Warning: Permanently added '[localhost]:53278' (ECDSA) to the list of known hosts. 2025/04/28 18:23:13 fuzzer started 2025/04/28 18:23:14 dialing manager at localhost:46629 syzkaller login: [ 94.406829] cgroup: Unknown subsys name 'net' [ 94.558264] cgroup: Unknown subsys name 'cpuset' [ 94.608311] cgroup: Unknown subsys name 'rlimit' 2025/04/28 18:23:28 syscalls: 214 2025/04/28 18:23:28 code coverage: enabled 2025/04/28 18:23:28 comparison tracing: enabled 2025/04/28 18:23:28 extra coverage: enabled 2025/04/28 18:23:28 setuid sandbox: enabled 2025/04/28 18:23:28 namespace sandbox: enabled 2025/04/28 18:23:28 Android sandbox: enabled 2025/04/28 18:23:28 fault injection: enabled 2025/04/28 18:23:28 leak checking: enabled 2025/04/28 18:23:28 net packet injection: enabled 2025/04/28 18:23:28 net device setup: enabled 2025/04/28 18:23:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 18:23:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 18:23:28 USB emulation: enabled 2025/04/28 18:23:28 hci packet injection: enabled 2025/04/28 18:23:28 wifi device emulation: enabled 2025/04/28 18:23:28 802.15.4 emulation: enabled 2025/04/28 18:23:28 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 18:23:30 starting 8 fuzzer processes 18:23:30 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x565, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa0}}, './file0\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x47d}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x109000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r6}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5d32d2cb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004094}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20008001) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x40680, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x37e7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000091}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd36}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x1f0) 18:23:30 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = semget$private(0x0, 0x3, 0x638) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000200)=""/254) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000060) r1 = semget$private(0x0, 0x0, 0x200) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000400)=""/165) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/65) semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000000540)=""/235) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000640)=""/217) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000740)=""/4096) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000001740)=""/4096) semget(0x0, 0x4, 0x405) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x42000) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000002840)=0x7) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000002880)=0x3) r2 = semget(0x3, 0x3, 0x50) semctl$GETPID(r2, 0x0, 0xb, &(0x7f00000028c0)=""/230) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f00000029c0)=""/233) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000002ac0)=""/248) 18:23:30 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xb934}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x82}]}, 0x34}}, 0x814) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x2a0942897cc43143) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd4}, 0x11) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) r5 = syz_open_dev$vcsn(&(0x7f0000000740), 0x80000001, 0x200000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x24}}, 0x41) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xb0, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8054}, 0x4040) [ 109.943306] audit: type=1400 audit(1745864610.230:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:23:30 executing program 3: r0 = semget$private(0x0, 0x2, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)='./file0\x00', 0x2, 0x4000}, 0x800) r3 = getuid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001b40)={{0x1, 0xee00, r2, r3, 0xee00, 0x0, 0x6e}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) semget$private(0x0, 0x2, 0xc8) r4 = semget(0x2, 0x1, 0x2) semctl$SEM_INFO(r4, 0x1, 0x13, &(0x7f0000001bc0)=""/168) r5 = semget$private(0x0, 0x1, 0x80) semtimedop(r5, &(0x7f0000001c80)=[{0x3, 0x5, 0x1800}], 0x1, &(0x7f0000001cc0)) r6 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001d80)={{0x0, r1, 0xffffffffffffffff, r3, r6, 0x104, 0x1}, 0xc89, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000001e00)=""/34) perf_event_open(&(0x7f0000001e40)={0x0, 0x80, 0x7, 0x0, 0x0, 0x20, 0x0, 0xfff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x8000}, 0x880, 0x3, 0xea, 0x8, 0x3, 0x869, 0x7f, 0x0, 0xc25, 0x0, 0x7fffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7bf6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf38}]}, 0x4c}}, 0x40015) r8 = inotify_init1(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002000)={{0x1, 0x1, 0x18, r8, {0x10001}}, './file0\x00'}) semctl$GETPID(r4, 0x4, 0xb, &(0x7f0000002040)=""/237) ioctl$SNAPSHOT_UNFREEZE(r9, 0x3302) semctl$SEM_STAT(r4, 0x4, 0x12, &(0x7f0000002140)=""/4096) 18:23:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x7c4, 0x67, {{0x21, 0x4, 0x1, 0x3e, 0x84, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@end, @lsrr={0x83, 0x23, 0x69, [@empty, @private=0xa010102, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x1f, 0x86, [@remote, @dev={0xac, 0x14, 0x14, 0x35}, @remote, @rand_addr=0x64010101, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x1, 0x3, 'd'}, {0x2, 0x7, "c2fb396361"}, {0x6, 0x3, 'B'}, {0x5, 0x6, "d7799c37"}]}, @timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x3, [{@empty, 0x1000}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000001c0)={0x584, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x40}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x2dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "9e3aba81a934e220a4762f2adff44db13a528def0b7499adfba4a6779ded2fc0115fcc8ebf70a86b81183d8f4d8e70b09edd5216d751cb07561cbeb33a30cf6147d1f9e47b440a9d463ec0d3fb78c11ec46ba5e30090d556c68a8b7ecdb17960bfe473c6964a17d9f0702456307f581308fd55dbdc7095ac00341aaef1bef6846fbdfde8bd96889ce68ddaeccc5a5b0589e6481c8a5e6f9355c9db8776356dce8a744350087fece957202518e58303f72c83d999fd8b64294b013db40f78d1"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "5fe2c408b0593669a179d5ee91d89782eb72be8e62de49833a6d8b8d60e2e75f9c92da737d9b09a897d44ef16ed02e349e81ea28cbbde7d12b72769b94f03c8e7e4425000d580c828fe21386ccd81b164dbf6b1816fd0f0fb5c4d00f622e38e1434cb45ba9c82f12b359366cea4c765790b88dfce80e2c3744aad2600f982b71c71e8b2c412eb65156e92c244166352e1d8cb8fa3843295d5f30da2e1517ef0cb9b6622793911e25e18e436749e1cc6736bfc4ca6d42f3245c3207102c3cace2e7217e63e97c2d7a439c88207a42512d52fac2327ade"}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa97}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x426}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, ')'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(!.:}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\\\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x31cc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x93f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',:*{^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&{^%!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\x16\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}/]*^s\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{/@\\(!&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "4bd13f3fc1b5943e5a09b1aeeada354f30ea7790ed85418a5a45b5f8440c63eed01106e93ddcb66990860f6e5a50953e4e66dd4f8b7c9258b12d7b8a00c50093fbe6f53fd47ee5d6692fcbc775d2ec3f0ba31209e0c0d2e03be086ec124e11027b7de8a3aa01bb2599d12a919d49903291cbfff5e244d60fe0b6e3e759470ee1e42455dd14a48bba91a5c1b6f24f174a63f214fa8bcebe43a3467f5ba0ae03bd7a7f12f01cfefd2499818c64e1022782079d07bb363b490f0a2518420e96df46a241be69765e021f1a62e568d101958982839a2d9813ad2de53e2f6c5c4696bbe59d83427c626a6ef1eb4490dbc0"}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x584}, 0x1, 0x0, 0x0, 0x44880}, 0x24000095) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x4000, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44cc0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40011) r5 = syz_open_dev$vcsa(&(0x7f0000000a80), 0xf581, 0x241) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x104, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x10010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r0, {r7}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xf8, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, 0x0, 0x200, 0x70bd29, 0x101, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc76b332a15b1f46a}, 0x20000800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004090}, 0x400c010) 18:23:30 executing program 5: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7f, &(0x7f0000ffc000/0x2000)=nil, 0x1) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x2809, &(0x7f0000000080)={0x0, 0x16ea, 0x8, 0x2, 0x151}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfca}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x57}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044}, 0x8084) shmget(0x2, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/158) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x10000000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008145}, 0x8080) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000004c0)=""/4096) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000014c0), 0x200, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x2) r2 = semget(0x3, 0x4, 0x1) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000001500)=""/160) 18:23:30 executing program 6: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x80000001, 0x285502) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x7a93, &(0x7f0000000080)={0x0, 0x8814, 0x2, 0x0, 0x305}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe19c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x20000080) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1f}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x400}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb71f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008805) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6a2101a1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000540)=""/13) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0xfffffffffffff074, 0x208100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40006}, 0x0) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000000780)={0x3, 0x3, 0x9, 0x5, 0x8, 0x5a}) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f00000007c0)={0x7, 0xffffffff, 0x1, 0x3ff}) 18:23:30 executing program 7: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf7b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40000) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x8, 0x2, 0x7de, {{0x8, 0x4, 0x2, 0x17, 0x20, 0x68, 0x0, 0xfa, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0xb, 0xb3, [@empty, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4851}, 0xc001) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x48}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'gre0\x00', r2, 0x10, 0x1, 0x8, 0x30, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x66, 0x0, 0x40, 0x4, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xb, 0xc4, [@dev={0xac, 0x14, 0x14, 0xb}, @multicast1]}, @generic={0x86, 0xe, "6b4f3450241bb4c4e82a6f5a"}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x2, [{@remote, 0x8a7}, {@local, 0x7ff}, {@empty, 0x6d4}]}, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0x1, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7}]}, @timestamp={0x44, 0x24, 0x80, 0x0, 0xa, [0x6, 0x2, 0x76, 0x4, 0x7, 0x1000, 0x2, 0x3ff]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000680)={'tunl0\x00', r1, 0x8000, 0x1, 0xb7, 0xfffffffc, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @private=0xa010101, {[@noop, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1ac, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20040881}, 0x14) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000940), 0x20400, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4d31}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6ea}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5f86}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r9, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2749}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f00000011c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x3900084}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xec, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x20008005) [ 111.253450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.259715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.261092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.275607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.281217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.310182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.313636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.315063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.323126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.325285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.353973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.358005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.360671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.363841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.373007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.417212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.424184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.426899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.432902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.438693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.497076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.501174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.508053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.513877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.515041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.518216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.522655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.525306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.548235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.549649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.563038] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.574042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.575876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.577751] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.594728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.596215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.600812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.601922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.609620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.614363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.320072] Bluetooth: hci0: command tx timeout [ 113.384704] Bluetooth: hci1: command tx timeout [ 113.447463] Bluetooth: hci2: command tx timeout [ 113.511993] Bluetooth: hci3: command tx timeout [ 113.575904] Bluetooth: hci4: command tx timeout [ 113.640872] Bluetooth: hci7: command tx timeout [ 113.640902] Bluetooth: hci6: command tx timeout [ 113.703697] Bluetooth: hci5: command tx timeout [ 115.368100] Bluetooth: hci0: command tx timeout [ 115.431484] Bluetooth: hci1: command tx timeout [ 115.495462] Bluetooth: hci2: command tx timeout [ 115.559683] Bluetooth: hci3: command tx timeout [ 115.623642] Bluetooth: hci4: command tx timeout [ 115.687430] Bluetooth: hci7: command tx timeout [ 115.688765] Bluetooth: hci6: command tx timeout [ 115.751542] Bluetooth: hci5: command tx timeout [ 117.416409] Bluetooth: hci0: command tx timeout [ 117.479436] Bluetooth: hci1: command tx timeout [ 117.544541] Bluetooth: hci2: command tx timeout [ 117.608536] Bluetooth: hci3: command tx timeout [ 117.672413] Bluetooth: hci4: command tx timeout [ 117.735942] Bluetooth: hci6: command tx timeout [ 117.736716] Bluetooth: hci7: command tx timeout [ 117.799719] Bluetooth: hci5: command tx timeout [ 119.463644] Bluetooth: hci0: command tx timeout [ 119.529059] Bluetooth: hci1: command tx timeout [ 119.593411] Bluetooth: hci2: command tx timeout [ 119.656415] Bluetooth: hci3: command tx timeout [ 119.720501] Bluetooth: hci4: command tx timeout [ 119.784495] Bluetooth: hci7: command tx timeout [ 119.784974] Bluetooth: hci6: command tx timeout [ 119.847442] Bluetooth: hci5: command tx timeout [ 174.078044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.080190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.083774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.090217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.100184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.272179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.275726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.279709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.286010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.301021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.312074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.318591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.325571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.327143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.329949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.331301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.336838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.339016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.341361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.354549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.361050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.371609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.380063] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.405714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.407175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.419696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.423782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.425741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.435826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.443023] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.449961] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.467839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.469887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.473089] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.474066] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.477240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.477670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.485258] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.491132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.505292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.167438] Bluetooth: hci0: command tx timeout [ 176.423614] Bluetooth: hci4: command tx timeout [ 176.425441] Bluetooth: hci1: command tx timeout [ 176.487494] Bluetooth: hci3: command tx timeout [ 176.488434] Bluetooth: hci2: command tx timeout [ 176.551534] Bluetooth: hci7: command tx timeout [ 176.551688] Bluetooth: hci5: command tx timeout [ 176.553139] Bluetooth: hci6: command tx timeout [ 178.215992] Bluetooth: hci0: command tx timeout [ 178.472897] Bluetooth: hci4: command tx timeout [ 178.473501] Bluetooth: hci1: command tx timeout [ 178.537395] Bluetooth: hci2: command tx timeout [ 178.537453] Bluetooth: hci3: command tx timeout [ 178.599678] Bluetooth: hci5: command tx timeout [ 178.599801] Bluetooth: hci6: command tx timeout [ 178.600241] Bluetooth: hci7: command tx timeout [ 180.263952] Bluetooth: hci0: command tx timeout [ 180.519447] Bluetooth: hci4: command tx timeout [ 180.519665] Bluetooth: hci1: command tx timeout [ 180.584408] Bluetooth: hci2: command tx timeout [ 180.584446] Bluetooth: hci3: command tx timeout [ 180.647469] Bluetooth: hci6: command tx timeout [ 180.647506] Bluetooth: hci7: command tx timeout [ 180.647962] Bluetooth: hci5: command tx timeout [ 182.311451] Bluetooth: hci0: command tx timeout [ 182.567894] Bluetooth: hci4: command tx timeout [ 182.569432] Bluetooth: hci1: command tx timeout [ 182.631449] Bluetooth: hci2: command tx timeout [ 182.633256] Bluetooth: hci3: command tx timeout [ 182.696481] Bluetooth: hci5: command tx timeout [ 182.696989] Bluetooth: hci7: command tx timeout [ 182.697401] Bluetooth: hci6: command tx timeout [ 236.734017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.735919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.737300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.740587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.742714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.789177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.792622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.794954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.800127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.802648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.938139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.945880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.947796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.951686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.953628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.015371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.021404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.023101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.025893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.027685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.107731] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.117767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.128586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.170104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.172846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.176880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.180276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.187977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.192594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.201661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.213046] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.215090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.229278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.237236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.239601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.305500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.351640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.359867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.382280] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.385016] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.759486] Bluetooth: hci0: command tx timeout [ 238.889378] Bluetooth: hci1: command tx timeout [ 239.015433] Bluetooth: hci2: command tx timeout [ 239.079749] Bluetooth: hci3: command tx timeout [ 239.207461] Bluetooth: hci5: command tx timeout [ 239.271495] Bluetooth: hci6: command tx timeout [ 239.271531] Bluetooth: hci4: command tx timeout [ 239.527686] Bluetooth: hci7: command tx timeout [ 240.810408] Bluetooth: hci0: command tx timeout [ 240.936016] Bluetooth: hci1: command tx timeout [ 241.063678] Bluetooth: hci2: command tx timeout [ 241.127450] Bluetooth: hci3: command tx timeout [ 241.255453] Bluetooth: hci5: command tx timeout [ 241.319545] Bluetooth: hci4: command tx timeout [ 241.321021] Bluetooth: hci6: command tx timeout [ 241.576393] Bluetooth: hci7: command tx timeout [ 242.855418] Bluetooth: hci0: command tx timeout [ 242.984655] Bluetooth: hci1: command tx timeout [ 243.111387] Bluetooth: hci2: command tx timeout [ 243.175890] Bluetooth: hci3: command tx timeout [ 243.303511] Bluetooth: hci5: command tx timeout [ 243.367459] Bluetooth: hci4: command tx timeout [ 243.367498] Bluetooth: hci6: command tx timeout [ 243.624294] Bluetooth: hci7: command tx timeout [ 244.903605] Bluetooth: hci0: command tx timeout [ 245.031444] Bluetooth: hci1: command tx timeout [ 245.161063] Bluetooth: hci2: command tx timeout [ 245.223812] Bluetooth: hci3: command tx timeout [ 245.351447] Bluetooth: hci5: command tx timeout [ 245.415704] Bluetooth: hci6: command tx timeout [ 245.416388] Bluetooth: hci4: command tx timeout [ 245.671556] Bluetooth: hci7: command tx timeout [ 299.393160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.397449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.405839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.418818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.427485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.512063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.514201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.515763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.539978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.552446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.587830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.589727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.593431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.599221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.601696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.731103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.733051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.759653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.768939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.771263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.772955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.778773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.780669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.810709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.812971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.873038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.876006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.879030] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.880367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.892751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.894973] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.905249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.910355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.913859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.934147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.939667] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.968821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.981844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.985658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.997681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.479907] Bluetooth: hci0: command tx timeout [ 301.607596] Bluetooth: hci1: command tx timeout [ 301.671521] Bluetooth: hci2: command tx timeout [ 301.868489] Bluetooth: hci3: command tx timeout [ 301.933550] Bluetooth: hci4: command tx timeout [ 301.993702] Bluetooth: hci6: command tx timeout [ 302.064751] Bluetooth: hci5: command tx timeout [ 302.120466] Bluetooth: hci7: command tx timeout [ 303.528468] Bluetooth: hci0: command tx timeout [ 303.656416] Bluetooth: hci1: command tx timeout [ 303.720571] Bluetooth: hci2: command tx timeout [ 303.911408] Bluetooth: hci3: command tx timeout [ 303.976705] Bluetooth: hci4: command tx timeout [ 304.040459] Bluetooth: hci6: command tx timeout [ 304.104414] Bluetooth: hci5: command tx timeout [ 304.169418] Bluetooth: hci7: command tx timeout [ 305.575638] Bluetooth: hci0: command tx timeout [ 305.703491] Bluetooth: hci1: command tx timeout [ 305.768358] Bluetooth: hci2: command tx timeout [ 305.960116] Bluetooth: hci3: command tx timeout [ 306.024731] Bluetooth: hci4: command tx timeout [ 306.088441] Bluetooth: hci6: command tx timeout [ 306.151445] Bluetooth: hci5: command tx timeout [ 306.216614] Bluetooth: hci7: command tx timeout [ 307.624392] Bluetooth: hci0: command tx timeout [ 307.753380] Bluetooth: hci1: command tx timeout [ 307.815753] Bluetooth: hci2: command tx timeout [ 308.007562] Bluetooth: hci3: command tx timeout [ 308.071405] Bluetooth: hci4: command tx timeout [ 308.135406] Bluetooth: hci6: command tx timeout [ 308.199655] Bluetooth: hci5: command tx timeout [ 308.263426] Bluetooth: hci7: command tx timeout [ 362.078583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.081872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.086016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.096281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.104709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.304952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.307740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.317701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.319703] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.330475] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.336845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.342284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.347843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.354065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.363831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.371665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.377137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.379616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.393609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.395675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.441230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.446967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.450834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.458656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.459542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.465883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.468640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.477671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.497200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.500901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.666076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.675181] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.677914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.706942] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.743403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.972290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.028966] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.041161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.068701] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.085806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.137466] Bluetooth: hci0: command tx timeout [ 364.391493] Bluetooth: hci2: command tx timeout [ 364.455460] Bluetooth: hci1: command tx timeout [ 364.522529] Bluetooth: hci4: command tx timeout [ 364.522606] Bluetooth: hci3: command tx timeout [ 364.523641] Bluetooth: hci5: command tx timeout [ 364.904460] Bluetooth: hci7: command tx timeout [ 365.225609] Bluetooth: hci6: command tx timeout [ 366.183475] Bluetooth: hci0: command tx timeout [ 366.440800] Bluetooth: hci2: command tx timeout [ 366.504369] Bluetooth: hci1: command tx timeout [ 366.567467] Bluetooth: hci5: command tx timeout [ 366.570439] Bluetooth: hci3: command tx timeout [ 366.570520] Bluetooth: hci4: command tx timeout [ 366.952410] Bluetooth: hci7: command tx timeout [ 367.273520] Bluetooth: hci6: command tx timeout [ 368.232001] Bluetooth: hci0: command tx timeout [ 368.487448] Bluetooth: hci2: command tx timeout [ 368.552778] Bluetooth: hci1: command tx timeout [ 368.615438] Bluetooth: hci3: command tx timeout [ 368.615484] Bluetooth: hci5: command tx timeout [ 368.617013] Bluetooth: hci4: command tx timeout [ 369.000677] Bluetooth: hci7: command tx timeout [ 369.320665] Bluetooth: hci6: command tx timeout [ 370.280431] Bluetooth: hci0: command tx timeout [ 370.538647] Bluetooth: hci2: command tx timeout [ 370.600687] Bluetooth: hci1: command tx timeout [ 370.663610] Bluetooth: hci4: command tx timeout [ 370.664454] Bluetooth: hci5: command tx timeout [ 370.664914] Bluetooth: hci3: command tx timeout [ 371.047699] Bluetooth: hci7: command tx timeout [ 371.367666] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 18:28:33 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802a9bf7f0 RCX=ffff88802a9bf6f4 RDX=0000000000000001 RSI=ffffffff85c1bac0 RDI=ffff88800a635dc0 RBP=ffff88802a9b8000 RSP=ffff88802a9bf708 R8 =0000000000000001 R9 =ffff88802a9bf830 R10=000000000003b0c2 R11=0000000000006b5c R12=ffff88802a9bf801 R13=ffff88802a9bf838 R14=ffff88802a9bf7c0 R15=ffff88802a9bf7f0 RIP=ffffffff815b6ceb RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f87822f26f4 CR3=0000000028b44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f878230147000007f8782300f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=4409c44304902018 RBX=00007fd5f8d4f510 RCX=000000000000015d RDX=0000000000001003 RSI=0000000701061802 RDI=00000000ba30576e RBP=0000000000000002 RSP=00007ffeb8693c70 R8 =00007ffeb8693db0 R9 =00007fd5f8d89440 R10=00007fd5f8af3400 R11=0000000000000007 R12=0000000000000007 R13=00007fd5f8d50a90 R14=0000000000000001 R15=0000000000000000 RIP=00007fd5f8d670b8 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd5f8845540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd5f8d1c000 CR3=000000002c318000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=000000000000000042494c4700352e32 XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000