Warning: Permanently added '[localhost]:30589' (ECDSA) to the list of known hosts. 2025/06/08 21:31:40 fuzzer started 2025/06/08 21:31:40 dialing manager at localhost:40003 syzkaller login: [ 108.746053] cgroup: Unknown subsys name 'net' [ 108.881962] cgroup: Unknown subsys name 'cpuset' [ 108.929707] cgroup: Unknown subsys name 'rlimit' 2025/06/08 21:32:02 syscalls: 2214 2025/06/08 21:32:02 code coverage: enabled 2025/06/08 21:32:02 comparison tracing: enabled 2025/06/08 21:32:02 extra coverage: enabled 2025/06/08 21:32:02 setuid sandbox: enabled 2025/06/08 21:32:02 namespace sandbox: enabled 2025/06/08 21:32:02 Android sandbox: enabled 2025/06/08 21:32:02 fault injection: enabled 2025/06/08 21:32:02 leak checking: enabled 2025/06/08 21:32:02 net packet injection: enabled 2025/06/08 21:32:02 net device setup: enabled 2025/06/08 21:32:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 21:32:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 21:32:02 USB emulation: enabled 2025/06/08 21:32:02 hci packet injection: enabled 2025/06/08 21:32:02 wifi device emulation: enabled 2025/06/08 21:32:02 802.15.4 emulation: enabled 2025/06/08 21:32:02 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 21:32:04 starting 8 fuzzer processes 21:32:04 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'team_slave_0\x00', 0x2}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect(r0, &(0x7f00000000c0)=@llc={0x1a, 0x8, 0x71, 0x66, 0x28, 0xee, @local}, 0x80) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x10000, 0xfffffffc, 0x9, 0x1, 0x9, 0xc53}, {0x4, 0xec, 0x5, 0x7fffffff, 0x100000, 0xffff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x2, 0x2, 0x8, 0x101, 0x3, 0x6, 0x7, 0x1ce, 0x40, 0x243, 0x8, 0x6, 0x38, 0x2, 0x5, 0xecb9, 0x7fff}, [{0x4, 0x3a, 0x1, 0x9, 0x1, 0x1, 0xffffffffffff0000, 0x100000000}], "9bf2b59a920b5f8964dd87e5e5f07a7588ec7b5ae56585294764c96104442ed21096b5d2"}, 0x9c) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000500)=0x1c, 0x800) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, @isdn={0x22, 0x43, 0x81, 0x1, 0x3}, @phonet={0x23, 0x40, 0x6, 0x1f}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x3ff, 0x0, 0x0, 0x0, 0x9db3, &(0x7f0000000540)='veth1_to_hsr\x00', 0x20, 0x401, 0xef}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000600)={@multicast2, @rand_addr=0x64010101}, 0x8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000640)={0x1, 'veth0_to_batadv\x00', {}, 0x5d6}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x0, 'tunl0\x00'}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x8401, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000700)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2, 0x4, 0x3, 0xce02, 0x0, @mcast2, @rand_addr=' \x01\x00', 0x20, 0x1, 0xd9, 0x80e}}) read$eventfd(0xffffffffffffffff, &(0x7f0000000840), 0x8) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000880), &(0x7f00000008c0)=0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000900)={0x8, 'team_slave_1\x00', {'wlan0\x00'}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000980)={{0xa, 0x4e21, 0x2, @private0, 0x8}, {0xa, 0x4e23, 0xd7a, @mcast2, 0x9}, 0x5, [0x6, 0xef03, 0xfffff5ab, 0x401, 0x3, 0x7ff, 0x1000, 0x8000]}, 0x5c) 21:32:04 executing program 0: r0 = memfd_secret(0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x1, 0x5259}, {0x1000, 0x101}, {0x8ae, 0x2}, {0xc9ef, 0x39b}, {0xff09, 0xfff}, {0x7fff, 0xaae3}, {0x20, 0x7}, {0xff, 0xfb8c}, {0x3b7, 0x4}]}) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000080)={0xffffffe0, 0x1ff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x1ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000240)={0x2, 'nr0\x00', {0x7}, 0x4}) sync_file_range(r0, 0x4, 0x100000000, 0x2) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000280)) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xe7) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x5e}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x80c0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8000) getsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000580)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000005c0)={0x20000001}) 21:32:04 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1c0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4000800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r1 = memfd_secret(0x80000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60090}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_MODES_OURS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x80) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x82) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44851}, 0x4000000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x400041, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f00000005c0)={{0x78, 0x80}, {0xffff, 0x7f}, 0x3, 0x1}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xfe}]}}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x2a081, 0x0) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000980)=0x8000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000009c0)) syz_open_dev$mouse(&(0x7f0000000a00), 0x3ff, 0x600) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000b80)=0xe8) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x100, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x20, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) [ 132.082043] audit: type=1400 audit(1749418324.411:7): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:32:04 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x49}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xb9f5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xda83}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) kcmp(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}}, 0x4050) sendto(0xffffffffffffffff, &(0x7f0000000400)="f4e9ff33704d9836d1cc6340d243c04e0070c091a643646149061b8ead469b792a6d4362c1e5b8a5efe341d7aae4ecd1e178c4e2f7c399ba4ccba787bee2555e3d84ec9def7f9b1821f26daf57c71fd98d0a0f204658cafe4b8f4ba56f6fde3bffba8f18fd214ffdcca7c963744a5f267fb22d01c8c5c465ec5312f7d8b6a45bf1c5d0afe34b94", 0x87, 0x4044000, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x2, 0x8, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x301ebf37, 0x78b, 0x10000}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x4040, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0xd, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40881}, 0x40040) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000800)=""/193, &(0x7f0000000900)=0xc1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xca120048}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x800}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x200000d0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000a80)={0x3d4, 0x7458, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000066c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000006780)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006740)={&(0x7f0000006700)={0x2c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000068c0)={&(0x7f00000067c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006880)={&(0x7f0000006800)={0x50, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9720}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r4 = signalfd(r1, &(0x7f0000006900)={[0x9]}, 0x8) r5 = open$dir(&(0x7f0000006940)='./file0\x00', 0x40040, 0x120) r6 = openat$cgroup_int(r4, &(0x7f0000006980)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f00000069c0)={r6}) 21:32:04 executing program 3: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xdfa537cae6e7d76f}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x492}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x404c000) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x33c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3b3ad1c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3fd2}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84a}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x202}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x382}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x1e0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "2903bfb9c96d845118a02496e62a022d017e61d8acccd347"}}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "0c9c20480b1a6c90e7926f97d0b48c05a2b143062819973a1fad08fbd03bb7572c14249ace962ba6a720d3a1b506d6f8b9b32f4cd45b18ae63bc1e47499f680ffd9b7cd48fbe1a9cd4b0a218de5e932f7f6a12163380b182fc264a832823896604b1b5372f6d8715ac1c69d1568c4e448a58a40f5efb56edd46fb837cad43cc627f31780cac3441910248e93df5f1fa409c9e8c41bf3c383a9f20273197ec6ef0e01ab2538f9af4032645af3ca741a362604a3a80ad498ebc3544d89d82e18d92c62019d4b6d3ec563f4c1fac89977532b37474c4431d0737294484f636f8fa5f1db897dc6ef16fc3b04b25f0bb614d7e1b49e0b329ba84f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "732bd7984296cb60b176aae18877d024500792bcf1"}}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "7c645367e2b64eb23723a81ff6141efab47c31ca82d009a6b1683ab38ecc8bf295cad96c73d7dffd14dfe4c98208bfbafc0a66a6acbb6f27023f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd794}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x15192f29}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf2}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2a, @loopback, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x57}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}]}]}, 0x33c}}, 0x240080d4) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x6c}}, 0x20008081) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fd/3\x00') sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x40}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000007c0)='ext3\x00', &(0x7f0000000800)='./file0\x00', 0xffffffffffffff9b, 0x1, &(0x7f0000000880)=[{&(0x7f0000000840)="7e37fca902d25e546635a0d90b1f698d3d3c6a401a7298da", 0x18, 0xa9de}], 0x18828, &(0x7f00000008c0)={[{@noinit_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'fd/3\x00'}}, {@subj_user}, {@audit}, {@uid_eq}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&/\''}}, {@subj_type}, {@uid_gt={'uid>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f00000009c0), 0x10001, 0x5d3100) fremovexattr(r3, &(0x7f0000000a00)=@known='system.sockprotoname\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000a80), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000ac0)=0xffffffffffffffff, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r5, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000c40)={0x7, 0x8, 0x2, 0x2, 0x9, "a3ec6da0133fbaeecee3cc23e8fccac00210b2", 0x0, 0x89}) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000c80)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000004f00)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x28, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000010) 21:32:04 executing program 5: r0 = syz_io_uring_setup(0x61d8, &(0x7f0000000000)={0x0, 0x6bda, 0x8, 0x1, 0x266}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000100)={0x1, 0x800, @status={[0x1, 0x59, 0x10001, 0xa43, 0x0, 0x16a3]}, [0xffffffff, 0x9, 0x2, 0x4, 0x401, 0x81, 0xff, 0x6, 0x3ff, 0x39e6, 0x4, 0x0, 0xbf, 0x6, 0xff, 0x3, 0x5, 0x200, 0x9, 0x3ff, 0x8, 0x8001, 0x7, 0x1, 0x2, 0x6, 0x4, 0x3f, 0xffffffff, 0x2, 0x6, 0x3, 0x17, 0x3, 0x1, 0x8000, 0x0, 0x1, 0x8, 0x9, 0x1fc00000000, 0x9, 0x5, 0x5, 0xf76, 0x74, 0x100000001, 0x200, 0x5, 0x4, 0x7fffffff, 0x5, 0x7, 0xd2cd, 0x30, 0xda59, 0x7fffffff, 0x0, 0x3, 0x9, 0x3ff, 0x7fff, 0x7fff, 0x8001]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b40), 0x503000, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000b80)=0x7) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0x8d, 0x2, 0x20, "878d99854410a037027b7b484afffc86", "aae0eae75f085902a6bb8f64d53258395ddae3fcec1945c03dfd1482f581764bae3ac661acd213524f804f774c8d98ff04de0c35f1aa3a1e39dd06c9e2b9d8ab32105de364b5cffd7882a4cba29476d4329e54797eca9ed7d4da3fd8698054b109ae493e0659885c4bc165af92e4cca722cf72dd95422a6d"}, 0x8d, 0x3) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000cc0)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000d00)='devices.deny\x00', 0x2, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000d40)=0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x0, 0x1, 0x3, 0x1, 0x3, 0x6, 0x8614, 0x2d6, 0x40, 0x1af, 0x7, 0x5, 0x38, 0x1, 0x80, 0x3, 0x5}, [{0x70000000, 0x0, 0x5, 0x0, 0xdd, 0x400, 0xe053, 0x20000000000000}, {0xe, 0x9, 0x2c0de650, 0x50a, 0x0, 0xa5, 0x7, 0x7}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x19b0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000002740)=0x7f) r3 = open_tree(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x1801) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000027c0)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000029c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x138, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "2e2ab02c0a19c98f7bff0fabf65b228684ccd878e187e464a9ce60a3f88e61a0e19e19a14adf5079119f2913605074d27e03213bcd8ab6d1b67c0b695e31baed7e03b4b221ee046cc42b9c8d417073963f722292391c7fde8b03"}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "cf9d5eaeb4c3a5e3bf8a04c60cd560dd5da41397d102aeabf1bd7ae78747a6b53ae29df41f70d22a46c65199d6d9fe2dece0822d096199730b3e5cd8ad12c9c993b7da1996dd7fae983f3657c618a53afcc76a12902564556cff4be2dbe81eabc117e1e1d195de9d4fe1ec3a11f6fa73631c0232dba0fe18cf494d51a60cfe64fd4c9f7bf4a541c43b62a6768afba6b8326ff33899d4b3ee68610fd9ebd3b4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "a9ef8f080860aa90e13a4a34f93c"}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) r4 = open(&(0x7f0000002a00)='./file0\x00', 0x1a8000, 0x100) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r0, {0xa5}}, './file0\x00'}) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000002a80)=0x1) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000002ac0), &(0x7f0000002b00), 0x2, 0x2) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x21) 21:32:04 executing program 7: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x0, @private}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth0_to_team\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xda}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10014) r3 = eventfd(0x0) flistxattr(r3, &(0x7f0000000300)=""/183, 0xb7) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x282, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0xc000, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000480)={&(0x7f0000000440)=""/27, 0x1b, 0x2, 0x3f}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000005c0)={0x16, 0xde, &(0x7f00000004c0)="7ee4b6108e338795bad47b8791a98988e64ab3d8a7592a9382f752944e87e02b4847a802c09b4db635af0a4ae37a83b2fcdd5c230ad30db2d43a572dd3b801b0cf8d09015e0cabd2302c33cda7c5d4cde93bb74bc630653861f83fcfabedbb2d7713627304a3b2f149d967a2c0efbff1ed2ea36191d8225f52d882e3e78d0b959284ba525ea4165aaa12ee4110bfe1341fc71805cab412957165cd263fd724a935d8a82a436488c42181d9e40406f5d52208c45052207bdd5dc989e6137228b92fc163e504236fb57e506ed848339f2989139715dd2dfa149dcae9307a93"}) r6 = memfd_secret(0x80000) ioctl$CDROMRESET(r6, 0x5312) lseek(r1, 0x2, 0x4) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x210202, 0x0) r8 = dup2(r3, r4) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000640)=r8, 0x1) 21:32:04 executing program 6: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4800) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x40000000}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000001c0)=""/91) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000240)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000280)="773addc78a0600550238c3fa0e91aca4b2003eb73955692c6b55d630deac4988b19d467bee9386e91d88839b926c884c59ede26876d741846e120c0b674603dd9113f5296ec84dd75ecc823c316cdb6f20e532816384ddfd497cb5cea5af4150e752cd721e8284b03518a30afe7e3d6a50bbe3ab6064841ecfb89adb84745de5ce4f963892dee942f08a90fa1aae6a518fac31cf3ee5eeea09f696e51b42a1e866c2414b0cb4bee444486eb8279b77b48c8c2530af260ec50c25b6c861df41ba40dfa32831bb5de07a9640c901ecbeb15a22d627e4b90a4e7dc112868b8abc5e7b9c33cd9c94431cc9ae2053b6c7df845e9cf085f7", 0xf5) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$setsig(0x4203, r5, 0x20, &(0x7f00000003c0)={0x9, 0xffffffe6, 0x1}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) fsetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='security.selinux\x00', &(0x7f0000000480)='ns/user\x00', 0x8, 0x1) fchdir(r0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0xa4400, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000500)={r1}) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000540)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x7, 0x2, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7, 0x20, 0x7, 0x3}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x14}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) [ 133.457445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.463742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.466452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.472352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.476826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.531048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.535733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.539015] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.551025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.568004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.590199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.607523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.609841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.612422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.614451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.616808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.629583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.639703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.643768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.652259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.655725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.706593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.709771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.722371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.728325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.746077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 133.748765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.751504] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 133.759614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.762693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 133.765093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.766802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 133.768805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 133.782773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.799703] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 133.806026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.807725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 133.845491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 133.855038] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 133.881381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 135.538705] Bluetooth: hci0: command tx timeout [ 135.602245] Bluetooth: hci1: command tx timeout [ 135.729487] Bluetooth: hci3: command tx timeout [ 135.730388] Bluetooth: hci2: command tx timeout [ 135.793442] Bluetooth: hci4: command tx timeout [ 135.857206] Bluetooth: hci5: command tx timeout [ 135.985330] Bluetooth: hci7: command tx timeout [ 135.986004] Bluetooth: hci6: command tx timeout [ 137.585373] Bluetooth: hci0: command tx timeout [ 137.651165] Bluetooth: hci1: command tx timeout [ 137.778349] Bluetooth: hci3: command tx timeout [ 137.778832] Bluetooth: hci2: command tx timeout [ 137.842289] Bluetooth: hci4: command tx timeout [ 137.905201] Bluetooth: hci5: command tx timeout [ 138.034470] Bluetooth: hci7: command tx timeout [ 138.034961] Bluetooth: hci6: command tx timeout [ 139.635283] Bluetooth: hci0: command tx timeout [ 139.698259] Bluetooth: hci1: command tx timeout [ 139.826252] Bluetooth: hci2: command tx timeout [ 139.826733] Bluetooth: hci3: command tx timeout [ 139.889236] Bluetooth: hci4: command tx timeout [ 139.953786] Bluetooth: hci5: command tx timeout [ 140.082299] Bluetooth: hci7: command tx timeout [ 140.082797] Bluetooth: hci6: command tx timeout [ 141.682732] Bluetooth: hci0: command tx timeout [ 141.746547] Bluetooth: hci1: command tx timeout [ 141.873241] Bluetooth: hci3: command tx timeout [ 141.873728] Bluetooth: hci2: command tx timeout [ 141.938344] Bluetooth: hci4: command tx timeout [ 142.001490] Bluetooth: hci5: command tx timeout [ 142.130211] Bluetooth: hci6: command tx timeout [ 142.130701] Bluetooth: hci7: command tx timeout [ 196.233539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.237580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.240905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.250106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.256028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.314666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.315791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.319083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.319499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.321861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.324629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.334459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.341003] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.348684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.350927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.365357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.373788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.382944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.419052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.429645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.494456] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.498788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.507967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.549729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.576917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.583420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.610764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.623243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.631470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.645783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.667866] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 196.678680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 196.690441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.698554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.719078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.719812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.724351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.739926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 196.780016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 196.784693] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 198.322309] Bluetooth: hci0: command tx timeout [ 198.449241] Bluetooth: hci1: command tx timeout [ 198.449996] Bluetooth: hci2: command tx timeout [ 198.513446] Bluetooth: hci3: command tx timeout [ 198.705535] Bluetooth: hci6: command tx timeout [ 198.833239] Bluetooth: hci5: command tx timeout [ 198.897527] Bluetooth: hci7: command tx timeout [ 198.898182] Bluetooth: hci4: command tx timeout [ 200.369201] Bluetooth: hci0: command tx timeout [ 200.499478] Bluetooth: hci2: command tx timeout [ 200.499959] Bluetooth: hci1: command tx timeout [ 200.561184] Bluetooth: hci3: command tx timeout [ 200.754487] Bluetooth: hci6: command tx timeout [ 200.883174] Bluetooth: hci5: command tx timeout [ 200.946666] Bluetooth: hci4: command tx timeout [ 200.947107] Bluetooth: hci7: command tx timeout [ 202.419163] Bluetooth: hci0: command tx timeout [ 202.546787] Bluetooth: hci1: command tx timeout [ 202.547310] Bluetooth: hci2: command tx timeout [ 202.610214] Bluetooth: hci3: command tx timeout [ 202.803186] Bluetooth: hci6: command tx timeout [ 202.930203] Bluetooth: hci5: command tx timeout [ 202.993306] Bluetooth: hci7: command tx timeout [ 202.993768] Bluetooth: hci4: command tx timeout [ 204.468225] Bluetooth: hci0: command tx timeout [ 204.594336] Bluetooth: hci1: command tx timeout [ 204.594829] Bluetooth: hci2: command tx timeout [ 204.658188] Bluetooth: hci3: command tx timeout [ 204.850190] Bluetooth: hci6: command tx timeout [ 204.978512] Bluetooth: hci5: command tx timeout [ 205.041293] Bluetooth: hci4: command tx timeout [ 205.041759] Bluetooth: hci7: command tx timeout [ 258.309244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.314821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.320819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.333085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.343876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.389700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.393999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.397781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.405843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.409653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.578655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.602804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.621743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.628640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.631414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.635000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.645772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.653610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.679536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.697668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.704400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.715036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.721992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.727968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.729710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.730730] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.735819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.738013] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.740590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.744935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.747691] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.747769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.762470] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.765465] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.768775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.840880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.865772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.890469] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.902784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.922202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.402193] Bluetooth: hci0: command tx timeout [ 260.466302] Bluetooth: hci1: command tx timeout [ 260.721316] Bluetooth: hci3: command tx timeout [ 260.785740] Bluetooth: hci5: command tx timeout [ 260.849265] Bluetooth: hci4: command tx timeout [ 260.849926] Bluetooth: hci2: command tx timeout [ 260.850500] Bluetooth: hci7: command tx timeout [ 261.041224] Bluetooth: hci6: command tx timeout [ 262.449400] Bluetooth: hci0: command tx timeout [ 262.513535] Bluetooth: hci1: command tx timeout [ 262.769255] Bluetooth: hci3: command tx timeout [ 262.833483] Bluetooth: hci5: command tx timeout [ 262.897289] Bluetooth: hci7: command tx timeout [ 262.897739] Bluetooth: hci2: command tx timeout [ 262.898334] Bluetooth: hci4: command tx timeout [ 263.089256] Bluetooth: hci6: command tx timeout [ 264.498464] Bluetooth: hci0: command tx timeout [ 264.561175] Bluetooth: hci1: command tx timeout [ 264.817450] Bluetooth: hci3: command tx timeout [ 264.882331] Bluetooth: hci5: command tx timeout [ 264.945935] Bluetooth: hci7: command tx timeout [ 264.946410] Bluetooth: hci4: command tx timeout [ 264.946830] Bluetooth: hci2: command tx timeout [ 265.137475] Bluetooth: hci6: command tx timeout [ 266.545220] Bluetooth: hci0: command tx timeout [ 266.609199] Bluetooth: hci1: command tx timeout [ 266.865191] Bluetooth: hci3: command tx timeout [ 266.929702] Bluetooth: hci5: command tx timeout [ 266.993322] Bluetooth: hci2: command tx timeout [ 266.993772] Bluetooth: hci4: command tx timeout [ 266.994375] Bluetooth: hci7: command tx timeout [ 267.185235] Bluetooth: hci6: command tx timeout [ 320.715734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.720918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.726368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.735986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.740880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.962838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.965436] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.967586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.976458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.981725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.105088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.112659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.122576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.135744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.140861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.261077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.265734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.276607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.295653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.297796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.302307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.312925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.318629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.324343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.327397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.334106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.356143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.358547] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.360989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.362852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.368495] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.369841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.373547] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.378647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.382854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.396346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.399427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.412683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.416271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.435011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.802461] Bluetooth: hci0: command tx timeout [ 323.058527] Bluetooth: hci1: command tx timeout [ 323.249228] Bluetooth: hci2: command tx timeout [ 323.441256] Bluetooth: hci4: command tx timeout [ 323.441283] Bluetooth: hci3: command tx timeout [ 323.569335] Bluetooth: hci7: command tx timeout [ 323.634239] Bluetooth: hci5: command tx timeout [ 323.634713] Bluetooth: hci6: command tx timeout [ 324.851158] Bluetooth: hci0: command tx timeout [ 325.106200] Bluetooth: hci1: command tx timeout [ 325.297175] Bluetooth: hci2: command tx timeout [ 325.489563] Bluetooth: hci3: command tx timeout [ 325.490378] Bluetooth: hci4: command tx timeout [ 325.618269] Bluetooth: hci7: command tx timeout [ 325.681617] Bluetooth: hci6: command tx timeout [ 325.682080] Bluetooth: hci5: command tx timeout [ 326.899318] Bluetooth: hci0: command tx timeout [ 327.153217] Bluetooth: hci1: command tx timeout [ 327.345202] Bluetooth: hci2: command tx timeout [ 327.539154] Bluetooth: hci4: command tx timeout [ 327.539171] Bluetooth: hci3: command tx timeout [ 327.666360] Bluetooth: hci7: command tx timeout [ 327.729226] Bluetooth: hci5: command tx timeout [ 327.729249] Bluetooth: hci6: command tx timeout [ 328.945898] Bluetooth: hci0: command tx timeout [ 329.201766] Bluetooth: hci1: command tx timeout [ 329.393304] Bluetooth: hci2: command tx timeout [ 329.585570] Bluetooth: hci3: command tx timeout [ 329.586593] Bluetooth: hci4: command tx timeout [ 329.713525] Bluetooth: hci7: command tx timeout [ 329.778047] Bluetooth: hci5: command tx timeout [ 329.778095] Bluetooth: hci6: command tx timeout [ 383.049176] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.052558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.060849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.075100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.080724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.304152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.308726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.313866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.323024] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.327549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.508431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.511741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.514345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.523588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.527835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.628030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.630652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.636382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.637926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.640082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.644485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.646590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.650629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.655907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.665438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.667850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.670072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.677547] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.680330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.682732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.768949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.772880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.778757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.789827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.803980] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.192297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.212723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.225014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.233527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.236488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 385.138199] Bluetooth: hci0: command tx timeout [ 385.394280] Bluetooth: hci1: command tx timeout [ 385.585341] Bluetooth: hci2: command tx timeout [ 385.714801] Bluetooth: hci4: command tx timeout [ 385.777288] Bluetooth: hci3: command tx timeout [ 385.778288] Bluetooth: hci5: command tx timeout [ 386.034189] Bluetooth: hci6: command tx timeout [ 386.290206] Bluetooth: hci7: command tx timeout [ 387.186396] Bluetooth: hci0: command tx timeout [ 387.442310] Bluetooth: hci1: command tx timeout [ 387.636278] Bluetooth: hci2: command tx timeout [ 387.763140] Bluetooth: hci4: command tx timeout [ 387.825212] Bluetooth: hci5: command tx timeout [ 387.825702] Bluetooth: hci3: command tx timeout [ 388.082326] Bluetooth: hci6: command tx timeout [ 388.338165] Bluetooth: hci7: command tx timeout [ 389.233287] Bluetooth: hci0: command tx timeout [ 389.492149] Bluetooth: hci1: command tx timeout [ 389.682547] Bluetooth: hci2: command tx timeout [ 389.810210] Bluetooth: hci4: command tx timeout [ 389.873196] Bluetooth: hci3: command tx timeout [ 389.873216] Bluetooth: hci5: command tx timeout [ 390.129360] Bluetooth: hci6: command tx timeout [ 390.387470] Bluetooth: hci7: command tx timeout [ 391.281322] Bluetooth: hci0: command tx timeout [ 391.537332] Bluetooth: hci1: command tx timeout [ 391.731155] Bluetooth: hci2: command tx timeout [ 391.857962] Bluetooth: hci4: command tx timeout [ 391.921248] Bluetooth: hci3: command tx timeout [ 391.922465] Bluetooth: hci5: command tx timeout [ 392.177223] Bluetooth: hci6: command tx timeout [ 392.433446] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:37:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffff1100590fde1 RDX=dffffc0000000000 RSI=000000007d9d02df RDI=ffff88806ce31850 RBP=ffff88802c87ef08 RSP=ffff88802c87ee40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88802c87ef10 R13=ffff88802c87eef8 R14=ffff88802c87eef1 R15=ffff88802c87eeb0 RIP=ffffffff81353ece RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd83d2941f0 CR3=000000000b608000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81b2244c RDX=dffffc0000000000 RSI=00000000d6e639b4 RDI=ffff88806cf31850 RBP=ffff88802c177840 RSP=ffff88802c177778 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88802c177848 R13=ffff88802c177830 R14=ffff88802c177829 R15=ffff88802c1777e8 RIP=ffffffff81353ef4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f97a518a820 CR3=0000000029eb5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000