Warning: Permanently added '[localhost]:49950' (ECDSA) to the list of known hosts. 2024/10/26 15:48:13 fuzzer started 2024/10/26 15:48:14 dialing manager at localhost:45639 syzkaller login: [ 67.151975] cgroup: Unknown subsys name 'net' [ 67.261400] cgroup: Unknown subsys name 'cpuset' [ 67.336487] cgroup: Unknown subsys name 'rlimit' 2024/10/26 15:48:31 syscalls: 210 2024/10/26 15:48:31 code coverage: enabled 2024/10/26 15:48:31 comparison tracing: enabled 2024/10/26 15:48:31 extra coverage: enabled 2024/10/26 15:48:31 setuid sandbox: enabled 2024/10/26 15:48:31 namespace sandbox: enabled 2024/10/26 15:48:31 Android sandbox: enabled 2024/10/26 15:48:31 fault injection: enabled 2024/10/26 15:48:31 leak checking: enabled 2024/10/26 15:48:31 net packet injection: enabled 2024/10/26 15:48:31 net device setup: enabled 2024/10/26 15:48:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/26 15:48:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/26 15:48:31 USB emulation: enabled 2024/10/26 15:48:31 hci packet injection: enabled 2024/10/26 15:48:31 wifi device emulation: enabled 2024/10/26 15:48:31 802.15.4 emulation: enabled 2024/10/26 15:48:31 fetching corpus: 0, signal 0/0 (executing program) 2024/10/26 15:48:32 starting 8 fuzzer processes 15:48:32 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, {0x20}, 0x1}, 0xe183) r0 = syz_io_uring_setup(0x7d7e, &(0x7f0000000080)={0x0, 0xf9a6, 0x10, 0x0, 0x17f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x1010, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x4010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0x3, 0x0, 0x4) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x500, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x400c03, 0x0) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000300)) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = io_uring_setup(0x1616, &(0x7f00000003c0)={0x0, 0xab30, 0x4, 0x3, 0x115, 0x0, r2}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x10000000) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000440)) r4 = io_uring_setup(0x4c9c, &(0x7f0000000480)={0x0, 0x1c03, 0x4, 0x3, 0x2cd, 0x0, r3}) syz_io_uring_setup(0x2cec, &(0x7f0000000500)={0x0, 0x9669, 0x0, 0x2, 0x135, 0x0, r4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000600)) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x1, 0x1}, &(0x7f0000000680)=[{}]) r5 = memfd_secret(0x80000) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffe00}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7624a716}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}]}, 0xac}}, 0x40000c2) 15:48:32 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x6) write$nbd(0xffffffffffffffff, &(0x7f0000000040)={0x67446698, 0x0, 0x3, 0x1, 0x2, "37cd89e5706dc1f361f6c14d006574104779016f379ca9641932e534b6d97c8354eb75d33fe017f744458895fe42775f3b39a44222a5c16a6b7bce4940e7ceca0e2d3f25850a55940c3ff11bcb33425c0f0e84cafef0d4ea9f0f160ca1ef2bbe09ec43707f7a168715e8ba02a8b4ddba4c25f84cd09bcb3c7be97d8d14f2daf41903ec5938c27a4bd409192ba09883a843df707dd64b11ad1a74a1cada0a6e91f0f6354866dc5d6f5bc2745dca5796499d4cab31763b7b709e7f4ce72ea88a267a5e8a5d37"}, 0xd5) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, 0xffffffffffffffff, 0x8000000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_L}, {@version_9p2000}, {}, {@version_9p2000}, {@loose}, {@access_client}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r2}}, {@fowner_lt={'fowner<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x22}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise}, {@dont_hash}, {@smackfsfloor}, {@obj_user={'obj_user', 0x3d, '['}}, {@uid_lt}]}}) r3 = syz_io_uring_setup(0x4412, &(0x7f0000000400)={0x0, 0x7855, 0x20, 0x0, 0x37b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0x110, r3, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000540)={'HL\x00'}, &(0x7f0000000580)=0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}}, 0x4004040) r7 = syz_io_uring_complete(r5) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000e00)={'filter\x00', 0x4}, 0x68) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r3, 0x10000000) syz_io_uring_submit(r5, r9, &(0x7f0000000fc0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x5, 0x73f7, 0x0, 0x0, 0x4, 0x1}, 0x1) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40804) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x10000000) 15:48:32 executing program 2: select(0x40, &(0x7f0000000000)={0x10000, 0x20b, 0xfffffffffffffffb, 0x2, 0xb0, 0x2e1, 0x8, 0x1000}, &(0x7f0000000040)={0x9, 0x200, 0x7, 0x6, 0x9, 0x2868, 0x3, 0x8000}, &(0x7f0000000080)={0x3, 0x1, 0x9, 0x9, 0x7, 0x1f, 0xffffffff, 0x9}, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x200, {{0x2, 0x4e24, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @multicast2}}]}, 0x190) r0 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe69}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x7e0bcac8a0123e6c}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000002d40), r1) r2 = socket(0x2, 0x5, 0x9) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000003000)={0x3, {{0x2, 0x4e20, @local}}, 0x1, 0x4, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @multicast2}}]}, 0x290) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000003340)={'gretap0\x00', &(0x7f00000032c0)={'gre0\x00', 0x0, 0x700, 0x0, 0x5, 0x8000, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x68, 0x0, 0x6, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x5e}, {@remote, 0x3}, {@multicast1, 0x10001}, {@loopback, 0x1}]}, @generic={0x44, 0x8, "f2801e5578dc"}]}}}}}) socket$inet(0x2, 0x80000, 0x0) r3 = memfd_secret(0x80000) syz_genetlink_get_family_id$batadv(&(0x7f0000003380), r3) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x41) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000004a40)={&(0x7f0000004980), 0xc, &(0x7f0000004a00)={&(0x7f00000049c0)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) select(0x40, &(0x7f0000004a80)={0xffff000000, 0xffffffffffffff01, 0x2, 0x49, 0x4, 0xc5, 0x2, 0x6}, &(0x7f0000004ac0)={0x21f, 0x0, 0x5, 0x800, 0x3ff, 0x7, 0x10000}, &(0x7f0000004b00)={0x0, 0x8, 0x80, 0x6, 0x9, 0x3ff, 0x5, 0x9}, &(0x7f0000004b40)={0x0, 0xea60}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000004c40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x14, 0x10, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) [ 85.384267] audit: type=1400 audit(1729957712.947:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:48:32 executing program 3: r0 = memfd_secret(0x80000) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "1a63f998cd7521ad", "5a3841ee398ca564d8ec732b5a4edbca", "92df44eb", "61127c75b82ca5c4"}, 0x28) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x64, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/248, 0xf8, 0x0, 0x12}, @fda={0x66646185, 0x0, 0x2, 0x40}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x400}, @request_death], 0x1000, 0x0, &(0x7f0000000440)="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"}) r1 = accept4$inet(r0, &(0x7f0000001480), &(0x7f00000014c0)=0x10, 0x80000) sendto$inet(r1, &(0x7f0000001500)="1b367b6e0e4c896891b0663e8c72b8fb5dbab156913fc172ac1d1911dfc2e7d802d7e69f1cdaa74c73ce3f0cad6ada1b1ce68e4635121ba58231598bab5cd3c786f9e788767b99e36a30cdfd32", 0x4d, 0x94, &(0x7f0000001580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000015c0)="f8673622c31cd7d849866cb4415d", 0xe) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000001600)=""/54, &(0x7f0000001640)=0x36) sendto$inet(r0, &(0x7f0000001680)="d3210424ef0e671eab7808aaf41d7bbff45c1b7b9c9ca87e9bcc3447a78eb72344457f9f45e383e4fab106b1164f6c28dfaff4988ff5bb2c1c", 0x39, 0x20040010, 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000016c0)={0x1, 'veth1_to_team\x00'}, 0x18) r2 = memfd_secret(0x0) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000001700)={@private, @initdev}, &(0x7f0000001740)=0x8) pipe2$9p(&(0x7f0000001780), 0x80000) io_uring_setup(0x30d9, &(0x7f00000017c0)={0x0, 0x2304, 0x2, 0x0, 0x10e, 0x0, r2}) io_uring_setup(0x622, &(0x7f0000001840)={0x0, 0x665c, 0x0, 0x0, 0x2b4}) recvmsg(r1, &(0x7f0000001fc0)={&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001940)=""/115, 0x73}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/209, 0xd1}, {&(0x7f0000001b00)=""/203, 0xcb}, {&(0x7f0000001c00)=""/177, 0xb1}, {&(0x7f0000001cc0)=""/196, 0xc4}, {&(0x7f0000001dc0)=""/46, 0x2e}, {&(0x7f0000001e00)=""/183, 0xb7}, {&(0x7f0000001ec0)=""/55, 0x37}], 0x9}, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000002000), 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002040)={0x3dab, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x5, [{{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}]}, 0x310) syz_genetlink_get_family_id$batadv(&(0x7f0000002380), 0xffffffffffffffff) 15:48:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x2000805) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8882408}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x900, 0x0, 0x0, {0x0, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040004}, 0x40000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x204001, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) r4 = memfd_secret(0x80000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) r6 = socket(0xa, 0x3, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000900)={'team0\x00', {0x2, 0x0, @broadcast}}) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x4008805) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x10000, 0x0) 15:48:33 executing program 6: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r1 = getuid() semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xee01, r0, r1, 0xffffffffffffffff, 0x0, 0xc1}, 0x1d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x42}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@llc={0x1a, 0x324, 0x8, 0xf0, 0x2, 0x8, @remote}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[{0x90, 0xff, 0x4, "af97b19364216e35248e5fe258c6928dbdc68ce7b40ea99fa08566e43b5a8b2e316c9d6a60c80bcbfcb0fbe7db12e3c2654c8220c368476e365f786f960254709a4fe631099eb903509cda6ad5048a468c06419c589114ff2877cad73ab2ac95bed6bec81af1be7f37f27efd2258b6181bef2bb8728c13d5fd002d9b98"}, {0x80, 0x105, 0xb1c, "6b9b9372d99590e818e38be4571ce3bb218b98110f75823d5940f35db7ebba3c62a3fa7aa42d7429860fa56b24540a2e44a97a51e1e1808ef1111da7dd8befba4a377163e2ff7b5dd5dcf461eb6a2761d29e8b0faf3e08f1ee5fcd33406f9e4dda4e7f8a822651f0ce24"}, {0x70, 0x0, 0x1, "7e2a7440f91aeb2c622ecedb4772d5efb486f1a01e340a1de4ca1c08231b30c8da2660a306cde86d7a00d9a23cde57038113b6e4d64155f0e0eed39d55f5e3583229309f4562f13f17a7489545b93a93c246da2958a03b3e0c21a6f4bb"}, {0x20, 0x117, 0x0, "74f49a8086aa203340360f3e0477"}, {0x28, 0x29, 0x5, "e7bf4ec8b29bd5c070f4a0c46004651eef1ebd"}, {0x60, 0x114, 0x1, "5638457e206831fa1640b188b9d0051a8b68550f80b514f21f3a4317b4ecfdacaee2d236a3b3430ee97292b70350554125d7dbf1bd3004abd2129980971e3b8730db8a0bae2293fa8b5a"}], 0x228}, 0x0, 0x24040050, 0x1}, 0x3) r3 = semget$private(0x0, 0x3, 0x208) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f00000004c0)=""/153) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x204e089, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@privport}, {@nodevmap}, {@noextend}, {@privport}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r1}}, {@fowner_lt={'fowner<', r4}}, {@subj_role}]}}) r5 = syz_io_uring_complete(0x0) ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000700)={'custom0\x00'}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs2/binder-control\x00', 0x800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000880)=[@mss={0x2, 0x80}, @window={0x3, 0xfffe}, @mss={0x2, 0x6}], 0x3) syz_io_uring_submit(0x0, r2, &(0x7f00000008c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2000, @fd=r6, 0x10001, 0x0, 0x0, 0x8}, 0x1) r7 = syz_io_uring_complete(0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, &(0x7f0000000900)=""/6, &(0x7f0000000940)=0x6) pidfd_open(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000980)={0x8, 'bridge_slave_0\x00', {'syzkaller0\x00'}, 0x7fff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000009c0)) semctl$IPC_RMID(r3, 0x0, 0x0) 15:48:33 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x880) ioctl$RTC_PIE_ON(r0, 0x7005) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x55, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x6, 0x7, 0x4, 0x6, {{0x22, 0x4, 0x2, 0xf, 0x88, 0x67, 0x0, 0x7f, 0x2e, 0x0, @multicast2, @remote, {[@end, @rr={0x7, 0x7, 0x14, [@local]}, @timestamp={0x44, 0x28, 0x2d, 0x0, 0x4, [0x2, 0xffffffff, 0x3a7, 0x4, 0xf53, 0x100, 0xf44a, 0x2, 0x2]}, @ssrr={0x89, 0x17, 0x7c, [@local, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ssrr={0x89, 0x7, 0xb6, [@local]}, @lsrr={0x83, 0x1b, 0xc2, [@dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}]}, @generic={0x94, 0x9, "4bd5a712e76ff5"}]}}}}}) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x7f, 0x281) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000002c0)) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) set_tid_address(&(0x7f00000003c0)) set_tid_address(&(0x7f0000000400)) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@mmap}], [{@euid_gt={'euid>', r4}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) waitid$P_PIDFD(0x3, r3, &(0x7f0000000600), 0x20000000, &(0x7f0000000680)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0xd0, 0x0, &(0x7f00000009c0)=[@increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}, @increfs, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x7, 0x2, 0x14}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x1, 0x2}}, &(0x7f00000007c0)={0x0, 0x20, 0x38}}}, @register_looper, @increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x3}, @free_buffer, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@fda={0x66646185, 0x7, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/224, 0xe0, 0x1, 0x27}, @fda={0x66646185, 0x8, 0x0, 0x13}}, &(0x7f0000000980)={0x0, 0x20, 0x48}}}], 0x27, 0x0, &(0x7f0000000ac0)="bdeb3841a923cdf61f72660d6f40a7e9cc03cb842249f503c6c06a99e4b398cf8b767749de3332"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x1c6, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}], [{@dont_measure}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000c40)) 15:48:33 executing program 7: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x800, 0xe2, 0x100, 0x2, 0xd5}, 0x14) r1 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000140)="a5513c868559ac6d72128a38ae104934a2529f1e11ca0f066a3b1046bf7d93a148e5931a38029b40d74575c7d9084702080e8824f2e6fa313964ae9c07e40f0357bed85c92620d2d3389d28952fbd93ea0d14d7a6a638a07f1f54d40254bc247338bfad383d0022a2da6df84d2665fcbaea362fadc86f225ae9d28c03624de76b9f992f2b0b565f8b872391b172147fe07", 0x91) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r2, &(0x7f0000002740)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/94, 0x5e}, {&(0x7f0000001380)=""/184, 0xb8}, {&(0x7f0000001440)=""/69, 0x45}, {&(0x7f00000014c0)=""/240, 0xf0}, {&(0x7f00000015c0)=""/214, 0xd6}], 0x7, &(0x7f0000001740)=""/4096, 0x1000}, 0x1) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000002780), &(0x7f00000027c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002800)=0x1, 0x4) r3 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r4, &(0x7f0000002ec0)={0x2, 0x0, @remote}, &(0x7f0000002f00)=0x10, 0x80800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000002f40)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000003000)={'filter\x00', 0x0, 0x3, 0xe, [0x2, 0x80, 0x80, 0x2, 0x4f94, 0x7391], 0x2, &(0x7f0000002f80)=[{}, {}], &(0x7f0000002fc0)=""/14}, &(0x7f0000003080)=0x78) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f00000030c0)=0x10001, 0x4) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) [ 86.764648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.766057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.771281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.773792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.775361] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.776684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.813904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.832033] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.835904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.841393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.843857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.845116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.889474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.892394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.893919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.894770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.895855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.910809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.912256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.915524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.917634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.918863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.922200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.925554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.927018] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.928879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.970483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.976907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.978404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.985848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.987200] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.993963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.995695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.996395] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.997531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.008792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.009509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.013885] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.015083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.024569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.027013] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.028963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.030340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.034902] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.038929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.040157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.056034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.057286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.854682] Bluetooth: hci0: command tx timeout [ 88.917126] Bluetooth: hci1: command tx timeout [ 88.980714] Bluetooth: hci4: command tx timeout [ 88.982352] Bluetooth: hci3: command tx timeout [ 89.046086] Bluetooth: hci6: command tx timeout [ 89.109795] Bluetooth: hci2: command tx timeout [ 89.111651] Bluetooth: hci5: command tx timeout [ 89.111939] Bluetooth: hci7: command tx timeout [ 90.901649] Bluetooth: hci0: command tx timeout [ 90.964809] Bluetooth: hci1: command tx timeout [ 91.028906] Bluetooth: hci3: command tx timeout [ 91.028945] Bluetooth: hci4: command tx timeout [ 91.093646] Bluetooth: hci6: command tx timeout [ 91.156786] Bluetooth: hci7: command tx timeout [ 91.158046] Bluetooth: hci5: command tx timeout [ 91.158259] Bluetooth: hci2: command tx timeout [ 92.949765] Bluetooth: hci0: command tx timeout [ 93.013637] Bluetooth: hci1: command tx timeout [ 93.076871] Bluetooth: hci3: command tx timeout [ 93.077762] Bluetooth: hci4: command tx timeout [ 93.141662] Bluetooth: hci6: command tx timeout [ 93.204747] Bluetooth: hci2: command tx timeout [ 93.206381] Bluetooth: hci5: command tx timeout [ 93.206407] Bluetooth: hci7: command tx timeout [ 94.996678] Bluetooth: hci0: command tx timeout [ 95.060665] Bluetooth: hci1: command tx timeout [ 95.124717] Bluetooth: hci4: command tx timeout [ 95.124812] Bluetooth: hci3: command tx timeout [ 95.189737] Bluetooth: hci6: command tx timeout [ 95.254302] Bluetooth: hci5: command tx timeout [ 95.254331] Bluetooth: hci7: command tx timeout [ 95.254376] Bluetooth: hci2: command tx timeout [ 149.303158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.308481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.309858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.311013] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.314455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.315948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.317943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.319463] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.322355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.329401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.336898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.340321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.433236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.443151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.445001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.446554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.447522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.451042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.454805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.472245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.482261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.483244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.492107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.506079] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.509387] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.513047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.518200] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.522886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.531454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.534336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.545987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.554874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.562125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.567380] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.571897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.576428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.577766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.580407] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.583278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.584641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.586075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.589453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.591392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.602364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.606991] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.608492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.620045] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.629857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.381169] Bluetooth: hci0: command tx timeout [ 151.382219] Bluetooth: hci1: command tx timeout [ 151.636902] Bluetooth: hci2: command tx timeout [ 151.638028] Bluetooth: hci5: command tx timeout [ 151.638763] Bluetooth: hci4: command tx timeout [ 151.639400] Bluetooth: hci3: command tx timeout [ 151.701691] Bluetooth: hci7: command tx timeout [ 151.702396] Bluetooth: hci6: command tx timeout [ 153.429863] Bluetooth: hci1: command tx timeout [ 153.430428] Bluetooth: hci0: command tx timeout [ 153.685734] Bluetooth: hci4: command tx timeout [ 153.686322] Bluetooth: hci3: command tx timeout [ 153.687289] Bluetooth: hci2: command tx timeout [ 153.687871] Bluetooth: hci5: command tx timeout [ 153.749832] Bluetooth: hci6: command tx timeout [ 153.750437] Bluetooth: hci7: command tx timeout [ 155.477854] Bluetooth: hci0: command tx timeout [ 155.478412] Bluetooth: hci1: command tx timeout [ 155.733893] Bluetooth: hci5: command tx timeout [ 155.734505] Bluetooth: hci2: command tx timeout [ 155.734592] Bluetooth: hci3: command tx timeout [ 155.735602] Bluetooth: hci4: command tx timeout [ 155.797732] Bluetooth: hci7: command tx timeout [ 155.798274] Bluetooth: hci6: command tx timeout [ 157.528018] Bluetooth: hci1: command tx timeout [ 157.528537] Bluetooth: hci0: command tx timeout [ 157.780826] Bluetooth: hci3: command tx timeout [ 157.781892] Bluetooth: hci5: command tx timeout [ 157.782358] Bluetooth: hci4: command tx timeout [ 157.783009] Bluetooth: hci2: command tx timeout [ 157.844663] Bluetooth: hci7: command tx timeout [ 157.845178] Bluetooth: hci6: command tx timeout [ 211.553934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.555328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.559641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.564063] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.569281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.575298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.809334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.812814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.814631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.817302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.821296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.822593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.872418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.874074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.877715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.880731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.885009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.891924] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.892889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.893080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.895470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.905168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.907239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.908371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.935992] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.953311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.958845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.998743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.001682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.003723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.010436] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.012496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.014855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.017692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.018772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.024906] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.025743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.031676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.039838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.046077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.053801] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.055934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.063503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.065122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.067789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.103091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.105054] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.106337] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.652646] Bluetooth: hci0: command tx timeout [ 213.845937] Bluetooth: hci1: command tx timeout [ 213.908667] Bluetooth: hci2: command tx timeout [ 213.973659] Bluetooth: hci3: command tx timeout [ 214.101262] Bluetooth: hci4: command tx timeout [ 214.103079] Bluetooth: hci5: command tx timeout [ 214.164634] Bluetooth: hci6: command tx timeout [ 214.230121] Bluetooth: hci7: command tx timeout [ 215.701585] Bluetooth: hci0: command tx timeout [ 215.893663] Bluetooth: hci1: command tx timeout [ 215.958078] Bluetooth: hci2: command tx timeout [ 216.021675] Bluetooth: hci3: command tx timeout [ 216.150043] Bluetooth: hci4: command tx timeout [ 216.150592] Bluetooth: hci5: command tx timeout [ 216.216588] Bluetooth: hci6: command tx timeout [ 216.276646] Bluetooth: hci7: command tx timeout [ 217.748732] Bluetooth: hci0: command tx timeout [ 217.940711] Bluetooth: hci1: command tx timeout [ 218.005745] Bluetooth: hci2: command tx timeout [ 218.068648] Bluetooth: hci3: command tx timeout [ 218.196642] Bluetooth: hci4: command tx timeout [ 218.197165] Bluetooth: hci5: command tx timeout [ 218.261446] Bluetooth: hci6: command tx timeout [ 218.325777] Bluetooth: hci7: command tx timeout [ 219.797691] Bluetooth: hci0: command tx timeout [ 219.989637] Bluetooth: hci1: command tx timeout [ 220.052624] Bluetooth: hci2: command tx timeout [ 220.117849] Bluetooth: hci3: command tx timeout [ 220.246034] Bluetooth: hci5: command tx timeout [ 220.246763] Bluetooth: hci4: command tx timeout [ 220.309647] Bluetooth: hci6: command tx timeout [ 220.372624] Bluetooth: hci7: command tx timeout [ 273.918248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.919732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.920744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.927362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.933760] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.934874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.084968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.089726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.090753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.093068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.096241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.097886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.138268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.145478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.147109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.168636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.180125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.183264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.216970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.220637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.224925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.228815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.232841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.243799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.326314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.330094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.337166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.338419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.339002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.340679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.348850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.357914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.359648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.361924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.361933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.364185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.375873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.381224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.381971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.382980] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.384505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.387721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.388723] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.389134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.392660] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.393201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.393457] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.401222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.994628] Bluetooth: hci0: command tx timeout [ 276.185605] Bluetooth: hci1: command tx timeout [ 276.245972] Bluetooth: hci2: command tx timeout [ 276.308631] Bluetooth: hci3: command tx timeout [ 276.437619] Bluetooth: hci4: command tx timeout [ 276.439880] Bluetooth: hci7: command tx timeout [ 276.501619] Bluetooth: hci5: command tx timeout [ 276.565632] Bluetooth: hci6: command tx timeout [ 278.036968] Bluetooth: hci0: command tx timeout [ 278.229738] Bluetooth: hci1: command tx timeout [ 278.292643] Bluetooth: hci2: command tx timeout [ 278.361274] Bluetooth: hci3: command tx timeout [ 278.498602] Bluetooth: hci7: command tx timeout [ 278.500381] Bluetooth: hci4: command tx timeout [ 278.549644] Bluetooth: hci5: command tx timeout [ 278.614226] Bluetooth: hci6: command tx timeout [ 280.084769] Bluetooth: hci0: command tx timeout [ 280.276823] Bluetooth: hci1: command tx timeout [ 280.340734] Bluetooth: hci2: command tx timeout [ 280.404653] Bluetooth: hci3: command tx timeout [ 280.532793] Bluetooth: hci4: command tx timeout [ 280.534300] Bluetooth: hci7: command tx timeout [ 280.596626] Bluetooth: hci5: command tx timeout [ 280.660587] Bluetooth: hci6: command tx timeout [ 282.134559] Bluetooth: hci0: command tx timeout [ 282.325817] Bluetooth: hci1: command tx timeout [ 282.390563] Bluetooth: hci2: command tx timeout [ 282.452844] Bluetooth: hci3: command tx timeout [ 282.582268] Bluetooth: hci4: command tx timeout [ 282.583774] Bluetooth: hci7: command tx timeout [ 282.646569] Bluetooth: hci5: command tx timeout [ 282.709676] Bluetooth: hci6: command tx timeout [ 336.244157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.247985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.252785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.271290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.282219] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.283291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.287714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.289420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.292176] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.299087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.302488] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.304866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.354360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.364891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.376056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.384773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.390798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.398797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.425114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.452755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.456735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.456993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.463768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.466212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.475002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.478249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.479848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.485267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.487205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.489851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.492368] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.494495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.496982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.517004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.519953] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.521173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.617895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.679186] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.681109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.706796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.736934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.738269] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.752806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.757989] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.759250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.830251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.839359] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.849821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.324615] Bluetooth: hci0: command tx timeout [ 338.388743] Bluetooth: hci1: command tx timeout [ 338.452680] Bluetooth: hci2: command tx timeout [ 338.517727] Bluetooth: hci4: command tx timeout [ 338.580702] Bluetooth: hci5: command tx timeout [ 338.580858] Bluetooth: hci3: command tx timeout [ 338.836661] Bluetooth: hci6: command tx timeout [ 338.964743] Bluetooth: hci7: command tx timeout [ 340.374573] Bluetooth: hci0: command tx timeout [ 340.436596] Bluetooth: hci1: command tx timeout [ 340.500607] Bluetooth: hci2: command tx timeout [ 340.564584] Bluetooth: hci4: command tx timeout [ 340.628630] Bluetooth: hci5: command tx timeout [ 340.629903] Bluetooth: hci3: command tx timeout [ 340.885104] Bluetooth: hci6: command tx timeout [ 341.012595] Bluetooth: hci7: command tx timeout [ 342.420732] Bluetooth: hci0: command tx timeout [ 342.484623] Bluetooth: hci1: command tx timeout [ 342.548918] Bluetooth: hci2: command tx timeout [ 342.613609] Bluetooth: hci4: command tx timeout [ 342.676693] Bluetooth: hci3: command tx timeout [ 342.677323] Bluetooth: hci5: command tx timeout [ 342.933554] Bluetooth: hci6: command tx timeout [ 343.060738] Bluetooth: hci7: command tx timeout [ 344.470564] Bluetooth: hci0: command tx timeout [ 344.532731] Bluetooth: hci1: command tx timeout [ 344.597728] Bluetooth: hci2: command tx timeout [ 344.660705] Bluetooth: hci4: command tx timeout [ 344.725586] Bluetooth: hci5: command tx timeout [ 344.725615] Bluetooth: hci3: command tx timeout [ 344.980737] Bluetooth: hci6: command tx timeout [ 345.108596] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:53:43 Registers: info registers vcpu 0 RAX=ffffed10067af000 RBX=ffff88802fe16590 RCX=ffffffff81791c9b RDX=ffff888033d78000 RSI=ffffffff81791acf RDI=0000000000000007 RBP=8000000032ce3007 RSP=ffff88800ceef690 R8 =0000000000000000 R9 =fffff94000196716 R10=8000000032ce3007 R11=ffff888033f52028 R12=8000000032ce3027 R13=0000000000000000 R14=00007fb8b46b2000 R15=ffff88800ceefad0 RIP=ffffffff81791ad7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0e93aa6000 CR3=000000002cdd4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000007d48f506 RBX=00000000d859f504 RCX=0000000000001003 RDX=0000000000000000 RSI=0000000000001211 RDI=00000000d859f504 RBP=0000000000000001 RSP=00007ffdef880570 R8 =00007ffdef8806b0 R9 =00007f535df88440 R10=00007f535dd0c250 R11=0000000000000007 R12=00007f535dc3c50c R13=00007f535dc51430 R14=0000000000000009 R15=00007f535df50510 RIP=00007f535df66349 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f535da46540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f535df1f000 CR3=000000000cdc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=0000000000000000000000766f6d6d65 XMM04=6e75637673006b6f7265737572690065 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000