Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:54392' (ECDSA) to the list of known hosts. 2025/06/22 01:02:07 fuzzer started 2025/06/22 01:02:08 dialing manager at localhost:33119 syzkaller login: [ 95.678919] cgroup: Unknown subsys name 'net' [ 95.805722] cgroup: Unknown subsys name 'cpuset' [ 95.848909] cgroup: Unknown subsys name 'rlimit' 2025/06/22 01:02:26 syscalls: 2214 2025/06/22 01:02:26 code coverage: enabled 2025/06/22 01:02:26 comparison tracing: enabled 2025/06/22 01:02:26 extra coverage: enabled 2025/06/22 01:02:26 setuid sandbox: enabled 2025/06/22 01:02:26 namespace sandbox: enabled 2025/06/22 01:02:26 Android sandbox: enabled 2025/06/22 01:02:26 fault injection: enabled 2025/06/22 01:02:26 leak checking: enabled 2025/06/22 01:02:26 net packet injection: enabled 2025/06/22 01:02:26 net device setup: enabled 2025/06/22 01:02:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 01:02:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 01:02:26 USB emulation: enabled 2025/06/22 01:02:26 hci packet injection: enabled 2025/06/22 01:02:26 wifi device emulation: enabled 2025/06/22 01:02:26 802.15.4 emulation: enabled 2025/06/22 01:02:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 01:02:27 starting 8 fuzzer processes 01:02:27 executing program 0: sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20048084}, 0x10) r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x565}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x8080) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x180}, 0x40844) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x4100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r3, 0x901, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xab}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x44800) r4 = open_tree(r2, &(0x7f0000000600)='./file0\x00', 0x8000) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe8b4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) read(r2, &(0x7f00000007c0)=""/107, 0x6b) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000940)={0x0, 0x7, 0x0, [0x0, 0x9c2, 0x401, 0x5, 0x5], [0x6, 0xec56d43, 0xfff, 0x9, 0x2, 0x5, 0x2c7fee39, 0xd95d, 0x8, 0x8, 0x0, 0x23, 0x7fffffff, 0x4, 0xb4e, 0x36, 0x8, 0x6, 0x1, 0x9, 0x1c9e, 0x3, 0x8, 0x4, 0xa00000000, 0x6, 0x3, 0x6, 0x800, 0x5e4b, 0x58, 0x960, 0x1, 0x2, 0x8, 0x5, 0x10001, 0x8000, 0x8001, 0x3, 0x8001, 0x3, 0x9, 0x81, 0xf39, 0x8, 0x6, 0x7, 0x3, 0x200, 0x37ea6427, 0xc9, 0x81, 0x100000000, 0x3f, 0x3, 0x81, 0x3, 0x7, 0x80, 0x0, 0x80, 0x11, 0x1, 0xfffffffffffffffb, 0x400, 0x1, 0x1, 0x40, 0x3f, 0xffffffff91a212a8, 0xd3, 0x7, 0x5, 0xfffffffffffffffe, 0x90000000, 0x7f, 0x929, 0x1ff, 0x0, 0xffffffff7fffffff, 0x7, 0x3, 0x0, 0xfff, 0x6, 0x4, 0x0, 0x7ec2d76a, 0x1, 0x20, 0x2, 0x8, 0x80, 0xf7, 0x0, 0x3, 0x800, 0x2, 0x7, 0x0, 0x800, 0x2, 0x80000001, 0xffff, 0x800, 0xfff, 0x4, 0x4000000000000, 0x3, 0x200, 0x2, 0x9, 0x4, 0x3, 0x2, 0x8001, 0x3, 0x0, 0x0, 0x7]}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000d80)={'veth0_virt_wifi\x00', {0x2, 0x0, @remote}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000dc0)={0x0, 0x108672bf, 0x6}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000e40)={{r5}, 0x0, 0x18, @unused=[0x10000, 0x2, 0x1, 0x10000], @name="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"}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0xbbb00c2334b53a1}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x20, r6, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7e}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4050) 01:02:27 executing program 1: sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x45}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x8010) socketpair(0x38, 0x6, 0x7ff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff4bc0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x140}, 0x1, 0x0, 0x0, 0xa881}, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0)) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000400)={0x3ce4, 0x7, 0x5, 0xfff, 0x4, [{0x10000, 0x5, 0x8ab1, '\x00', 0x600}, {0x1, 0x9, 0x8, '\x00', 0x100}, {0x8, 0x3, 0x0, '\x00', 0x554}, {0x3, 0x8, 0x5, '\x00', 0x1041}]}) r3 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000500)={0x373, 0x65, 0x400, {0x5, 0x3}, 0xed6, 0x8}) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000580)={0x1, 0x4}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000005c0)={0x8000, 0x3, 0x800, 0xfffffffd, 0x1f, "e58efaec598043d76c1e35fd986f8c2fa0a23d", 0x40, 0x40}) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000600)) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000640)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x30001, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000700)={0x4, &(0x7f00000006c0)=[{0x3ff, 0xc1, 0x6f}, {0x3eb, 0x20, 0x32, 0x4}, {0x1, 0x20, 0x3, 0x1}, {0x9, 0x3, 0x1}]}) sendfile(r5, r6, &(0x7f0000000740)=0x2, 0x200) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000780)=0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000007c0)={{0xb9, 0x9}, {0x7, 0x81}, 0x5, 0x0, 0x5}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f0000000840)="705464af71ae64ce989967d9005e173942c4e736d5d9581eef28ef8e1184b6b1064aa0be3706b33c2d09035c3f844f0b1009be3ebd7608ba854acc1fac52e029c56c20c302fba9f49d85a5991163d5a113fd788ac42957e82c57a01263b30628dcdf815586a564b862c97152ff6611ca725d4139682a1f5a59950e657b825b0efc05e283c3ba3e97e71079cf9c4f9dab66af2a06e2e16851fab044a6b775159ba6a3da7502935f1cdadf47c4aae2249677f079", 0xb3, r1}, 0x68) 01:02:27 executing program 2: sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "8856b241ed5111"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "4dc09c"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x41) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x62, 0x9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback, 0x40, 0x7, 0x40000, 0x3}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000340)="2406d0f24146456cb0a51fba724469640a92bac824ad00c195b7e54bf9a48a10d6509a3a3c04ddb30565ac59b05c0e7836e88431a2c6c8f2e9a5e48ad82341de54bcf82d2da2be3f2e068cf204fd1f4f0fc005c1ca0defe8e4731fb5b13156d6606eff866c4a6f6ac9aa539183947d9028d1df7553347188ba8757f81114af0d980502e68cbbbb73f31f456fe3e95c8e840aeed83314ceb03ca3236667df891d48aa8b2986f9c052747c954646642433ac0cb0f1de4b48f5b75a8f0a8e92ac3e6f36c4da34db3117e36444db5bbae6225db9ea4c5cd8af8c8e17fc", 0xdb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008011}, 0x20004045) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40d0}, 0x20008015) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'sit0\x00', r0, 0x29, 0x0, 0x7f, 0x5, 0x2, @remote, @mcast2, 0x20, 0x7800, 0xff, 0x5}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008084}, 0x4000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x40, 0x9, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x40, 0x700, 0x7, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'ip6gre0\x00', r6, 0x4, 0x7, 0x57, 0x2, 0x10, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x40, 0x8, 0x7}}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', r6, 0x2f, 0x5, 0x3f, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, 0x1, 0x20, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10400400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1cc, r8, 0x1820, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r0}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000fc0)={0x5e, 0x6, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x3f, 0x5}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x81, [0x6d, 0x1, 0x0]}}, @ra={0x5, 0x2, 0x6}]}, 0x38) 01:02:27 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) fstatfs(r1, &(0x7f00000000c0)=""/193) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='./$\x00', &(0x7f0000000200)='./file0\x00', r2) r3 = open_tree(r2, &(0x7f0000000280)='./file0\x00', 0x0) inotify_rm_watch(r3, 0x0) r4 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a, 0x2}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x40400c0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000004c0)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x301, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x4000000) lsetxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x1) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2402}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x10, 0x17, [0x4, 0xe32d4c5, 0x5]}, @CTA_TUPLE_MASTER={0x4}]}, 0x48}}, 0x40) truncate(&(0x7f0000000900)='./file0\x00', 0x5) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000940)=""/129) [ 114.981663] audit: type=1400 audit(1750554147.972:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:02:27 executing program 4: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80, 0x80800) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89ee, &(0x7f0000000140)="768b270471bc6009df97cc7277740c7e0f76797b028dba8f7591848c4090ea3b7bf854d847632b9cca37481daef7ea09568fb33c2463425ae95adc8ed359d4d933e10b3335857361") r2 = accept$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2e0, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x6}}}}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4a8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x618}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x682}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51e20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000881) r4 = open(&(0x7f0000000640)='./file0\x00', 0x10200, 0x34) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "d3e5e79016fa58fc9366e15c8be578074ad9636fab64aa3de6c3be49e424d853"}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004050}, 0x800) accept4(r1, &(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000880)=0x80, 0x40000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000008c0)) fstat(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee00}}, './file0\x00'}) recvmsg$unix(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/82, 0x52}, {&(0x7f0000000b80)=""/166, 0xa6}, {&(0x7f0000000c40)=""/134, 0x86}, {&(0x7f0000000d00)=""/81, 0x51}, {&(0x7f0000000d80)=""/23, 0x17}, {&(0x7f0000000dc0)=""/25, 0x19}, {&(0x7f0000000e00)=""/128, 0x80}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) getgroups(0x8, &(0x7f0000001040)=[0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01]) setxattr$system_posix_acl(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='system.posix_acl_access\x00', &(0x7f0000001080)={{}, {0x1, 0x1}, [{0x2, 0x6, r6}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2, r7}, {0x2, 0x4, 0xee00}], {0x4, 0x2}, [{0x8, 0x4, r8}, {0x8, 0x5, 0xee00}, {0x8, 0x2, r10}, {0x8, 0x0, r11}], {0x10, 0x1}, {0x20, 0x6}}, 0x64, 0x1) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/class/rfkill', 0x200, 0x2) getsockopt$IP_SET_OP_GET_FNAME(r12, 0x1, 0x53, &(0x7f0000001200)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000001240)=0x2c) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000001280)={'filter\x00', 0xe1, "c08bf1547331ba7328d0adf926cb2ba74a22dae2b5c17bd0f6a3bed198ce8c86a3123789fbc5e8e4a82935cdcfd1f363de3c9ecfcf3d2bd5b6dca27c4e7c55aa7351f4b055a14af3c7d816002298713dcdedd7dfc6d8689484a234b2fc3ff3acbc886c2a54232c4d9ffeca7961189bebba51d90911e50e8e0fe14bf403817bf0acf9ea3df005338e624d716f82dca56b000486ab2d27c8c48acf996d573b87b00740005bb1b3c49eadebba01b63edd96a78cfe5c0a478132b9403557b8ca2e88260334b87aa0d19e5844533f8331723b2557bdb1defed720af50c2e9f8898c33c5"}, &(0x7f00000013c0)=0x105) 01:02:27 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x80000, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x96e, 0x1000, 0x5, {0x5, 0xff}, 0x3ff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x40000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) fcntl$setflags(r2, 0x2, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x0, 0x81, 0x7, 0x0, 0x45, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x40, 0x80, 0x9}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x224, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x800) signalfd(r2, &(0x7f0000000a40)={[0x2f19c875]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$HIDIOCSUSAGE(r6, 0x4018480c, &(0x7f0000000ac0)={0x1, 0x2, 0x7, 0xf3db, 0x8, 0x4}) r7 = accept4(r6, &(0x7f0000000b00)=@ethernet={0x0, @remote}, &(0x7f0000000b80)=0x80, 0x0) statx(r6, &(0x7f0000000bc0)='./file0/file0\x00', 0x1000, 0x7ff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@empty, @in=@multicast1, 0x4e24, 0x9, 0x6, 0x2, 0x2, 0x0, 0x0, 0x88, 0x0, r8}, {0x5, 0x1d9, 0x7e, 0x8, 0x0, 0xfffffffffffffff7, 0x0, 0x6}, {0x1, 0x7fff, 0x400, 0x2}, 0x1000, 0x6e6bb5, 0x0, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d4, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x3506, 0x3, 0x3, 0xab, 0x0, 0x1, 0x6}}, 0xe8) 01:02:28 executing program 6: r0 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4e20, 0x7, 0x4e22, 0xfff, 0x2, 0x80, 0x20, 0x3b, 0x0, r0}, {0x5, 0x3, 0x6, 0x9178, 0x8001, 0x80000001, 0x3a2, 0x575}, {0x9, 0x477, 0x5, 0xa6}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3}, {{@in6=@private1, 0x4d4, 0xff}, 0x2, @in=@empty, 0x3504, 0x3, 0x1, 0x6, 0x3, 0x200, 0xffffff7d}}, 0xe8) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) semctl$GETZCNT(0xffffffffffffffff, 0x4, 0xf, &(0x7f0000000180)=""/4096) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r1) r3 = accept$packet(r1, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001240)=0x14) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x44004800) add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001440)={'broute\x00', 0x0, 0x0, 0x0, [0x5f5, 0x1, 0x9, 0x9], 0x5, &(0x7f00000013c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000001540)=0x1, 0x0, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000001580)) ioctl$TCXONC(r1, 0x540a, 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000015c0), 0x20000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000001600)={0x5, 0x20000, 0x1238, 0x5, 0xf, "729af625ba9cc64dcc5a422123ff7127a06ad7"}) r6 = dup3(r3, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000001640)) syz_io_uring_setup(0x28da, &(0x7f00000016c0)={0x0, 0xea3d, 0x2, 0x3, 0x11, 0x0, r6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001740), &(0x7f0000001780)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000018c0)={0x0, 0x1, 0x6, @remote}, 0x10) 01:02:28 executing program 7: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3f, 0xca, 0x7, 0x3df47d1b, 0x2, 0x6, 0x2, 0x337, 0x40, 0x38b, 0xfffffe01, 0x5, 0x38, 0x2, 0x1, 0x4, 0x5}, [{0x6, 0x8000, 0x6, 0x3, 0x37d1, 0x2, 0x3, 0xffffffff80000000}], "f759dd932ea830e65fb7c1e228a85ae5053057b21110a6a8429a9fc59064b2ba8cb98139", ['\x00']}, 0x19c) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000001c0)={0x1, 0x100000001}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x492000, 0xa3) mq_getsetattr(r1, &(0x7f0000000240)={0xffffffffffffff17, 0x10001, 0x6, 0x3ff}, &(0x7f0000000280)) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4000800) r2 = epoll_create(0x3) flock(r2, 0x1) r3 = openat2(r1, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x101000, 0x41, 0x4}, 0x18) ioctl$FICLONE(r3, 0x40049409, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x49, 0x0, &(0x7f0000000600)="6326dc8381aaac1330d6ae8343f07d5b4f88b34430f8d3b116ba8a9d0666437fa9efefb609f4f18d01798bc562cfbe2e84eb7823721bc1f738afaed42db98edf26ff8253ab199e2c65"}) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000006c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x40000) r4 = syz_open_pts(r3, 0x480941) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000740)) faccessat2(r1, &(0x7f0000000780)='./file1\x00', 0x0, 0x600) sendmsg$sock(r3, &(0x7f0000000a40)={&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x2, 0x4, 0x3}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="48f9d6c1cee2e9826b5bf834e52f430c0c83b1c0cc941ea06b044537b0c3e80c774245cb55fe561186fc572a3c8fa3845ca42dc1fe820eca13a650fbc3a5f3763d21ea9859719595c9c18edd44a90457ceafe1198a9ac389cb11721580ebac2bc33b5d37259d3fe491ae2cb222f8b21dace40466445c86ac8deb8829e436de962d0eef63ce626a6f74b5592275b86d0ba1c2dc7df7a99053c27f613c313dea36fc2fa0d4d99bb7", 0xa7}, {&(0x7f0000000900)}], 0x2, &(0x7f0000000980)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}], 0xa8}, 0x80) fdatasync(r2) [ 116.334125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.335989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.337751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.348480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.360490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.458879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.467745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.477298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.485736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.491158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.494774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.500842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.506801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.524757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.539599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.547196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.549783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.559618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.594097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.601606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.607028] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.609627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.613244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.620010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.622041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.624276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.625532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.627535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.682162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.685084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.699835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.716697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.729391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.735903] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.740914] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.754746] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.771948] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.773418] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.786996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.787750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.419672] Bluetooth: hci0: command tx timeout [ 118.548539] Bluetooth: hci1: command tx timeout [ 118.611563] Bluetooth: hci2: command tx timeout [ 118.675486] Bluetooth: hci3: command tx timeout [ 118.676062] Bluetooth: hci4: command tx timeout [ 118.740380] Bluetooth: hci5: command tx timeout [ 118.868518] Bluetooth: hci6: command tx timeout [ 118.931524] Bluetooth: hci7: command tx timeout [ 120.468460] Bluetooth: hci0: command tx timeout [ 120.595472] Bluetooth: hci1: command tx timeout [ 120.661335] Bluetooth: hci2: command tx timeout [ 120.723454] Bluetooth: hci3: command tx timeout [ 120.723907] Bluetooth: hci4: command tx timeout [ 120.787999] Bluetooth: hci5: command tx timeout [ 120.917641] Bluetooth: hci6: command tx timeout [ 120.979371] Bluetooth: hci7: command tx timeout [ 122.516344] Bluetooth: hci0: command tx timeout [ 122.643502] Bluetooth: hci1: command tx timeout [ 122.708289] Bluetooth: hci2: command tx timeout [ 122.773152] Bluetooth: hci3: command tx timeout [ 122.773744] Bluetooth: hci4: command tx timeout [ 122.835633] Bluetooth: hci5: command tx timeout [ 122.963519] Bluetooth: hci6: command tx timeout [ 123.027572] Bluetooth: hci7: command tx timeout [ 124.563648] Bluetooth: hci0: command tx timeout [ 124.692418] Bluetooth: hci1: command tx timeout [ 124.755462] Bluetooth: hci2: command tx timeout [ 124.819621] Bluetooth: hci4: command tx timeout [ 124.820083] Bluetooth: hci3: command tx timeout [ 124.883364] Bluetooth: hci5: command tx timeout [ 125.011447] Bluetooth: hci6: command tx timeout [ 125.075586] Bluetooth: hci7: command tx timeout [ 178.849920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.855155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.857529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.868574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.873086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.919764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.922764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.925073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.931909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.935852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.958039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.965680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.982673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.990072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.004284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.006990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.008075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.015193] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.031082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.042898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.049001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.054784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.064572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.066979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.068853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.078738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.082451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.090199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.091439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.095660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.099718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.110940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.128845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.141701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.149027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.151431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.157878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.161170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.228891] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.254779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.947591] Bluetooth: hci0: command tx timeout [ 181.012510] Bluetooth: hci1: command tx timeout [ 181.139447] Bluetooth: hci2: command tx timeout [ 181.139493] Bluetooth: hci5: command tx timeout [ 181.204416] Bluetooth: hci3: command tx timeout [ 181.267388] Bluetooth: hci6: command tx timeout [ 181.331457] Bluetooth: hci7: command tx timeout [ 181.331490] Bluetooth: hci4: command tx timeout [ 182.995405] Bluetooth: hci0: command tx timeout [ 183.059579] Bluetooth: hci1: command tx timeout [ 183.187464] Bluetooth: hci5: command tx timeout [ 183.187937] Bluetooth: hci2: command tx timeout [ 183.253582] Bluetooth: hci3: command tx timeout [ 183.316417] Bluetooth: hci6: command tx timeout [ 183.379610] Bluetooth: hci7: command tx timeout [ 183.379663] Bluetooth: hci4: command tx timeout [ 185.044373] Bluetooth: hci0: command tx timeout [ 185.108999] Bluetooth: hci1: command tx timeout [ 185.236412] Bluetooth: hci2: command tx timeout [ 185.236900] Bluetooth: hci5: command tx timeout [ 185.300755] Bluetooth: hci3: command tx timeout [ 185.363533] Bluetooth: hci6: command tx timeout [ 185.427399] Bluetooth: hci7: command tx timeout [ 185.428656] Bluetooth: hci4: command tx timeout [ 187.091382] Bluetooth: hci0: command tx timeout [ 187.156511] Bluetooth: hci1: command tx timeout [ 187.283398] Bluetooth: hci5: command tx timeout [ 187.283488] Bluetooth: hci2: command tx timeout [ 187.347681] Bluetooth: hci3: command tx timeout [ 187.411452] Bluetooth: hci6: command tx timeout [ 187.475590] Bluetooth: hci4: command tx timeout [ 187.475744] Bluetooth: hci7: command tx timeout [ 241.067195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.069841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.071813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.085993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.090240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.132561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.136953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.139804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.146688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.150839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.263865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.284112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.290872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.293938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.318510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.337853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.345960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.356979] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.361036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.362819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.366806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.367014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.368125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.374136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.381116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.387749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.396855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.399090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.404795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.417977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.496615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.502837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.505202] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.511039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.514741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.519931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.524194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.534834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.557797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.579633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.155821] Bluetooth: hci0: command tx timeout [ 243.219472] Bluetooth: hci1: command tx timeout [ 243.475470] Bluetooth: hci2: command tx timeout [ 243.475790] Bluetooth: hci3: command tx timeout [ 243.476266] Bluetooth: hci5: command tx timeout [ 243.476693] Bluetooth: hci4: command tx timeout [ 243.603875] Bluetooth: hci7: command tx timeout [ 243.667483] Bluetooth: hci6: command tx timeout [ 245.204352] Bluetooth: hci0: command tx timeout [ 245.268424] Bluetooth: hci1: command tx timeout [ 245.523676] Bluetooth: hci4: command tx timeout [ 245.523698] Bluetooth: hci5: command tx timeout [ 245.524159] Bluetooth: hci3: command tx timeout [ 245.524647] Bluetooth: hci2: command tx timeout [ 245.651404] Bluetooth: hci7: command tx timeout [ 245.715398] Bluetooth: hci6: command tx timeout [ 247.251422] Bluetooth: hci0: command tx timeout [ 247.315660] Bluetooth: hci1: command tx timeout [ 247.571499] Bluetooth: hci3: command tx timeout [ 247.571745] Bluetooth: hci2: command tx timeout [ 247.571958] Bluetooth: hci5: command tx timeout [ 247.572834] Bluetooth: hci4: command tx timeout [ 247.699395] Bluetooth: hci7: command tx timeout [ 247.764356] Bluetooth: hci6: command tx timeout [ 249.300380] Bluetooth: hci0: command tx timeout [ 249.364491] Bluetooth: hci1: command tx timeout [ 249.619653] Bluetooth: hci2: command tx timeout [ 249.620127] Bluetooth: hci5: command tx timeout [ 249.620795] Bluetooth: hci3: command tx timeout [ 249.621203] Bluetooth: hci4: command tx timeout [ 249.748376] Bluetooth: hci7: command tx timeout [ 249.811673] Bluetooth: hci6: command tx timeout [ 303.471057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.481786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.487003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.495526] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.503090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.612847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.625871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.631653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.666951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.671510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.691525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.697108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.703904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.724829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.733534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.735127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.748666] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.768156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.803343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.810988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.815876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.831556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.840912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.850954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.863604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.869140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.870109] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.874034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.878107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.885137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.895943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.900857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.917695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.921812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.928928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.045515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.049792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.052203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.059775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.064596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.556533] Bluetooth: hci0: command tx timeout [ 305.748412] Bluetooth: hci1: command tx timeout [ 305.812526] Bluetooth: hci2: command tx timeout [ 305.876415] Bluetooth: hci3: command tx timeout [ 306.003431] Bluetooth: hci4: command tx timeout [ 306.009570] Bluetooth: hci5: command tx timeout [ 306.009594] Bluetooth: hci6: command tx timeout [ 306.132423] Bluetooth: hci7: command tx timeout [ 307.605365] Bluetooth: hci0: command tx timeout [ 307.798384] Bluetooth: hci1: command tx timeout [ 307.860387] Bluetooth: hci2: command tx timeout [ 307.923378] Bluetooth: hci3: command tx timeout [ 308.051366] Bluetooth: hci6: command tx timeout [ 308.052591] Bluetooth: hci5: command tx timeout [ 308.053012] Bluetooth: hci4: command tx timeout [ 308.179480] Bluetooth: hci7: command tx timeout [ 309.652353] Bluetooth: hci0: command tx timeout [ 309.843368] Bluetooth: hci1: command tx timeout [ 309.909371] Bluetooth: hci2: command tx timeout [ 309.972487] Bluetooth: hci3: command tx timeout [ 310.100764] Bluetooth: hci5: command tx timeout [ 310.101221] Bluetooth: hci4: command tx timeout [ 310.101255] Bluetooth: hci6: command tx timeout [ 310.229525] Bluetooth: hci7: command tx timeout [ 311.700376] Bluetooth: hci0: command tx timeout [ 311.891516] Bluetooth: hci1: command tx timeout [ 311.957390] Bluetooth: hci2: command tx timeout [ 312.020372] Bluetooth: hci3: command tx timeout [ 312.147466] Bluetooth: hci5: command tx timeout [ 312.147957] Bluetooth: hci6: command tx timeout [ 312.148575] Bluetooth: hci4: command tx timeout [ 312.275438] Bluetooth: hci7: command tx timeout [ 366.375272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.378144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.378363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.384951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.391994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.395229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.396701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.410048] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.416276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.419751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.578171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.585027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.588165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.590191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.599515] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.603688] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.633152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.635108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.639807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.641779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.699082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.713796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.720137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.724781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.724801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.732015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.740644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.752891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.768941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.781950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.785346] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.816672] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.820492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.847173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.853991] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.861447] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.869697] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.881887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.888906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.925537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.467656] Bluetooth: hci1: command tx timeout [ 368.467749] Bluetooth: hci0: command tx timeout [ 368.723479] Bluetooth: hci2: command tx timeout [ 368.723879] Bluetooth: hci3: command tx timeout [ 368.787754] Bluetooth: hci4: command tx timeout [ 368.917359] Bluetooth: hci5: command tx timeout [ 369.043531] Bluetooth: hci7: command tx timeout [ 369.043681] Bluetooth: hci6: command tx timeout [ 370.516624] Bluetooth: hci1: command tx timeout [ 370.517343] Bluetooth: hci0: command tx timeout [ 370.773392] Bluetooth: hci3: command tx timeout [ 370.773414] Bluetooth: hci2: command tx timeout [ 370.836489] Bluetooth: hci4: command tx timeout [ 370.965369] Bluetooth: hci5: command tx timeout [ 371.091836] Bluetooth: hci6: command tx timeout [ 371.092414] Bluetooth: hci7: command tx timeout [ 372.563652] Bluetooth: hci0: command tx timeout [ 372.564175] Bluetooth: hci1: command tx timeout [ 372.819477] Bluetooth: hci3: command tx timeout [ 372.820355] Bluetooth: hci2: command tx timeout [ 372.883432] Bluetooth: hci4: command tx timeout [ 373.011645] Bluetooth: hci5: command tx timeout [ 373.139450] Bluetooth: hci6: command tx timeout [ 373.139524] Bluetooth: hci7: command tx timeout [ 374.611722] Bluetooth: hci1: command tx timeout [ 374.611994] Bluetooth: hci0: command tx timeout [ 374.867465] Bluetooth: hci3: command tx timeout [ 374.870317] Bluetooth: hci2: command tx timeout [ 374.931741] Bluetooth: hci4: command tx timeout [ 375.060827] Bluetooth: hci5: command tx timeout [ 375.187478] Bluetooth: hci6: command tx timeout [ 375.187512] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:07:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=000000000000d7f3 RCX=ffffffff83e4fba7 RDX=ffff8880095d3700 RSI=ffffffff83e501f0 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880095efb70 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000006bf9 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81738d98 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa1ba1e44a1 CR3=00000000353cf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880328979a0 RBX=00007f8d9832f000 RCX=ffffffff81b2d0ab RDX=ffff888015f6d280 RSI=ffffffff819c3a80 RDI=0000000000000001 RBP=00007f8d983fffff RSP=ffff888032897878 R8 =ffff888032897b40 R9 =ffffed1001d84db0 R10=0000000000000000 R11=0000000000000001 R12=00007f8dbfffffff R13=ffff88800daa7608 R14=ffff888032897ce0 R15=ffff888032897ce0 RIP=ffffffff81738d98 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d9882a6f4 CR3=000000002a7fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f8d9883947000007f8d98838f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000