Warning: Permanently added '[localhost]:6594' (ECDSA) to the list of known hosts. 2025/05/24 13:04:18 fuzzer started 2025/05/24 13:04:18 dialing manager at localhost:46087 syzkaller login: [ 90.532622] cgroup: Unknown subsys name 'net' [ 90.700695] cgroup: Unknown subsys name 'cpuset' [ 90.767425] cgroup: Unknown subsys name 'rlimit' 2025/05/24 13:04:35 syscalls: 202 2025/05/24 13:04:35 code coverage: enabled 2025/05/24 13:04:35 comparison tracing: enabled 2025/05/24 13:04:35 extra coverage: enabled 2025/05/24 13:04:35 setuid sandbox: enabled 2025/05/24 13:04:35 namespace sandbox: enabled 2025/05/24 13:04:35 Android sandbox: enabled 2025/05/24 13:04:35 fault injection: enabled 2025/05/24 13:04:35 leak checking: enabled 2025/05/24 13:04:35 net packet injection: enabled 2025/05/24 13:04:35 net device setup: enabled 2025/05/24 13:04:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 13:04:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 13:04:35 USB emulation: enabled 2025/05/24 13:04:35 hci packet injection: enabled 2025/05/24 13:04:35 wifi device emulation: enabled 2025/05/24 13:04:35 802.15.4 emulation: enabled 2025/05/24 13:04:35 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 13:04:37 starting 8 fuzzer processes 13:04:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000001}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x12aca000) r2 = epoll_create1(0x80000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x8}) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x800) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x70000000}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "307968e342bf5f22", "5c5e19f6be8a8b4f203faa39590ff9e3", "17ecac4f", "340b17d1cfe5455d"}, 0x28) r6 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r1, &(0x7f00000001c0)={0x90000014}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x436000, 0x0) epoll_pwait2(r8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000440)={[0xca]}, 0x8) 13:04:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x20, 0x22, 0x10000000, {{0x32, 0x4, 0x3, 0x11, 0xc8, 0x65, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3d, 0x3, [{0x7, 0x9, "8089e302cd3b3d"}, {0x6, 0x11, "5f984b393c39c33e74ae960bfdc9ec"}, {0x7, 0x3, 'N'}, {0x0, 0x4, "a86c"}, {0x0, 0x2}, {0x0, 0x4, "0441"}, {0x1, 0xe, "b0c52a0d40ed2380003e6af4"}, {0x0, 0x2}]}, @generic={0x83, 0x12, "f43c860663dbf7fe20671bea8f7addee"}, @rr={0x7, 0x7, 0xfe, [@remote]}, @timestamp_prespec={0x44, 0x3c, 0x4f, 0x3, 0x8, [{@remote, 0x1f}, {@private=0xa010102, 0x8}, {@multicast2, 0x8}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xffff}]}, @lsrr={0x83, 0x17, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x454b02, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x5, 0x2, 0x1, {0x0, 0x0, r1}}, 0x6) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x82, 0x0) r3 = getuid() mount$cgroup2(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x800000, &(0x7f0000000740)={[{}, {}, {@memory_recursiveprot}, {}, {@subsystem='freezer'}, {@memory_recursiveprot}, {@memory_localevents}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/net/tun\x00'}}, {@uid_gt={'uid>', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@hash}]}) r4 = socket(0x0, 0x80000, 0x3) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0x4, 0x5, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x4020) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000940)={'wg0\x00'}) write$P9_RXATTRCREATE(r0, &(0x7f0000000980)={0x7, 0x21, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000040) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000c40)="9dfe7d871b8d222f61b10ac1") syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x8, 0x100000000, 0x0, 0x28}, 0xefbb) 13:04:37 executing program 1: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x14f6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\']-&[\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004810}, 0x20040004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '.^]\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x2c}}, 0x4000000) keyctl$unlink(0x9, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r1) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c085}, 0x8040010) keyctl$reject(0x13, 0x0, 0xd, 0x7fff, 0xfffffffffffffffa) syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r3) keyctl$search(0xa, 0x0, &(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x0}, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r5, 0xfffffffffffffff8) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048004}, 0x4008094) 13:04:37 executing program 2: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20084000}, 0x4000) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '-([\'@{:\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xd4}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x5e737e52610713f0, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7c}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r3, 0x202, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x8000) prctl$PR_SET_FPEXC(0xc, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x40}}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 13:04:37 executing program 3: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0xfffffffffffffff9}, 0xf) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x805) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1}, 0xe) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$P9_RATTACH(r2, &(0x7f0000000380)={0x14, 0x69, 0x2, {0x88, 0x2, 0x3}}, 0x14) write$P9_RCLUNK(r1, &(0x7f00000003c0)={0x7, 0x79, 0x2}, 0x7) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000400)=0x45, 0x4) r3 = getuid() write$P9_RSTATu(r0, &(0x7f0000000440)={0x5e, 0x7d, 0x1, {{0x0, 0x3c, 0x1000, 0x400, {0x80, 0x2, 0x7}, 0xcfe09c63881fcdd1, 0x55, 0x9, 0x8, 0x1, ')', 0x1, '*', 0x4, '\\\'\xc8!', 0x3, '*-,'}, 0xd, '-.}$*[){^.\\((', r3, 0xee01}}, 0x5e) r4 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x7fff, &(0x7f00000004c0)=""/68) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$P9_RSTATFS(r5, &(0x7f0000000580)={0x43, 0x9, 0x1, {0xffffb886, 0x3, 0xffff, 0x96, 0x10001, 0x7f, 0x8000, 0x6, 0x800}}, 0x43) socketpair(0x2b, 0x2, 0x3, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000640)={0x50, 0x2, 0x8, 0x7, 0x2, 0x9, 0xfff}, 0xc) [ 108.740877] audit: type=1400 audit(1748091877.419:7): avc: denied { execmem } for pid=275 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:04:37 executing program 5: prctl$PR_MCE_KILL_GET(0x22) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvtap0\x00', @dev}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x2}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x200) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x0, 0x10001, {{0x15, 0x4, 0x2, 0x20, 0x54, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@ssrr={0x89, 0x1b, 0x90, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @rand_addr=0x64010101, @loopback]}, @lsrr={0x83, 0x17, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2, @multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0xde, [@multicast2, @loopback]}]}}}}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0xca280, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x7, 0x24181) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', r2, 0x1, 0x20, 0x9, 0x101, {{0x13, 0x4, 0x3, 0x21, 0x4c, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x10, 0x0, [{0x0, 0x5, 'Srk'}, {0x2, 0x5, "c660b4"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x8c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x2}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1ff}]}]}}}}}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)={0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0xc20e7000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000013c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00000003c0)="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", 0x1000, r4}, 0x68) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r1, &(0x7f0000001440), 0x0, 0x0, 0x80800, 0x0, {0x0, r5}}, 0x6) prctl$PR_MCE_KILL_GET(0x22) mount$9p_unix(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x44, &(0x7f0000001580)={'trans=unix,', {[{@loose}], [{@smackfsdef={'smackfsdef', 0x3d, 'gre0\x00'}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x64, 0x7, 0x64, 0x30, 0x36, 0x38, 0x33], 0x2d, [0x65, 0x36, 0x30, 0x65], 0x2d, [0x66, 0x63, 0x61, 0x63], 0x2d, [0x32, 0x34, 0x33, 0x39], 0x2d, [0x32, 0x33, 0x369384e317246e97, 0x37, 0x63, 0x66, 0x32, 0x34]}}}, {@appraise_type}]}}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:04:37 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x100) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040)) epoll_wait(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x92) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x90, 0x0, 0x12345}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)="1722f8cdf6f5082d355904061ebd9915638bfa110238778eb5da1c801f8050c052e112e1982dbe58166490291e4465511f7bd2d86cc7a14eadf907315a92d738c06ac9cabf4ca8", 0x47, r0}, 0x68) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000240)=0x1f, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000280)="0d6265bf6ee24a756eeaa922e7e0a9defff1e14248fa8e3409994ac69127229dc6b604f7588674936b2854ae6b11e0b8a88406293ca530f13d07b0444b1a540c544484") r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="6a8ac1da557cc1a0014e6ac1a2fa8692", 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/2, 0x2, 0x0, &(0x7f00000003c0)=""/225, 0xe1}, &(0x7f0000000500)=0x40) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x7, 0x2440) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000600)=@ccm_128={{}, "16eb0d361393b08f", "d7e3c924ff2538ab0c8fe638f081fa5c", "7541bb2c", "a9daa75bfba1e89f"}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9d79}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000740)=[@window={0x3, 0x1ff, 0x1}, @sack_perm, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x3ff, 0x4}, @timestamp, @timestamp, @mss={0x2, 0x81f}], 0x9) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) 13:04:37 executing program 6: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x228, &(0x7f0000000180)={[{0xe, 0x4e00, "4811b40612ee0fe2cd324389a7e9"}, {0xd, 0x4e00, "83e5a5c53a5cba6d22a5b0665a"}, {0xfd, 0x4e00, "9ea729e63802e2203b17b23efc684c9f49bf41cc436918a33a3e3afa83c2adcef7396468fb9c1ec83ace468b5e02dd7be890f90c0c9ac67a765468ccc0ee81f4883f4b7b9d7ff7be98d6cd8cc324dc6779e4c38a95046090338dcca5fb358392eca7d997cce44c245adf7eb6608dc7aa4c8db678bfc0d6c5d528e0f03ab6b1c86e7d9b761071e7952fa3e2f2f641f32753b5dee5372747030c9fc81be43ba7b3fdcf4968a28ef959dfacad33076fd4272cf95098390a81756d05c9391390983cc835a4e10aaa6cf7efd51528911394feb4c8cd08d04b1e58a3c88d721704e14ea7f14789f3acb4bf0f26cb90550431d7e335dd593b6645c82f964b5cbc"}, {0xf6, 0x4e00, "0de9dec6781b79440c3fb5e68882ffd85cc30ac281a526af5fc7bf8027a3921cef6baf2735840bf4d93959e2c57978bc48436ba98247be320bdeb46e4c89330d4965cc3ecfd299dcc05f78ccf5570f24732c1958635934a05420367267d67456318864b124a2a14e1f8bbecef0de063203c283975cd4e06c7ee6a9451c0f72d2fd52510b0cdb4565e8dbcf126ba1901e1b92e417f87c118d35d5610ed0430349eee7b9dd2f3fd1bd20b459e5d0a7dd2857e905c7e9331f4a058ccc359f9e35b94f4f9b21aa55c83c2f497d7bda9c095ded29775bd090aad33e388b2943e6acdd076468a2f5d0e41566e0a16d68d6f6e3c3fb7e8a073a"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x6) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200440, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000580)=0x20, 0x4) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0x3, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mount$9p_unix(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x220000, &(0x7f0000000780)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x3}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x6}}, {@cachetag={'cachetag', 0x3d, '{-*:,{:^\x13}[)/!/#@'}}, {@nodevmap}, {@msize={'msize', 0x3d, 0x3}}, {@posixacl}], [{@fowner_lt={'fowner<', 0xee01}}, {@fowner_lt={'fowner<', 0xee01}}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) keyctl$link(0x8, 0x0, 0xfffffffffffffffb) write$P9_RREAD(r4, &(0x7f00000008c0)={0x8e, 0x75, 0x2, {0x83, "2cabdadc73727e1db9ccd2ad0059ebac622fa5d671c8b7475e5d006eae5a16d9fdfdab256eb456e9804bf993c38d7e4e3b94ffc98dab322833d0ceddd7a5b6159b1c9cecf91801ec11804f17ffb50083947fe2418a32ca6fd41794e7a933522cff885bbb79bfd72c375387cd1a30b183611f540939f3e27f96b0c0b341bae818c8f05c"}}, 0x8e) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x58, &(0x7f0000000980)=@generic={0x5, 0x2, 0x50, "3298961f", "fd2a4e2a289208ff643256e712ef26d01569e16a951045b06963b082bd6a7dd0ad1564f0eac123cec8bbe99b728daada389d7ceb79642fccd592e65a2e194be039c344dd4b9b10e9da7c538dd34a2a13"}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000a00), 0x5, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xfc, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0xd8, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c323a46059ef8d2235e05cc44247d3c89caef43b106c143a7f63df534c2d1ed"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1b9c}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0ea62d0ccbe61f7bcd7f8f9fe1d45583eefc998f851ecfc6737801f0efb78267"}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x200448e4}, 0x44000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) [ 110.195542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.202117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.208604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.220811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.232489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.251111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.258622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.263153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.270972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.277900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.290806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.308367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.333918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.337491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.341804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.342951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.349812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.351496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.356997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.358307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.374196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.378661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.386373] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.386643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.403641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.406007] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.413439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.415528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.428070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.431465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.437838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.441092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.444631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.446871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.455312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.457558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.457653] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.474027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.493882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.509569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.279249] Bluetooth: hci0: command tx timeout [ 112.341848] Bluetooth: hci2: command tx timeout [ 112.407800] Bluetooth: hci1: command tx timeout [ 112.408448] Bluetooth: hci3: command tx timeout [ 112.535103] Bluetooth: hci5: command tx timeout [ 112.535852] Bluetooth: hci4: command tx timeout [ 112.536097] Bluetooth: hci6: command tx timeout [ 112.599214] Bluetooth: hci7: command tx timeout [ 114.326092] Bluetooth: hci0: command tx timeout [ 114.390813] Bluetooth: hci2: command tx timeout [ 114.454987] Bluetooth: hci3: command tx timeout [ 114.455475] Bluetooth: hci1: command tx timeout [ 114.582166] Bluetooth: hci6: command tx timeout [ 114.583927] Bluetooth: hci5: command tx timeout [ 114.584366] Bluetooth: hci4: command tx timeout [ 114.646120] Bluetooth: hci7: command tx timeout [ 116.373827] Bluetooth: hci0: command tx timeout [ 116.438056] Bluetooth: hci2: command tx timeout [ 116.502798] Bluetooth: hci3: command tx timeout [ 116.503269] Bluetooth: hci1: command tx timeout [ 116.630030] Bluetooth: hci4: command tx timeout [ 116.630546] Bluetooth: hci5: command tx timeout [ 116.631900] Bluetooth: hci6: command tx timeout [ 116.693862] Bluetooth: hci7: command tx timeout [ 118.422257] Bluetooth: hci0: command tx timeout [ 118.486805] Bluetooth: hci2: command tx timeout [ 118.549916] Bluetooth: hci1: command tx timeout [ 118.550655] Bluetooth: hci3: command tx timeout [ 118.680306] Bluetooth: hci5: command tx timeout [ 118.681117] Bluetooth: hci4: command tx timeout [ 118.681967] Bluetooth: hci6: command tx timeout [ 118.741869] Bluetooth: hci7: command tx timeout [ 172.514506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.517227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.520720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.527099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.530818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.585528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.590082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.596347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.610975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.624132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.687569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.694697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.703151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.712211] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.727392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.749307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.761997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.783979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.791205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.802254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.906076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.913585] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.916552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.924045] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.926683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.022609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.026582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.028969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.039423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.045037] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.069292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.073031] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.074269] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.081382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.083560] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.146094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.169149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.254977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.344149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.350653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.614036] Bluetooth: hci0: command tx timeout [ 174.677882] Bluetooth: hci1: command tx timeout [ 174.870828] Bluetooth: hci2: command tx timeout [ 174.997932] Bluetooth: hci5: command tx timeout [ 175.061883] Bluetooth: hci6: command tx timeout [ 175.062860] Bluetooth: hci3: command tx timeout [ 175.125919] Bluetooth: hci7: command tx timeout [ 175.445842] Bluetooth: hci4: command tx timeout [ 176.661983] Bluetooth: hci0: command tx timeout [ 176.725858] Bluetooth: hci1: command tx timeout [ 176.917966] Bluetooth: hci2: command tx timeout [ 177.045932] Bluetooth: hci5: command tx timeout [ 177.111795] Bluetooth: hci6: command tx timeout [ 177.111999] Bluetooth: hci3: command tx timeout [ 177.176811] Bluetooth: hci7: command tx timeout [ 177.494019] Bluetooth: hci4: command tx timeout [ 178.709888] Bluetooth: hci0: command tx timeout [ 178.773900] Bluetooth: hci1: command tx timeout [ 178.966005] Bluetooth: hci2: command tx timeout [ 179.093974] Bluetooth: hci5: command tx timeout [ 179.158152] Bluetooth: hci3: command tx timeout [ 179.160785] Bluetooth: hci6: command tx timeout [ 179.222341] Bluetooth: hci7: command tx timeout [ 179.542035] Bluetooth: hci4: command tx timeout [ 180.757871] Bluetooth: hci0: command tx timeout [ 180.823789] Bluetooth: hci1: command tx timeout [ 181.013847] Bluetooth: hci2: command tx timeout [ 181.141927] Bluetooth: hci5: command tx timeout [ 181.206072] Bluetooth: hci6: command tx timeout [ 181.206210] Bluetooth: hci3: command tx timeout [ 181.271787] Bluetooth: hci7: command tx timeout [ 181.590011] Bluetooth: hci4: command tx timeout [ 234.728453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.731627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.738280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.754319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.759301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.868478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.873443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.875579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.880463] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.885000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.933642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.947203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.962500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.972258] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.989133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.101696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.105384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.107131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.111609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.113409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.128169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.130292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.131705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.170054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.185867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.326448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.337324] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.341106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.352376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.353718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.363342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.396237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.398728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.399224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.400682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.403886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.404713] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.424324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.426383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.448851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.821814] Bluetooth: hci0: command tx timeout [ 236.951156] Bluetooth: hci1: command tx timeout [ 237.078813] Bluetooth: hci2: command tx timeout [ 237.270858] Bluetooth: hci4: command tx timeout [ 237.333829] Bluetooth: hci3: command tx timeout [ 237.463843] Bluetooth: hci6: command tx timeout [ 237.527817] Bluetooth: hci5: command tx timeout [ 237.527855] Bluetooth: hci7: command tx timeout [ 238.869935] Bluetooth: hci0: command tx timeout [ 238.998587] Bluetooth: hci1: command tx timeout [ 239.126200] Bluetooth: hci2: command tx timeout [ 239.319048] Bluetooth: hci4: command tx timeout [ 239.383079] Bluetooth: hci3: command tx timeout [ 239.509982] Bluetooth: hci6: command tx timeout [ 239.574819] Bluetooth: hci7: command tx timeout [ 239.575251] Bluetooth: hci5: command tx timeout [ 240.918267] Bluetooth: hci0: command tx timeout [ 241.046453] Bluetooth: hci1: command tx timeout [ 241.173966] Bluetooth: hci2: command tx timeout [ 241.367787] Bluetooth: hci4: command tx timeout [ 241.429866] Bluetooth: hci3: command tx timeout [ 241.557846] Bluetooth: hci6: command tx timeout [ 241.622104] Bluetooth: hci5: command tx timeout [ 241.622454] Bluetooth: hci7: command tx timeout [ 242.966073] Bluetooth: hci0: command tx timeout [ 243.093888] Bluetooth: hci1: command tx timeout [ 243.221860] Bluetooth: hci2: command tx timeout [ 243.414804] Bluetooth: hci4: command tx timeout [ 243.477803] Bluetooth: hci3: command tx timeout [ 243.605987] Bluetooth: hci6: command tx timeout [ 243.669956] Bluetooth: hci7: command tx timeout [ 243.670258] Bluetooth: hci5: command tx timeout [ 297.258851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.268287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.273441] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.285522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.291364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.399575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.402675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.405140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.410546] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.416879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.650963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.653737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.657656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.673323] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.679302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.712846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.719070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.724511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.731117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.737484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.772650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.791616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.817280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.839346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.844426] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.865038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.873624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.879210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.885680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.889260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.896430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.899701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.905522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.911338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.913681] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.935315] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.940469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.954100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.956308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.013704] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.349856] Bluetooth: hci0: command tx timeout [ 299.477852] Bluetooth: hci1: command tx timeout [ 299.797989] Bluetooth: hci2: command tx timeout [ 299.862694] Bluetooth: hci4: command tx timeout [ 299.991825] Bluetooth: hci3: command tx timeout [ 300.053913] Bluetooth: hci5: command tx timeout [ 300.054634] Bluetooth: hci7: command tx timeout [ 300.117992] Bluetooth: hci6: command tx timeout [ 301.397859] Bluetooth: hci0: command tx timeout [ 301.525857] Bluetooth: hci1: command tx timeout [ 301.846006] Bluetooth: hci2: command tx timeout [ 301.910083] Bluetooth: hci4: command tx timeout [ 302.037876] Bluetooth: hci3: command tx timeout [ 302.101853] Bluetooth: hci7: command tx timeout [ 302.101887] Bluetooth: hci5: command tx timeout [ 302.167797] Bluetooth: hci6: command tx timeout [ 303.447227] Bluetooth: hci0: command tx timeout [ 303.574906] Bluetooth: hci1: command tx timeout [ 303.894147] Bluetooth: hci2: command tx timeout [ 303.960025] Bluetooth: hci4: command tx timeout [ 304.087403] Bluetooth: hci3: command tx timeout [ 304.150301] Bluetooth: hci5: command tx timeout [ 304.150953] Bluetooth: hci7: command tx timeout [ 304.214004] Bluetooth: hci6: command tx timeout [ 305.493826] Bluetooth: hci0: command tx timeout [ 305.621815] Bluetooth: hci1: command tx timeout [ 305.943789] Bluetooth: hci2: command tx timeout [ 306.005840] Bluetooth: hci4: command tx timeout [ 306.134128] Bluetooth: hci3: command tx timeout [ 306.199187] Bluetooth: hci5: command tx timeout [ 306.199468] Bluetooth: hci7: command tx timeout [ 306.261857] Bluetooth: hci6: command tx timeout [ 359.916259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.921273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.926929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.932877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.939790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.059075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.062650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.067326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.070560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.074001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.077513] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.087837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.093133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.099117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.103269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.105374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.112713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.114400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.116397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.144495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.146574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.166060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.189367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.191112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.198217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.214848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.250338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.253284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.256540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.259091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.261075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.267113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.270445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.287238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.301193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.310138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.358023] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.369377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.402222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.433389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.005870] Bluetooth: hci0: command tx timeout [ 362.197880] Bluetooth: hci2: command tx timeout [ 362.262844] Bluetooth: hci1: command tx timeout [ 362.263420] Bluetooth: hci4: command tx timeout [ 362.389882] Bluetooth: hci3: command tx timeout [ 362.390525] Bluetooth: hci7: command tx timeout [ 362.581818] Bluetooth: hci6: command tx timeout [ 362.710819] Bluetooth: hci5: command tx timeout [ 364.053800] Bluetooth: hci0: command tx timeout [ 364.246778] Bluetooth: hci2: command tx timeout [ 364.309967] Bluetooth: hci4: command tx timeout [ 364.310408] Bluetooth: hci1: command tx timeout [ 364.437858] Bluetooth: hci7: command tx timeout [ 364.438311] Bluetooth: hci3: command tx timeout [ 364.630823] Bluetooth: hci6: command tx timeout [ 364.757861] Bluetooth: hci5: command tx timeout [ 366.102829] Bluetooth: hci0: command tx timeout [ 366.294809] Bluetooth: hci2: command tx timeout [ 366.357838] Bluetooth: hci1: command tx timeout [ 366.358279] Bluetooth: hci4: command tx timeout [ 366.486837] Bluetooth: hci3: command tx timeout [ 366.487306] Bluetooth: hci7: command tx timeout [ 366.678070] Bluetooth: hci6: command tx timeout [ 366.805841] Bluetooth: hci5: command tx timeout [ 368.150912] Bluetooth: hci0: command tx timeout [ 368.342277] Bluetooth: hci2: command tx timeout [ 368.406379] Bluetooth: hci4: command tx timeout [ 368.406862] Bluetooth: hci1: command tx timeout [ 368.533841] Bluetooth: hci7: command tx timeout [ 368.534293] Bluetooth: hci3: command tx timeout [ 368.726790] Bluetooth: hci6: command tx timeout [ 368.855028] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:09:47 Registers: info registers vcpu 0 RAX=ffff888016b78000 RBX=ffff88802ad778c0 RCX=0000000000000000 RDX=1ffff110055aef0a RSI=0000000000000000 RDI=ffff88802ad77898 RBP=ffff888016b78000 RSP=ffff88802ad777d8 R8 =0000000000000001 R9 =0000000000000000 R10=ffff88802ad77828 R11=0000000000000000 R12=0000000000000000 R13=ffff88802ad77850 R14=ffff888016b78000 R15=ffff88802ad77828 RIP=ffffffff81356442 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd38750c540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd931ebfe8 CR3=0000000030b97000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819547ce RDX=ffff888018fc9b80 RSI=ffffffff819548aa RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88800c9a7a20 R8 =0000000000000000 R9 =fffff94000118740 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88806cf31900 R14=0000000000000001 R15=ffff88800c9a7ad8 RIP=ffffffff819548ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb08be64540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb08c335000 CR3=0000000030bf2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000