] Bluetooth: hci5: command tx timeout [ 342.792747] Bluetooth: hci6: command tx timeout [ 342.794205] Bluetooth: hci7: command tx timeout [ 344.456472] Bluetooth: hci2: command tx timeout [ 344.458333] Bluetooth: hci0: command tx timeout [ 344.519493] Bluetooth: hci1: command tx timeout [ 344.647682] Bluetooth: hci4: command tx timeout [ 344.649200] Bluetooth: hci3: command tx timeout [ 344.776598] Bluetooth: hci5: command tx timeout [ 344.839578] Bluetooth: hci6: command tx timeout [ 344.841190] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 02:04:17 Registers: info registers vcpu 0 RAX=ffff888031b30001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888031b2ff01 RSI=ffff888031b2ff50 RDI=ffff888031b2f6a8 RBP=ffff888031b2ff50 RSP=ffff888031b2f600 R8 =ffffffff86be28b6 R9 =ffff888031b2f6d8 R10=000000000003c001 R11=00000000000c10c7 R12=0000000000000008 R13=ffff888031b28000 R14=ffff888031b2ff58 R15=ffff888031b2f698 RIP=ffffffff81148d8e RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2e94edc310 CR3=0000000036332000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000c RBX=000000000000032b RCX=0000000000000003 RDX=1ffff11006929b9c RSI=0000000000000008 RDI=ffffffff87ed4f00 RBP=ffff88803494d280 RSP=ffff88806cf09bc8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff863f274f R11=00000000000c3270 R12=0000000000000003 R13=ffff88803494dcc0 R14=0000000000000008 R15=ffff88800e6c4080 RIP=ffffffff818b3f40 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7037e7f540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7037f4fbe0 CR3=0000000034e42000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000