syzkaller login: [ 76.317541] scp (237) used greatest stack depth: 23488 bytes left Warning: Permanently added '[localhost]:22756' (ECDSA) to the list of known hosts. 2024/11/09 17:54:15 fuzzer started 2024/11/09 17:54:16 dialing manager at localhost:46317 [ 80.630785] cgroup: Unknown subsys name 'net' [ 80.741967] cgroup: Unknown subsys name 'cpuset' [ 80.754734] cgroup: Unknown subsys name 'rlimit' 2024/11/09 17:54:33 syscalls: 201 2024/11/09 17:54:33 code coverage: enabled 2024/11/09 17:54:33 comparison tracing: enabled 2024/11/09 17:54:33 extra coverage: enabled 2024/11/09 17:54:33 setuid sandbox: enabled 2024/11/09 17:54:33 namespace sandbox: enabled 2024/11/09 17:54:33 Android sandbox: enabled 2024/11/09 17:54:33 fault injection: enabled 2024/11/09 17:54:33 leak checking: enabled 2024/11/09 17:54:33 net packet injection: enabled 2024/11/09 17:54:33 net device setup: enabled 2024/11/09 17:54:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/09 17:54:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/09 17:54:33 USB emulation: enabled 2024/11/09 17:54:33 hci packet injection: enabled 2024/11/09 17:54:33 wifi device emulation: enabled 2024/11/09 17:54:33 802.15.4 emulation: enabled 2024/11/09 17:54:33 fetching corpus: 0, signal 0/0 (executing program) 2024/11/09 17:54:35 starting 8 fuzzer processes 17:54:35 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x80800) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="1e1fe421bb47f43e660bc160305f15d5", 0x10) getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @sco={0x1f, @none}, @nfc={0x27, 0x0, 0x2, 0x6}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xabad, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000240)='veth1_virt_wifi\x00', 0x8, 0x80, 0x3}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000300)={0x6, 'team0\x00', {0xdd41}, 0x834}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000340), 0xf) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000380)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_macvtap\x00', 0x10) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2f}) r2 = socket$inet6(0xa, 0x2, 0x76c92b12) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x1e}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty, 0xfffffffb, 0x80, 0x0, 0x500, 0x9, 0x84000212, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000680)={'vcan0\x00'}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000006c0)=""/86, &(0x7f0000000740)=0x56) socketpair(0x3, 0xa, 0xffff5b33, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000008c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}) 17:54:35 executing program 1: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x239}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000894}, 0x8004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1555d}]}, 0x58}, 0x1, 0x0, 0x0, 0x40030}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x24000005) r3 = socket(0x21, 0xa, 0x1f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x1) r6 = socket$inet6(0xa, 0x800, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000940)={'filter\x00', 0x35, "14f55214b0cff65c269b1cc5783ad5875cddc475a9b0c154cbc70113bea3147e866a7de7f8952e62eb6fd658ff1d460bf2495d03a9"}, &(0x7f00000009c0)=0x59) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) r8 = socket$inet6(0xa, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c00)={'sit0\x00', r7, 0x4, 0x80, 0x3f, 0xf0, 0x1, @loopback, @mcast2, 0x7, 0x1, 0x4, 0x3ff}}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000cc0)={@local, 0x51, r4}) 17:54:35 executing program 2: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008880}, 0x40800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x44) r2 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@expire={0x140, 0x18, 0x100, 0x70bd26, 0x25dfdbff, {{{@in=@loopback, @in=@empty, 0x4e20, 0x7fff, 0x4e23, 0x9e, 0xa, 0x80, 0x0, 0x8, 0x0, r2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, @in6=@private1, {0x40, 0x200000000, 0x4, 0x19, 0x3c92, 0x80000000, 0xfff, 0x1}, {0x8, 0x1, 0x8, 0x81}, {0x7, 0xfb, 0x1}, 0x70bd2a, 0x3506, 0x2, 0x4, 0x7, 0x10}, 0x3f}, [@lifetime_val={0x24, 0x9, {0x7, 0xb94, 0x290, 0x80}}, @lifetime_val={0x24, 0x9, {0xffffffffffffffff, 0xa9bd, 0x4, 0x1ff800000000000}}]}, 0x140}, 0x1, 0x0, 0x0, 0x2400c0d4}, 0x8040) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "90a90cb99ceeb85faf4673a4f777e8ce"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}]}, 0x4c}}, 0x8080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004011}, 0x40480d0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00'}) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x841) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan4\x00'}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000b00), 0x10000, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@getsa={0x4c, 0x12, 0x100, 0x70bd2a, 0x25dfdbff, {@in6=@loopback, 0x4d4, 0x2, 0x33}, [@tfcpad={0x8, 0x16, 0x1f}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2b, 0x93}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000010}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000c80)={{{@in6=@private0, @in6=@private1, 0x4e20, 0x7fff, 0x4e20, 0x0, 0x2, 0x40, 0x120, 0xbc}, {0x7ff, 0x40, 0x6, 0x10001, 0x6, 0x8000, 0x48, 0x9}, {0x1, 0x6, 0x6fd9, 0x2}, 0x10001, 0x6e6bb4, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x4d5, 0x33}, 0x2, @in=@private=0xa010101, 0x0, 0x2, 0x0, 0x5, 0x4, 0xffffffff, 0xfffffff9}}, 0xe8) [ 98.981353] audit: type=1400 audit(1731174875.343:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:54:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4081) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffc1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x36}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ca9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="29f95d261ad8"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84000}, 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb0}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3974ea47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x880) r6 = accept(0xffffffffffffffff, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x301, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x63}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x40080) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xd5, &(0x7f0000000940)="603d6538fc0eb260456004162c4e6be9549d805e2b3fe725da9848652adebb4b9cf07234cab4a9dc68137cc5f304bcf990d88557d9196021af336d1ef17370410336c91a0c7c08a1b6b29539b6f425cb4cd904355d1127ddcef313b54a6c524fe20839a5231475acb75efcffcabaac8270c2ccd95d2892f94e02d5682f7bfdcdc144a2dbdcdb89e826b81c735235008b5104225e78fce9a3ae9f4392014fc82ee1684d9e6c00336aadd4858bd5838d47c25b28e46d30e0496170bd193076c386ff166805ecef6fe72c5a0b018970d79520a0114f96") sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x8010) getpeername(0xffffffffffffffff, &(0x7f0000000b80)=@xdp, &(0x7f0000000c00)=0x80) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000c40)='wg0\x00', 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 17:54:35 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0xa0501) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x101, 0x4, 0x2, 0x100, 0x5}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r3, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x17, 0x18}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x30, 0x10b, 0x81, "9710667001b49e27d72d9370f720e5603cf78892d51e58b135ff1f6169"}, {0x68, 0x6, 0x1, "4248f9c62b1d6f75a29e02d21ce723f051bd170b659f3769b3f8baadea97b6e35fe8e8c4fb014e09ea7adf57484f0c9044f36e2138b0a325409f7254f8a8c51f87fd5ace2c670e5331bf612a70f43140d56889"}], 0x98}}], 0x1, 0x4000000) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r4, 0x200182) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000280)=""/3, &(0x7f00000002c0)=0x3) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x89e5d54733507326) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x8, 0xfffffffd, 0x30, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x40, 0x8, 0x8000, 0x7ff}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="896e75c072ee"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000840)) 17:54:35 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x5894}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20000}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c844}, 0x40008d1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x720b}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x400}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r3, 0x700, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3a}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x20}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x28000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x43}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8800) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, @phonet={0x23, 0x1, 0x4d, 0x44}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x81, 0x0, 0x0, 0x0, 0xa219, &(0x7f0000000800)='ip6erspan0\x00', 0xff, 0x1f, 0x1}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r6, 0x128, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xa5f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0xc042) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000c80)={{0xa, 0x4e20, 0xffffff23, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, {0xa, 0x4e22, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0xfff, [0x8, 0x8, 0xb27, 0x6, 0x2, 0x7, 0x3, 0x101]}, 0x5c) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 17:54:35 executing program 6: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000080)=0x80) r2 = gettid() r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = socket(0x25, 0x5, 0x101) r5 = gettid() r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = perf_event_open(&(0x7f0000001740)={0x6, 0x80, 0x2, 0x7, 0x6, 0x89, 0x0, 0x6, 0x2804, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x7, 0xd9d7}, 0x1404, 0x10000, 0x2, 0x0, 0x2, 0x9, 0x2b07, 0x0, 0x52, 0x0, 0x80000001}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r9 = accept4(0xffffffffffffffff, &(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001840)=0x80, 0x80000) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) r11 = socket$inet6(0xa, 0x1, 0x2) sendmsg$netlink(r0, &(0x7f00000019c0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f0000001640)=[{&(0x7f0000000100)={0x25c, 0x15, 0x500, 0x70bd28, 0x25dfdbff, "", [@nested={0xb8, 0x24, 0x0, 0x1, [@generic="20a45f5dcf15a4a376d362d4fb66990c01b43cf1088931b7a6a3c0041c05caef8a6d1a58de73ed935d96da2c1a91b3ebeaba767ad2039fdfa2956cc9ced4c8ef52ef65f0d7a6daad4c9716e5411f6af9a55afe64b83195799e408484fb48ff80e9acfd7bf9a403f67d0fe3e29aad9566ea1c44cb88960295e7cdbbb72a6f04b073ca58e21f7f8ee16de575b7c9951152f74e362e0c73dff28295f02930e13f36c86dc942f1a892fed6c1c9c339d700f707bafa0f"]}, @nested={0x17e, 0x70, 0x0, 0x1, [@typed={0x4, 0x13}, @typed={0x8, 0x8e, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x81, 0x0, 0x0, @fd}, @generic="e30b68b0055e64c6e4782038a981d6f54e15dea825db818edcb89ed3395a70b12998f79be0615aee0dbaa4ed96a58cff5bd432996c06a83353193d46d1a986ef9285d78fd258737520d57ea749624bb3967cc34d11b6a9902631ac5435d7e9622ce926620858869bea68fb5d2dfed25a9d0de9d860c26ad2c047f38b584ae985638b10eaef5e6976c8c050862ed79d513c9228021cf43a2d7c283de88fdb7340498d0740df8327b8877fc750a6be627e8b5763d42be11f60e03788ba6eaf8498c98fa5c8c0ddd68976685ea4c8f0c677dcf81ee13ae5ac", @generic="06dfe88f7a53bd887bab046b8959b5e403122f31847db1d6c51210ae7c302f44a9a354e753128a3e29cc55687cd4af4b20de14c041b5443aa7f6", @generic="9cceaba3c5b172ca9eb828785181a1f933f3e215f398d1f7534162d9c02dab4624c75fc840c74b57f2d461ee74e92703bc5ed4b4799d0dcba1c3d956c4cf55cdab2c778ecfed0c49e5ce89716e978759b978f4b661"]}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@mcast2}]}, 0x25c}, {&(0x7f0000000380)={0x12c0, 0x12, 0x800, 0x70bd25, 0x25dfdbfc, "", [@generic="3f3208a5b26104fb51f02d3a7f416418f068b48c779a0cf9a6eac1f601bdc637bcecdc72", @typed={0x8, 0x25, 0x0, 0x0, @u32=0x400}, @nested={0x115d, 0x21, 0x0, 0x1, [@typed={0x7, 0x53, 0x0, 0x0, @str='*)\x00'}, @typed={0x8, 0x72, 0x0, 0x0, @u32=0x100}, @generic="9ea5611084df6bc2b0960332d027a31731400e874b17e6cfbb51c1e283b938063c70fb2591a4df750597a3bcbd5b100ae1456613095375dbbd85c671544ef9f060759345f7de342a770fc94cb7f7d7a7987a9c8286f12506e4aead2c8a5b22331bb1234daf3850c30197faad3196491916357217c7f0bbe58a60df28dd6e2a33cac7153b3e98adece2969895c0aaa62637d5882c0ce38d9bb5f8c73a664bfcbafb596b1001", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x20}, @typed={0x88, 0x2a, 0x0, 0x0, @binary="75f50418c0c85c5bd320954d9edd3e26eb4fb38f538ca00f8ba25782faaf47897974aa2c9c2d367124287617a803341d8d16a0ce92c6f432eb7a7df7e040a267c1ea9b9d156cfcf30bedf8e19ab4057edde9cbf28fef5a7a25a9fa910479a1a8a86d2c1408ac46984ae0c3be9fe5b585aa02047a345ac9c3201e68c2c69a64972a6a2538"}, @generic="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", @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @generic="1216210dade70f92d2a5341f65ffd48e44196cebf02735b1da6e57670e44b154a1fa70139ea39b83eba130f88b1228549c42c91f3f2d380d8b1b2ecf8d5b90b5a0fe406d41191602a4a97568045e", @generic="38ea103b0330868f717d5350e6c186baae6f857f21a451edef3ee2414d9e0b43a5983f86704953701072010ecc69311a7670af6d7b7b2918923facc8f5cddc6052dd4e06365cc0fa05e1ab419e289805a53e3312f45391326c5c8c808fd80ca40148d3628006a36dad8581d86a06e0fd049f7f0847b688dbcf92449fc1fc1744a11be4ba23f78f22b8a822326c0e8e40eae87e423556cc064539135ee146d9131fe4d23ff870905ac4", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x2}, @generic="9f3397f29b047822a844324f77bf659931915fa8f22d701e7127408eddf97277010f2c66d6"]}, 0x12c0}], 0x2, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r9]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, r11]}}], 0x110}, 0x40) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r12, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40011) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x34, r13, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2004c000) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r14, &(0x7f0000001c80)=@alg, &(0x7f0000001d00)=0x80) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r15, 0x890b, &(0x7f0000001d80)={0x0, @can, @nl=@unspec, @in={0x2, 0x4e24, @multicast2}, 0x7, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000001d40)='veth1_to_team\x00', 0xffffffff, 0xffffffff, 0x3}) 17:54:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004040}, 0x40844) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040095}, 0x2040000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x20}]}, 0x34}}, 0x40) r3 = syz_open_dev$rtc(&(0x7f0000000500), 0x5, 0x400) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000808}, 0x44) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) ioctl$RTC_UIE_ON(r3, 0x7003) r5 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780), 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=@flushpolicy={0x15c, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@policy={0xac, 0x7, {{@in=@empty, @in6=@remote, 0x4e21, 0x200, 0x4e20, 0x9, 0x4, 0x80, 0x0, 0x3c, 0x0, r5}, {0x2, 0x7, 0x4, 0x7, 0x6, 0x8, 0xfff, 0xffff}, {0x1, 0x0, 0x20, 0x1ff}, 0x4, 0x6e6bbb, 0x2, 0x1, 0x2, 0x1}}, @sec_ctx={0x9d, 0x8, {0x99, 0x8, 0x0, 0x7, 0x91, "e98fdd4ee42929c10153a0270324915f23abc4df7502590ec12a995d4752c58c9383fd7341982bf72de4b234b79bc4c71313ff448cfc129137f44859c9818b963f2e30c00763837798d7dc820dfb9b07de09fb9c3561068ff096eded610e19cec800c869d7ae3b558647a3530c37db3aa3854e78cdb94c085bf40dcba410e50d594827512eab5b1c0d98ab9d28b520c82b"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000811}, 0x40084) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x88, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "07a1d44d012a2b8334fa0e775e864a6e1f7933110b196f228fd6510e206af98d"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c69326dcbc41329665784cf091c09526"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a05acb623a41fb51c7a16b9b1c69ee5d"}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040) [ 101.015907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.017725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.018643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.021115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.024090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.027696] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 101.028977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.030515] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.031436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.041691] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.046049] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.047844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.048989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.052569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.055594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.058927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.070740] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 101.072071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.111071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.111372] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.114078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.119595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.120644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.122187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.129740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.133683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.135739] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.136928] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.138019] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.141990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.195328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.202107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 101.208198] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 101.209473] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 101.213294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 101.218779] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 101.225471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 101.230643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.241780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 101.255772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.267938] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 101.271284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 101.293533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.303854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 101.306867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.311012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 101.313920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 101.317648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 103.083837] Bluetooth: hci1: command tx timeout [ 103.147537] Bluetooth: hci2: command tx timeout [ 103.148176] Bluetooth: hci0: command tx timeout [ 103.211525] Bluetooth: hci3: command tx timeout [ 103.212146] Bluetooth: hci4: command tx timeout [ 103.339994] Bluetooth: hci6: command tx timeout [ 103.404542] Bluetooth: hci7: command tx timeout [ 103.405196] Bluetooth: hci5: command tx timeout [ 105.131679] Bluetooth: hci1: command tx timeout [ 105.195690] Bluetooth: hci2: command tx timeout [ 105.197244] Bluetooth: hci0: command tx timeout [ 105.259569] Bluetooth: hci4: command tx timeout [ 105.260066] Bluetooth: hci3: command tx timeout [ 105.388545] Bluetooth: hci6: command tx timeout [ 105.452583] Bluetooth: hci5: command tx timeout [ 105.453078] Bluetooth: hci7: command tx timeout [ 107.181071] Bluetooth: hci1: command tx timeout [ 107.244549] Bluetooth: hci2: command tx timeout [ 107.245052] Bluetooth: hci0: command tx timeout [ 107.309553] Bluetooth: hci4: command tx timeout [ 107.310052] Bluetooth: hci3: command tx timeout [ 107.435955] Bluetooth: hci6: command tx timeout [ 107.500607] Bluetooth: hci7: command tx timeout [ 107.501116] Bluetooth: hci5: command tx timeout [ 109.228473] Bluetooth: hci1: command tx timeout [ 109.292519] Bluetooth: hci0: command tx timeout [ 109.293026] Bluetooth: hci2: command tx timeout [ 109.356514] Bluetooth: hci4: command tx timeout [ 109.357004] Bluetooth: hci3: command tx timeout [ 109.485609] Bluetooth: hci6: command tx timeout [ 109.548638] Bluetooth: hci5: command tx timeout [ 109.549135] Bluetooth: hci7: command tx timeout [ 163.137826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.144315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.147210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.150639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.153295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.158645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.160605] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.164752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.165647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.185481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.194708] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.195981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.239139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.250062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.250959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.253681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.258918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.262560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.267590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.269660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.271332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.274773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.277456] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.282345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.290541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.296733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.297944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.304012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.305697] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.308682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.344559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.346625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.353018] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.354337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.363411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.367807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.374254] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.381711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.381734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.387592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.390202] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.391854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.394143] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.399041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.399081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.416464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.446602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.447907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.227616] Bluetooth: hci1: command tx timeout [ 165.228705] Bluetooth: hci0: command tx timeout [ 165.355509] Bluetooth: hci4: command tx timeout [ 165.355517] Bluetooth: hci3: command tx timeout [ 165.419482] Bluetooth: hci2: command tx timeout [ 165.611510] Bluetooth: hci6: command tx timeout [ 165.675631] Bluetooth: hci5: command tx timeout [ 165.675646] Bluetooth: hci7: command tx timeout [ 167.275562] Bluetooth: hci0: command tx timeout [ 167.275752] Bluetooth: hci1: command tx timeout [ 167.405407] Bluetooth: hci4: command tx timeout [ 167.405918] Bluetooth: hci3: command tx timeout [ 167.468251] Bluetooth: hci2: command tx timeout [ 167.659505] Bluetooth: hci6: command tx timeout [ 167.723613] Bluetooth: hci7: command tx timeout [ 167.723693] Bluetooth: hci5: command tx timeout [ 169.324807] Bluetooth: hci0: command tx timeout [ 169.326272] Bluetooth: hci1: command tx timeout [ 169.451657] Bluetooth: hci3: command tx timeout [ 169.452478] Bluetooth: hci4: command tx timeout [ 169.515475] Bluetooth: hci2: command tx timeout [ 169.707494] Bluetooth: hci6: command tx timeout [ 169.771471] Bluetooth: hci7: command tx timeout [ 169.771502] Bluetooth: hci5: command tx timeout [ 171.371621] Bluetooth: hci0: command tx timeout [ 171.373032] Bluetooth: hci1: command tx timeout [ 171.509443] Bluetooth: hci4: command tx timeout [ 171.509468] Bluetooth: hci3: command tx timeout [ 171.564446] Bluetooth: hci2: command tx timeout [ 171.757147] Bluetooth: hci6: command tx timeout [ 171.821437] Bluetooth: hci5: command tx timeout [ 171.821471] Bluetooth: hci7: command tx timeout [ 225.443666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.448069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.450584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.456810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.458664] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.460133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.512245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.517203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.527597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.530980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.532763] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.534781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.617458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.619551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.622631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.627601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.631769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.634413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.656623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.680837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.686017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.696065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.699047] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.700206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.747070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.769776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.775549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.785841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.787039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.794629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.797584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.803693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.803935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.812914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.816701] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.827482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.831617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.834078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.835762] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.837031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.844488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.848599] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.849753] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.850878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.853290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.854502] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.869228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.880489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.563704] Bluetooth: hci1: command tx timeout [ 227.564695] Bluetooth: hci0: command tx timeout [ 227.693519] Bluetooth: hci2: command tx timeout [ 227.756469] Bluetooth: hci3: command tx timeout [ 227.883563] Bluetooth: hci6: command tx timeout [ 227.949450] Bluetooth: hci7: command tx timeout [ 227.950452] Bluetooth: hci5: command tx timeout [ 228.011487] Bluetooth: hci4: command tx timeout [ 229.611644] Bluetooth: hci0: command tx timeout [ 229.611682] Bluetooth: hci1: command tx timeout [ 229.739695] Bluetooth: hci2: command tx timeout [ 229.804832] Bluetooth: hci3: command tx timeout [ 229.932478] Bluetooth: hci6: command tx timeout [ 229.997406] Bluetooth: hci5: command tx timeout [ 229.997429] Bluetooth: hci7: command tx timeout [ 230.059466] Bluetooth: hci4: command tx timeout [ 231.659652] Bluetooth: hci0: command tx timeout [ 231.660453] Bluetooth: hci1: command tx timeout [ 231.788457] Bluetooth: hci2: command tx timeout [ 231.852504] Bluetooth: hci3: command tx timeout [ 231.979505] Bluetooth: hci6: command tx timeout [ 232.043477] Bluetooth: hci7: command tx timeout [ 232.046392] Bluetooth: hci5: command tx timeout [ 232.107502] Bluetooth: hci4: command tx timeout [ 233.707676] Bluetooth: hci1: command tx timeout [ 233.707951] Bluetooth: hci0: command tx timeout [ 233.837452] Bluetooth: hci2: command tx timeout [ 233.899527] Bluetooth: hci3: command tx timeout [ 234.029386] Bluetooth: hci6: command tx timeout [ 234.091541] Bluetooth: hci5: command tx timeout [ 234.091564] Bluetooth: hci7: command tx timeout [ 234.158665] Bluetooth: hci4: command tx timeout [ 287.754993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.756468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.758594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.762458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.764247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.765250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.772976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.776687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.781649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.787612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.789117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.794197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.806674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.809878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.812632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.815770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.817748] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.821776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.004753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.025735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.029015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.031953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.034943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.037586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.041650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.042528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.043349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.044050] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.049671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.054662] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.056507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.057639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.059753] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.061450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.061609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.063530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.064732] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.065929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.070478] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.071659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.084973] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 288.086242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.110698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.137590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.145600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.192586] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.218165] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 288.221553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 289.835598] Bluetooth: hci0: command tx timeout [ 289.836697] Bluetooth: hci1: command tx timeout [ 289.899561] Bluetooth: hci2: command tx timeout [ 290.091488] Bluetooth: hci3: command tx timeout [ 290.155470] Bluetooth: hci5: command tx timeout [ 290.156725] Bluetooth: hci4: command tx timeout [ 290.220430] Bluetooth: hci6: command tx timeout [ 290.283422] Bluetooth: hci7: command tx timeout [ 291.883688] Bluetooth: hci1: command tx timeout [ 291.884215] Bluetooth: hci0: command tx timeout [ 291.947482] Bluetooth: hci2: command tx timeout [ 292.139518] Bluetooth: hci3: command tx timeout [ 292.203584] Bluetooth: hci4: command tx timeout [ 292.205069] Bluetooth: hci5: command tx timeout [ 292.267989] Bluetooth: hci6: command tx timeout [ 292.331452] Bluetooth: hci7: command tx timeout [ 293.931456] Bluetooth: hci0: command tx timeout [ 293.931995] Bluetooth: hci1: command tx timeout [ 293.995494] Bluetooth: hci2: command tx timeout [ 294.187418] Bluetooth: hci3: command tx timeout [ 294.251462] Bluetooth: hci4: command tx timeout [ 294.253192] Bluetooth: hci5: command tx timeout [ 294.323487] Bluetooth: hci6: command tx timeout [ 294.379410] Bluetooth: hci7: command tx timeout [ 295.979840] Bluetooth: hci1: command tx timeout [ 295.979930] Bluetooth: hci0: command tx timeout [ 296.043508] Bluetooth: hci2: command tx timeout [ 296.236431] Bluetooth: hci3: command tx timeout [ 296.299471] Bluetooth: hci5: command tx timeout [ 296.299494] Bluetooth: hci4: command tx timeout [ 296.365538] Bluetooth: hci6: command tx timeout [ 296.428518] Bluetooth: hci7: command tx timeout [ 349.953810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.957003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.958647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.963502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.966611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.968601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.007965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.010616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.015874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.019578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.023094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.025556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.074019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.081074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.085826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.089155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.091440] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.096513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.197182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.200149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.202747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.209876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.218253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 350.220794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.263102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.269079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.271599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.291167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.295714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.296607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.299790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 350.302269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.319732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.372741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.377651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.381087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.397606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.401575] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.410046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.420239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 350.422186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.460222] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.464783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.467805] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 350.469692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.471967] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.482441] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 350.493537] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.981403] Bluetooth: hci0: command tx timeout [ 352.043452] Bluetooth: hci1: command tx timeout [ 352.171760] Bluetooth: hci2: command tx timeout [ 352.300477] Bluetooth: hci3: command tx timeout [ 352.427703] Bluetooth: hci4: command tx timeout [ 352.491469] Bluetooth: hci5: command tx timeout [ 352.556417] Bluetooth: hci7: command tx timeout [ 352.619752] Bluetooth: hci6: command tx timeout [ 354.027492] Bluetooth: hci0: command tx timeout [ 354.093430] Bluetooth: hci1: command tx timeout [ 354.219579] Bluetooth: hci2: command tx timeout [ 354.348402] Bluetooth: hci3: command tx timeout [ 354.475428] Bluetooth: hci4: command tx timeout [ 354.539478] Bluetooth: hci5: command tx timeout [ 354.603471] Bluetooth: hci7: command tx timeout [ 354.668078] Bluetooth: hci6: command tx timeout [ 356.076592] Bluetooth: hci0: command tx timeout [ 356.141355] Bluetooth: hci1: command tx timeout [ 356.267624] Bluetooth: hci2: command tx timeout [ 356.395432] Bluetooth: hci3: command tx timeout [ 356.523411] Bluetooth: hci4: command tx timeout [ 356.587435] Bluetooth: hci5: command tx timeout [ 356.652376] Bluetooth: hci7: command tx timeout [ 356.715420] Bluetooth: hci6: command tx timeout [ 358.123433] Bluetooth: hci0: command tx timeout [ 358.188167] Bluetooth: hci1: command tx timeout [ 358.315622] Bluetooth: hci2: command tx timeout [ 358.443577] Bluetooth: hci3: command tx timeout [ 358.571393] Bluetooth: hci4: command tx timeout [ 358.635400] Bluetooth: hci5: command tx timeout [ 358.699423] Bluetooth: hci7: command tx timeout [ 358.763610] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:59:45 Registers: info registers vcpu 0 RAX=00000000fffffffd RBX=0000000000000006 RCX=ffff88806ce2cf40 RDX=ffff888027989b80 RSI=0000000000000004 RDI=0000000000000005 RBP=0000005f22753600 RSP=ffff88806ce09e28 R8 =0000000000000000 R9 =fffffbfff0c7eef2 R10=0000000000000006 R11=00000000fa83b2da R12=0000000000000001 R13=ffff88806ce2d758 R14=ffff88806ce2cf40 R15=dffffc0000000000 RIP=ffffffff8151d950 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f91dce254a1 CR3=0000000022674000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802fcc7c58 RCX=ffffffff816a3ef4 RDX=ffff88802798b700 RSI=0000000000000008 RDI=0000000000000001 RBP=000000000000004e RSP=ffff88802fcc7b38 R8 =0000000000000000 R9 =fffff94000044650 R10=0000000000000000 R11=0000000000000001 R12=ffffea0000223280 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88802fcc7d98 RIP=ffffffff816a3fe3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc12d413540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc12d640000 CR3=0000000033512000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000