syzkaller login: [ 57.573101] sshd (228) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:7445' (ECDSA) to the list of known hosts. 2025/01/24 06:04:59 fuzzer started 2025/01/24 06:05:00 dialing manager at localhost:45511 [ 60.627955] cgroup: Unknown subsys name 'net' [ 60.717975] cgroup: Unknown subsys name 'cpuset' [ 60.743075] cgroup: Unknown subsys name 'rlimit' [ 67.444806] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 06:05:18 syscalls: 2217 2025/01/24 06:05:18 code coverage: enabled 2025/01/24 06:05:18 comparison tracing: enabled 2025/01/24 06:05:18 extra coverage: enabled 2025/01/24 06:05:18 setuid sandbox: enabled 2025/01/24 06:05:18 namespace sandbox: enabled 2025/01/24 06:05:18 Android sandbox: enabled 2025/01/24 06:05:18 fault injection: enabled 2025/01/24 06:05:18 leak checking: enabled 2025/01/24 06:05:18 net packet injection: enabled 2025/01/24 06:05:18 net device setup: enabled 2025/01/24 06:05:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 06:05:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 06:05:18 USB emulation: enabled 2025/01/24 06:05:18 hci packet injection: enabled 2025/01/24 06:05:18 wifi device emulation: enabled 2025/01/24 06:05:18 802.15.4 emulation: enabled 2025/01/24 06:05:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 06:05:18 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 06:05:18 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 06:05:18 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 06:05:18 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 06:05:18 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 06:05:21 starting 8 fuzzer processes 06:05:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x10}) r3 = signalfd4(r1, &(0x7f00000001c0)={[0x5]}, 0x8, 0x80800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={0x0, 0x3, r3, 0x2}) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) waitid$P_PIDFD(0x3, r5, 0x0, 0x61b32b6a05aac053, &(0x7f0000000280)) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa2, 0x53}}}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "048d"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "854b37418a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "3da61cbfd6"}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008840) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r4, 0x516, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48084}, 0x4000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x14, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x700, 0x7800, 0x8000, 0x1000}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x140, 0x0, 0x204, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) getsockname$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0}, &(0x7f0000000a00)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000a40)={r8, 0x1, 0x6, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 06:05:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x80}}, '\x00'}) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) readahead(r1, 0x2e, 0x6) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) ioctl$TIOCCBRK(r0, 0x5428) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r4 = socket(0x25, 0x1, 0x8001) getsockopt(r4, 0x101, 0x6, &(0x7f0000000180)=""/248, &(0x7f0000000280)=0xf8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x12) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000340)={{0x7, 0x935}, 0x100, './file0\x00'}) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f00000004c0)={0xff, "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"}) r8 = syz_open_dev$vcsa(&(0x7f0000000700), 0x8000, 0x12000) openat$cgroup_int(r8, &(0x7f0000000740)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd8, 0x71}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "708ff9229ed3e918b3367fd0a239"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20008010) 06:05:21 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) r1 = dup3(r0, r0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libahci', 0x48800, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x410000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8801800}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x200, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf8000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8ad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb18}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000440)=0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x484000, 0x0) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) r7 = geteuid() mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@mmap}, {@privport}], [{@fowner_gt={'fowner>', r7}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'udp\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000006c0)) r8 = socket$inet6(0xa, 0x4, 0x3ff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000700)) r9 = memfd_secret(0x80000) syz_open_pts(r9, 0x4080) 06:05:21 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0xa8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/117, 0x75}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0x80000000, 0x2, 0xa9}) r2 = openat2(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x80200, 0x8, 0x1f}, 0x18) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0x2, 0xffffffff, 0x2, 0x7b, 0x4, [{0x6, 0x3f, 0x7, '\x00', 0x403}, {0x6, 0x7, 0x39ae0e43, '\x00', 0x300}, {0x1, 0x4, 0x5}, {0x8, 0x4f4b, 0x4, '\x00', 0xf80}]}) r3 = dup3(r0, r1, 0x0) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000480)={'\x00', 0x10001, 0x0, 0x6}) mknodat(r3, &(0x7f0000000500)='./file0\x00', 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000005c0)={@loopback, 0x0}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xac}}, 0x4) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000780)={'veth1_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x89, 0x10000}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000840)={0x4, &(0x7f0000000800)=[{0x1000, 0x8, 0xa3, 0xffffffe1}, {0x9, 0x7, 0x3f, 0x80000000}, {0x0, 0x3, 0x2, 0x7}, {0x2, 0x6, 0x1f, 0x7}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r7, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x846, 0x49}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000009c0)="164ccada2cedd32fe92e88b9117fe809b5ef7a6c6555eb16f97de3a759db2beca5b0b94ab4cf826649dd53d5dec31c33f0d4ad0c2c24236a47c638e50fc88b0d2e663fb88542df72be9d2060dddc074f9c2239e877bcec966947d9250837201f04c02bccf3066849e5830eee3192b51985ee5bf3936748a6d2e05bfc87611a90ab4b2f55dab42723422fd43f", 0x8c, r1}, 0x68) 06:05:21 executing program 4: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x2ae, 0x3}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x9, 0x65}, 0x2) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)=0x1) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "83bfdc2a0414f32607d901133d0b"}, 0x12) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)={{0x1, 0x0, 0x3, 0x1, 0x4}, 0x1000, 0x3}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x3, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) write(r1, &(0x7f0000000280)="5ff4094dfce82760c1d6ce4c65297b031f928de1bc2a3fe4132b932e9cbafd12e1f3e29bbf4c35ff5a4f2a67f35f35c0462f582c1b5b5498f1ad56258382552c7873a9a883fa4f2bf28dda5b7761892897aef4c33ac0ccc9e8c7a0b0a567b82cea759784598f9b37603ca3acfcc0df4088860c5b82f4b3d1148e17ee770da4d48eb9c39c52340c57bd770d", 0x8b) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x1, 'veth0_to_batadv\x00', {}, 0x7}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000380)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='syzkaller1\x00'}) fstat(r0, &(0x7f0000000440)) r2 = open(&(0x7f00000004c0)='./file0\x00', 0x14000, 0x121) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffff7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x80) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0x8, 0x1, {0x8, @usage=0x13, 0x0, 0x115, 0x1, 0x9, 0x0, 0x100, 0x401, @usage=0x2, 0x80, 0x7, [0x4, 0x40, 0x80000001, 0x9]}, {0x4, @struct={0x6, 0x7fff}, 0x0, 0xff, 0x1ff, 0x8, 0x400, 0x401, 0x64, @struct={0xffff8000, 0x7fff}, 0x7ff, 0x6, [0x400, 0x89, 0xc52, 0x81, 0x10000]}, {0x1, @struct={0x1f, 0x101}, 0x0, 0x2, 0x0, 0xfff, 0xe5a3, 0x4, 0x2, @usage=0x800, 0x204, 0xce09, [0x9, 0xb1d, 0x0, 0x6, 0x8001, 0x2]}, {0x2, 0x6, 0x9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000a40)={r4, 0xff, 0x35300, 0x1}) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000e40)) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000f40)={0x2, 0x17aa2361, 0x99, &(0x7f0000000e80)=""/153}) [ 81.708707] audit: type=1400 audit(1737698721.606:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:05:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x8, 0x4, 0x4, 0x8, 0x3, 0x3, 0x0, 0x303, 0x38, 0x1ea, 0x5, 0x9, 0x20, 0x1, 0x7f, 0x8000, 0x1ff}, [{0x5, 0x7fffffff, 0x2, 0x2f3, 0x5, 0x3b, 0xc546, 0x9}, {0x60000000, 0x1, 0x6, 0x7f91e6a9, 0x7fffffff, 0xa9, 0xa10, 0x80000001}], "d63365c59a8ca4bed93d57a3a86ea86d54b8fdd8142f13f2f65f3e1520bc3c3d7f3c650ff47fb35b255abbd99551bba3dbd0d0bbcc432e9e34ad8dd23617f74198724326fdab028852e3d68d7f4ded9f6b8b02983e9e45c9357c7801458ba8d0f34f6b69d09d9e8fa4499577eb475e9683cde759440f76621cd8417bab4ccc69b748f4cb1b681d52edebf399a6001d065a923a45d718f7c8877431b3b85c1b799982b38449429cabc248508c8ef63e18240bb0789e5bcd9bd472af29e498a0e5a1b743da3ca6e9c3a762ac67b8a27bafde6603fca550ba4b9ceb4bd00e01fcb473b838a0728fee35bd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x961) bind$802154_dgram(r0, &(0x7f00000009c0)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000020}, 0x40000c4) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3fb, 0x200, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40880) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x18801, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000c40)={{0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x817}, 0xb30e, [0x10001, 0x1f, 0x7, 0x2, 0x29d, 0xffffffff, 0x6, 0x101]}, 0x5c) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d00), 0x101000, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = syz_mount_image$msdos(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0xf, 0x1, &(0x7f0000000f00)=[{&(0x7f0000000e80)="60dec59f683eff43b2b91e2547c4c07369cc030d0175eda5c6ba36a1118f36d781ee4efa8a7be2687eb1b05f8213a22adc10aff02859d7a9c6874060d44521402611cbdf065b5ae3539e9ba5f497de71845c354896984740e64451522b7ec99da0ada83a737fc209d54b545c8d0e7706", 0x70, 0x4}], 0x0, &(0x7f0000000f40)={[{@nodots}, {@nodots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '^'}}, {@euid_lt={'euid<', r1}}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}]}) fgetxattr(r4, &(0x7f0000001000)=@random={'user.', '/dev/bsg\x00'}, &(0x7f0000001040)=""/21, 0x15) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0/file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x5}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x200528d0}, 0x40) r6 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000011c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x15, 0x9, 0xb9}}]}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x300, 0xff, 0x9, 0x1, 0xff, 0x77}, 0x48, &(0x7f0000001240)={0x5, 0xf, 0x48, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xff, 0x89, 0x1}, @generic={0x1b, 0x10, 0xb, "dde3b26a1064a7d83f7da35d0b7149dc2bead53d5dfc4de4"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ee0fbe91a09d51eb54888b81815951f8"}]}, 0x1, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_disconnect(r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x41) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000001480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000014c0)=0x1c) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001540)={0x0, 0x1, 0x7, 0x1000}) 06:05:21 executing program 6: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x2f, 0xde9, 0x6}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x1}, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x8}, @timestamp, @timestamp], 0x7) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @local}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf340, 0x3}}}}, ["", "", ""]}, 0x20}}, 0x1) syz_extract_tcp_res(&(0x7f0000000380), 0x0, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fstat(r4, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/106, 0x6a}, {&(0x7f0000000a40)=""/35, 0x23}, {&(0x7f0000000a80)=""/116, 0x74}], 0x3}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000bc0)=""/78, 0x4e}, {&(0x7f0000000c40)=""/6, 0x6}, {&(0x7f0000000c80)=""/100, 0x64}, {&(0x7f0000000d00)=""/205, 0xcd}, {&(0x7f0000000e00)=""/103, 0x67}, {&(0x7f0000000e80)=""/108, 0x6c}, {&(0x7f0000000f00)=""/166, 0xa6}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x8, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x60}}], 0x2, 0x1, &(0x7f0000002180)={r5, r6+60000000}) fstat(r0, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, 0x0}, &(0x7f0000002280)=0xc) sendmsg$unix(r4, &(0x7f0000002300)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000500)="01a9416c5332e6cc4e21acbb5232070097a4f998cc578c3a70a29bd26d4b13cb9d6497ebfc8909c693c42c4a3aa6620ab4e545648c77c4c6311b71f1e88a3f8081562b4759053b61ef17d8", 0x4b}, {&(0x7f0000000580)="57f71e7dfe0f77b509df7d3a94df175d71", 0x11}, {&(0x7f00000005c0)="387da20fc227e04c32c3658159ae2af70f20305a0c8122d3c0a375a822a6bc5579ad29b0e9f36c1f7cc2a4f1b46068e267e617370ce85025588879e99cc8716ea5c6fcc3a49927cab11cf11a0ca6d2717583a4a604e9e36f763a02a6c0a97c", 0x5f}, {&(0x7f0000000640)="6b35619f0745e994fcaf002a405c87664348eb84c9f8f743a4ccf59bdab9d665b38403c0853855fad1fffec0bdba1007d8595c5bc976c2cec7cad9270eaf2e5e155116275a01c44cba4f0d522c9fde8a75346188818d092a041417f30b71e213eddf727a724a94865740cbda5ad74e9c2cfdcb92669dc34f1a57761f11c5b2786575f8d92c9b424d2341c505488afadb374e7f9393291e473c61bf4f9862d48f3bf00a14d7bdf628f5e7025db9024461f394de443d0ef1e95f6b5e540833c9080dec246d45aae81fc7e8e31d06f7cb5573d42828722756aff484b0ed08121a55f7ca93d9e4e950f58434326ac047ca4fe6bae24259330c0d", 0xf8}, {&(0x7f0000000740)="dec504a85484820de8cfef88883d28331b49c870a727c9a9b6d5641ab2a14ac2e6b6e8dbf2e7984c0760f68b9219d366f3b24d787c089065d8c1bbd85c1755bbf5705c832ec419ad453eb0b5f1c257e3807c750b4c716818985274ff021f9e6d1286f53762d82ee7daa15b0110c0c96cf5155644fb48bf81acad10", 0x7b}, {&(0x7f00000007c0)="3062282de6ca650d3dbfadd3f6add88b74b348aff075fdcc3eab08ee188a7bbf848dc7af8af74e0d1e1bcdb53fe57179436257f391faa0e6c82a7bb7738f637308b39fc250ed40eafc5b710869582c90c27512394e97557fd1b35588b79bd1a907686574323e255bae3618404b7f22c04b7bcf6a0622910a01a9101478c86753f5df32c9f9c46c5fa8e1c28e8cf7718f4c46a5d5d425d9af910330bb9093fe3160ceef71c276995811bd15d55126bea355ab2bc81dcef329f4819c2db87f047cb69cd76258147540ac298ca272d8c97724fb8e67e5df27d5c80391b4b5eab79883016084146e7782d20720de3b09fbb120c8ad6e0e5b", 0xf6}], 0x6, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}], 0x40, 0x20040810}, 0x40c0050) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002400)={'sit0\x00', &(0x7f0000002380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x81, 0x0, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7800, 0x20, 0x1, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000002c40)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c00)={&(0x7f00000029c0)={0x234, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4008895}, 0x800) 06:05:21 executing program 7: readv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/199, 0xc7}, {&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x6) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000001440)) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000001480)={0xfffffff7, 0x8, 0x20, 0x2, 0x8001, 0x8000}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000014c0)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = signalfd4(r1, &(0x7f0000001500)={[0x3f]}, 0x8, 0x80800) ioctl$VT_WAITACTIVE(r0, 0x5607) r3 = signalfd(0xffffffffffffffff, &(0x7f0000001540)={[0x1]}, 0x8) r4 = accept$inet(r2, &(0x7f0000001680)={0x2, 0x0, @remote}, &(0x7f00000016c0)=0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001780)={{r4}, 0x0, 0x20, @inherit={0x68, &(0x7f0000001700)={0x0, 0x4, 0xffffffffffffffe0, 0x9, {0x2, 0x3, 0xa4e2, 0x19, 0x12e6}, [0x9, 0x7, 0xfffffffffffffffd, 0x0]}}, @subvolid=0x73a}) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000002780)=0x80, 0x4) r5 = pidfd_getfd(r3, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000027c0)={0x401, 0x570f, 0x485a, 0x8001}, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000002840), r5) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000002880)={0x0, @multicast2, @dev}, &(0x7f00000028c0)=0xc) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002900)={0x0, @remote, @dev}, &(0x7f0000002940)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000003540)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003500)={&(0x7f0000002c40)={0x8a4, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x40, 0x0, 0x40, 0x3f}, {0x6, 0x4, 0x1, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000840) [ 83.271915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.275873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.277233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.280499] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.282644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.284496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.350580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.357455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.359709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.363579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.366545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.367893] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.373307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.374765] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.376729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.396461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.400536] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.406177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.411511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.416441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.417793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.428490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.431974] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.433818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.480455] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.489404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.502219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.509499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.522737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.524896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.538646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.541664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.545342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.547122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.549154] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.551412] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.557321] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.581684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.584797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.592335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.623235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.626550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.639306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.640858] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.644883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.664951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.681135] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.686546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.363213] Bluetooth: hci0: command tx timeout [ 85.426199] Bluetooth: hci2: command tx timeout [ 85.490164] Bluetooth: hci1: command tx timeout [ 85.554169] Bluetooth: hci3: command tx timeout [ 85.618700] Bluetooth: hci5: command tx timeout [ 85.619684] Bluetooth: hci4: command tx timeout [ 85.682172] Bluetooth: hci6: command tx timeout [ 85.810304] Bluetooth: hci7: command tx timeout [ 87.410534] Bluetooth: hci0: command tx timeout [ 87.474460] Bluetooth: hci2: command tx timeout [ 87.538637] Bluetooth: hci1: command tx timeout [ 87.603089] Bluetooth: hci3: command tx timeout [ 87.666171] Bluetooth: hci4: command tx timeout [ 87.666364] Bluetooth: hci5: command tx timeout [ 87.732324] Bluetooth: hci6: command tx timeout [ 87.859219] Bluetooth: hci7: command tx timeout [ 89.458150] Bluetooth: hci0: command tx timeout [ 89.523100] Bluetooth: hci2: command tx timeout [ 89.587372] Bluetooth: hci1: command tx timeout [ 89.650128] Bluetooth: hci3: command tx timeout [ 89.714482] Bluetooth: hci4: command tx timeout [ 89.714590] Bluetooth: hci5: command tx timeout [ 89.778377] Bluetooth: hci6: command tx timeout [ 89.908076] Bluetooth: hci7: command tx timeout [ 91.506184] Bluetooth: hci0: command tx timeout [ 91.571974] Bluetooth: hci2: command tx timeout [ 91.635161] Bluetooth: hci1: command tx timeout [ 91.698103] Bluetooth: hci3: command tx timeout [ 91.762155] Bluetooth: hci5: command tx timeout [ 91.762609] Bluetooth: hci4: command tx timeout [ 91.827229] Bluetooth: hci6: command tx timeout [ 91.955111] Bluetooth: hci7: command tx timeout [ 142.864169] syz-executor.3 (281) used greatest stack depth: 23296 bytes left [ 145.276623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.280587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.283164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.286952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.288151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.291450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.295781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.301795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.302517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.304238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.306272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.313890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.421267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.426989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.429379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.434236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.436925] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.440836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.483251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.486264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.486993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.491424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.499415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.516502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.520311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.526267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.527791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.529061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.543750] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.551612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.551883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.557370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.570296] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.578259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.580219] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.581567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.585321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.587924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.589807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.600436] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.601629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.611187] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.636565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.643425] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.662900] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.664283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.671899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.673323] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.379189] Bluetooth: hci1: command tx timeout [ 147.380176] Bluetooth: hci0: command tx timeout [ 147.506090] Bluetooth: hci2: command tx timeout [ 147.570108] Bluetooth: hci4: command tx timeout [ 147.634162] Bluetooth: hci3: command tx timeout [ 147.698137] Bluetooth: hci6: command tx timeout [ 147.698903] Bluetooth: hci5: command tx timeout [ 147.762225] Bluetooth: hci7: command tx timeout [ 149.426186] Bluetooth: hci0: command tx timeout [ 149.427158] Bluetooth: hci1: command tx timeout [ 149.555143] Bluetooth: hci2: command tx timeout [ 149.620190] Bluetooth: hci4: command tx timeout [ 149.682188] Bluetooth: hci3: command tx timeout [ 149.746502] Bluetooth: hci5: command tx timeout [ 149.747390] Bluetooth: hci6: command tx timeout [ 149.811070] Bluetooth: hci7: command tx timeout [ 151.474108] Bluetooth: hci0: command tx timeout [ 151.474598] Bluetooth: hci1: command tx timeout [ 151.602155] Bluetooth: hci2: command tx timeout [ 151.666108] Bluetooth: hci4: command tx timeout [ 151.730650] Bluetooth: hci3: command tx timeout [ 151.794386] Bluetooth: hci5: command tx timeout [ 151.795417] Bluetooth: hci6: command tx timeout [ 151.858222] Bluetooth: hci7: command tx timeout [ 153.522254] Bluetooth: hci1: command tx timeout [ 153.523465] Bluetooth: hci0: command tx timeout [ 153.651130] Bluetooth: hci2: command tx timeout [ 153.714175] Bluetooth: hci4: command tx timeout [ 153.778237] Bluetooth: hci3: command tx timeout [ 153.842232] Bluetooth: hci6: command tx timeout [ 153.843177] Bluetooth: hci5: command tx timeout [ 153.907078] Bluetooth: hci7: command tx timeout [ 207.683564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.687519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.694807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.698356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.704675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.708840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.711374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.716411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.722561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.737071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.739439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.741093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.742318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.753548] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.754909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.755730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.759205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.763599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.803883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.814376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.818420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.821867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.823749] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.825741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.893911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.897837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.903358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.908381] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.928465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.930423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.932979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.934498] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.935721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.946685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.948596] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.949974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.998360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.011317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.032446] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.034193] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.035076] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.040125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.046174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.111716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.121776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.145510] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.196559] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.202774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.778260] Bluetooth: hci0: command tx timeout [ 209.842122] Bluetooth: hci2: command tx timeout [ 209.842759] Bluetooth: hci1: command tx timeout [ 209.906126] Bluetooth: hci3: command tx timeout [ 210.034097] Bluetooth: hci4: command tx timeout [ 210.035368] Bluetooth: hci5: command tx timeout [ 210.098080] Bluetooth: hci6: command tx timeout [ 210.290219] Bluetooth: hci7: command tx timeout [ 211.826136] Bluetooth: hci0: command tx timeout [ 211.890168] Bluetooth: hci1: command tx timeout [ 211.890656] Bluetooth: hci2: command tx timeout [ 211.954131] Bluetooth: hci3: command tx timeout [ 212.082193] Bluetooth: hci5: command tx timeout [ 212.082769] Bluetooth: hci4: command tx timeout [ 212.146108] Bluetooth: hci6: command tx timeout [ 212.338868] Bluetooth: hci7: command tx timeout [ 213.875209] Bluetooth: hci0: command tx timeout [ 213.938170] Bluetooth: hci2: command tx timeout [ 213.938632] Bluetooth: hci1: command tx timeout [ 214.002147] Bluetooth: hci3: command tx timeout [ 214.130620] Bluetooth: hci4: command tx timeout [ 214.131112] Bluetooth: hci5: command tx timeout [ 214.194150] Bluetooth: hci6: command tx timeout [ 214.386126] Bluetooth: hci7: command tx timeout [ 215.922126] Bluetooth: hci0: command tx timeout [ 215.986196] Bluetooth: hci2: command tx timeout [ 215.986769] Bluetooth: hci1: command tx timeout [ 216.050222] Bluetooth: hci3: command tx timeout [ 216.180065] Bluetooth: hci5: command tx timeout [ 216.180636] Bluetooth: hci4: command tx timeout [ 216.242101] Bluetooth: hci6: command tx timeout [ 216.434461] Bluetooth: hci7: command tx timeout [ 269.766780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.771478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.777796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.789901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.794329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.798446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.016635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.021501] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.026449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.044433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.050734] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.055714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.096689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.112608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.120575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.120907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.124770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.127607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.127807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.135701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.139283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.142953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.145317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.150348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.152469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.155936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.163541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.164480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.179256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.180326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.180937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.184704] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.205216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.240608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.262370] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.264756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.296770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.310811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.337438] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.417437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.452685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.461839] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.466553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.470300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.471650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.482197] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.487075] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.488897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.859647] Bluetooth: hci0: command tx timeout [ 272.115093] Bluetooth: hci1: command tx timeout [ 272.242201] Bluetooth: hci4: command tx timeout [ 272.243294] Bluetooth: hci3: command tx timeout [ 272.308099] Bluetooth: hci5: command tx timeout [ 272.309118] Bluetooth: hci2: command tx timeout [ 272.627128] Bluetooth: hci6: command tx timeout [ 272.628624] Bluetooth: hci7: command tx timeout [ 273.906164] Bluetooth: hci0: command tx timeout [ 274.162205] Bluetooth: hci1: command tx timeout [ 274.290463] Bluetooth: hci4: command tx timeout [ 274.291478] Bluetooth: hci3: command tx timeout [ 274.355358] Bluetooth: hci5: command tx timeout [ 274.356244] Bluetooth: hci2: command tx timeout [ 274.674365] Bluetooth: hci7: command tx timeout [ 274.675655] Bluetooth: hci6: command tx timeout [ 275.954167] Bluetooth: hci0: command tx timeout [ 276.210109] Bluetooth: hci1: command tx timeout [ 276.338131] Bluetooth: hci4: command tx timeout [ 276.339062] Bluetooth: hci3: command tx timeout [ 276.402552] Bluetooth: hci5: command tx timeout [ 276.403501] Bluetooth: hci2: command tx timeout [ 276.722332] Bluetooth: hci7: command tx timeout [ 276.724305] Bluetooth: hci6: command tx timeout [ 278.002078] Bluetooth: hci0: command tx timeout [ 278.259139] Bluetooth: hci1: command tx timeout [ 278.387356] Bluetooth: hci3: command tx timeout [ 278.387873] Bluetooth: hci4: command tx timeout [ 278.450146] Bluetooth: hci5: command tx timeout [ 278.450623] Bluetooth: hci2: command tx timeout [ 278.770119] Bluetooth: hci6: command tx timeout [ 278.770670] Bluetooth: hci7: command tx timeout [ 332.101283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.105756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.109853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.118253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.124180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.126269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.286928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.292810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.295228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.303586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.307490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.312827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.379220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.387875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.391668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.394624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.397768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.405603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.407054] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.415756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.419812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.423847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.426677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.429461] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.433010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.443814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.463484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.474147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.476875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.490319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.494316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.526583] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.528549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.542174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.571745] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.590305] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.592476] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.594588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.603413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.622641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.629434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.631154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.653428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.661702] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.703475] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.710675] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.712306] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.717287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.194041] Bluetooth: hci0: command tx timeout [ 334.386622] Bluetooth: hci1: command tx timeout [ 334.514141] Bluetooth: hci2: command tx timeout [ 334.578093] Bluetooth: hci4: command tx timeout [ 334.642129] Bluetooth: hci3: command tx timeout [ 334.770139] Bluetooth: hci5: command tx timeout [ 334.834351] Bluetooth: hci7: command tx timeout [ 334.835623] Bluetooth: hci6: command tx timeout [ 336.242093] Bluetooth: hci0: command tx timeout [ 336.434062] Bluetooth: hci1: command tx timeout [ 336.562905] Bluetooth: hci2: command tx timeout [ 336.627051] Bluetooth: hci4: command tx timeout [ 336.692007] Bluetooth: hci3: command tx timeout [ 336.818098] Bluetooth: hci5: command tx timeout [ 336.883051] Bluetooth: hci6: command tx timeout [ 336.883512] Bluetooth: hci7: command tx timeout [ 338.290048] Bluetooth: hci0: command tx timeout [ 338.482794] Bluetooth: hci1: command tx timeout [ 338.610135] Bluetooth: hci2: command tx timeout [ 338.674251] Bluetooth: hci4: command tx timeout [ 338.738330] Bluetooth: hci3: command tx timeout [ 338.866071] Bluetooth: hci5: command tx timeout [ 338.930074] Bluetooth: hci6: command tx timeout [ 338.930668] Bluetooth: hci7: command tx timeout [ 340.338129] Bluetooth: hci0: command tx timeout [ 340.530063] Bluetooth: hci1: command tx timeout [ 340.658025] Bluetooth: hci2: command tx timeout [ 340.722098] Bluetooth: hci4: command tx timeout [ 340.786019] Bluetooth: hci3: command tx timeout [ 340.914038] Bluetooth: hci5: command tx timeout [ 340.978185] Bluetooth: hci7: command tx timeout [ 340.978694] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:10:28 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=000000000000009c RCX=ffffffff814f3e3e RDX=fffffbfff0fe15e7 RSI=0000000000000008 RDI=ffffffff87f0af30 RBP=ffff888037cd5340 RSP=ffff88802d3174b8 R8 =0000000000000000 R9 =fffffbfff0fe15e6 R10=ffffffff87f0af37 R11=0000000000000001 R12=0000000000000006 R13=0000000000000040 R14=ffff888037cd5de0 R15=0000000000000000 RIP=ffffffff84ab2f40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9ec6eb028 CR3=000000002b6a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff815ec80f RBX=ffffffff815ec480 RCX=ffff88802749f198 RDX=1ffff11004e93e2a RSI=ffffffff815ec80f RDI=ffff88802749f1c0 RBP=ffff88802749f190 RSP=ffff88802749f0f0 R8 =0000000000000001 R9 =ffff88802749f138 R10=000000000003ab7c R11=0000000000004330 R12=ffff88802749f1c0 R13=0000000000000000 R14=ffff888015711bc0 R15=0000000000092cc0 RIP=ffffffff815ec484 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f87d273b3c0 CR3=00000000323b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000