Warning: Permanently added '[localhost]:33670' (ECDSA) to the list of known hosts. 2025/06/03 00:22:53 fuzzer started 2025/06/03 00:22:54 dialing manager at localhost:34361 syzkaller login: [ 94.794218] cgroup: Unknown subsys name 'net' [ 94.940951] cgroup: Unknown subsys name 'cpuset' [ 94.991220] cgroup: Unknown subsys name 'rlimit' 2025/06/03 00:23:07 syscalls: 224 2025/06/03 00:23:07 code coverage: enabled 2025/06/03 00:23:07 comparison tracing: enabled 2025/06/03 00:23:07 extra coverage: enabled 2025/06/03 00:23:07 setuid sandbox: enabled 2025/06/03 00:23:07 namespace sandbox: enabled 2025/06/03 00:23:07 Android sandbox: enabled 2025/06/03 00:23:07 fault injection: enabled 2025/06/03 00:23:07 leak checking: enabled 2025/06/03 00:23:07 net packet injection: enabled 2025/06/03 00:23:07 net device setup: enabled 2025/06/03 00:23:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/03 00:23:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/03 00:23:07 USB emulation: enabled 2025/06/03 00:23:07 hci packet injection: enabled 2025/06/03 00:23:07 wifi device emulation: enabled 2025/06/03 00:23:07 802.15.4 emulation: enabled 2025/06/03 00:23:07 fetching corpus: 0, signal 0/0 (executing program) 2025/06/03 00:23:09 starting 8 fuzzer processes 00:23:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fffffff}]}, 0x1c}}, 0x20004030) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000804}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x25}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x11) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xbd6, 0x5d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000001500)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000900)={0xbb8, r0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x572}, @broadcast, @device_b}}, @NL80211_ATTR_FRAME={0x43, 0x33, @mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @broadcast, @device_a, @initial, {0xa}}, 0x0, 0x33, @random=0x1, @val={0x1, 0x2, [{0x4}, {0x2}]}, @void, [{0xdd, 0x1b, "c793ae08931b763e15694f2358cebe3da1ad66a4af1adc811e2707"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x58c, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x1}, {0x7}, @from_mac=@device_b, @device_b, @device_a, {0x9, 0x8}}, {0xa, 0x0, 0x3, 0x0, 0x7}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff}, @device_a, @broadcast, @random="8e2a6e7a8a58", {0xb, 0x6}}, {0x4, 0x0, 0x2, 0x1, 0x55}}}, @ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xc1, "43436f630fb9346808ef13cb50a32d44d6942aa759cfe0a96f6afbbb5bd1ab8d6a70c366b4e1f09802cf8191fe6f775829c47eeadd4623e181085e5c5d903f8f71aad4d915a97caced3544a98a364d1f336020a44c2d02a166b90c59f4c34c86e054aa879f75f49fc2cec7aa0bbf7654cb9e05a7bbdf7bb8cb53950c773a613ca4c2cad6c4dc96072c699955caef6708b0ae7e7d29e77007198d26cd5fd1c1719bc876547b1d8ed466f849ef53c84ddc474e56eca41692c1b9786c40c0779ff541"}, {@device_b, @device_a, 0x85, "6b611cedf226dd69bda25082eee78c81340d84703cea6b8f21cac3e63e4041fec4dc97a152a018d5a091ea0eb7c553d9cb8ee594d234a71c7aa4a692debe7c030112ab4165bd7a1bb5d5eecc70b75562081c4fcb55f6f82507bb2bde0ec1873dcb6f9992944fec94ee8cccce13698e0ceb7a73242ca43390f37fc015760b2bc224b94c9382"}, {@device_b, @device_b, 0xcf, "5ba7db9c105e847266bb62a17e3ccefa0242038863e58ca901b73b0af264ad57c713198e5c3da316b30a0911f12079c9fd17013142b5c1986099e0d2270cea6936b240731132590b4e922cc5c63345adc05706c10f194d7c0f36678ab8fc5b1cd7286cff4534868cb1bf746c16169d76d1220d9949351c66fd452a8a46e1a0e7d7c1db5647e08570de30e824836746ddf09b1653bb213fac23163ccedf58bfb6addc3cbd8cafa5c51deeda4a8009f9f025bb0672c69e3464130503f2dbc2d28bf52eff200f7fe842f16409d21c6cc2"}, {@device_b, @device_a, 0x96, "8fbf847e72f19d6edfc12d1f03383bbc20a8337f4e5b25eff630549f1f6f78854fb0a74e4426a9fe3585e020347e38f19e5450cbd5f2dea3f690f561f8909eea4aff2017b9db6eaa766dcee0fb3fd8d72d2fbdb46d52702236c54d3558e43283ddf5111f94afb6d98aa3f090f12126db801c1ffbe579e2a13e2f849d29f8a75d154d26dcd5b83bc7706e506a93cdf4b827655c464f1e"}, {@device_b, @device_a, 0xe4, "adc0a7a3b87d1687e5a97a2b748e3b1621d613ca9dc013400414981ec999bf97be1b01247b83a52d0bbc1c780b9a827a4d56ade5a04994d0e508afb43da3629b3e29802748a4b31208cd349983e7233ad3d147cc6c0a5d5e6bb4c726cd7e70339b3a728036858ec195eb495fdf562faf862a64686bb07d1b40b98bf762d9584b514eeac71f7afc62a7f85be5fd778f0e06f5310a7e2f4ba38973dc2abb7c32dda15bc4db1117b01b5852dd8134446170acab37e75d0fa2a062283408a6c4a16e92d69b271de798b56d892406e5047122593bc224b246ec6b02fc9907d3e27ebd34e310b1"}, {@device_b, @broadcast, 0xdf, "44b4320c646ee3da53f8d1d4436d73d19942901add46ad3c4b6cd6d07c1c0cf20548075980e1d9910487babc47da532afb5d853486805c90ead32bcccf02c8029c7531ff9cc0cc812751b464ee95d886170baea4d060b5bffb1705eb6258ae1e6218e51bc85b5ff65b01a99348eae799947ef40df0fd3ad749a369d90553927bd1b20d5058c551d38211335b8ccd6e4706c97a4704d997f5631a007ebe6c9e5aeddca23430b8b00a07fbc603dc06ac076d154ac048f79807f61aec10f0f6e9d7ee86e12eae57f5af2d50f2da312730039a44418a0660cd33c493fa7decce27"}, {@broadcast, @device_b, 0x76, "8685ce8e960ed7e33d90cc34bbe549f5db35c6c279ab3baa02f694b94723420509685fdd696248a3d6f13877b43793d503f56445d2e497bc1f438e8b8b74b13b904a148d388a45adfeacd9c05f58b8298f452f0fe9e9ba3e9a3deb72beaa145fbf2a70ec810cf9074ceb22c4e81658d23ecb4569ab20"}]}}, @NL80211_ATTR_FRAME={0x294, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x20}, @device_a, @device_b, @initial, {0xa}}, {0x2, 0x0, 0x2, 0x0, 0xff}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_a, @from_mac=@device_b, {0x3, 0x7f}}, {0x9, 0x1, 0x2}}}, @ver_80211n={0x0, 0x80, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0xe6, "0abaa245746054f2498b54366bd73774a10f7cb941a65ebfa5b6bf931b75dcffddea2960a72c45b31a62e4653ebd9ab29e6ad10e9b002b0540e80cc57df6dd7c5e54fc324495eff8ca66791a22bc4121a599627cf43c7fed0e55f7ece924bcc27cfc8c299988d91fbaba3d75d90fb5693d0ea859bb0202fdf9caef99f57902a59709e316e0102bb648f51d45ef1767db71aabe8a0b7c4cd940ef371223a6757f3e2205a8341ca2c2adb4bfefbde2a1f6c353dc35c28c569e88a3f83013892e1e5a150db89d8d4a00cb3250ac65ad25efb5764155091345d83bc2e5c740277251ab4b1298abbd"}, {@device_b, @broadcast, 0xbd, "4d00ac6480dcdd193f610a588ca8a5dad9612bb81df133d6e0941b61df7d6e8e779f8d172d96370a951fa58784f6e3cf96c0713804a765a377372e7586de7ad0900aa2faab8d73f90043e5bc11e8d6482d5b19f3617518160db99ef6bfbf870c4fca875e3c5ac8b745d51a86276f7f9d0cf025b1a666787dfa3813800d7999caa8287a6ed150b586d1d79734b2df1913f59e6954e47827f76297553fee70b87503f8b4a473921815dd1e2dfb4e7a300b75182de3ad451dcab79c86b807"}, {@broadcast, @device_b, 0x89, "38e5269f91eb116547e458b71b344ec34d8eaa166151965d6c5c25309c63ebb25d904d2e45294ee28ad3a3a8df22cc53749ca85c8b1dce0c0acc1e049f41badb0aa5993f4f94cde2bf4c69406c9dd79297785b5a680c5dab18f96705e4ab730b45ae838841f65ed7026bc37d1c83e3d73d6e0a5db8e5910d899944a043dcf22f7b271ffd4092a22231"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xc0, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @random="e332bfa197d3", {0x3, 0x4}}, @a_msdu=[{@device_b, @device_b, 0x4f, "15c47f51b2391cf34f4a359362c25b7fd77d7ef3fad53002c88f4a5a720d26c6b4f44b2d325a4f8846a89abff41c74c65d8588a9a246fb62232cbb85993f669e13f4900e5d79b7cbb9beba0c98606a"}, {@device_b, @device_a, 0x35, "5965b5032856125c0a5e0d401c98c52512e4bb500e531a15294a58e40c0e3bb26460518ae4bc44f7c9ea8581fa1e005c5ab9348d3c"}]}}, @NL80211_ATTR_FRAME={0x23a, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @from_mac=@device_b, {0xe, 0x20}}, @ver_80211n={0x0, 0x1f, 0x3, 0x0, 0x0, 0x2, 0x1}}, 0x210, 0x2, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xed, "ed161eb2a194c9388817b007beb67a5913ba2e33255df2da6aa69a920b6657ee3159821a06e3cc487a58128bcb7fd42074f934954652013b53e400b501c3a3d3d3742aed5f272db12310184c17a9fd921ccef146b826ea2f78b15e30f3b0205162d84eda0e65232d0d092995406cef7a375a5cbb4da33b3e40c768962c1ed2b1af036072a9cdb93c9d46772a76a8555d10cedd3816524e1fa847dfa49d00cdfc3b4626e71e6ee8c71c8e87924ec1e4db1ebfc5ab17199b1d5d2da68aaf9e6d1bf9717166744840e628c03b0c22ffddbbfeada40b061efb69df72fbb4b8bb3ff0492c12b41145245c2004298537"}, {0xdd, 0xd, "32c79d0bdd6939a4d5e8308dbd"}, {0xdd, 0xa3, "b66b714e4690768af2a23c29814cfc7d9a249a853ce8e10512fce8790c8fdecd7c99af04aa9d88e0ba6ed5b8fba7a7d09d74cf496fffcfda4be8c20988d8aa7a4a81cae85afc5be562ed37b6993383446aa69aee268d0e4ab69d5cd4c52dd7fbaf671d070a37779d6895a5ad7b29438314bd5825578c591d023e0cf1248bc662875e2110af98d16e989050ae3fc6ddc6ce23c9bdf832765b8399a89a56322def9c776d"}, {0xdd, 0x69, "61ac985f139863570d665ca59c170753c74d7d1fb6dda5aacc43e95edb5d703c2b7fd8ae3bf9a5c4c7b873dd7e7fa127ada037b2a4f8511ac8c7417fa7c20b6278b49e6daeabeb578a2af100ae1cb226052296840cc21b30ec3e4336fe93daa751c9a1030cb12ccc74"}]}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x48810}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x24}}, 0x24000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x50}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x80) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 00:23:09 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0xc010, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, &(0x7f0000000040)="b820e7ee0ca2a24d226a43d7bbcfc437f885353f5190c189055fce1d073f26a33e3ffbbab763286b7c9491a905a32cd5cfd897e79bd3121929d8ec5c88741dc4a9be7227d276e5a230c72b9467739ea0fcf1fd8b83632a664ba85b2805f504188840a5678a181238bfa1abf1c3471ecb58254c67a967e2d7911ff6ba9e58b99fb9fd828e31436d1cc3b24d3966941f482430cb01fb1bbc641a8204dfafbe81a08b50cdf702b44ea269108d5bcd915aa4e9d0b2", 0xb3, 0x0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00') pkey_alloc(0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000240)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000002c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2200, 0x0) ioctl$TIOCSBRK(r2, 0x5427) 00:23:09 executing program 2: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000140)={0x7ff, 0x20, 0x9}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0) inotify_rm_watch(r2, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000001c0)={0x0, 0x8}) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000200)={0x5, 0x7, 0x5, 0x400, 0x931b}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000280)={0xfffffffa, 0x1}) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000002c0)={0x3, 0x3, 0x20, 0x7cf}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0xfffffffffffffe01) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000340)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000380)) 00:23:09 executing program 3: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9c88) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x2) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x80) ioctl$TIOCSBRK(r1, 0x5427) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000881) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000300)={0x5, 0x7fff, 0x4, 0x8001, 0x17, "bc25ae73a1fd0ff2fde769bd49ef8d9bba1a40"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x100000000) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0x3, 0x81, 0x7ff, 0x1f, 0x0, "bf3585bc461297743ff31e299cd14101afde58", 0x3, 0x7}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000380)={0x8, 0x3ff, 0x2, 0xad0, 0xe, "46a68678eb98f2150f6ffa07a834aaf1eebd59"}) [ 110.075408] audit: type=1400 audit(1748910189.620:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:23:09 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r0, 0x2b, &(0x7f0000000040)={0x5, 0x7fffffff, 0x1}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000000c0)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000140)={0x3f, 0x7d7}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x5, 0x9, 0x2ca, 0x4, 0x1, "eb1d51f3014e29ee1aae27408993126ec968e6"}) ioctl$TCSBRKP(r2, 0x5425, 0xe10a) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xff, 0x6, 0x81, 0x20, 0x0, 0x84a, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x9}, 0x80, 0x3, 0x80000000, 0x5, 0xffffffffffffffff, 0x3f, 0x0, 0x0, 0x6, 0x0, 0x33e}, r0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3f}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x95}, 0x800) ioctl$TIOCSCTTY(r2, 0x540e, 0xb8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0xb0dc0, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000480)=0x3) ioctl$TIOCSIG(r3, 0x40045436, 0x3c) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000004c0)) 00:23:09 executing program 5: ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xbaa, 0x15}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_PID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x67a5fa84b6255c5e}, 0x4008000) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000600)={0x2, 0x1, 0x1, 0x1e, 0x1fc, &(0x7f0000000200)="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"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x148, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x40}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xf0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0xa}, {0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x4, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x8}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x12, 0x12, 0x12, 0x60, 0x1b, 0x0, 0x48, 0xb, 0x16, 0x9, 0x24, 0x1b, 0x12, 0x6c, 0xb, 0x18, 0x1b, 0x6c, 0x6, 0x0, 0x36]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x6}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x4}, {0x3, 0x8}, {0x2, 0x9}, {}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {}, {0x7, 0x9}, {0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x5}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x82400, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000940)=0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r4) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x9}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x16}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x5) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000cc0)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000d00)) openat$full(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00'}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000dc0)) 00:23:09 executing program 6: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7fff, 0x5, 0x7, 0x1, 0x11, "ac796006de244526"}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x40, 0x80000000, 0x11d, 0x7, 0x5, "a4f0a39cb757bed18acabd43c5fef91de425d2", 0x41}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000180)={0x5}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x3) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000001c0)) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000200)=""/90) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r3, 0x600000000000) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000280)={0x1, 0x9, 0x3, 0xfffffffc, 0x2, "1104ace964d3c372e5c0ef1b70c03c41e9c060"}) 00:23:09 executing program 7: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x7, 0x2cf, 0xffff, 0x88f, 0x1, "b41293b61e667697c9c22c9b04bd97b4572be9"}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0xffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x7) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0xf, 0xa, 0xee, &(0x7f00000000c0)="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"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffff) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000500)={0x84b, 0x3, 0x1, 0x7ff, 0xf, "6c138b76387fc0cd"}) r2 = epoll_create1(0x80000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8001) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000580)=""/46) ioctl$TCSETA(r1, 0x5406, &(0x7f00000005c0)={0x2, 0x4, 0x9db, 0x5, 0x8, "ff1fead5a1a984aa"}) ioctl$TIOCNOTTY(r0, 0x5422) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000600)) ioctl$TIOCSIG(r2, 0x40045436, 0x16) [ 111.550574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.555679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.562458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.567859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.574486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.579551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.590119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.608057] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.619160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.623805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.632450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.641205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.659644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.662366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.678247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.679685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.685547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.691368] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.694029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.697253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.705362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.710441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.719797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.722015] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.726877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.730159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.732733] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.739243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.741956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.743952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.747178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.750485] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.760008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.774553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.785955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.787688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.816225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.821580] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.832227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.843126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.688379] Bluetooth: hci0: command tx timeout [ 113.814969] Bluetooth: hci6: command tx timeout [ 113.816824] Bluetooth: hci1: command tx timeout [ 113.878872] Bluetooth: hci4: command tx timeout [ 113.879637] Bluetooth: hci2: command tx timeout [ 113.943028] Bluetooth: hci7: command tx timeout [ 113.943883] Bluetooth: hci5: command tx timeout [ 114.006919] Bluetooth: hci3: command tx timeout [ 115.735348] Bluetooth: hci0: command tx timeout [ 115.864178] Bluetooth: hci6: command tx timeout [ 115.864653] Bluetooth: hci1: command tx timeout [ 115.926976] Bluetooth: hci4: command tx timeout [ 115.927419] Bluetooth: hci2: command tx timeout [ 115.990922] Bluetooth: hci7: command tx timeout [ 115.991372] Bluetooth: hci5: command tx timeout [ 116.055809] Bluetooth: hci3: command tx timeout [ 117.783126] Bluetooth: hci0: command tx timeout [ 117.910856] Bluetooth: hci1: command tx timeout [ 117.911321] Bluetooth: hci6: command tx timeout [ 117.975115] Bluetooth: hci4: command tx timeout [ 117.975571] Bluetooth: hci2: command tx timeout [ 118.039798] Bluetooth: hci5: command tx timeout [ 118.040245] Bluetooth: hci7: command tx timeout [ 118.103315] Bluetooth: hci3: command tx timeout [ 119.830851] Bluetooth: hci0: command tx timeout [ 119.958983] Bluetooth: hci1: command tx timeout [ 119.959473] Bluetooth: hci6: command tx timeout [ 120.022986] Bluetooth: hci2: command tx timeout [ 120.023468] Bluetooth: hci4: command tx timeout [ 120.088046] Bluetooth: hci7: command tx timeout [ 120.088521] Bluetooth: hci5: command tx timeout [ 120.151044] Bluetooth: hci3: command tx timeout [ 173.990554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.992432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.993692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.006688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.010365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.014187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.016048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.020771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.022583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.028488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.066005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.075064] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.076012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.085484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.100571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.100591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.100888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.108927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.115899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.119098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.119969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.120440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.120699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.121401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.124924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.125105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.127730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.129048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.130067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.133533] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.145916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.146957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.153882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.154616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.155692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.163553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.193499] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.200304] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.239074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.249105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.087856] Bluetooth: hci0: command tx timeout [ 176.088631] Bluetooth: hci1: command tx timeout [ 176.214927] Bluetooth: hci4: command tx timeout [ 176.215672] Bluetooth: hci2: command tx timeout [ 176.279127] Bluetooth: hci7: command tx timeout [ 176.280768] Bluetooth: hci5: command tx timeout [ 176.281381] Bluetooth: hci6: command tx timeout [ 176.281448] Bluetooth: hci3: command tx timeout [ 178.136057] Bluetooth: hci1: command tx timeout [ 178.136171] Bluetooth: hci0: command tx timeout [ 178.262903] Bluetooth: hci2: command tx timeout [ 178.262926] Bluetooth: hci4: command tx timeout [ 178.326868] Bluetooth: hci3: command tx timeout [ 178.326923] Bluetooth: hci5: command tx timeout [ 178.327303] Bluetooth: hci6: command tx timeout [ 178.327784] Bluetooth: hci7: command tx timeout [ 180.183252] Bluetooth: hci0: command tx timeout [ 180.184737] Bluetooth: hci1: command tx timeout [ 180.311193] Bluetooth: hci2: command tx timeout [ 180.312104] Bluetooth: hci4: command tx timeout [ 180.374911] Bluetooth: hci7: command tx timeout [ 180.378923] Bluetooth: hci6: command tx timeout [ 180.379708] Bluetooth: hci5: command tx timeout [ 180.380512] Bluetooth: hci3: command tx timeout [ 182.231160] Bluetooth: hci1: command tx timeout [ 182.231639] Bluetooth: hci0: command tx timeout [ 182.358841] Bluetooth: hci4: command tx timeout [ 182.359297] Bluetooth: hci2: command tx timeout [ 182.424787] Bluetooth: hci3: command tx timeout [ 182.425225] Bluetooth: hci5: command tx timeout [ 182.425643] Bluetooth: hci7: command tx timeout [ 182.426352] Bluetooth: hci6: command tx timeout [ 236.077482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.085380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.089655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.100861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.106403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.210155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.215848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.230279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.254246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.258723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.370966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.378425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.397625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.400303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.405287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.406087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.417384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.421163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.430271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.438396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.524185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.546293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.550014] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.575370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.612806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.614794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.617653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.626408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.631121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.651697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.658723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.659153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.685126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.688929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.691658] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.705793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.711245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.793331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.875386] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.897287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.166854] Bluetooth: hci0: command tx timeout [ 238.358842] Bluetooth: hci1: command tx timeout [ 238.486951] Bluetooth: hci3: command tx timeout [ 238.552097] Bluetooth: hci2: command tx timeout [ 238.679654] Bluetooth: hci4: command tx timeout [ 238.742918] Bluetooth: hci6: command tx timeout [ 238.806880] Bluetooth: hci5: command tx timeout [ 239.126840] Bluetooth: hci7: command tx timeout [ 240.216235] Bluetooth: hci0: command tx timeout [ 240.406819] Bluetooth: hci1: command tx timeout [ 240.535891] Bluetooth: hci3: command tx timeout [ 240.600436] Bluetooth: hci2: command tx timeout [ 240.728487] Bluetooth: hci4: command tx timeout [ 240.790827] Bluetooth: hci6: command tx timeout [ 240.856114] Bluetooth: hci5: command tx timeout [ 241.175802] Bluetooth: hci7: command tx timeout [ 242.263111] Bluetooth: hci0: command tx timeout [ 242.454821] Bluetooth: hci1: command tx timeout [ 242.582867] Bluetooth: hci3: command tx timeout [ 242.646821] Bluetooth: hci2: command tx timeout [ 242.775249] Bluetooth: hci4: command tx timeout [ 242.838822] Bluetooth: hci6: command tx timeout [ 242.902963] Bluetooth: hci5: command tx timeout [ 243.223004] Bluetooth: hci7: command tx timeout [ 244.311191] Bluetooth: hci0: command tx timeout [ 244.503390] Bluetooth: hci1: command tx timeout [ 244.631164] Bluetooth: hci3: command tx timeout [ 244.695146] Bluetooth: hci2: command tx timeout [ 244.823186] Bluetooth: hci4: command tx timeout [ 244.886957] Bluetooth: hci6: command tx timeout [ 244.950818] Bluetooth: hci5: command tx timeout [ 245.271540] Bluetooth: hci7: command tx timeout [ 298.417260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.420636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.427320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.438432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.443065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.498806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.513486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.520369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.550911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.558009] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.670542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.678265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.697274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.702330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.705564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.708310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.722276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.725855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.734526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.742507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.751373] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.758871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.764142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.766721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.780508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.874318] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.878181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.883352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.894295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.898522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.912194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.967511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.976411] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.029027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.060715] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.103624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.117339] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.125103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.150268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.159386] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.502882] Bluetooth: hci0: command tx timeout [ 300.630846] Bluetooth: hci1: command tx timeout [ 300.822853] Bluetooth: hci4: command tx timeout [ 300.886918] Bluetooth: hci2: command tx timeout [ 300.950999] Bluetooth: hci3: command tx timeout [ 301.273453] Bluetooth: hci5: command tx timeout [ 301.334885] Bluetooth: hci6: command tx timeout [ 301.782991] Bluetooth: hci7: command tx timeout [ 302.550859] Bluetooth: hci0: command tx timeout [ 302.679066] Bluetooth: hci1: command tx timeout [ 302.871112] Bluetooth: hci4: command tx timeout [ 302.935806] Bluetooth: hci2: command tx timeout [ 302.998821] Bluetooth: hci3: command tx timeout [ 303.319798] Bluetooth: hci5: command tx timeout [ 303.384103] Bluetooth: hci6: command tx timeout [ 303.830949] Bluetooth: hci7: command tx timeout [ 304.599380] Bluetooth: hci0: command tx timeout [ 304.728329] Bluetooth: hci1: command tx timeout [ 304.920873] Bluetooth: hci4: command tx timeout [ 304.982867] Bluetooth: hci2: command tx timeout [ 305.047233] Bluetooth: hci3: command tx timeout [ 305.368146] Bluetooth: hci5: command tx timeout [ 305.431963] Bluetooth: hci6: command tx timeout [ 305.879092] Bluetooth: hci7: command tx timeout [ 306.646831] Bluetooth: hci0: command tx timeout [ 306.776144] Bluetooth: hci1: command tx timeout [ 306.968867] Bluetooth: hci4: command tx timeout [ 307.030951] Bluetooth: hci2: command tx timeout [ 307.095938] Bluetooth: hci3: command tx timeout [ 307.414884] Bluetooth: hci5: command tx timeout [ 307.478853] Bluetooth: hci6: command tx timeout [ 307.929171] Bluetooth: hci7: command tx timeout [ 360.887961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.891361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.900714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.908577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.913707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.065906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.068843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.075274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.080918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.084908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.131901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.145285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.151073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.156817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.161276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.390304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.406403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.409720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.417337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.421099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.421665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.426367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.429398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.444974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.450062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.463632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.469276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.478384] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.478495] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.514710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.619195] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.631396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.677524] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.718206] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.726460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.009861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.034868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.081348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.116956] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.129133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.967033] Bluetooth: hci0: command tx timeout [ 363.159027] Bluetooth: hci1: command tx timeout [ 363.223149] Bluetooth: hci2: command tx timeout [ 363.607627] Bluetooth: hci3: command tx timeout [ 363.607663] Bluetooth: hci5: command tx timeout [ 363.800921] Bluetooth: hci7: command tx timeout [ 363.800984] Bluetooth: hci4: command tx timeout [ 364.311625] Bluetooth: hci6: command tx timeout [ 365.014843] Bluetooth: hci0: command tx timeout [ 365.207828] Bluetooth: hci1: command tx timeout [ 365.271797] Bluetooth: hci2: command tx timeout [ 365.654863] Bluetooth: hci5: command tx timeout [ 365.655813] Bluetooth: hci3: command tx timeout [ 365.846859] Bluetooth: hci7: command tx timeout [ 365.846913] Bluetooth: hci4: command tx timeout [ 366.358813] Bluetooth: hci6: command tx timeout [ 367.062966] Bluetooth: hci0: command tx timeout [ 367.254833] Bluetooth: hci1: command tx timeout [ 367.319776] Bluetooth: hci2: command tx timeout [ 367.703824] Bluetooth: hci3: command tx timeout [ 367.703876] Bluetooth: hci5: command tx timeout [ 367.895949] Bluetooth: hci7: command tx timeout [ 367.895991] Bluetooth: hci4: command tx timeout [ 368.406824] Bluetooth: hci6: command tx timeout [ 369.111084] Bluetooth: hci0: command tx timeout [ 369.302857] Bluetooth: hci1: command tx timeout [ 369.367232] Bluetooth: hci2: command tx timeout [ 369.751249] Bluetooth: hci3: command tx timeout [ 369.751803] Bluetooth: hci5: command tx timeout [ 369.942802] Bluetooth: hci4: command tx timeout [ 369.943809] Bluetooth: hci7: command tx timeout [ 370.455798] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:28:12 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff84acabf1 RDX=ffff888015fc0000 RSI=00007f47335c8fff RDI=0000000000000006 RBP=ffff88802ed46400 RSP=ffff888024387768 R8 =0000000000000001 R9 =ffff888024387e30 R10=00007f47335a6fff R11=0000000000000001 R12=000000000000000a R13=00007f47335c8fff R14=dffffc0000000000 R15=ffff8880243878d0 RIP=ffffffff84acabf6 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f47335a8368 CR3=000000002f708000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888028f6a650 RBX=0000000000000002 RCX=ffff88806cf089cc RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff888028f6a650 RBP=ffffffff85c1d1c0 RSP=ffff88806cf089c0 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b6bd R11=00000000000c4fff R12=ffffffff81354102 R13=0000000000000202 R14=ffff888028f69b80 R15=0000000000000004 RIP=ffffffff8151ae64 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1475bdb540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff37cc3ff8 CR3=000000002f242000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000