Warning: Permanently added '[localhost]:50849' (ECDSA) to the list of known hosts. 2025/05/24 01:54:15 fuzzer started 2025/05/24 01:54:15 dialing manager at localhost:46087 syzkaller login: [ 94.714089] cgroup: Unknown subsys name 'net' [ 94.858993] cgroup: Unknown subsys name 'cpuset' [ 94.917543] cgroup: Unknown subsys name 'rlimit' 2025/05/24 01:54:32 syscalls: 202 2025/05/24 01:54:32 code coverage: enabled 2025/05/24 01:54:32 comparison tracing: enabled 2025/05/24 01:54:32 extra coverage: enabled 2025/05/24 01:54:32 setuid sandbox: enabled 2025/05/24 01:54:32 namespace sandbox: enabled 2025/05/24 01:54:32 Android sandbox: enabled 2025/05/24 01:54:32 fault injection: enabled 2025/05/24 01:54:32 leak checking: enabled 2025/05/24 01:54:32 net packet injection: enabled 2025/05/24 01:54:32 net device setup: enabled 2025/05/24 01:54:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 01:54:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 01:54:32 USB emulation: enabled 2025/05/24 01:54:32 hci packet injection: enabled 2025/05/24 01:54:32 wifi device emulation: enabled 2025/05/24 01:54:32 802.15.4 emulation: enabled 2025/05/24 01:54:32 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 01:54:34 starting 8 fuzzer processes 01:54:34 executing program 0: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000022}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6876}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37dc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044800}, 0xc800) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbb69}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x63}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4dd9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xac}}, 0x2000c000) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80001440}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_IE={0xc5, 0x2a, [@rann={0x7e, 0x15, {{}, 0x1, 0x40, @device_a, 0x7, 0x439, 0xa9}}, @perr={0x84, 0x89, {0x75, 0x9, [@not_ext={{}, @device_b, 0x4, "", 0x34}, @ext={{}, @broadcast, 0xb605, @device_a, 0x3c}, @ext={{}, @device_b, 0x1, @broadcast, 0x3e}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x4}, @not_ext={{}, @device_b, 0x0, "", 0x34}, @ext={{}, @device_b, 0x2, @broadcast, 0x33}, @not_ext={{}, @broadcast, 0x5, "", 0x17}, @not_ext={{}, @broadcast, 0x80000001, "", 0x2a}, @not_ext={{}, @device_a, 0x0, "", 0x9}]}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x10, 0x3, @device_a, 0x4, 0x401, 0x558}}, @peer_mgmt={0x75, 0x6, {0x1, 0x800, @val=0x9, @void, @void}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000894}, 0x4000) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xcc728e1545be397}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0xa04, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x68}]}, 0x1c}}, 0x48000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xdbb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48100) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xa0030602}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x11) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x74}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc854) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff5c4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44095}, 0x4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa8, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xca7, 0x6c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "258e71a7ba"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x6, 0x4, "90be"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]]}, 0xa8}}, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r4, 0x40a, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, r5, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x2800) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0x100, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7a}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7a5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff81}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x40000) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000011c0)={0x14, 0x49, 0x2, {0x10, 0x2}}, 0x14) 01:54:34 executing program 1: getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) setreuid(r0, 0xffffffffffffffff) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x1008, {0x1, 0x0, 0x3}, 0x40, r1, 0x0, 0x2, 0x400, 0x5, 0x7f, 0x100000001, 0x7, 0x100000001, 0x7, 0x400, 0x8001, 0x7, 0x7fffffff, 0xfff, 0x4}}, 0xa0) ioprio_get$uid(0x3, r2) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x10, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@mmap}, {@aname={'aname', 0x3d, '%-'}}, {@uname={'uname', 0x3d, '\xc2:'}}, {@access_user}], [{@obj_role={'obj_role', 0x3d, '!]'}}]}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x20}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d1) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0) setuid(r4) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x90, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0xc}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1c}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x111a590b}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x200}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xfffc}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1d80}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x101}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4242}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xfff9}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x24004050) getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) setreuid(r2, r7) setuid(r6) setresuid(r7, r1, r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x400, 0x3ff, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) getresuid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) getresuid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) setresuid(r9, r5, r10) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x100400, &(0x7f0000000e80)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r0}}, {@cache_fscache}, {@version_9p2000}, {@uname={'uname', 0x3d, '\xc2:'}}], [{@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) 01:54:34 executing program 2: io_uring_setup(0x44ca, &(0x7f0000000000)={0x0, 0x304, 0x4, 0x1, 0x141}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xda}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc86d, 0x7}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x20}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x8d}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x45}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9f}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xad105c10}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_io_uring_setup(0x4c3c, &(0x7f0000000280)={0x0, 0xe267, 0x10, 0x1, 0x19}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x8, 0x8, 0x0, 0xe40c, 0x2}, 0x8001) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000003c0)={0x386, "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"}) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000780)) r4 = socket(0x15, 0x2, 0xffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000009c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x16c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) write$P9_RSTATFS(r1, &(0x7f0000000a00)={0x43, 0x9, 0x2, {0x4, 0x19, 0x0, 0xfdc, 0x1, 0x800, 0x81, 0x4, 0x5380}}, 0x43) r5 = syz_open_dev$hidraw(&(0x7f0000000a80), 0x4, 0x0) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000ac0)) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'veth0_virt_wifi\x00', @ifru_addrs=@nfc}}) write$P9_RVERSION(r0, &(0x7f0000000b80)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000bc0)) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xfffffff7}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x2000c000) pipe2$9p(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLERRORu(r6, &(0x7f0000000d40)={0x15, 0x7, 0x2, {{0x8, '9P2000.u'}, 0x56bd}}, 0x15) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7f}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x40}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1510}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) 01:54:34 executing program 3: r0 = socket(0x0, 0x80000, 0x401) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x38}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7ff}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4000000}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x20000000) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'batadv0\x00'}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x64}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x200}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xb2d5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r2 = socket(0x1, 0x5, 0xfffffffe) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10080}, 0x44000) r3 = socket(0x8, 0x2, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40850) socketpair(0x26, 0x5, 0x1, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048800}, 0x8044) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x61a}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x47, 0x31}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x800) pipe2$9p(&(0x7f0000000a80), 0x81000) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x78, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1476}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd02c}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r4) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4021420}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x108, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe2c0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6f6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) [ 112.972183] audit: type=1400 audit(1748051674.196:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:54:34 executing program 4: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/92) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x404c810) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1d}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x24}}, 0x805) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2f}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8800) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x8000880) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb4, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xaf}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40080d5}, 0x10008104) socketpair(0x1f, 0x3, 0x7, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000000, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0xc0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) 01:54:34 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x40, 0x2, 0x3}, 0x1}}, 0x18) r2 = getpgid(0xffffffffffffffff) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x1080, {0x4, 0x3, 0x5}, 0x3, 0xee00, 0xee00, 0x1, 0x9bb, 0x2, 0x6, 0x3ff, 0xfff, 0x3, 0x3, 0x10001, 0x7ff, 0x5, 0x1000, 0x1000, 0x1, 0x8ca8}}, 0xa0) get_robust_list(r2, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) timer_create(0x7, &(0x7f0000000300)={0x0, 0x1d, 0x2, @tid=r2}, &(0x7f0000000340)) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000380)={0x62b, "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"}) getresuid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)=0x0) setreuid(0xffffffffffffffff, r4) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000b00)={0x7, 0x47, 0x1}, 0x7) r5 = socket(0x27, 0x3, 0x9) mount$9p_fd(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x1148800, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_none}], [{@obj_type={'obj_type', 0x3d, '\\('}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x45000) write$P9_RSETATTR(r6, &(0x7f0000000cc0)={0x7, 0x1b, 0x1}, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000d00)) write$P9_RMKDIR(r1, &(0x7f0000000d40)={0x14, 0x49, 0x1, {0x80, 0x1, 0x2}}, 0x14) sched_getaffinity(r2, 0x8, &(0x7f0000000d80)) write$P9_RSETATTR(r6, &(0x7f0000000dc0)={0x7, 0x1b, 0x2}, 0x7) restart_syscall() ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000e80)) 01:54:34 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1ff, 0x2, 0xd1, 0x1}, {0x99, 0x9, 0x9, 0x3ff}, {0x4a5e, 0x2, 0x3f, 0xe0000000}, {0x1, 0x6, 0x7, 0x4}, {0xeee, 0x3f, 0x3f, 0x800}, {0x0, 0x47, 0x6, 0x7}, {0xffc0, 0x2, 0x2, 0x7}, {0x2, 0x3, 0xff, 0x164d}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0xf2a7, 0xfd, 0x8, 0xb641}, {0x6f, 0x3, 0x9, 0x3}, {0x14b, 0x7, 0xff, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r1, 0x2, r3, 0x7ff}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x3, 0x0, 0x4, 0x5}, {0x0, 0x2, 0x9, 0x1}, {0x5, 0x8, 0x5, 0x9}, {0x8, 0x3, 0x8, 0xbf}, {0x3f, 0xfc, 0x9, 0xb29}, {0x20, 0x7, 0x2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0x6, 0x2}]}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RSTAT(r5, &(0x7f00000003c0)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x7f70, 0xfffffffc, {0x40, 0x3, 0x5}, 0x40000, 0x20, 0xfffffff7, 0x7, 0x2, '}\'', 0x5, '\\@}\\(', 0x4, '\x9d-)#', 0x2, '(}'}}, 0x47) syz_io_uring_setup(0x37d, &(0x7f0000000440)={0x0, 0xc6e7, 0x2, 0x3, 0x2f0, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) syz_io_uring_setup(0x77a7, &(0x7f0000000540)={0x0, 0xe830, 0x4, 0x3, 0x28f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000006c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r2, 0x80, &(0x7f0000000640)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'veth0_to_batadv\x00'}}}, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x401, 0x5, 0x1f, 0x21}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x1ff) syz_io_uring_setup(0x7612, &(0x7f00000007c0)={0x0, 0xc3de, 0x0, 0x0, 0x1eb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000840)=0x0, &(0x7f0000000880)) syz_io_uring_submit(r8, 0x0, &(0x7f00000009c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x3, 0x3, &(0x7f00000008c0)="053492a3842d42ea11b5df9583fef01908ca6cdc65e48bc4efb755e166790940fcc5b64748604260dbcb85241d88171cbb7200e777e4cfae92ce68eefacf834a66fb8a1354b9c8ec483e2e433c4e1a201916a5d7fb273480da091ce48b25ccac928f7fbe52146125810a33d595d649d30337ef882eb2300e93b5b5229f6e3f078e0061d567ea483fd3c624474b256846056ae4480d91c3c8d22a778d67daca2936ebe9549f3c607ec2ba185e02837157a0e8bb4c75ed8e62517cce97bbe4e6e9ed78dec5f38b643fbe9cd1b0f4bac44a2d93cfa17a8772402be7881130c22110b5d692dc15ce47bf04591e3c9ce21dcfbf083d0a5ef070", 0x2}, 0xfff) write$hidraw(r2, &(0x7f0000000a00)="ad72d547bb96e2dc168516680be11b852de2f8cff03cb5ff8cd30d6eeccd8a5668c68cba3b0f6c6d8ee9cd1251ef7215dd64ae27982f69a1097c0f4a96f6df203fa40e5fc05825f04f202c6bc7025b8eed52a1fda29ae4b69e563142576f2a157f175b71a510a31be0801a971a265dc40c5c51d749cb9cb33db8ed0a1e335f67629d77fa19c571a3e2953125503188065b0f72820d13228808cf48cffb3ce06d24ee7deab134cf889c4f7b06cc5754b3ee2cd42ea698cccf7e7bcd212c0fd5f3303439f8ae02f4a891f50ec498154a8b1bb93727bb64c8cae25a39", 0xdb) write$P9_RCLUNK(r2, &(0x7f0000000b00)={0x7, 0x79, 0x1}, 0x7) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000b40)) 01:54:34 executing program 7: r0 = getpid() r1 = getpgid(r0) sched_getparam(r1, &(0x7f0000000000)) sched_getparam(r0, &(0x7f0000000040)) ptrace$getregset(0x4204, r1, 0x3, &(0x7f00000000c0)={&(0x7f0000000080)=""/25, 0x19}) capset(&(0x7f0000000100)={0x39900612, r1}, &(0x7f0000000140)={0x101, 0x7, 0x2, 0x40, 0x0, 0x106}) r2 = fork() tgkill(r2, r0, 0x1c) prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) wait4(r3, &(0x7f0000000200), 0x2, &(0x7f0000000240)) ptrace$setregset(0x4205, r2, 0x206, &(0x7f0000000380)={&(0x7f0000000300)="29f6c0977ee51e7231039affe5b349f8de8065fa58f5496bbf7e9ffa32e94e0216c85b8b7d360e5710a6b71d5ca0f566d22fe1b286e0f9a07ffc7ca5dc464624ad", 0x41}) r4 = getpgrp(r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000003c0)={0x9}) keyctl$set_reqkey_keyring(0xe, 0x7) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000400)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000500)={0x6449}) [ 114.483884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.487871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.492311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.500145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.510373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.556275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.561218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.568543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.571217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.581395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.589042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.599664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.603075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.603947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.627532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.629412] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.629662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.648677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.655240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.659288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.662348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.664417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.673044] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.674937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.679400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.687115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.698158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.707519] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.709925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.712776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.719736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.721101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.723216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.735186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.763403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.777892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.780855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.786856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.794587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.796954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.563031] Bluetooth: hci0: command tx timeout [ 116.691860] Bluetooth: hci1: command tx timeout [ 116.754528] Bluetooth: hci2: command tx timeout [ 116.754605] Bluetooth: hci3: command tx timeout [ 116.818756] Bluetooth: hci4: command tx timeout [ 116.882572] Bluetooth: hci6: command tx timeout [ 116.882778] Bluetooth: hci7: command tx timeout [ 116.948481] Bluetooth: hci5: command tx timeout [ 118.610686] Bluetooth: hci0: command tx timeout [ 118.739571] Bluetooth: hci1: command tx timeout [ 118.802833] Bluetooth: hci3: command tx timeout [ 118.803517] Bluetooth: hci2: command tx timeout [ 118.866759] Bluetooth: hci4: command tx timeout [ 118.930517] Bluetooth: hci7: command tx timeout [ 118.930596] Bluetooth: hci6: command tx timeout [ 118.994667] Bluetooth: hci5: command tx timeout [ 120.658534] Bluetooth: hci0: command tx timeout [ 120.787534] Bluetooth: hci1: command tx timeout [ 120.850926] Bluetooth: hci3: command tx timeout [ 120.851642] Bluetooth: hci2: command tx timeout [ 120.916471] Bluetooth: hci4: command tx timeout [ 120.978753] Bluetooth: hci6: command tx timeout [ 120.981483] Bluetooth: hci7: command tx timeout [ 121.042678] Bluetooth: hci5: command tx timeout [ 122.706508] Bluetooth: hci0: command tx timeout [ 122.834735] Bluetooth: hci1: command tx timeout [ 122.898518] Bluetooth: hci3: command tx timeout [ 122.899540] Bluetooth: hci2: command tx timeout [ 122.963911] Bluetooth: hci4: command tx timeout [ 123.026575] Bluetooth: hci7: command tx timeout [ 123.026605] Bluetooth: hci6: command tx timeout [ 123.090696] Bluetooth: hci5: command tx timeout [ 176.875249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.880611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.883103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.890861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.899186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.955076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.961824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.965219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.981961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.987968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.070330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.074044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.077154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.082888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.090357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.091366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.095796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.098957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.102598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.107942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.129177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.131643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.141249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.146009] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.151211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.153740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.157157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.164975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.168512] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.179665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.181309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.183288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.189879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.202650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.218613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.301483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.311748] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.339718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.370698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.387531] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.963689] Bluetooth: hci0: command tx timeout [ 179.026763] Bluetooth: hci1: command tx timeout [ 179.282611] Bluetooth: hci6: command tx timeout [ 179.283771] Bluetooth: hci4: command tx timeout [ 179.412518] Bluetooth: hci2: command tx timeout [ 179.412624] Bluetooth: hci3: command tx timeout [ 179.605118] Bluetooth: hci7: command tx timeout [ 179.667048] Bluetooth: hci5: command tx timeout [ 181.011370] Bluetooth: hci0: command tx timeout [ 181.074666] Bluetooth: hci1: command tx timeout [ 181.330534] Bluetooth: hci4: command tx timeout [ 181.333470] Bluetooth: hci6: command tx timeout [ 181.458527] Bluetooth: hci3: command tx timeout [ 181.458551] Bluetooth: hci2: command tx timeout [ 181.651597] Bluetooth: hci7: command tx timeout [ 181.715551] Bluetooth: hci5: command tx timeout [ 183.058714] Bluetooth: hci0: command tx timeout [ 183.123577] Bluetooth: hci1: command tx timeout [ 183.378521] Bluetooth: hci6: command tx timeout [ 183.378545] Bluetooth: hci4: command tx timeout [ 183.506776] Bluetooth: hci3: command tx timeout [ 183.506824] Bluetooth: hci2: command tx timeout [ 183.699462] Bluetooth: hci7: command tx timeout [ 183.763497] Bluetooth: hci5: command tx timeout [ 185.106503] Bluetooth: hci0: command tx timeout [ 185.170934] Bluetooth: hci1: command tx timeout [ 185.426536] Bluetooth: hci6: command tx timeout [ 185.426893] Bluetooth: hci4: command tx timeout [ 185.554528] Bluetooth: hci2: command tx timeout [ 185.554544] Bluetooth: hci3: command tx timeout [ 185.746635] Bluetooth: hci7: command tx timeout [ 185.810493] Bluetooth: hci5: command tx timeout [ 239.412973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.421394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.427222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.441155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.451566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.458898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.467520] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.471035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.477513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.481877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.498808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.513179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.515861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.516715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.518691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.520018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.526366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.532854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.545606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.550293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.657303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.662938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.668681] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.671251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.673817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.676117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.683148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.687037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.687912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.691257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.721329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.728353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.730757] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.736139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.754715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.827115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.836988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.843088] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.893781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.905590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.554528] Bluetooth: hci1: command tx timeout [ 241.556071] Bluetooth: hci0: command tx timeout [ 241.618709] Bluetooth: hci2: command tx timeout [ 241.618855] Bluetooth: hci3: command tx timeout [ 241.812012] Bluetooth: hci5: command tx timeout [ 241.812065] Bluetooth: hci6: command tx timeout [ 241.812972] Bluetooth: hci4: command tx timeout [ 242.003541] Bluetooth: hci7: command tx timeout [ 243.603489] Bluetooth: hci0: command tx timeout [ 243.603563] Bluetooth: hci1: command tx timeout [ 243.666564] Bluetooth: hci3: command tx timeout [ 243.666588] Bluetooth: hci2: command tx timeout [ 243.858613] Bluetooth: hci6: command tx timeout [ 243.859143] Bluetooth: hci4: command tx timeout [ 243.859500] Bluetooth: hci5: command tx timeout [ 244.050740] Bluetooth: hci7: command tx timeout [ 245.652509] Bluetooth: hci0: command tx timeout [ 245.653020] Bluetooth: hci1: command tx timeout [ 245.714528] Bluetooth: hci3: command tx timeout [ 245.714552] Bluetooth: hci2: command tx timeout [ 245.909003] Bluetooth: hci5: command tx timeout [ 245.909542] Bluetooth: hci4: command tx timeout [ 245.909965] Bluetooth: hci6: command tx timeout [ 246.100723] Bluetooth: hci7: command tx timeout [ 247.698646] Bluetooth: hci1: command tx timeout [ 247.699921] Bluetooth: hci0: command tx timeout [ 247.762774] Bluetooth: hci3: command tx timeout [ 247.763061] Bluetooth: hci2: command tx timeout [ 247.954532] Bluetooth: hci6: command tx timeout [ 247.955937] Bluetooth: hci4: command tx timeout [ 247.956971] Bluetooth: hci5: command tx timeout [ 248.148464] Bluetooth: hci7: command tx timeout [ 301.675662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.679755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.685380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.695328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.701948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.750895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.756779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.759723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.766685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.770220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.823676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.829210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.835936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.849935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.855866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.937933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.941975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.962989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.006738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.008301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.025013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.059964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.068803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.083681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.091191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.098658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.104047] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.113605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.175540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.195140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.202036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.203269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.209803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.214377] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.221584] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.225581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.239348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.269033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.331736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.335944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.763731] Bluetooth: hci0: command tx timeout [ 303.826857] Bluetooth: hci1: command tx timeout [ 303.891520] Bluetooth: hci2: command tx timeout [ 304.210616] Bluetooth: hci4: command tx timeout [ 304.211390] Bluetooth: hci3: command tx timeout [ 304.338738] Bluetooth: hci5: command tx timeout [ 304.339551] Bluetooth: hci7: command tx timeout [ 304.532052] Bluetooth: hci6: command tx timeout [ 305.810517] Bluetooth: hci0: command tx timeout [ 305.876472] Bluetooth: hci1: command tx timeout [ 305.938541] Bluetooth: hci2: command tx timeout [ 306.258572] Bluetooth: hci4: command tx timeout [ 306.259063] Bluetooth: hci3: command tx timeout [ 306.386762] Bluetooth: hci7: command tx timeout [ 306.387257] Bluetooth: hci5: command tx timeout [ 306.580492] Bluetooth: hci6: command tx timeout [ 307.859654] Bluetooth: hci0: command tx timeout [ 307.922507] Bluetooth: hci1: command tx timeout [ 307.986515] Bluetooth: hci2: command tx timeout [ 308.308478] Bluetooth: hci3: command tx timeout [ 308.308992] Bluetooth: hci4: command tx timeout [ 308.436498] Bluetooth: hci5: command tx timeout [ 308.437009] Bluetooth: hci7: command tx timeout [ 308.626518] Bluetooth: hci6: command tx timeout [ 309.907873] Bluetooth: hci0: command tx timeout [ 309.971682] Bluetooth: hci1: command tx timeout [ 310.035537] Bluetooth: hci2: command tx timeout [ 310.355698] Bluetooth: hci3: command tx timeout [ 310.356202] Bluetooth: hci4: command tx timeout [ 310.483515] Bluetooth: hci5: command tx timeout [ 310.484015] Bluetooth: hci7: command tx timeout [ 310.675563] Bluetooth: hci6: command tx timeout [ 364.208027] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.211926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.217892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.236670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.242989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.244277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.249825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.252192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.258370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.265204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.546046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.552413] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.554963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.561651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.565954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.569864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.604936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.614010] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.629114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.650700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.721028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.734329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.744144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.794157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.842987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.028858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.050030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.066975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.115558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.117989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.127178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.128835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.132388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.142002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.147938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.149991] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.157077] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.159370] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.166189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.171204] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.290517] Bluetooth: hci0: command tx timeout [ 366.354596] Bluetooth: hci1: command tx timeout [ 366.610825] Bluetooth: hci2: command tx timeout [ 366.868763] Bluetooth: hci3: command tx timeout [ 367.123866] Bluetooth: hci4: command tx timeout [ 367.443203] Bluetooth: hci6: command tx timeout [ 367.443233] Bluetooth: hci5: command tx timeout [ 367.443997] Bluetooth: hci7: command tx timeout [ 368.338689] Bluetooth: hci0: command tx timeout [ 368.402615] Bluetooth: hci1: command tx timeout [ 368.658754] Bluetooth: hci2: command tx timeout [ 368.914763] Bluetooth: hci3: command tx timeout [ 369.171580] Bluetooth: hci4: command tx timeout [ 369.490676] Bluetooth: hci7: command tx timeout [ 369.490785] Bluetooth: hci6: command tx timeout [ 369.491139] Bluetooth: hci5: command tx timeout [ 370.387485] Bluetooth: hci0: command tx timeout [ 370.450698] Bluetooth: hci1: command tx timeout [ 370.706507] Bluetooth: hci2: command tx timeout [ 370.963611] Bluetooth: hci3: command tx timeout [ 371.219622] Bluetooth: hci4: command tx timeout [ 371.538646] Bluetooth: hci5: command tx timeout [ 371.539125] Bluetooth: hci6: command tx timeout [ 371.540576] Bluetooth: hci7: command tx timeout [ 372.435585] Bluetooth: hci0: command tx timeout [ 372.498702] Bluetooth: hci1: command tx timeout [ 372.754627] Bluetooth: hci2: command tx timeout [ 373.010514] Bluetooth: hci3: command tx timeout [ 373.267451] Bluetooth: hci4: command tx timeout [ 373.586820] Bluetooth: hci6: command tx timeout [ 373.587319] Bluetooth: hci7: command tx timeout [ 373.588522] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 01:59:43 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=000000000008d310 RCX=1ffff110069466eb RDX=ffff88801bf13048 RSI=0000000000000246 RDI=ffffffff85d0ee80 RBP=ffff88800d3364a0 RSP=ffff88802c91f740 R8 =0000000000000001 R9 =ffffed1005923ed8 R10=0000000000000003 R11=0000000000000001 R12=0000000000000000 R13=0000000000000246 R14=0000000000000000 R15=ffff88800ca1fb40 RIP=ffffffff84b60d95 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb5816584a1 CR3=000000003007f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88802e507728 RCX=0000000000000006 RDX=1ffff11005ca0ee9 RSI=ffffffff81a430dd RDI=ffff88802e507748 RBP=ffff88802e5078d0 RSP=ffff88802e507668 R8 =0000000000000000 R9 =fffffbfff0c83eca R10=0000000000000000 R11=0000000000000000 R12=ffff88802f8d7dc0 R13=ffff888029fbc7c0 R14=00007fc91a40f000 R15=0000000000000000 RIP=ffffffff81a43101 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc91a8fc1f0 CR3=000000002f9fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000