Warning: Permanently added '[localhost]:52924' (ECDSA) to the list of known hosts. 2025/01/20 01:30:02 fuzzer started 2025/01/20 01:30:03 dialing manager at localhost:44245 syzkaller login: [ 77.078154] cgroup: Unknown subsys name 'net' [ 77.200146] cgroup: Unknown subsys name 'cpuset' [ 77.230629] cgroup: Unknown subsys name 'rlimit' [ 83.587200] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 92.870311] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 01:30:19 syscalls: 224 2025/01/20 01:30:19 code coverage: enabled 2025/01/20 01:30:19 comparison tracing: enabled 2025/01/20 01:30:19 extra coverage: enabled 2025/01/20 01:30:19 setuid sandbox: enabled 2025/01/20 01:30:19 namespace sandbox: enabled 2025/01/20 01:30:19 Android sandbox: enabled 2025/01/20 01:30:19 fault injection: enabled 2025/01/20 01:30:19 leak checking: enabled 2025/01/20 01:30:19 net packet injection: enabled 2025/01/20 01:30:19 net device setup: enabled 2025/01/20 01:30:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 01:30:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 01:30:19 USB emulation: enabled 2025/01/20 01:30:19 hci packet injection: enabled 2025/01/20 01:30:19 wifi device emulation: enabled 2025/01/20 01:30:19 802.15.4 emulation: enabled 2025/01/20 01:30:19 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 01:30:21 starting 8 fuzzer processes 01:30:21 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair(0x22, 0x1, 0x5090, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/37, 0x25}], 0x1, &(0x7f00000002c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x10000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4011}, 0x4040004) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0x100b, 0x3}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendmsg$IEEE802154_START_REQ(r12, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00'}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r8) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r14, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) r15 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r15, &(0x7f0000000c00)={&(0x7f0000000a00), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/98, 0x62}], 0x1, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000c40), r12) ioctl$LOOP_SET_DIRECT_IO(r10, 0x4c08, 0x101) 01:30:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x348) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/60, 0x3c}], 0x1, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x128}, 0x40000001) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000280)={r7}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000002c0)={r3}) getrandom(&(0x7f0000000300)=""/113, 0x71, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getrandom(&(0x7f00000003c0)=""/62, 0x3e, 0x2) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$KDSKBSENT(r8, 0x4b49, &(0x7f0000000440)={0x4, "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"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000680)={0x2}) openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) recvmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000700), 0x6e, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10000) ioctl$BINDER_FREEZE(r9, 0x400c620e, &(0x7f0000000840)={r4, 0x0, 0x3}) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r10, 0x5457, &(0x7f0000000880)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000008c0)={0x1}) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x9) 01:30:21 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000000700)=""/183, 0xb7}], 0x9, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x161) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x30}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x40}}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe942}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044000}, 0x800) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20004051) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x15) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040851}, 0x800) ioctl$CDROM_SELECT_SPEED(r3, 0x5322, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000e80)={'batadv_slave_1\x00'}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ec0), 0x80, 0x0) ioctl$CDROM_SELECT_SPEED(r9, 0x5322, 0xc2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r11, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000022c0)={0x44, 0x0, &(0x7f0000001240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001180)={@fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x1, &(0x7f0000001080)=""/182, 0xb6, 0x0, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000001140)=""/5, 0x5, 0x1}}, &(0x7f0000001200)={0x0, 0x18, 0x40}}}], 0x1000, 0x0, &(0x7f00000012c0)="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"}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) [ 94.536421] audit: type=1400 audit(1737336621.109:7): avc: denied { execmem } for pid=281 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:30:21 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x405524ccb341e7aa, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8004) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x889e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78f6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4af7109f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde0b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x138, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b86fc05}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67d8ad63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3385665b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bb749cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68a6880e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f09e15}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14b47cb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xde27683}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dba252a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b4d6140}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d6158b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43c00059}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x367d7de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38feaa35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5db74b1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45858395}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x231031a0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f3b6e79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x352f52c4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66677dcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72959708}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b2301c4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c5ec4e6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f631136}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28b53370}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4eab9294}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcdd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1634}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2054b472}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fc15cc0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d445730}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x771d76fb}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43b2a3a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ef2a0da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bc49b6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16dc325e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27e6ee8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x697891e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b708152}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x641b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85dc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5de62a4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x882b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2283e597}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71872aee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x136d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}}, 0x40000c0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r5, 0x200, 0x101, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4840) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x500, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r7) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x44845) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb0}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "8b4a95d89f1df4005c7441d6ae34948d"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 01:30:21 executing program 3: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000080) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x180000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x21) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/174, 0xae}, {&(0x7f0000000b00)=""/158, 0x9e}, {&(0x7f0000000bc0)=""/218, 0xda}, {&(0x7f0000000cc0)=""/66, 0x42}, {&(0x7f0000000d40)}], 0x5, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x40010020) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001000)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xa4, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0xd0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r1) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20000051) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001340), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r8, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}}, 0x80) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001480), r1) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2201}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040810) 01:30:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x210182) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x7, 0x8, 0x9, 0x1, 0x800}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000180)={0xce, 0x95, 0x0, 0xf50, 0x9}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5084b3c687d9"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000340)) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) ioctl$TIOCEXCL(r3, 0x540c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000440)) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000480)) 01:30:21 executing program 6: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x80, "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"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000740)={0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000007c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x8800, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x140, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x124, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa449}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb51}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x369d30b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x596}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0d9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1003ab62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f893bb4}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c4a68a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cb0}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f17ef31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfded}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5285a245}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39699ae5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f639f22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a1e80d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d90aa92}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20ef5e20}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6833}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ab09470}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cc0357d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33dddc53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa96f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b35cf83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2805e689}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2107540}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24084011}, 0x40040) r3 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x81) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000a80)=0x361) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000ac0)={0x2}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000b00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000b40)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001200)={0x100, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000bc0)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000b80)=""/11, 0xb, 0x2, 0x2d}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000c40)={0x0, 0x18, 0x40}}, 0x1000}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000d40)={@flat=@handle={0x73682a85, 0xb, 0x2}, @fda={0x66646185, 0x6, 0x0, 0x27}, @ptr={0x70742a85, 0x1, &(0x7f0000000c80)=""/155, 0x9b, 0x0, 0x1a}}, &(0x7f0000000dc0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000f80)={@ptr={0x70742a85, 0x1, &(0x7f0000000e00)=""/245, 0xf5, 0x2, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000000f00)=""/101, 0x65, 0x1, 0xb}, @fda={0x66646185, 0x6, 0x2, 0x13}}, &(0x7f0000001000)={0x0, 0x28, 0x50}}, 0x400}, @request_death={0x400c630e, 0x2}], 0x9f, 0x0, &(0x7f0000001140)="6dc944458db6c51fc54a2069ba5ab85782a6d6f9bd20407be3bbe14521b04cc15ae9b36ec22c9194912691e2015e38cfb04eefb9c64b31699b8cc8f8f2eb8f745b883121c6b5dfaa089d91c6f7fccd915fa6b79fc5560b59d9882426782cfc5b51ad42077a54d703b459ddc760b126fbb4c7d7f7fcdedbebf206ff223ca57382fc03d178eaeb410294f144e387891c83b6f6459f374e4a28c7b1f63b213f26"}) pipe2(&(0x7f0000001240)={0xffffffffffffffff}, 0x84000) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000001280)=0xa94) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS(r6, 0x5401, &(0x7f00000012c0)) 01:30:21 executing program 7: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff81}]}, 0x5c}}, 0x2000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}}, 0x24000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4c800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008002) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040800}, 0x22040000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4004) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r4) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x26000000) [ 95.825133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.830072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.833260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.843168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.862302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.872814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.070297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.089080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.090357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.098098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.099035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.105586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.122863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.125862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.132787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.144026] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.144397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.157635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.167728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.178874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.184218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.222250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.225960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.227211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.239870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.240841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.241403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.261011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.266388] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.269170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.276817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.280667] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.286780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.286978] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.294950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.295969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.296303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.308807] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.314127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.315314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.322285] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.323634] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.334678] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.339734] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.348870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.361061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.361728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.365232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.961380] Bluetooth: hci0: command tx timeout [ 98.217703] Bluetooth: hci1: command tx timeout [ 98.281657] Bluetooth: hci2: command tx timeout [ 98.409623] Bluetooth: hci5: command tx timeout [ 98.409643] Bluetooth: hci7: command tx timeout [ 98.410160] Bluetooth: hci3: command tx timeout [ 98.472850] Bluetooth: hci6: command tx timeout [ 98.472872] Bluetooth: hci4: command tx timeout [ 100.009203] Bluetooth: hci0: command tx timeout [ 100.265546] Bluetooth: hci1: command tx timeout [ 100.328588] Bluetooth: hci2: command tx timeout [ 100.456762] Bluetooth: hci7: command tx timeout [ 100.457408] Bluetooth: hci5: command tx timeout [ 100.458080] Bluetooth: hci3: command tx timeout [ 100.520582] Bluetooth: hci6: command tx timeout [ 100.523564] Bluetooth: hci4: command tx timeout [ 102.058648] Bluetooth: hci0: command tx timeout [ 102.312608] Bluetooth: hci1: command tx timeout [ 102.376582] Bluetooth: hci2: command tx timeout [ 102.506716] Bluetooth: hci3: command tx timeout [ 102.507868] Bluetooth: hci5: command tx timeout [ 102.507921] Bluetooth: hci7: command tx timeout [ 102.570575] Bluetooth: hci4: command tx timeout [ 102.570594] Bluetooth: hci6: command tx timeout [ 104.105826] Bluetooth: hci0: command tx timeout [ 104.361547] Bluetooth: hci1: command tx timeout [ 104.424662] Bluetooth: hci2: command tx timeout [ 104.554553] Bluetooth: hci7: command tx timeout [ 104.554613] Bluetooth: hci5: command tx timeout [ 104.554636] Bluetooth: hci3: command tx timeout [ 104.616776] Bluetooth: hci4: command tx timeout [ 104.616930] Bluetooth: hci6: command tx timeout [ 158.533980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.538718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.542931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.545639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.548417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.554298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.556672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.562248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.564955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.582358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.588748] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.593400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.635808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.639922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.645439] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.660382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.668202] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.670697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.674152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.675855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.676396] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.678382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.679975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.683890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.698590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.706860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.707739] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.708417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.722870] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.725205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.781385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.784887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.791957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.794719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.797892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.800405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.815735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.820601] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.828156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.840853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.846004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.854887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.871703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.879809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.898651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.919735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.925260] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.930035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.617022] Bluetooth: hci1: command tx timeout [ 160.680666] Bluetooth: hci0: command tx timeout [ 160.747540] Bluetooth: hci2: command tx timeout [ 160.808643] Bluetooth: hci4: command tx timeout [ 160.808683] Bluetooth: hci3: command tx timeout [ 160.938543] Bluetooth: hci5: command tx timeout [ 160.938599] Bluetooth: hci6: command tx timeout [ 161.065632] Bluetooth: hci7: command tx timeout [ 162.664561] Bluetooth: hci1: command tx timeout [ 162.728632] Bluetooth: hci0: command tx timeout [ 162.792625] Bluetooth: hci2: command tx timeout [ 162.856594] Bluetooth: hci3: command tx timeout [ 162.859511] Bluetooth: hci4: command tx timeout [ 162.984552] Bluetooth: hci6: command tx timeout [ 162.984967] Bluetooth: hci5: command tx timeout [ 163.112562] Bluetooth: hci7: command tx timeout [ 164.712686] Bluetooth: hci1: command tx timeout [ 164.777507] Bluetooth: hci0: command tx timeout [ 164.841510] Bluetooth: hci2: command tx timeout [ 164.904757] Bluetooth: hci4: command tx timeout [ 164.904976] Bluetooth: hci3: command tx timeout [ 165.032706] Bluetooth: hci6: command tx timeout [ 165.032803] Bluetooth: hci5: command tx timeout [ 165.160664] Bluetooth: hci7: command tx timeout [ 166.760926] Bluetooth: hci1: command tx timeout [ 166.824627] Bluetooth: hci0: command tx timeout [ 166.890557] Bluetooth: hci2: command tx timeout [ 166.952618] Bluetooth: hci3: command tx timeout [ 166.952647] Bluetooth: hci4: command tx timeout [ 167.083535] Bluetooth: hci5: command tx timeout [ 167.083563] Bluetooth: hci6: command tx timeout [ 167.208707] Bluetooth: hci7: command tx timeout [ 220.402184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.405543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.409073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.414258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.419027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.421547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.476507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.479364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.481427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.485414] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.488237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.490298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.539622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.569032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.573673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.575684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.580654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.589018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.590881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.594816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.597852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.609856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.627981] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.633834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.709928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.727928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.745937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.750842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.762778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.774429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.780602] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.790896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.794760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.828988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.833716] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.853365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.857938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.885158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.916693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.943914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.973622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.984847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.049100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.051967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.058932] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.062427] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.077985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.097701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.505587] Bluetooth: hci1: command tx timeout [ 222.505608] Bluetooth: hci0: command tx timeout [ 222.632555] Bluetooth: hci2: command tx timeout [ 222.696682] Bluetooth: hci3: command tx timeout [ 222.826535] Bluetooth: hci4: command tx timeout [ 222.955511] Bluetooth: hci5: command tx timeout [ 223.208755] Bluetooth: hci6: command tx timeout [ 223.272765] Bluetooth: hci7: command tx timeout [ 224.552837] Bluetooth: hci1: command tx timeout [ 224.554571] Bluetooth: hci0: command tx timeout [ 224.681741] Bluetooth: hci2: command tx timeout [ 224.744696] Bluetooth: hci3: command tx timeout [ 224.874527] Bluetooth: hci4: command tx timeout [ 225.002636] Bluetooth: hci5: command tx timeout [ 225.257607] Bluetooth: hci6: command tx timeout [ 225.320848] Bluetooth: hci7: command tx timeout [ 226.600724] Bluetooth: hci0: command tx timeout [ 226.600887] Bluetooth: hci1: command tx timeout [ 226.728617] Bluetooth: hci2: command tx timeout [ 226.792565] Bluetooth: hci3: command tx timeout [ 226.920569] Bluetooth: hci4: command tx timeout [ 227.049547] Bluetooth: hci5: command tx timeout [ 227.304540] Bluetooth: hci6: command tx timeout [ 227.368582] Bluetooth: hci7: command tx timeout [ 228.649549] Bluetooth: hci1: command tx timeout [ 228.649575] Bluetooth: hci0: command tx timeout [ 228.778555] Bluetooth: hci2: command tx timeout [ 228.841540] Bluetooth: hci3: command tx timeout [ 228.971529] Bluetooth: hci4: command tx timeout [ 229.099490] Bluetooth: hci5: command tx timeout [ 229.355524] Bluetooth: hci6: command tx timeout [ 229.417521] Bluetooth: hci7: command tx timeout [ 283.066381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.075567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.078150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.089708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.096200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.099068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.138600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.143187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.145618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.151622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.158054] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.161236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.347599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.354641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.362283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.369098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.371697] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.374028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.448296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.458682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.472191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.502189] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.506230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.509176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.537831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.550779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.554681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.560912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.566905] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.568749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.661394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.670014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.678990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.679669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.684928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.691974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.712591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.715243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.719219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.722177] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.733621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.742836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.753053] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.770962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.812292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.819858] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.846997] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.881007] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.162788] Bluetooth: hci0: command tx timeout [ 285.224809] Bluetooth: hci1: command tx timeout [ 285.416570] Bluetooth: hci2: command tx timeout [ 285.545577] Bluetooth: hci3: command tx timeout [ 285.608583] Bluetooth: hci4: command tx timeout [ 285.802537] Bluetooth: hci6: command tx timeout [ 285.928554] Bluetooth: hci5: command tx timeout [ 285.992829] Bluetooth: hci7: command tx timeout [ 287.208560] Bluetooth: hci0: command tx timeout [ 287.272527] Bluetooth: hci1: command tx timeout [ 287.464824] Bluetooth: hci2: command tx timeout [ 287.592796] Bluetooth: hci3: command tx timeout [ 287.657808] Bluetooth: hci4: command tx timeout [ 287.849256] Bluetooth: hci6: command tx timeout [ 287.976610] Bluetooth: hci5: command tx timeout [ 288.041837] Bluetooth: hci7: command tx timeout [ 289.258524] Bluetooth: hci0: command tx timeout [ 289.320683] Bluetooth: hci1: command tx timeout [ 289.512620] Bluetooth: hci2: command tx timeout [ 289.641527] Bluetooth: hci3: command tx timeout [ 289.704582] Bluetooth: hci4: command tx timeout [ 289.896606] Bluetooth: hci6: command tx timeout [ 290.024598] Bluetooth: hci5: command tx timeout [ 290.089553] Bluetooth: hci7: command tx timeout [ 291.304633] Bluetooth: hci0: command tx timeout [ 291.369018] Bluetooth: hci1: command tx timeout [ 291.561161] Bluetooth: hci2: command tx timeout [ 291.688924] Bluetooth: hci3: command tx timeout [ 291.753820] Bluetooth: hci4: command tx timeout [ 291.945632] Bluetooth: hci6: command tx timeout [ 292.072596] Bluetooth: hci5: command tx timeout [ 292.136538] Bluetooth: hci7: command tx timeout [ 345.273289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.279800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.284353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.297306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.303255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.306342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.590579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.592587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.596912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.598617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.598791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.600733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.603843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.607763] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.609105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.610973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.612790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.614062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.649391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.657808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.683953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.701809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.709830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.712683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.736324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.768998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.784956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.793141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.824757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.826481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.828976] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.830731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.843720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.850631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.876817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.878313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.881283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.882964] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.883997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.900801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.933526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.973988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.985961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.993976] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.033191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.066816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.068767] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.070046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.368863] Bluetooth: hci0: command tx timeout [ 347.626494] Bluetooth: hci2: command tx timeout [ 347.690099] Bluetooth: hci1: command tx timeout [ 347.817801] Bluetooth: hci3: command tx timeout [ 347.883505] Bluetooth: hci4: command tx timeout [ 348.008736] Bluetooth: hci5: command tx timeout [ 348.136731] Bluetooth: hci7: command tx timeout [ 348.137120] Bluetooth: hci6: command tx timeout [ 349.417792] Bluetooth: hci0: command tx timeout [ 349.673670] Bluetooth: hci2: command tx timeout [ 349.737576] Bluetooth: hci1: command tx timeout [ 349.866514] Bluetooth: hci3: command tx timeout [ 349.930883] Bluetooth: hci4: command tx timeout [ 350.056927] Bluetooth: hci5: command tx timeout [ 350.186487] Bluetooth: hci6: command tx timeout [ 350.186596] Bluetooth: hci7: command tx timeout [ 351.465544] Bluetooth: hci0: command tx timeout [ 351.722499] Bluetooth: hci2: command tx timeout [ 351.784483] Bluetooth: hci1: command tx timeout [ 351.914522] Bluetooth: hci3: command tx timeout [ 351.978193] Bluetooth: hci4: command tx timeout [ 352.105492] Bluetooth: hci5: command tx timeout [ 352.233540] Bluetooth: hci7: command tx timeout [ 352.233635] Bluetooth: hci6: command tx timeout [ 353.512542] Bluetooth: hci0: command tx timeout [ 353.768909] Bluetooth: hci2: command tx timeout [ 353.832895] Bluetooth: hci1: command tx timeout [ 353.960632] Bluetooth: hci3: command tx timeout [ 354.024596] Bluetooth: hci4: command tx timeout [ 354.152661] Bluetooth: hci5: command tx timeout [ 354.280609] Bluetooth: hci6: command tx timeout [ 354.280767] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:35:22 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000044 RCX=ffff888015be5d74 RDX=1ffff11002b7cbbb RSI=0000000000000008 RDI=ffffffff87f06f28 RBP=ffff888015be5340 RSP=ffff88806ce09af8 R8 =0000000000000000 R9 =fffffbfff0fe0de5 R10=0000000000000000 R11=0000000000000001 R12=0000000000000009 R13=0000000000000200 R14=ffff888015be5db8 R15=0000000000000000 RIP=ffffffff814f3de9 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f51713856f4 CR3=000000002e144000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8134b881 RDX=00000000000034b8 RSI=00000000000034b8 RDI=ffffffff86c47d30 RBP=ffff888009747920 RSP=ffff888009747808 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003ab4d R11=0000000000000000 R12=ffff888009747928 R13=ffff888009747910 R14=ffff888009747909 R15=ffff8880097478c8 RIP=ffffffff81349000 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555db9391080 CR3=0000000015c52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000