syzkaller login: [ 70.891708] sshd (239) used greatest stack depth: 24048 bytes left Warning: Permanently added '[localhost]:4101' (ECDSA) to the list of known hosts. 2025/01/07 04:56:40 fuzzer started 2025/01/07 04:56:41 dialing manager at localhost:41745 [ 74.819137] cgroup: Unknown subsys name 'net' [ 74.942646] cgroup: Unknown subsys name 'cpuset' [ 74.973642] cgroup: Unknown subsys name 'rlimit' [ 81.960360] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 93.125561] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/07 04:57:01 syscalls: 206 2025/01/07 04:57:01 code coverage: enabled 2025/01/07 04:57:01 comparison tracing: enabled 2025/01/07 04:57:01 extra coverage: enabled 2025/01/07 04:57:01 setuid sandbox: enabled 2025/01/07 04:57:01 namespace sandbox: enabled 2025/01/07 04:57:01 Android sandbox: enabled 2025/01/07 04:57:01 fault injection: enabled 2025/01/07 04:57:01 leak checking: enabled 2025/01/07 04:57:01 net packet injection: enabled 2025/01/07 04:57:01 net device setup: enabled 2025/01/07 04:57:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/07 04:57:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/07 04:57:01 USB emulation: enabled 2025/01/07 04:57:01 hci packet injection: enabled 2025/01/07 04:57:01 wifi device emulation: enabled 2025/01/07 04:57:01 802.15.4 emulation: enabled 2025/01/07 04:57:01 fetching corpus: 0, signal 0/0 (executing program) 2025/01/07 04:57:03 starting 8 fuzzer processes 04:57:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x24024000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x14000800) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x600}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x20044081) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r5, 0x420, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}]}, 0x7c}}, 0x4008810) r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000b40)) syz_genetlink_get_family_id$team(&(0x7f0000000b00), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x2b135f1bf671e293}, 0x4000804) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80014101}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000) 04:57:03 executing program 1: r0 = gettid() waitid(0x0, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x9}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) wait4(r0, &(0x7f0000000140), 0x0, &(0x7f0000000180)) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000240)={0x4, 0xb63a, 0x45f4}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000002c0)=""/199, &(0x7f00000003c0)=0xc7) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x6, 0x8, 0x8, "56499364d20beeef3e060da6be8031c6fa95ee3aecd2293b7c4ed998a61a5a44bd3a922f545b3cd240f036965aab74342ea887073951fea7d3a951c22d731b02", "5c20affd6fa6904fd8382b2ed09171b9594d7718b93990f68052686ada642288362c2dfd5aedcc6413d05c60dae9b23f258bfa4038c72dc58ac80e0e06141a0b", "7b3188b57275d08bda045f6f0257b45b2e14ed8373d748486fe4bd03cca782e5", [0x5c22be13, 0xc0]}) clock_gettime(0x2, &(0x7f0000000500)) bind$bt_sco(r2, &(0x7f0000000540)={0x1f, @none}, 0x8) keyctl$get_keyring_id(0x0, 0x0, 0x5) wait4(r0, &(0x7f0000000580), 0x9e4914e54d75272d, &(0x7f00000005c0)) syz_open_dev$loop(&(0x7f0000000680), 0x5d, 0x20001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) r4 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) r6 = getgid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000940)={{0x2, r3, r4, r5, r6, 0xc2, 0x8}, 0x37b, 0x80000000, 0x0, 0x4, 0x0, r0, 0x9}) 04:57:03 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x240}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40850) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x284, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x9, 0x1, 0x3}, {0x7, 0x0, 0x6b, 0x401}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x8001, 0x1, 0x6d, 0x5}, {0x9, 0x9, 0x9, 0x349}, {0x7, 0x8f, 0x32, 0x3}, {0x20, 0x2, 0x5, 0x77}, {0x6, 0x80, 0x1f, 0x7fffffff}, {0xf0a, 0x0, 0x70, 0x3}, {0x200, 0x4, 0x7, 0x2}, {0x8, 0x5, 0x0, 0x542d}, {0x4000, 0x9, 0x20, 0x4}, {0x2, 0x88, 0x1, 0x10001}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x84}, 0x804) r0 = accept(0xffffffffffffffff, &(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000600)=0x80) r1 = accept4(0xffffffffffffffff, &(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000007c0)=0x80, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1fc, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x29eb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x393}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) r3 = socket(0x6, 0x5, 0x81) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000011}, 0x20000084) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x20004080) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r4) socketpair(0x1, 0x2, 0x3f, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000001000)={&(0x7f0000000e40), 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xd0, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x93, 0xa8, @random="2170d9dffb524ffc67764786b8ef403a3b7b78e6fa0594c628538018b906a21952daa74b64ad93136c2eb564b49310c00fc7941f19b7c730bb392257364ac38d5f8bade36f5bd0ed00f658088e9b14494edf125504693705d5a3b8d60ce486e04ea977835f2246dca387695a3fdaf80adeeffe996311caef30b17241030f46befb6914342a33affa82a82b4a0cccc9"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x78}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:57:03 executing program 3: time(&(0x7f0000000000)) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x4080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x311, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6172}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x200448b4) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000003c0)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4000000}]}, 0x2c}}, 0x4000) socket(0x11, 0x80000, 0x20000000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000040) r5 = socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd8, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) r6 = socket(0x2b, 0x4, 0x6) getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000900)=""/109, &(0x7f0000000980)=0x6d) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r7, 0xd8bd978fc1786fd, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xeb04}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}}, 0x10) [ 96.403345] audit: type=1400 audit(1736225823.885:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:57:03 executing program 5: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x10842) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000140)) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000002c0)={{0x3, 0x2, 0x97, 0x2, 0x9}, 0x0, 0x80000001}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x1, 0x7f, 0x0, 0x98f}, 0x7fffffff, 0x2b3, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0x7b9d, 0x81, 0x3}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x300) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000500)={{0x0, 0x3, 0x27, 0x2, 0x10001}, 0x1e9, 0x5, 0xfffffffffffffffd}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000005c0)={{0x3, 0x1, 0x9, 0x3, 0x7}}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs\x00', 0x1ff) r3 = syz_open_dev$loop(&(0x7f0000000640), 0x7, 0x10000) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000680)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000700)=""/65) 04:57:03 executing program 4: sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc440059725f3a0e}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x8c}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc4408504}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x49c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c4, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xee}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @mcast2, 0x1f}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x590, @ipv4={'\x00', '\xff\xff', @local}, 0x40}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x28, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x54c85a38, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x49c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40085) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20080090}, 0xc0c1) socketpair(0x1e, 0x4, 0x2, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffc1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000cc0)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x982d04625497e6a}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x29}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004884}, 0x8050) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000f80)={'ipvlan0\x00', @ifru_names}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001400)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000014c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000002380)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000001f80)={0x3a8, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcab}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x832, 0x9, 0x2}, {0x6, 0x6, 0xe1}, {0x79d, 0x7f, 0x7, 0x6}, {0x3, 0x5, 0x2, 0x8000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf6b7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffaa2}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4044001}, 0x40) 04:57:03 executing program 6: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0x9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x400, 0x4, 0x3}, 0x101, 0x6}) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800, 0x402) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0xd3, 0x6, 0x5, &(0x7f00000001c0)="7972b4254a"}) r2 = socket(0x11, 0x3, 0xfffffffc) write$nbd(r2, &(0x7f0000000240)={0x67446698, 0x0, 0x3, 0x3, 0x4, "d27f55ce5e0730501727e2092ab81554368a6fdd983b40ae49919e0f8d214264454b2a99a237d050360049e83b9e091603adae13101e823dbe2b8fd4e7d76ca7951f2b7ad754548b17efb4ef8e9fb87a4ef9cf658b1d128ee9d39e24d6f1c8de4f3830cf66fb1b6535a714e577df346e110b2e63a78dfa8d10dffccbffe4165632f00167ca867c558d8c86ddad03d8cec18488e55ac7b3db2cbb9252a07dbf05717d9f38a906c1e7913bfe3ee79a4aa54e036ddb4e5c32aa259d27b49df6d2bf0526588f53708e7cf2f7cfc8c727ecbbd1707820ec833ca9d74ac63c331ed5523fdb60b01db1dcc8c6ff471ba65f21b5e7c9"}, 0x102) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x4040) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000003c0)={{0x2, 0x0, 0x2, 0x1, 0x5}, 0x7, 0xb712}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000580)={&(0x7f0000000480)="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", 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x300) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000640)) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) accept(r2, &(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000740)=0x80) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 04:57:04 executing program 7: ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu}) r0 = socket(0x38, 0x800, 0x8) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000007c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f00000008c0)={0x434, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x813}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf5f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000ec0)=@buf={0xd6, &(0x7f0000000dc0)="4c2844d3d601ed2f698d96f8e55ec9941770a9177c4cec5ba067486f34b93c51cba8fd30cdca08a72bb77d595c3d8ac1b473235be2634882c2676951b0faa51569ccdd7204c3bf725ec98847ec7d0060632b31b449d8919e4fd9daf4f128f5fbd5fa4ddfea5cad8b9a024e1b411dc1230e82703dcefc1e4c197d8809bc1c295f5457fc384a527bab931a284aceed316e640e001663977a7d6e07f865bda4cf70c068d9fe6e143de1d99b112bb2d154d7040620c1b07475da89beead699070c0ff0cfc156950a48de7df36e8220aff9cb2002bf0ddf35"}) r9 = accept4(r8, &(0x7f0000000f00)=@sco, &(0x7f0000000f80)=0x80, 0x80800) accept4(r9, &(0x7f0000000fc0)=@ethernet={0x0, @multicast}, &(0x7f0000001040)=0x80, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x5c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xbd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfc}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) prctl$PR_SET_TIMERSLACK(0x1d, 0xd8) accept4(r8, &(0x7f00000011c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000001240)=0x80, 0x800) write$nbd(0xffffffffffffffff, &(0x7f0000001280)={0x67446698, 0x1, 0x1, 0x4, 0x1, "dba5d543bd5b08d6d90c2795b1954585e9af70e7755a316c4eaa8f47c938f4932dbe081cbc22f6cb218613793dc9f23ff465c8080ccbb221d9b859a52f5461329e1e880b02e1ad5cb941e8012bf61d3f24593009f1f41c5fe9e871e76d80e84dc0f6308ba3c962b70301e3f27c74dc43ae7607f4b7e8537c441b732b8307f00675358cb52d7684abf79921d97416a01d24938abc80f313f588defe335adb915465a687032ac1cbe4aace57f318575d5875df8409ce3af9d96ad23b7388af0017ea8846feaaf4c2fd127a3200186fa9c6eaf799d2f09da9b933112ef846e4"}, 0xee) [ 97.896073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.898080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.899445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.902105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.904068] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.905394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.026555] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.031616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.040542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.041937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.043381] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.044592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.049800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.053426] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.055824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.061732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.070408] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.072248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.087640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.090798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.094808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.109568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.114050] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.115081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.159639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.168733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.171938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.175407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.176459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.181635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.185466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.186322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.187961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.188941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.191748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.193955] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.195281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.196520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.197516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.204348] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.209359] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.214437] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.215244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.220938] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.222067] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.223068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.225291] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.231409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.931681] Bluetooth: hci0: command tx timeout [ 100.123380] Bluetooth: hci2: command tx timeout [ 100.123461] Bluetooth: hci1: command tx timeout [ 100.188595] Bluetooth: hci3: command tx timeout [ 100.252360] Bluetooth: hci5: command tx timeout [ 100.253379] Bluetooth: hci4: command tx timeout [ 100.315421] Bluetooth: hci7: command tx timeout [ 100.315786] Bluetooth: hci6: command tx timeout [ 101.979359] Bluetooth: hci0: command tx timeout [ 102.171358] Bluetooth: hci1: command tx timeout [ 102.171560] Bluetooth: hci2: command tx timeout [ 102.235288] Bluetooth: hci3: command tx timeout [ 102.299308] Bluetooth: hci4: command tx timeout [ 102.300405] Bluetooth: hci5: command tx timeout [ 102.363253] Bluetooth: hci6: command tx timeout [ 102.363389] Bluetooth: hci7: command tx timeout [ 104.027301] Bluetooth: hci0: command tx timeout [ 104.219262] Bluetooth: hci1: command tx timeout [ 104.222404] Bluetooth: hci2: command tx timeout [ 104.284396] Bluetooth: hci3: command tx timeout [ 104.350814] Bluetooth: hci5: command tx timeout [ 104.350842] Bluetooth: hci4: command tx timeout [ 104.413187] Bluetooth: hci7: command tx timeout [ 104.413222] Bluetooth: hci6: command tx timeout [ 106.075667] Bluetooth: hci0: command tx timeout [ 106.267306] Bluetooth: hci2: command tx timeout [ 106.267350] Bluetooth: hci1: command tx timeout [ 106.331269] Bluetooth: hci3: command tx timeout [ 106.397262] Bluetooth: hci5: command tx timeout [ 106.397687] Bluetooth: hci4: command tx timeout [ 106.459555] Bluetooth: hci6: command tx timeout [ 106.460484] Bluetooth: hci7: command tx timeout [ 160.774920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.781765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.788789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.790360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.792759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.794972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.797872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.805347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.807489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.810917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.812615] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.814548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.817877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.819105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.820536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.822297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.827595] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.828525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.831075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.831846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.834466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.856878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.863551] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.866482] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.912087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.915827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.917636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.920920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.924459] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.925678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.935868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.945420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.972970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.026880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.036343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.038340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.039920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.091091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.093511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.130233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.135575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.141209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.142705] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.158654] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.163533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.163564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.164765] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.165989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.844605] Bluetooth: hci2: command tx timeout [ 162.907261] Bluetooth: hci0: command tx timeout [ 162.907354] Bluetooth: hci3: command tx timeout [ 162.907886] Bluetooth: hci1: command tx timeout [ 162.971195] Bluetooth: hci5: command tx timeout [ 163.099373] Bluetooth: hci4: command tx timeout [ 163.228178] Bluetooth: hci6: command tx timeout [ 163.291225] Bluetooth: hci7: command tx timeout [ 164.891980] Bluetooth: hci2: command tx timeout [ 164.955242] Bluetooth: hci0: command tx timeout [ 164.955720] Bluetooth: hci3: command tx timeout [ 164.956258] Bluetooth: hci1: command tx timeout [ 165.019200] Bluetooth: hci5: command tx timeout [ 165.148209] Bluetooth: hci4: command tx timeout [ 165.275248] Bluetooth: hci6: command tx timeout [ 165.339181] Bluetooth: hci7: command tx timeout [ 166.939306] Bluetooth: hci2: command tx timeout [ 167.003593] Bluetooth: hci3: command tx timeout [ 167.004029] Bluetooth: hci1: command tx timeout [ 167.004537] Bluetooth: hci0: command tx timeout [ 167.067429] Bluetooth: hci5: command tx timeout [ 167.195309] Bluetooth: hci4: command tx timeout [ 167.323220] Bluetooth: hci6: command tx timeout [ 167.389214] Bluetooth: hci7: command tx timeout [ 168.987300] Bluetooth: hci2: command tx timeout [ 169.051645] Bluetooth: hci0: command tx timeout [ 169.052845] Bluetooth: hci1: command tx timeout [ 169.053857] Bluetooth: hci3: command tx timeout [ 169.116230] Bluetooth: hci5: command tx timeout [ 169.243334] Bluetooth: hci4: command tx timeout [ 169.371265] Bluetooth: hci6: command tx timeout [ 169.436220] Bluetooth: hci7: command tx timeout [ 222.824633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.826962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.828136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.830422] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.832350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.838911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.897745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.910825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.916858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.926935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.935477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.937819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.085332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.090462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.093588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.094074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.116271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.117056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.119616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.125803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.125864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.138506] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.143523] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.158728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.220016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.256612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.275846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.277366] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.283811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.285285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.294937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.295611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.309520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.313642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.315278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.326579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.328348] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.340464] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.343638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.350525] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.354692] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.356945] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.371289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.386825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.400679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.420811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.466520] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.469488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.859303] Bluetooth: hci0: command tx timeout [ 224.987345] Bluetooth: hci1: command tx timeout [ 225.179286] Bluetooth: hci2: command tx timeout [ 225.243426] Bluetooth: hci3: command tx timeout [ 225.435261] Bluetooth: hci6: command tx timeout [ 225.499234] Bluetooth: hci5: command tx timeout [ 225.563243] Bluetooth: hci4: command tx timeout [ 225.627366] Bluetooth: hci7: command tx timeout [ 226.907227] Bluetooth: hci0: command tx timeout [ 227.035249] Bluetooth: hci1: command tx timeout [ 227.229161] Bluetooth: hci2: command tx timeout [ 227.291235] Bluetooth: hci3: command tx timeout [ 227.483425] Bluetooth: hci6: command tx timeout [ 227.547473] Bluetooth: hci5: command tx timeout [ 227.612143] Bluetooth: hci4: command tx timeout [ 227.675205] Bluetooth: hci7: command tx timeout [ 228.956248] Bluetooth: hci0: command tx timeout [ 229.083236] Bluetooth: hci1: command tx timeout [ 229.276412] Bluetooth: hci2: command tx timeout [ 229.339494] Bluetooth: hci3: command tx timeout [ 229.531224] Bluetooth: hci6: command tx timeout [ 229.595374] Bluetooth: hci5: command tx timeout [ 229.659226] Bluetooth: hci4: command tx timeout [ 229.723188] Bluetooth: hci7: command tx timeout [ 231.003190] Bluetooth: hci0: command tx timeout [ 231.131312] Bluetooth: hci1: command tx timeout [ 231.323289] Bluetooth: hci2: command tx timeout [ 231.387359] Bluetooth: hci3: command tx timeout [ 231.579189] Bluetooth: hci6: command tx timeout [ 231.643413] Bluetooth: hci5: command tx timeout [ 231.707181] Bluetooth: hci4: command tx timeout [ 231.771229] Bluetooth: hci7: command tx timeout [ 281.384167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.384908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.825606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.826990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.567906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.573281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.578715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.579341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.585995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.589598] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.591780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.604691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.606955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.611758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.626505] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.630636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.693189] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.697562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.699552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.701568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.704575] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.712791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.721736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.740562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.742474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.745450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.751345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.755331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.759698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.794211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.805402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.821345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.844970] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.849671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.852450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.873733] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.898807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.931341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.936470] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.946477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.967759] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.979493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.984053] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.990352] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.003577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.013538] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 286.016597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.025329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.086809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.096565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.099931] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.101849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.643468] Bluetooth: hci0: command tx timeout [ 287.709200] Bluetooth: hci1: command tx timeout [ 287.835221] Bluetooth: hci2: command tx timeout [ 287.899231] Bluetooth: hci3: command tx timeout [ 287.964217] Bluetooth: hci4: command tx timeout [ 288.091254] Bluetooth: hci5: command tx timeout [ 288.155528] Bluetooth: hci6: command tx timeout [ 288.156710] Bluetooth: hci7: command tx timeout [ 289.693147] Bluetooth: hci0: command tx timeout [ 289.756303] Bluetooth: hci1: command tx timeout [ 289.883153] Bluetooth: hci2: command tx timeout [ 289.947496] Bluetooth: hci3: command tx timeout [ 290.012282] Bluetooth: hci4: command tx timeout [ 290.139227] Bluetooth: hci5: command tx timeout [ 290.203619] Bluetooth: hci7: command tx timeout [ 290.204134] Bluetooth: hci6: command tx timeout [ 291.740077] Bluetooth: hci0: command tx timeout [ 291.803303] Bluetooth: hci1: command tx timeout [ 291.932241] Bluetooth: hci2: command tx timeout [ 291.999148] Bluetooth: hci3: command tx timeout [ 292.060167] Bluetooth: hci4: command tx timeout [ 292.188421] Bluetooth: hci5: command tx timeout [ 292.252360] Bluetooth: hci7: command tx timeout [ 292.253011] Bluetooth: hci6: command tx timeout [ 293.788166] Bluetooth: hci0: command tx timeout [ 293.851304] Bluetooth: hci1: command tx timeout [ 293.980341] Bluetooth: hci2: command tx timeout [ 294.044244] Bluetooth: hci3: command tx timeout [ 294.107171] Bluetooth: hci4: command tx timeout [ 294.235322] Bluetooth: hci5: command tx timeout [ 294.299298] Bluetooth: hci6: command tx timeout [ 294.299740] Bluetooth: hci7: command tx timeout [ 347.821831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.825640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.830565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.837746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.840622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.844736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.848214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.852574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.852790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.879565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.884322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.887769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.961493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.962341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.969513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.973450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.978483] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.980710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.986784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.991056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.001273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.002473] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.007630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.007993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.013601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.015783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.023315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.028508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.030547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.030613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.109446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.144437] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.155613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.157734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.162470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.166343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.177494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.181968] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.183552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.185269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.190053] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.192363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.227749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.231519] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.233326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.239218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.241551] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.243484] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.915194] Bluetooth: hci0: command tx timeout [ 349.979180] Bluetooth: hci1: command tx timeout [ 350.044135] Bluetooth: hci4: command tx timeout [ 350.111358] Bluetooth: hci2: command tx timeout [ 350.111978] Bluetooth: hci3: command tx timeout [ 350.236559] Bluetooth: hci6: command tx timeout [ 350.237882] Bluetooth: hci5: command tx timeout [ 350.363266] Bluetooth: hci7: command tx timeout [ 351.963428] Bluetooth: hci0: command tx timeout [ 352.027192] Bluetooth: hci1: command tx timeout [ 352.091581] Bluetooth: hci4: command tx timeout [ 352.155661] Bluetooth: hci3: command tx timeout [ 352.156626] Bluetooth: hci2: command tx timeout [ 352.285139] Bluetooth: hci5: command tx timeout [ 352.285952] Bluetooth: hci6: command tx timeout [ 352.411179] Bluetooth: hci7: command tx timeout [ 354.011395] Bluetooth: hci0: command tx timeout [ 354.076226] Bluetooth: hci1: command tx timeout [ 354.139151] Bluetooth: hci4: command tx timeout [ 354.204163] Bluetooth: hci3: command tx timeout [ 354.204617] Bluetooth: hci2: command tx timeout [ 354.331161] Bluetooth: hci6: command tx timeout [ 354.331629] Bluetooth: hci5: command tx timeout [ 354.459203] Bluetooth: hci7: command tx timeout [ 356.061173] Bluetooth: hci0: command tx timeout [ 356.124383] Bluetooth: hci1: command tx timeout [ 356.187319] Bluetooth: hci4: command tx timeout [ 356.253320] Bluetooth: hci3: command tx timeout [ 356.254671] Bluetooth: hci2: command tx timeout [ 356.379231] Bluetooth: hci5: command tx timeout [ 356.380013] Bluetooth: hci6: command tx timeout [ 356.508254] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:02:09 Registers: info registers vcpu 0 RAX=ffff88802a5d0000 RBX=ffff88802a5cff28 RCX=0000000000000001 RDX=ffff88802a5cff30 RSI=ffff88802a5cff18 RDI=ffff88802a5cf8c0 RBP=ffff88802a5c8000 RSP=ffff88802a5cf840 R8 =0000000000000001 R9 =ffff88802a5cf8f0 R10=000000000003a9dc R11=00000000000081ec R12=ffff88802a5cf910 R13=ffff88802a5cf8f8 R14=ffff88802a5cff18 R15=ffff88802a5cf8b0 RIP=ffffffff8134986a RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbab51e0260 CR3=000000002b3bc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff87f1b570 RCX=ffffffff814fd316 RDX=fffffbfff0fdf7e6 RSI=0000000000000004 RDI=ffffffff87f1b634 RBP=ffff88801524a610 RSP=ffff88802600f828 R8 =0000000000000000 R9 =fffffbfff0fdf7e5 R10=ffffffff87efbf2f R11=0000000000000000 R12=ffff888015249bc0 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000003 RIP=ffffffff814fd24c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f76f6892540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76f6d42010 CR3=000000002dafc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000