Warning: Permanently added '[localhost]:41766' (ECDSA) to the list of known hosts. 2024/10/26 18:06:01 fuzzer started 2024/10/26 18:06:02 dialing manager at localhost:45639 syzkaller login: [ 67.566890] cgroup: Unknown subsys name 'net' [ 67.688392] cgroup: Unknown subsys name 'cpuset' [ 67.746968] cgroup: Unknown subsys name 'rlimit' 2024/10/26 18:06:18 syscalls: 229 2024/10/26 18:06:18 code coverage: enabled 2024/10/26 18:06:18 comparison tracing: enabled 2024/10/26 18:06:18 extra coverage: enabled 2024/10/26 18:06:18 setuid sandbox: enabled 2024/10/26 18:06:18 namespace sandbox: enabled 2024/10/26 18:06:18 Android sandbox: enabled 2024/10/26 18:06:18 fault injection: enabled 2024/10/26 18:06:18 leak checking: enabled 2024/10/26 18:06:18 net packet injection: enabled 2024/10/26 18:06:18 net device setup: enabled 2024/10/26 18:06:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/26 18:06:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/26 18:06:18 USB emulation: enabled 2024/10/26 18:06:18 hci packet injection: enabled 2024/10/26 18:06:18 wifi device emulation: enabled 2024/10/26 18:06:18 802.15.4 emulation: enabled 2024/10/26 18:06:19 fetching corpus: 0, signal 0/0 (executing program) 2024/10/26 18:06:20 starting 8 fuzzer processes 18:06:20 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @ethernet={0x306, @broadcast}, @hci={0x1f, 0x3}, @can={0x1d, 0x0}, 0x1e, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='veth0_to_team\x00', 0xfffffffffffffffe, 0x800, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000001}, 0x4044000) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, @nfc={0x27, 0x0, 0x2, 0x2}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, @l2tp={0x2, 0x0, @private=0xa010101}, 0x7, 0x0, 0x0, 0x0, 0x69, &(0x7f0000000200)='syz_tun\x00', 0x8, 0x80, 0x5}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x16, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffb}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x48800, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xaad3}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2675aa12}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffc7}, {0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x18c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x675}, {0x6}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x524a}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe2}, {0x6, 0x11, 0xfc01}, {0x8, 0x15, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1f}, {0x8, 0x15, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4001}, 0x44000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000ac0)) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r2, 0x700, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040040) socketpair(0x3, 0x6, 0x20, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xd0, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2d7fec15a5568f37bd6770cfae7323a68ad35897f2ead38a"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d7b2f905490e033c9873e9846b3aa66c0ba29f19437a55b3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9ae1f8248e501f4972be153f52aa82c42dbb7913958b3732"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000}, 0x14) r7 = pidfd_getfd(r3, r4, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x20044850) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000fc0)={'ip6tnl0\x00', &(0x7f0000000f40)={'sit0\x00', r0, 0x29, 0x3f, 0x1f, 0x6, 0x2c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x8000, 0x10, 0x3}}) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000001000)=0x40, 0x1) 18:06:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffffffff, 0x23}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4e, 0x2, 0x7, 0x0, {0xfff, 0x60, 0x0, 0x381, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x9, 0x6}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x7, 0x0, {0xffffffffffff8001, 0xb, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x6, 0x4}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x0, 0x0, {0x9b, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x154d80, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048800}, 0x40840) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000200)={{}, 'port1\x00', 0x86, 0x40, 0xffff110f, 0x2, 0x9, 0x5, 0x8, 0x0, 0x0, 0xe4}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x1810c2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044091}, 0x4000) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x144, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xbf2b}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7dc}, {0x8, 0x13, 0xfffffffb}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xec010ea}, {0x6, 0x11, 0x5}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6b2}, {0x8, 0x13, 0x30588ca0}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3c}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7fff}, {0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x840}, 0x24000081) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x230000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e5a2f863bebb1bde9553628b0212c9c314c7d2d578f80e95"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48094}, 0x48000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xda, 0x67}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400a085}, 0x8003) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r2) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, r6, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x81) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e00), r2) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 18:06:20 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@newpolicy={0x2d4, 0x13, 0x4, 0x70bd2c, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4e22, 0x9, 0x4e20, 0x7, 0xa, 0x20, 0x20, 0x5c}, {0x1ff, 0xfffffffffffffffd, 0x6, 0xbea6, 0x557ab26f, 0x1bb600000, 0x1, 0x200}, {0x5, 0x7, 0x80, 0xcc54}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, [@offload={0xc, 0x1c, {r0, 0x1}}, @algo_crypt={0xf8, 0x2, {{'xchacha12-arm\x00'}, 0x580, "c9f9594d5a6633424825452663ad628e7ad030353ae36d7c85c50485bdc6d6e0d47e8cf302e7b02e2cfab1297557d3b00febea536d294457dee22d262c411decda6d3de3e947685305177f43ffb03a8f7765f0d3fcac582736b7070938e581a2247911a3681a69d110c30c762f7cd748529fa5f729f90ff91498bd647e4f6275b10ff6717ace4588bf8cc03b3b91ca006d75c53dafa4f29864d89abf5c7ef1a7073579cbb934a25a54b8ea6c1db07fb2"}}, @algo_auth_trunc={0x118, 0x14, {{'sha512-arm\x00'}, 0x660, 0x180, "435d00dddc6e9522ab98ff090c15b1f631d76f9cab63d1fd657917ef6e12dd22b2b21a61e1b33f45273c52387065f9de203ece801978ab79e41720216fe8664f4d118565603da2f28b2f6e47a4dbd06eea505a14dc21a10ae2cf5acb039ae153ece002968b188af57faca1ff33a772e84a080536ff29b7ac828f0c4e6a25b6f4627edefb91d7db0ffcab8e8e54718da29b93a95b8976e731762710b3bde787412d73c709b03772c64752914f1bfce367aaa1653d31ecbb9e71457c1a351b2f7f9af9ea842035b110b0dbc07e"}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4008040}, 0x40084) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004091}, 0xd1) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc8, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x83}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbb}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xb}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x23822005}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x204, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x333}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xe210}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x67}, {0x6, 0x11, 0xa800}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x6b55}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf64f}, {0x8, 0x15, 0x4}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x148, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffc0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair(0x15, 0x1, 0x4, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), r6) r7 = socket(0x26, 0xa, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r7) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000), 0x8000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, r9, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x1a}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x94) [ 85.429687] audit: type=1400 audit(1729965980.757:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:06:20 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x81) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x3, 0x4}, {0x7}, 0x5, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0x295f, 0x16ae, 0x7, 0x10, 0x3, 0x7fffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x84b, 0x3, 0x3, {0x4, 0xffffffff}, 0x9, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000280)={0x1, 0xffff, 0x66a, {0x80, 0x6}, 0x80000000, 0x80000001}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x1, 0xff, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000340)={{0x7, 0x9}, 'port1\x00', 0xc9, 0x0, 0x81, 0x3, 0xffffffff, 0x80000001, 0x0, 0x0, 0x3, 0x6}) process_madvise(r1, &(0x7f0000000680)=[{&(0x7f0000000400)="1b791c536a18e4145b9f651216c9991bf0cdf0b50754deac05e10bc7446e458a608cb713be6ad7fc813f6a452c7adcd86da6a70ecc66ab8e6d2ff423281be1a8c52f2298980c05780b94e3a5b1bb35f718dde023b0634106c09ad86e355f51b44f54e693e8e124029c6866518a3f7939a7687b7895e1b2367528aa1ef76d3171bc230bcbb574271cf1e26425ebe53d1a", 0x90}, {&(0x7f00000004c0)="351a8b0545d1eea366d0b12a069bdc7a666189fc5f1577c14d24554ed4e64b74ff07a9d973dbb07852f69a10a8a16e69af8c360bcffd84c760ac4e91eeb8ecc3525a4784a1611857ba71c93596a31f64d924cddb5a9805a934e1a321741a54997159ef820cbfe6f81393605feff60bffdbe4434fbe09813f63fef1e76ece640c103e11c0d1c3c6553f3d5ab50ec9776ca230488c91963f2a9f8ef8c0c64ee824b1e2fc6a9734af20af77690ec87da487883b8821b91a94f54f53309412", 0xbd}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="a65a5e8a458ee740c12b629a49e4b45654d1d0c97f3f6d1a80160c5c5a938ae417c3db23f0d987e4348c2cc13957218eebdbf8765128d6c9dd4c27b2e5b62d6955592d1dae2581080549fb3e26ae7bdb5ba1d466bd885c426cab76db0b7e966b16f64b7a72e2da4cdbba896f3c7bc4bc2d21e4bb4dc924925d984bf4334da5b68cc98389829a558c1193120aef06bec8f47f6bc474636024152604a0d978ef7a181258", 0xa3}], 0x4, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000006c0)={0x40, 0x4, 0x1, 'queue0\x00', 0xf5}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000780)={0x37, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000007c0)={{0x81, 0x9}, 'port1\x00', 0x8, 0x40, 0x101, 0x616e8bc2, 0x6, 0x3, 0x4, 0x0, 0x3, 0x13}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000880)={0x80000001, 0x2, {0x2, 0x1, 0x4, 0x1, 0xc4f8}}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x1b0, 0x0, 0xa04, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x46}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff5da}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2c7}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c9a213c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79bc}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0xa4800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000bc0)={0x7fff, 0x4, 0x0, 'queue1\x00', 0x20}) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000cc0)={0x9, 0xe}) 18:06:20 executing program 4: mmap$usbmon(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x1, 0x20010, 0xffffffffffffffff, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x48080) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000140)=""/17, &(0x7f0000000180)=0x11) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0x9}) r1 = socket(0x23, 0x6, 0x80) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x3fa, 0x2, 0x70bd27, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40840) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x153c00, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5de2, &(0x7f00000004c0)={0x0, 0xa4a5, 0x8, 0x2, 0x2f3, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r4, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000600)=""/138, 0x8a}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/244, 0xf4}, {&(0x7f0000000a40)=""/197, 0xc5}, {&(0x7f0000000b40)=""/246, 0xf6}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x8, &(0x7f0000001cc0)=""/60, 0x3c}, 0x3}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/219, 0xdb}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/76, 0x4c}, {&(0x7f0000003e80)=""/252, 0xfc}, {&(0x7f0000003f80)=""/22, 0x16}], 0x6, &(0x7f0000004040)=""/195, 0xc3}}, {{&(0x7f0000004140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004680)=[{&(0x7f00000041c0)=""/207, 0xcf}, {&(0x7f00000042c0)=""/50, 0x32}, {&(0x7f0000004300)=""/113, 0x71}, {&(0x7f0000004380)=""/140, 0x8c}, {&(0x7f0000004440)=""/233, 0xe9}, {&(0x7f0000004540)=""/54, 0x36}, {&(0x7f0000004580)=""/233, 0xe9}], 0x7}, 0x6}, {{&(0x7f0000004700)=@can, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/186, 0xba}], 0x1}, 0x1000}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004880)=""/190, 0xbe}], 0x1, &(0x7f0000004980)=""/156, 0x9c}, 0x6}, {{&(0x7f0000004a40)=@xdp, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/122, 0x7a}, {&(0x7f0000005b40)=""/214, 0xd6}, {&(0x7f0000005c40)=""/99, 0x63}], 0x4, &(0x7f0000005d00)=""/157, 0x9d}, 0x8000}], 0x6, 0x102, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000005f40)={0x200, @time={0x9, 0x4c0}, 0x1, {0x56, 0x8}, 0x20}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000005f80), &(0x7f0000005fc0)=0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000006040)={0x7, 0x848, 0x1, 'queue1\x00', 0x5}) 18:06:20 executing program 5: setns(0xffffffffffffffff, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x4, 0x5, 0x400, 0x4, 0xfa8, 0xdd}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000018c0)=""/172, 0xac}, {&(0x7f0000001980)=""/51, 0x33}], 0x2}, 0x2}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a80)=""/46, 0x2e}, {&(0x7f0000001ac0)=""/14, 0xe}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/148, 0x94}, {&(0x7f0000001c00)=""/113, 0x71}, {&(0x7f0000001c80)=""/73, 0x49}], 0x6}, 0x37}], 0x2, 0x10100, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001e00), &(0x7f0000001e40)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000001e80)={{0x8, 0x80}, 'port1\x00', 0x20, 0x40010, 0x3f, 0x5, 0x7e00, 0x1d, 0xc183, 0x0, 0x0, 0x57}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000001f40)={0xff, 0x44314c04, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000002000)={0x1, 0x2, 'client0\x00', 0x0, "50555a32c516bc0f", "079f8484eb211509794be665a12c1549c3477143bab3bbcc6637657ab9626bf0", 0x9, 0xffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000020c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000002100)={{0x0, 0x48}, 'port1\x00', 0x4c, 0x43, 0xfff, 0x9d25, 0x4, 0x0, 0x2, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000021c0)={{0x65, 0x20}, 'port1\x00', 0x2, 0x20, 0x8d, 0x36a, 0x0, 0x9, 0x10001, 0x0, 0xc, 0x4}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002280), 0x525802) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000022c0)={0x7f, 0x7f, 0x2c}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000002300)={0x200, 0xcf, 0x1, 'queue0\x00', 0x400}) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f00000023c0)={{0x81, 0x80}, 'port0\x00', 0xaf77d64f53c87f52, 0x80010, 0x7fff, 0x3, 0x0, 0x9, 0xe72d, 0x0, 0x2, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000002480)={0xffffffff, 0x0, 0x1, {0x40, 0xfffffe01}, 0x4, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000002500)={0x400, 0x2, 'client1\x00', 0x1, "2d2cdb2275abd6bc", "fbaf35155c91d177387417a41ba6d3310a8f77b59e299bef5a57d6e50daff3de", 0x3fdc, 0x5}) write$vga_arbiter(r3, &(0x7f00000025c0)=@other={'lock', ' ', 'io'}, 0x8) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) 18:06:20 executing program 6: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x85, 0x1000, 0x1, {0x4, 0x8}, 0x3, 0xda}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000080)={0x8, 0x7, 0x3}) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x2, 0x6, 0x8, {0x0, 0x100}, 0x2, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000001c0)={{0x9, 0x3e}, {0x6, 0x3e}, 0x6, 0x5, 0xa6}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x22082, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x10000, 0xe88, 0x1, 'queue1\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x7fffffff, 0xffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x8c9a70df4d6e8f10, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000400)={0x5, 0x9, 0x0, 'queue0\x00'}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x8}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x50081) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000005c0)={0xd5d, 0x8c6, 0x1, {0x5, 0x4edf}, 0x2, 0x67c25b1f}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000680)={0x10001, 0xffffffff, 0x1, {0xfff, 0x2}, 0x200, 0xff}) r7 = pidfd_getfd(r6, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0xc0605345, &(0x7f0000000700)={0x2, 0x2, {0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x20}, 0x6f}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 18:06:20 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008004}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0xb3c183b5fdc50f31, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4001890) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x21956ad078ab070b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x48014) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x24680, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x24c, r8, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xf9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x8001}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x80) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r9, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc1}]}, 0x50}}, 0x44010) [ 86.789573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.791079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.792313] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.795859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.797544] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.798697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.838804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.844456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.849981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.854397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.858351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.859556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.863015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.864378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.865595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.866014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.874921] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.876535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.880761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.881819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.883376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.889897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.891103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.901274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.913494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.920519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.927879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.929015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.961448] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.962514] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.963812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.966701] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.968372] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.969459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.981350] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.984469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.002922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.011432] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.018485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.020608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.032449] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.046498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.067465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.076383] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.078956] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.083505] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.085069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.087078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.812576] Bluetooth: hci0: command tx timeout [ 88.940485] Bluetooth: hci1: command tx timeout [ 88.941055] Bluetooth: hci3: command tx timeout [ 89.004541] Bluetooth: hci2: command tx timeout [ 89.068438] Bluetooth: hci5: command tx timeout [ 89.068469] Bluetooth: hci4: command tx timeout [ 89.134322] Bluetooth: hci6: command tx timeout [ 89.134330] Bluetooth: hci7: command tx timeout [ 90.861632] Bluetooth: hci0: command tx timeout [ 90.988303] Bluetooth: hci3: command tx timeout [ 90.991249] Bluetooth: hci1: command tx timeout [ 91.052279] Bluetooth: hci2: command tx timeout [ 91.116325] Bluetooth: hci5: command tx timeout [ 91.116359] Bluetooth: hci4: command tx timeout [ 91.180518] Bluetooth: hci6: command tx timeout [ 91.181039] Bluetooth: hci7: command tx timeout [ 92.909234] Bluetooth: hci0: command tx timeout [ 93.036470] Bluetooth: hci1: command tx timeout [ 93.037018] Bluetooth: hci3: command tx timeout [ 93.101366] Bluetooth: hci2: command tx timeout [ 93.164506] Bluetooth: hci4: command tx timeout [ 93.167385] Bluetooth: hci5: command tx timeout [ 93.228414] Bluetooth: hci7: command tx timeout [ 93.229283] Bluetooth: hci6: command tx timeout [ 94.956285] Bluetooth: hci0: command tx timeout [ 95.084481] Bluetooth: hci3: command tx timeout [ 95.084573] Bluetooth: hci1: command tx timeout [ 95.150717] Bluetooth: hci2: command tx timeout [ 95.212431] Bluetooth: hci5: command tx timeout [ 95.213050] Bluetooth: hci4: command tx timeout [ 95.276313] Bluetooth: hci6: command tx timeout [ 95.276839] Bluetooth: hci7: command tx timeout [ 149.627231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.635370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.636817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.647370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.652970] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.654575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.754619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.757361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.758536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.763479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.765544] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.767692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.769632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.771398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.771574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.774445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.775956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.777121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.784142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.787046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.789938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.790918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.792469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.794612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.889980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.897521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.923488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.935095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.940606] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.941937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.972565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.976398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.977697] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.985010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.990754] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.992099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.996434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.067027] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.070546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.074241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.076962] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.079582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.092009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.097367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.100502] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.105208] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.108109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.110538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.724333] Bluetooth: hci0: command tx timeout [ 151.852550] Bluetooth: hci2: command tx timeout [ 151.854482] Bluetooth: hci1: command tx timeout [ 151.856426] Bluetooth: hci3: command tx timeout [ 152.044563] Bluetooth: hci4: command tx timeout [ 152.045491] Bluetooth: hci5: command tx timeout [ 152.172333] Bluetooth: hci6: command tx timeout [ 152.237372] Bluetooth: hci7: command tx timeout [ 153.773519] Bluetooth: hci0: command tx timeout [ 153.901243] Bluetooth: hci2: command tx timeout [ 153.901801] Bluetooth: hci1: command tx timeout [ 153.903312] Bluetooth: hci3: command tx timeout [ 154.092406] Bluetooth: hci5: command tx timeout [ 154.092984] Bluetooth: hci4: command tx timeout [ 154.220434] Bluetooth: hci6: command tx timeout [ 154.285353] Bluetooth: hci7: command tx timeout [ 155.820466] Bluetooth: hci0: command tx timeout [ 155.948422] Bluetooth: hci1: command tx timeout [ 155.948997] Bluetooth: hci3: command tx timeout [ 155.950045] Bluetooth: hci2: command tx timeout [ 156.141484] Bluetooth: hci4: command tx timeout [ 156.142011] Bluetooth: hci5: command tx timeout [ 156.268341] Bluetooth: hci6: command tx timeout [ 156.332696] Bluetooth: hci7: command tx timeout [ 157.868431] Bluetooth: hci0: command tx timeout [ 157.996365] Bluetooth: hci1: command tx timeout [ 157.996915] Bluetooth: hci2: command tx timeout [ 157.997699] Bluetooth: hci3: command tx timeout [ 158.188293] Bluetooth: hci5: command tx timeout [ 158.188848] Bluetooth: hci4: command tx timeout [ 158.316322] Bluetooth: hci6: command tx timeout [ 158.380280] Bluetooth: hci7: command tx timeout [ 211.961919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.963631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.969360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.971985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.980594] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.982965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.088895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.093594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.095706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.100687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.104784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.107012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.109817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.114940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.118329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.126511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.131998] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.133900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.155128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.159467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.161495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.164377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.165044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.165466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.168386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.171529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.174036] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.175048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.194881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.220503] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.231705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.255388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.303671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.305965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.313398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.319800] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.322514] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.324679] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.326680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.329207] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.335423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.356882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.367477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.369529] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.375775] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.384496] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.391662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.393240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.062402] Bluetooth: hci0: command tx timeout [ 214.188321] Bluetooth: hci2: command tx timeout [ 214.189331] Bluetooth: hci3: command tx timeout [ 214.189477] Bluetooth: hci1: command tx timeout [ 214.316296] Bluetooth: hci4: command tx timeout [ 214.445260] Bluetooth: hci7: command tx timeout [ 214.445348] Bluetooth: hci5: command tx timeout [ 214.509255] Bluetooth: hci6: command tx timeout [ 216.108392] Bluetooth: hci0: command tx timeout [ 216.236398] Bluetooth: hci3: command tx timeout [ 216.236604] Bluetooth: hci2: command tx timeout [ 216.237620] Bluetooth: hci1: command tx timeout [ 216.364332] Bluetooth: hci4: command tx timeout [ 216.494363] Bluetooth: hci5: command tx timeout [ 216.494433] Bluetooth: hci7: command tx timeout [ 216.557232] Bluetooth: hci6: command tx timeout [ 218.157456] Bluetooth: hci0: command tx timeout [ 218.284320] Bluetooth: hci1: command tx timeout [ 218.284428] Bluetooth: hci3: command tx timeout [ 218.286210] Bluetooth: hci2: command tx timeout [ 218.413275] Bluetooth: hci4: command tx timeout [ 218.540273] Bluetooth: hci7: command tx timeout [ 218.541219] Bluetooth: hci5: command tx timeout [ 218.605189] Bluetooth: hci6: command tx timeout [ 220.204244] Bluetooth: hci0: command tx timeout [ 220.332283] Bluetooth: hci3: command tx timeout [ 220.332811] Bluetooth: hci2: command tx timeout [ 220.333334] Bluetooth: hci1: command tx timeout [ 220.460223] Bluetooth: hci4: command tx timeout [ 220.588461] Bluetooth: hci5: command tx timeout [ 220.589013] Bluetooth: hci7: command tx timeout [ 220.652227] Bluetooth: hci6: command tx timeout [ 274.168265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.169887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.171382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.174915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.179552] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.180952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.239748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.245662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.250440] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.266051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.275557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.284529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.306538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.322401] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.325586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.344107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.345761] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.350448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.420634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.440518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.450432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.471045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.482302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.491994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.512614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.514604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.516425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.517225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.521548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.521639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.554637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.563731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.565811] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.566893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.577615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.580236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.582962] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.584460] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.594359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.596239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.598993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.600929] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.602476] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.650568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.682342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.693558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.701433] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.707414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.204293] Bluetooth: hci0: command tx timeout [ 276.332265] Bluetooth: hci1: command tx timeout [ 276.396256] Bluetooth: hci2: command tx timeout [ 276.524491] Bluetooth: hci3: command tx timeout [ 276.653223] Bluetooth: hci5: command tx timeout [ 276.653290] Bluetooth: hci6: command tx timeout [ 276.653944] Bluetooth: hci4: command tx timeout [ 276.781495] Bluetooth: hci7: command tx timeout [ 278.252267] Bluetooth: hci0: command tx timeout [ 278.380321] Bluetooth: hci1: command tx timeout [ 278.444353] Bluetooth: hci2: command tx timeout [ 278.572232] Bluetooth: hci3: command tx timeout [ 278.700392] Bluetooth: hci4: command tx timeout [ 278.701231] Bluetooth: hci6: command tx timeout [ 278.701912] Bluetooth: hci5: command tx timeout [ 278.828292] Bluetooth: hci7: command tx timeout [ 280.300499] Bluetooth: hci0: command tx timeout [ 280.428917] Bluetooth: hci1: command tx timeout [ 280.492235] Bluetooth: hci2: command tx timeout [ 280.620421] Bluetooth: hci3: command tx timeout [ 280.748333] Bluetooth: hci5: command tx timeout [ 280.748809] Bluetooth: hci6: command tx timeout [ 280.749482] Bluetooth: hci4: command tx timeout [ 280.893370] Bluetooth: hci7: command tx timeout [ 282.348221] Bluetooth: hci0: command tx timeout [ 282.476443] Bluetooth: hci1: command tx timeout [ 282.540224] Bluetooth: hci2: command tx timeout [ 282.674200] Bluetooth: hci3: command tx timeout [ 282.800234] Bluetooth: hci6: command tx timeout [ 282.801730] Bluetooth: hci4: command tx timeout [ 282.803198] Bluetooth: hci5: command tx timeout [ 282.927237] Bluetooth: hci7: command tx timeout [ 336.776387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.778794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.780857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.791918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.794922] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.796925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.982703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.986903] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.990927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.994757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.997345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.999732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.003537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.013382] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.015665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.021895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.024306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.026625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.030032] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.032673] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.034969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.043279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.054481] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.056546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.059638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.067476] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.068639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.070263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.075624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.075671] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.079336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.079634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.086788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.088162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.096740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.097834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.098732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.116390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.120610] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.126438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.138285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.144570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.148919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.149622] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.157098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.164888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.167853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.170086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.860679] Bluetooth: hci0: command tx timeout [ 339.117294] Bluetooth: hci2: command tx timeout [ 339.119341] Bluetooth: hci3: command tx timeout [ 339.121254] Bluetooth: hci6: command tx timeout [ 339.180529] Bluetooth: hci4: command tx timeout [ 339.182349] Bluetooth: hci1: command tx timeout [ 339.244574] Bluetooth: hci5: command tx timeout [ 339.246084] Bluetooth: hci7: command tx timeout [ 340.908247] Bluetooth: hci0: command tx timeout [ 341.164304] Bluetooth: hci3: command tx timeout [ 341.165740] Bluetooth: hci2: command tx timeout [ 341.166884] Bluetooth: hci6: command tx timeout [ 341.228392] Bluetooth: hci1: command tx timeout [ 341.229930] Bluetooth: hci4: command tx timeout [ 341.292439] Bluetooth: hci7: command tx timeout [ 341.293792] Bluetooth: hci5: command tx timeout [ 342.957224] Bluetooth: hci0: command tx timeout [ 343.212344] Bluetooth: hci2: command tx timeout [ 343.214264] Bluetooth: hci6: command tx timeout [ 343.216243] Bluetooth: hci3: command tx timeout [ 343.276245] Bluetooth: hci1: command tx timeout [ 343.277650] Bluetooth: hci4: command tx timeout [ 343.340403] Bluetooth: hci5: command tx timeout [ 343.341912] Bluetooth: hci7: command tx timeout [ 345.004397] Bluetooth: hci0: command tx timeout [ 345.260241] Bluetooth: hci3: command tx timeout [ 345.260825] Bluetooth: hci6: command tx timeout [ 345.261431] Bluetooth: hci2: command tx timeout [ 345.324884] Bluetooth: hci4: command tx timeout [ 345.325458] Bluetooth: hci1: command tx timeout [ 345.390182] Bluetooth: hci5: command tx timeout [ 345.390720] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:11:31 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=ffff888026757e28 RSI=ffff888026757e10 RDI=ffff888026757b88 RBP=ffff888026757c10 RSP=ffff888026757b78 R8 =0000000000000001 R9 =ffff888026757bb8 R10=000000000003c001 R11=00000000000222fe R12=ffff888026757c40 R13=0000000000000000 R14=ffff88802c451b80 R15=0000000000000000 RIP=ffffffff810d198d RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0261ded540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9211107d70 CR3=000000000e4e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff867716d2 RDX=0000000000000008 RSI=ffff888029027f50 RDI=ffff888029027418 RBP=ffff888029027470 RSP=ffff8880290273a0 R8 =ffffffff867716d6 R9 =ffff888029027458 R10=000000000003c001 R11=0000000000003870 R12=ffff888029027478 R13=ffff888029027460 R14=ffff888029027f58 R15=ffff888029027418 RIP=ffffffff81148cb0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557f0f82f080 CR3=000000002c022000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000