Warning: Permanently added '[localhost]:46666' (ECDSA) to the list of known hosts. 2025/04/22 14:38:48 fuzzer started 2025/04/22 14:38:49 dialing manager at localhost:42967 syzkaller login: [ 129.877315] cgroup: Unknown subsys name 'net' [ 130.036822] cgroup: Unknown subsys name 'cpuset' [ 130.074579] cgroup: Unknown subsys name 'rlimit' 2025/04/22 14:39:11 syscalls: 200 2025/04/22 14:39:11 code coverage: enabled 2025/04/22 14:39:11 comparison tracing: enabled 2025/04/22 14:39:11 extra coverage: enabled 2025/04/22 14:39:11 setuid sandbox: enabled 2025/04/22 14:39:11 namespace sandbox: enabled 2025/04/22 14:39:11 Android sandbox: enabled 2025/04/22 14:39:11 fault injection: enabled 2025/04/22 14:39:11 leak checking: enabled 2025/04/22 14:39:11 net packet injection: enabled 2025/04/22 14:39:11 net device setup: enabled 2025/04/22 14:39:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/22 14:39:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/22 14:39:11 USB emulation: enabled 2025/04/22 14:39:11 hci packet injection: enabled 2025/04/22 14:39:11 wifi device emulation: enabled 2025/04/22 14:39:11 802.15.4 emulation: enabled 2025/04/22 14:39:11 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 14:39:13 starting 8 fuzzer processes 14:39:13 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x205, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0040}, 0xc0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110cb3f1a62781f0}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd86}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x844) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8090) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8fca}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xa0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048000}, 0x1) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x42}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000890}, 0x40050) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 14:39:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sg', 0x400, 0x38) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40844) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x2}], 0xb4, 0x0, &(0x7f00000001c0)="d54aab9a9b4bd3626cab176deb830c2f52cc264ad16075f305177679bb1fe573dea66f9137bff3301f6c4cb988aeec1d2f4abe20a73f8a4b844399116863d8d85b69e6f072e12f915cc5de19e4ffde9603312b83c2baf80c67ba509baf16952a1b61ba00034e5f1e4d32a455fa53448335a042172de9125aec477b408b5210aedf0bd5212ff22d8e3b65a6700b5b3473677c0033a0173cea8400813d0442f7628983c595ed1af44c98f80779d776612eb451e4cc"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="f7c2123ccc490a36e7f3f4d55717ac89", 0x10) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "53b3defbcf3ec3dc", "767e3c7a59d4c3206399a625e99954d5fec439fbff53423cb367bfa230a378b0", "14b2cffc", "aad1f9fdc0adc5e0"}, 0x38) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000340)={{0x0, 0xc3d}, {0x7, 0x5}, 0x0, 0x1}) ioctl$RTC_WIE_ON(r0, 0x700f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000400)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000440)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000480)) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "d29b64d5d965ed10", "c91e38c639929a19b9f6e3c8ce55a4348c278bc0eb7739fe07b5c85aa62a5eee", "fd139ac5", "a4447657bac0a012"}, 0x38) ioctl$RTC_UIE_OFF(r0, 0x7004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x10001, 0x8, 0x9, 0xb701, 0x4}, 0x14) 14:39:13 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x811) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004084}, 0x20004080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "778ec67f14617b9b20b677b81e5a7283"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000004) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000600)={'\x00', 0x2, 0x3, 0xb7}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x54814}, 0x40801) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000041) 14:39:13 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x401}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x1002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x34, 0x0, &(0x7f00000000c0)=[@decrefs={0x40046307, 0x1}, @increfs, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0x53, 0x0, &(0x7f0000000100)="08c59968cb7fe5904b1f64dad684719a16d67bc79419882a5f89b000464ada364a4f5d37a2d63c0932a44f264660b669c9c5b5aec32290cf2b699a6f4d2e597003a55dc5f8498687f653bba4fa7d2471c2d773"}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x11, 0x1, {0x8, 0x3, 0x3}}, 0x14) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x800) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x73, 0x2, {{0x0, 0x2, 0x6}, 0x8}}, 0x18) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) socketpair(0x8, 0x6, 0x5d9c, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000400), 0x81000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42}, 0x0) clock_gettime(0x0, &(0x7f0000005900)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/8, 0x8}, {&(0x7f0000001840)=""/235, 0xeb}], 0x6, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c00)=""/142, 0x8e}, {&(0x7f0000002cc0)=""/136, 0x88}, {&(0x7f0000002d80)=""/190, 0xbe}], 0x3, &(0x7f0000002e80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002f80), 0x6e, &(0x7f0000004200)=[{&(0x7f0000003000)=""/192, 0xc0}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/225, 0xe1}, {&(0x7f00000041c0)=""/24, 0x18}], 0x4}}, {{&(0x7f0000004240), 0x6e, &(0x7f0000005400)=[{&(0x7f00000042c0)=""/162, 0xa2}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/124, 0x7c}], 0x3, &(0x7f0000005440)}}, {{&(0x7f0000005480)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005500)=""/206, 0xce}], 0x1, &(0x7f0000005640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x6, 0x2, &(0x7f0000005940)={r3, r4+10000000}) write$P9_RSYMLINK(r5, &(0x7f0000005980)={0x14, 0x11, 0x1, {0x2, 0x1, 0x4}}, 0x14) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005a00), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000005b40)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005b00)={&(0x7f0000005a40)={0x8c, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}]}, 0x8c}}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005bc0)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x16) 14:39:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x48}}, 0x4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x4020040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4804000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0xc000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r4) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x900, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8010) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x40) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r6, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/bus/cpu', 0x200, 0x100) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4020001) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r8) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) [ 153.529199] audit: type=1400 audit(1745332753.149:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:39:13 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18101241}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xd8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x538cea00e211f6bd}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7f}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1001d}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x401}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, r9, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000b40)={0x14, 0x11, 0x1, {0x20, 0x2, 0x8}}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x4084) 14:39:13 executing program 6: ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000)) syz_open_dev$rtc(&(0x7f0000000040), 0xffffffff, 0x101000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nf_conntrack_ftp', 0x4000, 0x24) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) write$tcp_mem(r0, &(0x7f0000000140)={0x0, 0x20, 0x2, 0x20, 0xfff}, 0x48) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x28001, 0x0) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000200)={'\x00', 0xfff, 0x2, 0xf020}) r3 = socket(0x27, 0x6, 0x631) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x80000001, 0x4) r4 = socket(0x26, 0xa, 0x7) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8201000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$RTC_WIE_OFF(r0, 0x7010) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000440)=@lstk={0x7, 0x2, "1143b1bfd2", 0x6, 0x0, 0x0, 0x2}) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000480)="4dfdb73d0072c31e4ac13b9976ba4ff96fcb8a3084daf87b303e7198ccb28dd15b6325bcfdb6d9460b21ca691c6cb38592130902c417655e2d12c2464aa55a099fd00b8ada81a57eb41a89590cc52c2349dac0002b1a520ddbbc00c3038f511764953a5e4106d49e314fcbd7e5abaa4c43c6629be1f1b59ee1305523a8d9733b122cb180a9e18dd22c0080ad1f60c89295b550b8d036207865bfb7daa10c7d3237cd1ede2fa8e0e52229fd842b0f76d84e9d8e3413020f12231a0ca1d4f0788f413dc278372956127347db7dbc398b9318b225ce3dcd988dbf9eaafe97e9e4198dc5cb0bb7edbbf1c9ab0789eca8c613cd", 0xf1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004055}, 0x480c0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 14:39:13 executing program 7: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000000)={0xa}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000004c0)={{0xffffffffffffff79, 0x8}, {0x5, 0x6}, 0x5}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000500)) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = socket(0x15, 0x3, 0xff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18e24827}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000680)={'\x00', 0x0, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r5 = socket(0x23, 0x6, 0x80000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/module/yenta_socket', 0x401, 0x152) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd4, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfc00000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3a}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4845) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000000c40)={'\x00', 0x0, 0x0, 0xffff}) socketpair(0x1a, 0x5, 0x401, &(0x7f0000000cc0)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000e40)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/52, 0x34, 0x0, &(0x7f0000000d40)=""/201, 0xc9}, &(0x7f0000000e80)=0x40) [ 155.088365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.091828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.105445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.111617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.113961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.116623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.122704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.128230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.131395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.136420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.138115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.142282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.143715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.145479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.148270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.151374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.155525] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.161521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.167511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.169148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.170135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.175037] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.176915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.178972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.184691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.189853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.191429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.214641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.250893] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.252552] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.253425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.257598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.259253] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.264335] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.265319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.266211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.267839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.270832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.274129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.278596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.280068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.280925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.283875] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.288153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.289058] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.290503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.291414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.292660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.229915] Bluetooth: hci3: command tx timeout [ 157.231092] Bluetooth: hci0: command tx timeout [ 157.294845] Bluetooth: hci1: command tx timeout [ 157.359096] Bluetooth: hci2: command tx timeout [ 157.422064] Bluetooth: hci5: command tx timeout [ 157.422139] Bluetooth: hci6: command tx timeout [ 157.422896] Bluetooth: hci7: command tx timeout [ 157.423745] Bluetooth: hci4: command tx timeout [ 159.279593] Bluetooth: hci0: command tx timeout [ 159.281179] Bluetooth: hci3: command tx timeout [ 159.342109] Bluetooth: hci1: command tx timeout [ 159.405294] Bluetooth: hci2: command tx timeout [ 159.470192] Bluetooth: hci7: command tx timeout [ 159.470829] Bluetooth: hci4: command tx timeout [ 159.471533] Bluetooth: hci6: command tx timeout [ 159.472088] Bluetooth: hci5: command tx timeout [ 161.325192] Bluetooth: hci0: command tx timeout [ 161.326722] Bluetooth: hci3: command tx timeout [ 161.390071] Bluetooth: hci1: command tx timeout [ 161.453140] Bluetooth: hci2: command tx timeout [ 161.517456] Bluetooth: hci6: command tx timeout [ 161.519228] Bluetooth: hci5: command tx timeout [ 161.519274] Bluetooth: hci7: command tx timeout [ 161.521062] Bluetooth: hci4: command tx timeout [ 163.374398] Bluetooth: hci0: command tx timeout [ 163.375884] Bluetooth: hci3: command tx timeout [ 163.437254] Bluetooth: hci1: command tx timeout [ 163.501493] Bluetooth: hci2: command tx timeout [ 163.565376] Bluetooth: hci4: command tx timeout [ 163.565414] Bluetooth: hci6: command tx timeout [ 163.567044] Bluetooth: hci7: command tx timeout [ 163.567092] Bluetooth: hci5: command tx timeout [ 218.043357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.046812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.056540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.069615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.077360] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.080186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.120934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.123789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.125477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.134429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.144528] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.146950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.172543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.176252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.178050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.194673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.204402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.206238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.216370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.217578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.224360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.225465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.228372] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.232326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.232856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.235150] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.237061] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.241366] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.242748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.248497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.251389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.252914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.265357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.266692] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.287869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.298675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.312902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.314285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.316345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.320377] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.332656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.344789] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.347413] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.347507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.355932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.358102] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.360610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.362402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.141150] Bluetooth: hci0: command tx timeout [ 220.205237] Bluetooth: hci1: command tx timeout [ 220.333362] Bluetooth: hci3: command tx timeout [ 220.398153] Bluetooth: hci7: command tx timeout [ 220.398795] Bluetooth: hci6: command tx timeout [ 220.400024] Bluetooth: hci2: command tx timeout [ 220.462170] Bluetooth: hci5: command tx timeout [ 220.462184] Bluetooth: hci4: command tx timeout [ 222.190133] Bluetooth: hci0: command tx timeout [ 222.254353] Bluetooth: hci1: command tx timeout [ 222.382247] Bluetooth: hci3: command tx timeout [ 222.445264] Bluetooth: hci2: command tx timeout [ 222.445342] Bluetooth: hci6: command tx timeout [ 222.445732] Bluetooth: hci7: command tx timeout [ 222.510652] Bluetooth: hci4: command tx timeout [ 222.511334] Bluetooth: hci5: command tx timeout [ 224.237202] Bluetooth: hci0: command tx timeout [ 224.303026] Bluetooth: hci1: command tx timeout [ 224.429102] Bluetooth: hci3: command tx timeout [ 224.493120] Bluetooth: hci7: command tx timeout [ 224.493177] Bluetooth: hci2: command tx timeout [ 224.494120] Bluetooth: hci6: command tx timeout [ 224.557215] Bluetooth: hci5: command tx timeout [ 224.558122] Bluetooth: hci4: command tx timeout [ 226.286164] Bluetooth: hci0: command tx timeout [ 226.351063] Bluetooth: hci1: command tx timeout [ 226.478314] Bluetooth: hci3: command tx timeout [ 226.541117] Bluetooth: hci6: command tx timeout [ 226.542466] Bluetooth: hci2: command tx timeout [ 226.542802] Bluetooth: hci7: command tx timeout [ 226.607155] Bluetooth: hci4: command tx timeout [ 226.607645] Bluetooth: hci5: command tx timeout [ 280.457641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.463749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.472067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.481836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.493424] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.505964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.791423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.801845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.808624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.814570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.816518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.821694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.822691] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.826093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.829683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.831666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.841456] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.848689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.919870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.927188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.939145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.945885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.967765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.976419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.978570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.983835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.994050] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.995244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.001316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.003834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.005614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.011724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.051968] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.055101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.065758] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.068587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.107467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.120016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.123483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.128835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.140602] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.142267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.162838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.179489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.202553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.237443] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.254426] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.259432] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.606178] Bluetooth: hci0: command tx timeout [ 282.862116] Bluetooth: hci2: command tx timeout [ 282.925107] Bluetooth: hci1: command tx timeout [ 283.053621] Bluetooth: hci4: command tx timeout [ 283.117263] Bluetooth: hci3: command tx timeout [ 283.181184] Bluetooth: hci5: command tx timeout [ 283.181538] Bluetooth: hci6: command tx timeout [ 283.310130] Bluetooth: hci7: command tx timeout [ 284.653118] Bluetooth: hci0: command tx timeout [ 284.909220] Bluetooth: hci2: command tx timeout [ 284.975078] Bluetooth: hci1: command tx timeout [ 285.101135] Bluetooth: hci4: command tx timeout [ 285.165295] Bluetooth: hci3: command tx timeout [ 285.231077] Bluetooth: hci6: command tx timeout [ 285.231591] Bluetooth: hci5: command tx timeout [ 285.357373] Bluetooth: hci7: command tx timeout [ 286.701453] Bluetooth: hci0: command tx timeout [ 286.957140] Bluetooth: hci2: command tx timeout [ 287.021104] Bluetooth: hci1: command tx timeout [ 287.149280] Bluetooth: hci4: command tx timeout [ 287.213174] Bluetooth: hci3: command tx timeout [ 287.278059] Bluetooth: hci5: command tx timeout [ 287.279658] Bluetooth: hci6: command tx timeout [ 287.405462] Bluetooth: hci7: command tx timeout [ 288.749733] Bluetooth: hci0: command tx timeout [ 289.005098] Bluetooth: hci2: command tx timeout [ 289.069440] Bluetooth: hci1: command tx timeout [ 289.198042] Bluetooth: hci4: command tx timeout [ 289.262455] Bluetooth: hci3: command tx timeout [ 289.325148] Bluetooth: hci6: command tx timeout [ 289.328051] Bluetooth: hci5: command tx timeout [ 289.453157] Bluetooth: hci7: command tx timeout [ 343.097831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.102477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.105313] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.113485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.118505] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.124390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.357741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.364545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.370705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.376263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.380010] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.381508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.498159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.506388] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.510621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.520419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.523850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.526477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.588682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.600892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.607291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.625357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.649396] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.654659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.659370] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.660441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.686586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.695665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.705561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.709480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.724691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.737524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.741706] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.743179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.753575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.762222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.764822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.786488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.787656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.819132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.821365] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.823436] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.858521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.862156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.864368] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.865848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.892766] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.943198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.197195] Bluetooth: hci0: command tx timeout [ 345.453131] Bluetooth: hci1: command tx timeout [ 345.582060] Bluetooth: hci2: command tx timeout [ 345.773268] Bluetooth: hci3: command tx timeout [ 345.774471] Bluetooth: hci4: command tx timeout [ 345.837325] Bluetooth: hci6: command tx timeout [ 345.901191] Bluetooth: hci7: command tx timeout [ 346.093354] Bluetooth: hci5: command tx timeout [ 347.246153] Bluetooth: hci0: command tx timeout [ 347.502119] Bluetooth: hci1: command tx timeout [ 347.630325] Bluetooth: hci2: command tx timeout [ 347.821135] Bluetooth: hci4: command tx timeout [ 347.821283] Bluetooth: hci3: command tx timeout [ 347.885161] Bluetooth: hci6: command tx timeout [ 347.950083] Bluetooth: hci7: command tx timeout [ 348.141277] Bluetooth: hci5: command tx timeout [ 349.294202] Bluetooth: hci0: command tx timeout [ 349.549555] Bluetooth: hci1: command tx timeout [ 349.677118] Bluetooth: hci2: command tx timeout [ 349.869219] Bluetooth: hci4: command tx timeout [ 349.869480] Bluetooth: hci3: command tx timeout [ 349.933356] Bluetooth: hci6: command tx timeout [ 349.999050] Bluetooth: hci7: command tx timeout [ 350.190900] Bluetooth: hci5: command tx timeout [ 351.341304] Bluetooth: hci0: command tx timeout [ 351.597506] Bluetooth: hci1: command tx timeout [ 351.725326] Bluetooth: hci2: command tx timeout [ 351.917339] Bluetooth: hci4: command tx timeout [ 351.919111] Bluetooth: hci3: command tx timeout [ 351.983436] Bluetooth: hci6: command tx timeout [ 352.045378] Bluetooth: hci7: command tx timeout [ 352.237197] Bluetooth: hci5: command tx timeout [ 405.842240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.866508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.878672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.918196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.921490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 405.940495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.142770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.151239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.154415] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.165632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.168675] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 406.170832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.284200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.289427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.292323] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.306509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.314122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.325884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.328246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 406.331693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.340744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.352378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.365225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.368484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 406.372130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.384419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.405505] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.425092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 406.431360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 406.446657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.453201] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 406.462893] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 406.466179] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 406.467950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 406.494444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.502559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.503684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.511272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 406.517362] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.526511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.546098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.549410] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.558559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.566688] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 406.570546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.601254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.686598] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 406.696490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.982180] Bluetooth: hci0: command tx timeout [ 408.237157] Bluetooth: hci1: command tx timeout [ 408.429513] Bluetooth: hci2: command tx timeout [ 408.493720] Bluetooth: hci3: command tx timeout [ 408.558126] Bluetooth: hci7: command tx timeout [ 408.621133] Bluetooth: hci6: command tx timeout [ 408.621212] Bluetooth: hci4: command tx timeout [ 408.751055] Bluetooth: hci5: command tx timeout [ 410.029628] Bluetooth: hci0: command tx timeout [ 410.285407] Bluetooth: hci1: command tx timeout [ 410.477202] Bluetooth: hci2: command tx timeout [ 410.541119] Bluetooth: hci3: command tx timeout [ 410.605592] Bluetooth: hci7: command tx timeout [ 410.669377] Bluetooth: hci4: command tx timeout [ 410.669884] Bluetooth: hci6: command tx timeout [ 410.797290] Bluetooth: hci5: command tx timeout [ 412.078059] Bluetooth: hci0: command tx timeout [ 412.335085] Bluetooth: hci1: command tx timeout [ 412.525192] Bluetooth: hci2: command tx timeout [ 412.589125] Bluetooth: hci3: command tx timeout [ 412.654854] Bluetooth: hci7: command tx timeout [ 412.717243] Bluetooth: hci6: command tx timeout [ 412.718067] Bluetooth: hci4: command tx timeout [ 412.845224] Bluetooth: hci5: command tx timeout [ 414.125280] Bluetooth: hci0: command tx timeout [ 414.381517] Bluetooth: hci1: command tx timeout [ 414.575020] Bluetooth: hci2: command tx timeout [ 414.637093] Bluetooth: hci3: command tx timeout [ 414.701143] Bluetooth: hci7: command tx timeout [ 414.766025] Bluetooth: hci4: command tx timeout [ 414.766177] Bluetooth: hci6: command tx timeout [ 414.893076] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:44:18 Registers: info registers vcpu 0 RAX=ffff88807ffdda80 RBX=ffff88802d51fac8 RCX=ffff88802d51fad8 RDX=1ffff11005aa3f5b RSI=0000000000000001 RDI=0000000000140cca RBP=ffff88807ffdcb80 RSP=ffff88802d51f850 R8 =0000000000000000 R9 =ffff88800d542608 R10=0000000000000000 R11=0000000000000001 R12=1ffff11005aa3f7b R13=0000000000140cca R14=0000000000000000 R15=ffff88802d51fa98 RIP=ffffffff81a3faf3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f54be35a540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f54be80c130 CR3=00000000366e4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88800f2a5340 RCX=1ffffffff0fe4f36 RDX=dffffc0000000000 RSI=0000000000000004 RDI=ffffffff87f279b0 RBP=ffff88800f2a5340 RSP=ffff888035677990 R8 =0000000000000000 R9 =fffffbfff0fe27ce R10=ffffffff87f13e77 R11=0000000000000001 R12=ffff888008ff63c0 R13=ffffea000039c180 R14=0000000000000000 R15=ffff88800e706ba0 RIP=ffffffff8150150e RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa3ded16028 CR3=000000002b79c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000