Warning: Permanently added '[localhost]:52902' (ECDSA) to the list of known hosts. 2024/11/13 17:03:57 fuzzer started 2024/11/13 17:03:57 dialing manager at localhost:46317 syzkaller login: [ 79.451553] cgroup: Unknown subsys name 'net' [ 79.591042] cgroup: Unknown subsys name 'cpuset' [ 79.607067] cgroup: Unknown subsys name 'rlimit' 2024/11/13 17:04:23 syscalls: 218 2024/11/13 17:04:23 code coverage: enabled 2024/11/13 17:04:23 comparison tracing: enabled 2024/11/13 17:04:23 extra coverage: enabled 2024/11/13 17:04:23 setuid sandbox: enabled 2024/11/13 17:04:23 namespace sandbox: enabled 2024/11/13 17:04:23 Android sandbox: enabled 2024/11/13 17:04:23 fault injection: enabled 2024/11/13 17:04:23 leak checking: enabled 2024/11/13 17:04:23 net packet injection: enabled 2024/11/13 17:04:23 net device setup: enabled 2024/11/13 17:04:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 17:04:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 17:04:23 USB emulation: enabled 2024/11/13 17:04:23 hci packet injection: enabled 2024/11/13 17:04:23 wifi device emulation: enabled 2024/11/13 17:04:23 802.15.4 emulation: enabled 2024/11/13 17:04:23 fetching corpus: 0, signal 0/0 (executing program) 2024/11/13 17:04:25 starting 8 fuzzer processes 17:04:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x1) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'sit0\x00'}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000100)) r1 = syz_io_uring_complete(0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x17}, 0xffff) epoll_wait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0xffffffc1) epoll_pwait2(r1, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000002c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000400)={{r2}, 0x0, 0x10, @inherit={0x98, &(0x7f0000000340)={0x0, 0xa, 0x2, 0x5, {0x8, 0x8, 0x3, 0xf03f, 0x5}, [0x3, 0x7, 0x0, 0x3dc, 0xa6c, 0xffffffff, 0x20, 0x5, 0x0, 0x8001]}}, @subvolid=0x1}) write$P9_RWALK(r1, &(0x7f0000001400)={0x3d, 0x6f, 0x1, {0x4, [{0x80, 0x4, 0x2}, {0x88, 0x1, 0x5}, {0x80, 0x1}, {0x10, 0x0, 0x6}]}}, 0x3d) write$P9_RAUTH(r1, &(0x7f0000001440)={0x14, 0x67, 0x2, {0x20, 0x0, 0x7}}, 0x14) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}]}, 0x1c}}, 0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001580), 0x16b400, 0x0) write$P9_ROPEN(r3, &(0x7f00000015c0)={0x18, 0x71, 0x1, {{0x10, 0x0, 0x2}, 0x9}}, 0x18) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001780)) 17:04:25 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4081}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ' \x01\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x48c81) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4175455dcea1a389) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x7c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000090) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xac, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:semanage_read_lock_t:s0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r5) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000dc0)={'wpan4\x00'}) 17:04:25 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x10000000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x60000810) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4090) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x5}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x20c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xae5a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000804) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x14000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000900)={0x0, 0x2, {0xffffffffffffffff, @usage, 0x0, 0x2, 0x6, 0x8, 0x94, 0xffffffff, 0x20, @usage=0x1, 0xfffffffd, 0x3, [0x58, 0xfffffffffffffffa, 0x7, 0x400, 0x5, 0x40]}, {0x4, @usage=0x1, 0x0, 0x4, 0x8, 0x3, 0x2, 0x3, 0x21, @usage=0x6, 0x0, 0x56, [0x7fff, 0xfffffffffffffff8, 0x5, 0x1d, 0x100000000, 0x401]}, {0x5, @usage=0x4, 0x0, 0x800, 0x1, 0x1, 0x2, 0x4, 0x400, @struct={0x9, 0x2}, 0x2, 0x2, [0x7, 0x9, 0x9, 0x1000, 0x10001, 0xff]}, {0x33, 0x2, 0x6}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000d00)={0x1, 0x5, {0x7, @struct={0x6, 0x5}, r5, 0x4, 0x1, 0xffffffffffffffe0, 0x6, 0x800, 0x80, @struct={0x5, 0xfee1}, 0x200, 0x8454, [0x9, 0xffffffff, 0x80000000, 0x6d3, 0x4, 0x7]}, {0x400, @usage=0x1, r6, 0x279a3b8, 0x8, 0x8001, 0x3f, 0x0, 0x444, @usage=0x4, 0x20, 0xb46a, [0x1, 0xfffffffffffffbc3, 0x80000000, 0x8b33, 0x8, 0xea2]}, {0x7, @usage=0x101, 0x0, 0x1, 0x4e4, 0xff, 0xffffffffffffff81, 0x5, 0x80, @struct={0x6, 0x2}, 0x5, 0x5, [0x8, 0x2, 0x0, 0x4, 0x2, 0xb]}, {0x4, 0x7, 0x2000000000000000}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x4004004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001380)={&(0x7f0000001240), 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) [ 106.160984] audit: type=1400 audit(1731517465.325:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:04:25 executing program 4: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x7, 0x2, {0x6, '.%$-]\\'}}, 0xf) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0xd0, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x1}, @exit_looper, @enter_looper, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x3f}, @fda={0x66646185, 0x9, 0x0, 0x39}, @fda={0x66646185, 0x6, 0x1, 0x2c}}, &(0x7f0000000340)={0x0, 0x20, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/231, 0xe7, 0x2, 0x25}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}, @enter_looper, @decrefs={0x40046307, 0x1}], 0x5d, 0x0, &(0x7f0000000640)="ed1b78dea4402b6dc0e3d815c688f6c92ce61d6367b09d5853d6aa33b818cdb1d123e98e2f82f723c65e0e921424403bc90b8ec947cefd3865d55896f2e57a70b3be82007a6a456a4447723091cab6b527da0c20c45ff63032aa7061b4"}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000700)={0x7, 0x15, 0x1}, 0x7) r0 = io_uring_setup(0x3323, &(0x7f0000000740)={0x0, 0xb79f, 0x0, 0x2, 0x144}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x4010, r0, 0x10000000) epoll_pwait2(0xffffffffffffffff, &(0x7f00000007c0)=[{}, {}], 0x2, &(0x7f0000000800), &(0x7f0000000840)={[0x3]}, 0x8) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000880)={0x8b, 0x6f, 0x1, {0xa, [{0x2, 0x3}, {0x4, 0x4}, {0x40, 0x1, 0x1}, {0x8, 0x0, 0x2}, {0x80, 0x0, 0x5}, {0x1, 0x2, 0x4}, {0x8}, {0x0, 0x3, 0x4}, {0x40, 0x3, 0x8}, {0x80, 0x0, 0x1}]}}, 0x8b) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)={0x53, 0x7d, 0x1, {0x0, 0x4c, 0xfff, 0x5, {0x8, 0x4, 0x7}, 0x22810000, 0x4f160883, 0x0, 0x2, 0x1, '\x00', 0x4, '}^//', 0xe, '.{&)m]![^\'#::)', 0x6, '.%$-]\\'}}, 0x53) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000009c0)={0x7, 0x15, 0x2}, 0x7) pipe2$9p(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLERROR(r1, &(0x7f0000000a40)={0xa, 0x7, 0x2, {0x1, '\x00'}}, 0xa) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000084) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000b80)={0x4873e4cc, 0x6, 0x8, 0x5, 0xc3, 0x6, 0x10000, 0xc0a}, &(0x7f0000000bc0)={0x2, 0xfffffffffffff33b, 0x8, 0x101, 0x0, 0x5, 0x3, 0x101}, &(0x7f0000000c00)={0x7, 0x9, 0x4, 0x2, 0x0, 0x200, 0x4, 0x2566bc78}, &(0x7f0000000c80)={r2, r3+60000000}, &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x58d5]}, 0x8}) write$9p(r1, &(0x7f0000000d40)="d6b66e50f922d3475710cd84085272aadc639b8789a2f3c57909554bc90867f0e031d54afe5e09975c37bf02e5fd16ab24795a61588e37f3043ad6bf18749a5987a086c5de1c4dcad381cc5284a2490fbfe25bcd50bd93eef92c92061b7e9d6a14f28eef90209fdefea27e8fcd180b91a084e19163bb2e99302d1e2863efa443c8c5d2e74c42a6111d08359559f100bbdb9653571c8fa3eb6642b0731207626607f0095331bdcfab0094700a1177809e366f2bafa332", 0xb6) write$P9_ROPEN(r1, &(0x7f0000000e00)={0x18, 0x71, 0x2, {{0x10, 0x0, 0x3}, 0x3}}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x10000000) 17:04:25 executing program 3: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0xa3, 0x1, [0x23, 0x4, 0x9, 0x6, 0x4000000], [0x4, 0x1, 0x3, 0x0, 0x0, 0x1f, 0x400, 0x9, 0x2, 0x1ff, 0xd7, 0x10001, 0x7fffffff, 0x101, 0x6, 0x3, 0x1f, 0xfff, 0x2, 0x4, 0x9e, 0x5, 0x80000001, 0x8, 0x81, 0xb1, 0x7, 0x8, 0x0, 0x6, 0x99, 0x8, 0x3ff, 0x6, 0x1, 0x0, 0x2, 0x2ebe4e1d, 0x3, 0xc00000000000000, 0x40000000, 0x7, 0x3, 0x2, 0x335cc5d7, 0x8, 0x3ff, 0x3, 0x3b, 0x9, 0x3, 0x6, 0x100000001, 0x6, 0x400, 0x4, 0x3f, 0x4370, 0x5, 0x7, 0x6, 0xffffffffffffb31f, 0x8, 0x1, 0x2cb, 0x90, 0x0, 0x9, 0xffffffff, 0x100, 0x9, 0x1000, 0x9, 0x1, 0x6, 0x0, 0x3, 0x4, 0x3, 0x2, 0xfa84, 0x0, 0x800, 0x9, 0x8000, 0x2, 0x0, 0x10001, 0x3, 0x91, 0x7f, 0x0, 0x6, 0x1, 0x6, 0x10001, 0x5, 0x2, 0x7fffffff, 0x0, 0x800, 0x9a, 0x100000000, 0x400, 0x5, 0xf0, 0x91, 0x7, 0x6, 0x40, 0x5, 0x3ff, 0x3, 0x80000000, 0xffffffffffffffff, 0x8, 0xff, 0xd632, 0x8000, 0x3, 0x269a]}) r1 = inotify_init1(0x80000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"be37d5b88bb9c3113effd8fd5c53d580", r2, r2, {0x1, 0x3}, {0x2, 0x100}, 0x1, [0x80, 0xc60, 0xfa0f, 0x7, 0x0, 0x0, 0x4, 0xffffffff, 0x7ff, 0x100, 0x118, 0x6, 0x80000001, 0x9, 0x8, 0x6]}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x515b49ca}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000700)={{r1}, r2, 0xc, @inherit={0x68, &(0x7f0000000680)={0x1, 0x4, 0x1d41600000000000, 0x8, {0x10, 0x100000001, 0x7fff, 0x9, 0x5}, [0xffffffffffffffff, 0x4, 0x8000, 0x3]}}, @name="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"}) r3 = syz_open_dev$hidraw(&(0x7f0000001700), 0x1, 0x40000) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001740)={r0, "6e7c8fce4f03f11ce1e8bc6b74e676d4"}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000002740)={{}, {@val={r4}, @actul_num={@val=0x2b, 0x100000001, 0x70}}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x58, r6, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002940)={r0, "bab4f9ce00e53a69167b8b654658f32d"}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000003940)={r7, 0x0, 0x8e5}) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5d}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040d4}, 0x48800) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e80), r5) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003fc0), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000004000)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000004100)=0xe8) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000004200)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)={0x54, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000005) 17:04:25 executing program 7: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x44fa33e00c992eed, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x9141ffc6131d0937, 0x1}, 0x7ff) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x12, 0xffffffffffffffff, 0x8000000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0}, {0x0, @struct}}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1, 0x10, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000480)=0x1, 0x0, 0x4) r4 = syz_io_uring_complete(r3) r5 = epoll_create1(0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x111700, 0x0) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000500)={{r6}, {@val={r1}, @actul_num={@val=0x2d, 0x9, 0x50}}}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0x8}) r7 = io_uring_setup(0x78f1, &(0x7f0000000580)={0x0, 0x73a0, 0x1, 0x2, 0x159}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000600)={{r8}, 0x0, 0x8, @unused=[0x0, 0x4, 0x0, 0x6], @devid=r2}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001600)={{r7}, {@val={r1}, @actul_num={@void, 0x7, 0x6d}}}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000edf000/0x1000)=nil, 0x1000, 0x6, 0x4010, r4, 0x0) syz_io_uring_complete(r9) syz_io_uring_complete(r0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x140, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x81}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x7}}]}}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x140}, 0x1, 0x0, 0x0, 0x34}, 0x20040000) 17:04:25 executing program 5: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000015) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1c00000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x4004) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x67, 0x1, {0x4, 0x2, 0x1}}, 0x14) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000340)={0x7, 0x79, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000005) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x850) write$P9_RREADDIR(r0, &(0x7f00000005c0)={0x42, 0x29, 0x2, {0x3, [{{0x20, 0x1, 0x5}, 0x3, 0x6}, {{0x0, 0x4, 0x2}, 0x400, 0x7, 0x7, './file0'}]}}, 0x42) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x520, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00'}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008884}, 0x4000001) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r4, 0x610, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000000) pidfd_getfd(r0, r0, 0x0) 17:04:25 executing program 6: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x40001) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xaeb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x20000010) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x6d, 0x1}, 0x7) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x97}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xec}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008085) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f00000008c0)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r7 = syz_io_uring_complete(0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x18, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x7}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) [ 107.646897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.648436] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.649737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.651898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.653500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.654813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.655884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.657042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.659856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.661260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.664052] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.666386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.667236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.668892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.670921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.673895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.682854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.685067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.687021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.688802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.690069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.740390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.742311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.747471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 107.748630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.750258] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 107.751375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.755007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.759060] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 107.764452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 107.768944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 107.770058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.770932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 107.772457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 107.774401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.776750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.783317] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 107.784509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.786140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 107.792952] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 107.794013] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.795684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.797022] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.798569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 107.801844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.802652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 107.804121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.805163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.733678] Bluetooth: hci2: command tx timeout [ 109.769674] Bluetooth: hci0: command tx timeout [ 109.769737] Bluetooth: hci1: command tx timeout [ 109.832817] Bluetooth: hci4: command tx timeout [ 109.832905] Bluetooth: hci7: command tx timeout [ 109.833426] Bluetooth: hci3: command tx timeout [ 109.896686] Bluetooth: hci5: command tx timeout [ 109.896738] Bluetooth: hci6: command tx timeout [ 111.752653] Bluetooth: hci2: command tx timeout [ 111.816703] Bluetooth: hci0: command tx timeout [ 111.819625] Bluetooth: hci1: command tx timeout [ 111.880917] Bluetooth: hci3: command tx timeout [ 111.881395] Bluetooth: hci7: command tx timeout [ 111.882635] Bluetooth: hci4: command tx timeout [ 111.944712] Bluetooth: hci5: command tx timeout [ 111.945190] Bluetooth: hci6: command tx timeout [ 113.800870] Bluetooth: hci2: command tx timeout [ 113.865829] Bluetooth: hci1: command tx timeout [ 113.866313] Bluetooth: hci0: command tx timeout [ 113.928700] Bluetooth: hci4: command tx timeout [ 113.929192] Bluetooth: hci7: command tx timeout [ 113.929260] Bluetooth: hci3: command tx timeout [ 113.992761] Bluetooth: hci5: command tx timeout [ 113.993239] Bluetooth: hci6: command tx timeout [ 115.849685] Bluetooth: hci2: command tx timeout [ 115.912757] Bluetooth: hci0: command tx timeout [ 115.913237] Bluetooth: hci1: command tx timeout [ 115.977002] Bluetooth: hci4: command tx timeout [ 115.977492] Bluetooth: hci3: command tx timeout [ 115.978028] Bluetooth: hci7: command tx timeout [ 116.040723] Bluetooth: hci5: command tx timeout [ 116.041738] Bluetooth: hci6: command tx timeout [ 170.266128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.271694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.275983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.287032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.291479] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.298690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.318321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.325355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.328305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.333223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.346883] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.350948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.394755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.396371] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.401913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.402786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.407927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.413356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.417434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.420183] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.422269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.428687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.432038] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.444896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.448529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.451191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.453389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.456975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.459526] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.461793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.558029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.560314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.565839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.580986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.584220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.586812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.591323] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.594274] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.596446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.602168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.604862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.606928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.625201] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.627220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.695692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.712072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.741860] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.747848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.360981] Bluetooth: hci0: command tx timeout [ 172.426632] Bluetooth: hci1: command tx timeout [ 172.490654] Bluetooth: hci4: command tx timeout [ 172.490780] Bluetooth: hci2: command tx timeout [ 172.618764] Bluetooth: hci3: command tx timeout [ 172.683796] Bluetooth: hci7: command tx timeout [ 172.810307] Bluetooth: hci5: command tx timeout [ 172.872702] Bluetooth: hci6: command tx timeout [ 174.409708] Bluetooth: hci0: command tx timeout [ 174.473767] Bluetooth: hci1: command tx timeout [ 174.537343] Bluetooth: hci2: command tx timeout [ 174.537727] Bluetooth: hci4: command tx timeout [ 174.664927] Bluetooth: hci3: command tx timeout [ 174.729630] Bluetooth: hci7: command tx timeout [ 174.856731] Bluetooth: hci5: command tx timeout [ 174.920718] Bluetooth: hci6: command tx timeout [ 176.458631] Bluetooth: hci0: command tx timeout [ 176.520809] Bluetooth: hci1: command tx timeout [ 176.584737] Bluetooth: hci4: command tx timeout [ 176.584797] Bluetooth: hci2: command tx timeout [ 176.715915] Bluetooth: hci3: command tx timeout [ 176.776804] Bluetooth: hci7: command tx timeout [ 176.907699] Bluetooth: hci5: command tx timeout [ 176.969750] Bluetooth: hci6: command tx timeout [ 178.505865] Bluetooth: hci0: command tx timeout [ 178.569673] Bluetooth: hci1: command tx timeout [ 178.633642] Bluetooth: hci2: command tx timeout [ 178.633751] Bluetooth: hci4: command tx timeout [ 178.760821] Bluetooth: hci3: command tx timeout [ 178.824720] Bluetooth: hci7: command tx timeout [ 178.953774] Bluetooth: hci5: command tx timeout [ 179.018612] Bluetooth: hci6: command tx timeout [ 232.799984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.806917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.809024] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.810100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.815396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.818124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.819529] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.820929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.828462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.845422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.848619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.850876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.857706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.861335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.862382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.863823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.874648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.875513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.878877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.881951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.884196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.894991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.897255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.899722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.998944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.002795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.004090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.011874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.016376] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.020069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.034718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.041458] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.043365] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.044235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.047810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.049269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.052469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.054084] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.060582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.068703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.071268] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.072958] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.075974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.082769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.085122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.086959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.092623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 233.098929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.888694] Bluetooth: hci0: command tx timeout [ 234.889889] Bluetooth: hci1: command tx timeout [ 234.953439] Bluetooth: hci2: command tx timeout [ 234.954137] Bluetooth: hci3: command tx timeout [ 235.144698] Bluetooth: hci4: command tx timeout [ 235.144889] Bluetooth: hci5: command tx timeout [ 235.145769] Bluetooth: hci6: command tx timeout [ 235.208655] Bluetooth: hci7: command tx timeout [ 236.936666] Bluetooth: hci0: command tx timeout [ 236.939581] Bluetooth: hci1: command tx timeout [ 237.000643] Bluetooth: hci2: command tx timeout [ 237.001674] Bluetooth: hci3: command tx timeout [ 237.193658] Bluetooth: hci5: command tx timeout [ 237.193728] Bluetooth: hci4: command tx timeout [ 237.194176] Bluetooth: hci6: command tx timeout [ 237.256850] Bluetooth: hci7: command tx timeout [ 238.984659] Bluetooth: hci1: command tx timeout [ 238.986634] Bluetooth: hci0: command tx timeout [ 239.049589] Bluetooth: hci3: command tx timeout [ 239.050959] Bluetooth: hci2: command tx timeout [ 239.240867] Bluetooth: hci4: command tx timeout [ 239.242480] Bluetooth: hci6: command tx timeout [ 239.242509] Bluetooth: hci5: command tx timeout [ 239.304878] Bluetooth: hci7: command tx timeout [ 241.032723] Bluetooth: hci1: command tx timeout [ 241.032772] Bluetooth: hci0: command tx timeout [ 241.096691] Bluetooth: hci2: command tx timeout [ 241.096725] Bluetooth: hci3: command tx timeout [ 241.288704] Bluetooth: hci4: command tx timeout [ 241.288859] Bluetooth: hci6: command tx timeout [ 241.290227] Bluetooth: hci5: command tx timeout [ 241.352706] Bluetooth: hci7: command tx timeout [ 294.876270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.878695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.880042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.882506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.883445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.884755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.891153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.893042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.896663] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.898749] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.900966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.903213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.006837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.013130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.014352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.019631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.023892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.027368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.031930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.033713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.034752] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.039757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.039831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.045123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.203881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.207662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.211497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.218892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.221038] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.222147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.277299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.284143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.315017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.316577] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.318713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.323432] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.327956] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 295.330333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.342904] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.347889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.355307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 295.358956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.364451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.370067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.397021] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.477256] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.480204] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 295.482907] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.969724] Bluetooth: hci0: command tx timeout [ 296.969762] Bluetooth: hci1: command tx timeout [ 297.096674] Bluetooth: hci2: command tx timeout [ 297.096707] Bluetooth: hci3: command tx timeout [ 297.289659] Bluetooth: hci4: command tx timeout [ 297.416666] Bluetooth: hci6: command tx timeout [ 297.417776] Bluetooth: hci5: command tx timeout [ 297.544648] Bluetooth: hci7: command tx timeout [ 299.016738] Bluetooth: hci0: command tx timeout [ 299.017611] Bluetooth: hci1: command tx timeout [ 299.144783] Bluetooth: hci2: command tx timeout [ 299.145323] Bluetooth: hci3: command tx timeout [ 299.337611] Bluetooth: hci4: command tx timeout [ 299.464732] Bluetooth: hci6: command tx timeout [ 299.464793] Bluetooth: hci5: command tx timeout [ 299.592767] Bluetooth: hci7: command tx timeout [ 301.064687] Bluetooth: hci1: command tx timeout [ 301.065941] Bluetooth: hci0: command tx timeout [ 301.193637] Bluetooth: hci3: command tx timeout [ 301.193669] Bluetooth: hci2: command tx timeout [ 301.384630] Bluetooth: hci4: command tx timeout [ 301.512661] Bluetooth: hci5: command tx timeout [ 301.513629] Bluetooth: hci6: command tx timeout [ 301.642580] Bluetooth: hci7: command tx timeout [ 303.112637] Bluetooth: hci0: command tx timeout [ 303.113142] Bluetooth: hci1: command tx timeout [ 303.240627] Bluetooth: hci3: command tx timeout [ 303.240652] Bluetooth: hci2: command tx timeout [ 303.432638] Bluetooth: hci4: command tx timeout [ 303.560834] Bluetooth: hci5: command tx timeout [ 303.561786] Bluetooth: hci6: command tx timeout [ 303.689662] Bluetooth: hci7: command tx timeout [ 357.278204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.281026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.291176] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.299375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.305925] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.319245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.361582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.368913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.383791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.408646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.411922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.416340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.469158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.471932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.478652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.484383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.491428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.495834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.522902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.527352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.535474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.539702] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.542699] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.545010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.618071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.622866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.624909] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.628827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.632394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.634972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.638033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.642431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.645666] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 357.648078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.650990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.653584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.655903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.660698] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 357.664762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.690212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 357.696782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.708398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 357.720789] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.756317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.756531] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 357.863780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.870750] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 357.872073] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.433604] Bluetooth: hci1: command tx timeout [ 359.433613] Bluetooth: hci0: command tx timeout [ 359.560636] Bluetooth: hci2: command tx timeout [ 359.625621] Bluetooth: hci3: command tx timeout [ 359.688685] Bluetooth: hci4: command tx timeout [ 359.752680] Bluetooth: hci5: command tx timeout [ 360.010599] Bluetooth: hci6: command tx timeout [ 360.011656] Bluetooth: hci7: command tx timeout [ 361.480667] Bluetooth: hci0: command tx timeout [ 361.480767] Bluetooth: hci1: command tx timeout [ 361.608806] Bluetooth: hci2: command tx timeout [ 361.672826] Bluetooth: hci3: command tx timeout [ 361.737363] Bluetooth: hci4: command tx timeout [ 361.801037] Bluetooth: hci5: command tx timeout [ 362.056648] Bluetooth: hci6: command tx timeout [ 362.058597] Bluetooth: hci7: command tx timeout [ 363.528624] Bluetooth: hci1: command tx timeout [ 363.529848] Bluetooth: hci0: command tx timeout [ 363.657573] Bluetooth: hci2: command tx timeout [ 363.720635] Bluetooth: hci3: command tx timeout [ 363.784622] Bluetooth: hci4: command tx timeout [ 363.848616] Bluetooth: hci5: command tx timeout [ 364.104624] Bluetooth: hci7: command tx timeout [ 364.105145] Bluetooth: hci6: command tx timeout [ 365.580111] Bluetooth: hci0: command tx timeout [ 365.581647] Bluetooth: hci1: command tx timeout [ 365.704685] Bluetooth: hci2: command tx timeout [ 365.768726] Bluetooth: hci3: command tx timeout [ 365.832672] Bluetooth: hci4: command tx timeout [ 365.896593] Bluetooth: hci5: command tx timeout [ 366.152653] Bluetooth: hci6: command tx timeout [ 366.152685] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:09:27 Registers: info registers vcpu 0 RAX=ffffffff86bea692 RBX=0000000000000001 RCX=ffffffff8483332e RDX=0000000000000000 RSI=ffffffff86bea692 RDI=ffffffff8673a6a4 RBP=ffff888035a771c0 RSP=ffff888035a770d0 R8 =ffffffff86bea692 R9 =ffff888035a771a8 R10=000000000003c001 R11=00000000000c1507 R12=ffffffff8673a6a4 R13=ffffffff8673a6a4 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81148769 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faeaffd61f0 CR3=000000003500c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff863f8534 RBX=0000000000000001 RCX=ffffffff812efc06 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf365d0 RBP=ffff88806cf40350 RSP=ffff88802ea37230 R8 =0000000000000000 R9 =fffffbfff0c7eef2 R10=ffffffff863f7797 R11=ffff88806cf40350 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffffff81844fc7 RIP=ffffffff81301689 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7a6511c1f0 CR3=000000002f068000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00000000000000ff00000000000000 XMM02=0000000000000000ff00000000000000 XMM03=00000000000000000000ff0000000000 XMM04=00ff0000000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000