Warning: Permanently added '[localhost]:17940' (ECDSA) to the list of known hosts. 2024/11/07 20:43:47 fuzzer started 2024/11/07 20:43:47 dialing manager at localhost:46317 syzkaller login: [ 84.246469] cgroup: Unknown subsys name 'net' [ 84.356517] cgroup: Unknown subsys name 'cpuset' [ 84.374386] cgroup: Unknown subsys name 'rlimit' 2024/11/07 20:44:09 syscalls: 202 2024/11/07 20:44:09 code coverage: enabled 2024/11/07 20:44:09 comparison tracing: enabled 2024/11/07 20:44:09 extra coverage: enabled 2024/11/07 20:44:09 setuid sandbox: enabled 2024/11/07 20:44:09 namespace sandbox: enabled 2024/11/07 20:44:09 Android sandbox: enabled 2024/11/07 20:44:09 fault injection: enabled 2024/11/07 20:44:09 leak checking: enabled 2024/11/07 20:44:09 net packet injection: enabled 2024/11/07 20:44:09 net device setup: enabled 2024/11/07 20:44:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/07 20:44:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/07 20:44:09 USB emulation: enabled 2024/11/07 20:44:09 hci packet injection: enabled 2024/11/07 20:44:09 wifi device emulation: enabled 2024/11/07 20:44:09 802.15.4 emulation: enabled 2024/11/07 20:44:09 fetching corpus: 0, signal 0/0 (executing program) 2024/11/07 20:44:11 starting 8 fuzzer processes 20:44:11 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x8, 0x5, 0xc5c7, 0x0, "bf2d6543173e304c7686101b34f62d401e4971ac8bc08d85bfafeef06a34ebc9b6adb87e22c56db4dd75d28aa218c6e12cf0db2f777a4c763826f20a4e3bddde", "ad87edac0be6ffb7776c91962ca14fa5cf04d3ff6921a55eb939ef6cee289285", [0x1, 0xfffffffffffffffc]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x34000800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008800) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x10c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x200048c1}, 0x800) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x32}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = fsmount(r0, 0x1, 0x75) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs2/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x4) r5 = gettid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000a00)={r5, 0x0, 0xffffb1a4}) r6 = fsmount(r0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000a80)) 20:44:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8001, 0xfff, 0x9, 0x3ff, 0x3}, 0x14) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x1, @loopback, 0x635f}}, 0x0, 0x0, 0x12, 0x0, "3a8020ec3d3e88520e638745ce552855b39a8645e50db0db1365e920bf103cd92ff0e47ada413c65c1ec5f053ee46cb390a95595b427d3769179c41222bc933cf7def78aa671388975d5de7093d6be4f"}, 0xd8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x51, 0x1, 0x5]}, &(0x7f0000000240)=0x44) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "920afa18c0343649", "116d6010195a50451b49a59ea91925d1c7fbabf0b0d5560fa02a4f42511d5e13", "a76d73b2", "b948e4bff103e00c"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f00000002c0)=0x9, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000300)=0x2, 0x4) r1 = syz_open_dev$hidraw(&(0x7f0000000340), 0x4, 0x80) write$hidraw(r1, &(0x7f0000000380)="25230ac70caa2c5b969eeba269af4a7cf43f3e9fb21a928b9fb01b259ee4e4e2627f85064dd9e4bf7d9a6a738102c69f2e15045965b3aee785", 0x39) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @mss={0x2, 0x5}, @timestamp, @timestamp, @window={0x3, 0x0, 0x7fff}, @window={0x3, 0xffff, 0x6}, @mss={0x2, 0x6}], 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='westwood\x00', 0x9) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000440)) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, &(0x7f00000004c0)=0x10, 0x80000) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x0, 0x405, 0x5, 0x2, 0x4], 0x0, &(0x7f0000000500)=[{}, {}, {}]}, 0x78) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x751}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 20:44:11 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x24004801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x130, r0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x14}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040880}, 0x44) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = eventfd(0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r2, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x10) eventfd(0x0) eventfd(0x101) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x3, 0xfffffffe, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10, 0x700, 0x7f, 0x7}}) r3 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x3, 0x100) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000600)) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, r0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x81) r4 = syz_open_dev$vcsa(&(0x7f0000000800), 0x9, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000840)=r4, 0x1) io_uring_setup(0x905, &(0x7f0000000880)={0x0, 0xa463, 0x4, 0x1, 0x17a, 0x0, r3}) socketpair(0x29, 0x4, 0xfffffc01, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000940)=0x2, 0x4) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000980)) 20:44:11 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x5, 0x7, 0x12, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x3, 0xffffff7f}}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r0, 0x4, 0x3f, 0x4, 0x8, 0x4e, @loopback, @loopback, 0xf800, 0x20, 0x1e8, 0x5}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x6}, @timestamp, @window={0x3, 0x7, 0x8}, @timestamp, @window={0x3, 0x4, 0xfff}, @mss={0x2, 0x40}], 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "95d6c0e406ee034a", "b7fed27544ed77987761807fe64a6e2d", "a79ece73", "11da7f0ea28c4f48"}, 0x28) r3 = fsmount(r1, 0x1, 0x82) r4 = accept4$inet(r3, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0xdd, "e84c7c16303d9dab31accf2b626c5b636ec7f7fb6d4843d73646e349ca6ad7ef55e472d14dbfcb64ecb3f2ff9b02c9374ed225dc49d23c8c53413a1240feafc78ba669f145fa99a200c3b572531aab1d5333412c9619d7a638c329594b937e518a422f08ae5331906bfcac3fde82f43506d4a66c20cb43d416c322196e87938ca6ec3684405af7d269ec843f6b302e341a00bc9f82c9aeda8a8efcab3821afc18002a859405f03530a5b5309620356afc7977ba470b2eef3c7f62305721831df190e2975b288b0a6de4fe6e348444eafd281a3217e49747cfc360bed0c"}, &(0x7f00000003c0)=0x101) r5 = socket$inet(0x2, 0x0, 0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000400)={0x5, 0xfff, 0x2}, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x1}) r7 = msgget$private(0x0, 0x2f50e018ee39b10e) msgctl$IPC_RMID(r7, 0x0) r8 = msgget$private(0x0, 0x10) msgctl$MSG_STAT_ANY(r8, 0xd, &(0x7f00000004c0)=""/214) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000005c0)) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000600)=@gcm_128={{0x304}, "415a643ccdc34e86", "b282ef4d788c1a31fc93ce86adcb0f09", "c1f1295a", "c72fc3a9b1134b2d"}, 0x28) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 20:44:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x11) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0x10000000) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x87}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4000814) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r2) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x150, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x65}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0xcc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x29, 0x800, 0x9cc, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdb62}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x8, 0x3f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x8, 0x5, 0xff}}) r7 = syz_open_dev$vcsa(&(0x7f0000000b40), 0x20, 0x10f281) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl2\x00', r6, 0x29, 0x5, 0x7, 0x2, 0x48, @empty, @remote, 0x20, 0x710, 0x2, 0x3ff}}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60810}, 0x8b0) syz_genetlink_get_family_id$nbd(&(0x7f0000000d80), r4) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x9da4a3403ba875e6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x88c1}, 0x4004000) [ 107.391335] audit: type=1400 audit(1731012251.610:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:44:11 executing program 5: ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x80, 0x4, 0x1, 0x1, 0x0, 0x0, 0x14018, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x3, 0x1}, 0x24, 0x5, 0x7, 0x2, 0x1000, 0x2, 0x7e1b, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x2}, @increfs_done], 0xb6, 0x0, &(0x7f0000000140)="0d48e754f041f05f3a027d9c4da16115bfc69d5b01c99ffe8ea3f38c3a08dc3e51574ebea46323ac406e791323421544825a4cdfafcb0f4fe6d96a4b1a530867312a78431bf16ec388ee433320f1333dbb897b6e4c7b28525771aaeb14d5952a82381f09df65f8f3687890e0c7ec40ce2ac30c8cf0c92c0e0171dfffafb362026842936f72af2e25588090c7618a001e7e613f418f71e70410d8d443daa2576596d89751576432b73c79b6d959fd867c6a3103aa3306"}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000380)={0x7, "614bd1053aa9fc9df3f7ba7f34e492351cc6fba3f1902678002077c7b7bb3508fdc897b2fb151b9d597422db4980390cfd47d8afeb5f4895791505144fb3e3f0"}) r3 = perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x20, 0x4, 0x5, 0x4, 0x0, 0x6, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5}, 0x40000, 0x0, 0xe9, 0x0, 0x7ff, 0x5, 0x3852, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0x3, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000480)) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xe000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x3db1227bda82d48b}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x55}, 0x41) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) r4 = syz_open_dev$vcsa(&(0x7f0000000600), 0xf0, 0x60700) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000640)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000680)={0x2f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'sed\x00', 0x20, 0x4, 0x37}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000006c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'dh\x00', 0xc, 0x200, 0x2c}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x3f, 0x1, 0x9, 0x6, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7818, 0x700, 0x80, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl1\x00', r5, 0x4, 0x6, 0x2, 0x2, 0x71, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x1, 0xcc0}}) 20:44:11 executing program 6: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x68, 0x7, 0x4, @loopback, @mcast2, 0x7800, 0x40, 0x2, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', r0, 0x2f, 0x1f, 0x81, 0xfffffff8, 0x0, @local, @empty, 0x0, 0x8000, 0x7, 0xff}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@loopback, @initdev, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', r3, 0x2f, 0x20, 0x20, 0x291, 0x10, @private1, @mcast2, 0x40, 0x8000, 0x4, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6gre0\x00', r3, 0x2f, 0x1, 0x86, 0x8, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0xc96790ae770c79c8, 0x8, 0x10001, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={@private, @remote}, &(0x7f00000003c0)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000480)={{0x2f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 'sed\x00', 0x0, 0xa1c, 0x40}, {@loopback, 0x4e20, 0x1, 0xffff481a, 0xdc, 0x7}}, 0x44) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='nv\x00', 0x3) socketpair(0x2a, 0x6, 0x66, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', r4, 0x29, 0xcc, 0x8, 0x0, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x7, 0x7e, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6gre0\x00', r1, 0x29, 0x1, 0x0, 0x5, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7, 0xfff, 0x9}}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/user\x00') getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000780)={@loopback, @private, 0x0}, &(0x7f00000007c0)=0xc) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004085) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000980)={@multicast1, @multicast2, 0x1, 0x2, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000009c0)={0x28, @empty, 0x4e24, 0x1, 'fo\x00', 0x6, 0x3, 0xc}, 0x2c) 20:44:11 executing program 7: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8061) r0 = fsmount(0xffffffffffffffff, 0x1, 0xf4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10300009}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x1a}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x5f}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004080}, 0x14) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x81, 0xe1, 0x7, 0x0, 0x8, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000280), 0x4}, 0x8000, 0x1, 0x80000001, 0x4, 0x66d, 0x591a5d2c, 0xffff, 0x0, 0x6c6, 0x0, 0x5d}, r0, 0xc, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x80) r3 = accept$inet(r0, &(0x7f0000000340)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) r4 = perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x7f, 0x2, 0x5, 0x4, 0x0, 0x0, 0x201, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0x20}, 0x890, 0x480000000000, 0x7566, 0x0, 0x7fff, 0x7f, 0x43, 0x0, 0x3, 0x0, 0x8000000}, 0xffffffffffffffff, 0xe, r2, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000005c0)={0x1, 0x0, [0x0]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000600)='filter\x00') r5 = accept$inet(r3, 0x0, &(0x7f0000000640)) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000680)={@multicast2, @private=0xa010101}, 0x8) r6 = accept4$inet(r3, 0x0, &(0x7f00000006c0), 0x0) accept$inet(r6, 0x0, &(0x7f0000000700)) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048874) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, 0x0, 0x510, 0x1, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x51}, 0x4) [ 108.837209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.847460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.849334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.853312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.854907] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.856272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.863372] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.865132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.866473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.868896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.870247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.883019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.886011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.889257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.890930] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.892410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.903319] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.904511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.906736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.908448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.909699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.912386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.914313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.919594] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.920599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.948574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.951519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.959914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.964336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.966693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.973795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.975207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.976655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.979685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.981236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.981738] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.983422] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.985318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.991105] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.993758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.996708] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.999344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.098202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.100152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.101663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.104193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.106559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 109.110460] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.920619] Bluetooth: hci0: command tx timeout [ 110.985161] Bluetooth: hci3: command tx timeout [ 110.985986] Bluetooth: hci2: command tx timeout [ 110.986668] Bluetooth: hci1: command tx timeout [ 111.048158] Bluetooth: hci7: command tx timeout [ 111.049158] Bluetooth: hci4: command tx timeout [ 111.049166] Bluetooth: hci5: command tx timeout [ 111.176230] Bluetooth: hci6: command tx timeout [ 112.968316] Bluetooth: hci0: command tx timeout [ 113.033097] Bluetooth: hci1: command tx timeout [ 113.033619] Bluetooth: hci2: command tx timeout [ 113.033655] Bluetooth: hci3: command tx timeout [ 113.098099] Bluetooth: hci4: command tx timeout [ 113.098634] Bluetooth: hci5: command tx timeout [ 113.099295] Bluetooth: hci7: command tx timeout [ 113.224668] Bluetooth: hci6: command tx timeout [ 115.016405] Bluetooth: hci0: command tx timeout [ 115.081091] Bluetooth: hci3: command tx timeout [ 115.081645] Bluetooth: hci1: command tx timeout [ 115.082172] Bluetooth: hci2: command tx timeout [ 115.144407] Bluetooth: hci5: command tx timeout [ 115.144964] Bluetooth: hci7: command tx timeout [ 115.145256] Bluetooth: hci4: command tx timeout [ 115.273213] Bluetooth: hci6: command tx timeout [ 117.064124] Bluetooth: hci0: command tx timeout [ 117.130365] Bluetooth: hci2: command tx timeout [ 117.130924] Bluetooth: hci1: command tx timeout [ 117.131635] Bluetooth: hci3: command tx timeout [ 117.193014] Bluetooth: hci4: command tx timeout [ 117.193597] Bluetooth: hci5: command tx timeout [ 117.194130] Bluetooth: hci7: command tx timeout [ 117.320176] Bluetooth: hci6: command tx timeout [ 171.680605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.690826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.694333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.698777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.707865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.710419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.813398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.816275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.817597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.818627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.822719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.824321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.825366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.827981] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.869244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.869633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.874106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.874513] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.875982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.877525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.878436] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.880745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.884420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.886591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.888268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.893510] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.896580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.904108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.908329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.909619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.951910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.967949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.969416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.971328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.983822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.986534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.987342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.988913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.989749] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 171.992607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.994612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.007568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.008790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.016298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.017915] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.027743] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.046295] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 172.048375] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.769112] Bluetooth: hci0: command tx timeout [ 173.960144] Bluetooth: hci2: command tx timeout [ 173.960259] Bluetooth: hci3: command tx timeout [ 173.961416] Bluetooth: hci1: command tx timeout [ 174.025076] Bluetooth: hci4: command tx timeout [ 174.088198] Bluetooth: hci6: command tx timeout [ 174.089576] Bluetooth: hci7: command tx timeout [ 174.090312] Bluetooth: hci5: command tx timeout [ 175.816109] Bluetooth: hci0: command tx timeout [ 176.009101] Bluetooth: hci3: command tx timeout [ 176.009672] Bluetooth: hci2: command tx timeout [ 176.010323] Bluetooth: hci1: command tx timeout [ 176.073429] Bluetooth: hci4: command tx timeout [ 176.136230] Bluetooth: hci6: command tx timeout [ 176.136803] Bluetooth: hci7: command tx timeout [ 176.136827] Bluetooth: hci5: command tx timeout [ 177.866157] Bluetooth: hci0: command tx timeout [ 178.057112] Bluetooth: hci1: command tx timeout [ 178.057660] Bluetooth: hci2: command tx timeout [ 178.058324] Bluetooth: hci3: command tx timeout [ 178.120104] Bluetooth: hci4: command tx timeout [ 178.184179] Bluetooth: hci5: command tx timeout [ 178.184712] Bluetooth: hci6: command tx timeout [ 178.185238] Bluetooth: hci7: command tx timeout [ 179.912103] Bluetooth: hci0: command tx timeout [ 180.104295] Bluetooth: hci3: command tx timeout [ 180.104393] Bluetooth: hci1: command tx timeout [ 180.105418] Bluetooth: hci2: command tx timeout [ 180.168118] Bluetooth: hci4: command tx timeout [ 180.232295] Bluetooth: hci7: command tx timeout [ 180.232414] Bluetooth: hci6: command tx timeout [ 180.232803] Bluetooth: hci5: command tx timeout [ 233.823200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.839786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.851035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.871344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.874158] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.877896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.879555] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.881203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.886705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.903677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.905167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.906717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.908278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.910963] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 233.912157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.915249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.918700] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.931241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.957079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.960927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.968858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.983474] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.995394] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.997471] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.085041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.096063] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.096262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.100420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.101050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.103793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.107255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.108674] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.112269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 234.113567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.120727] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.125621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.153611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 234.154680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.156682] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.158214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.161751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.164630] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 234.165783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.167117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 234.168770] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 234.205744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 234.211679] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 234.215239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.913727] Bluetooth: hci0: command tx timeout [ 235.976679] Bluetooth: hci2: command tx timeout [ 235.978356] Bluetooth: hci1: command tx timeout [ 236.040226] Bluetooth: hci3: command tx timeout [ 236.168186] Bluetooth: hci4: command tx timeout [ 236.170606] Bluetooth: hci5: command tx timeout [ 236.232971] Bluetooth: hci6: command tx timeout [ 236.296255] Bluetooth: hci7: command tx timeout [ 237.960310] Bluetooth: hci0: command tx timeout [ 238.024119] Bluetooth: hci2: command tx timeout [ 238.025557] Bluetooth: hci1: command tx timeout [ 238.088186] Bluetooth: hci3: command tx timeout [ 238.216171] Bluetooth: hci4: command tx timeout [ 238.217696] Bluetooth: hci5: command tx timeout [ 238.280127] Bluetooth: hci6: command tx timeout [ 238.344128] Bluetooth: hci7: command tx timeout [ 240.009068] Bluetooth: hci0: command tx timeout [ 240.072187] Bluetooth: hci1: command tx timeout [ 240.072737] Bluetooth: hci2: command tx timeout [ 240.136297] Bluetooth: hci3: command tx timeout [ 240.264179] Bluetooth: hci4: command tx timeout [ 240.264717] Bluetooth: hci5: command tx timeout [ 240.328148] Bluetooth: hci6: command tx timeout [ 240.392114] Bluetooth: hci7: command tx timeout [ 242.056169] Bluetooth: hci0: command tx timeout [ 242.121194] Bluetooth: hci2: command tx timeout [ 242.121738] Bluetooth: hci1: command tx timeout [ 242.184226] Bluetooth: hci3: command tx timeout [ 242.312144] Bluetooth: hci5: command tx timeout [ 242.312691] Bluetooth: hci4: command tx timeout [ 242.376110] Bluetooth: hci6: command tx timeout [ 242.440128] Bluetooth: hci7: command tx timeout [ 295.911403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.916908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.922718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.926774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.929262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.930710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.957802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.967312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.969273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.975216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.976749] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.978115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.088902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.092191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.093478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.100635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.105374] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.107058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.153714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.166490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.179226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.195418] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.200435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.218783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.229204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.251229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.286928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.295396] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.303386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.304706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.311717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.313355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.314526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.341229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.342773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.353280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.355764] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 296.356794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.368118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.375523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.459646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.482406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.484490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.492530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.527396] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 296.528604] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 296.531512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.532296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.992490] Bluetooth: hci1: command tx timeout [ 297.994474] Bluetooth: hci0: command tx timeout [ 298.185252] Bluetooth: hci2: command tx timeout [ 298.314016] Bluetooth: hci3: command tx timeout [ 298.376130] Bluetooth: hci5: command tx timeout [ 298.506603] Bluetooth: hci4: command tx timeout [ 298.569087] Bluetooth: hci6: command tx timeout [ 298.763042] Bluetooth: hci7: command tx timeout [ 300.040111] Bluetooth: hci1: command tx timeout [ 300.040657] Bluetooth: hci0: command tx timeout [ 300.233146] Bluetooth: hci2: command tx timeout [ 300.361055] Bluetooth: hci3: command tx timeout [ 300.426042] Bluetooth: hci5: command tx timeout [ 300.553143] Bluetooth: hci4: command tx timeout [ 300.617104] Bluetooth: hci6: command tx timeout [ 300.809121] Bluetooth: hci7: command tx timeout [ 302.089302] Bluetooth: hci0: command tx timeout [ 302.089851] Bluetooth: hci1: command tx timeout [ 302.281108] Bluetooth: hci2: command tx timeout [ 302.409060] Bluetooth: hci3: command tx timeout [ 302.473215] Bluetooth: hci5: command tx timeout [ 302.601149] Bluetooth: hci4: command tx timeout [ 302.665293] Bluetooth: hci6: command tx timeout [ 302.857056] Bluetooth: hci7: command tx timeout [ 304.137029] Bluetooth: hci1: command tx timeout [ 304.137566] Bluetooth: hci0: command tx timeout [ 304.328651] Bluetooth: hci2: command tx timeout [ 304.459012] Bluetooth: hci3: command tx timeout [ 304.520241] Bluetooth: hci5: command tx timeout [ 304.649278] Bluetooth: hci4: command tx timeout [ 304.713051] Bluetooth: hci6: command tx timeout [ 304.904269] Bluetooth: hci7: command tx timeout [ 358.425525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.427270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.430235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.434323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.439718] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 358.441243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.484037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.494356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.503753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.515233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.519690] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.521864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.548870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.550824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.552206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.556006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.565019] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.572763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.622817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.631416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.637258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.641218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.653455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.662223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.663847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.670560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.677862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.680120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.686228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.690041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.695921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.697761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.698926] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.700544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.702686] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.705731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.718391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.721227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.732497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.733851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.736758] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.757594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.758888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.760261] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.761689] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.802593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.818220] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 358.824228] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.522025] Bluetooth: hci0: command tx timeout [ 360.585158] Bluetooth: hci1: command tx timeout [ 360.649100] Bluetooth: hci2: command tx timeout [ 360.777125] Bluetooth: hci4: command tx timeout [ 360.777191] Bluetooth: hci5: command tx timeout [ 360.777798] Bluetooth: hci3: command tx timeout [ 360.840331] Bluetooth: hci6: command tx timeout [ 360.906008] Bluetooth: hci7: command tx timeout [ 362.568142] Bluetooth: hci0: command tx timeout [ 362.632153] Bluetooth: hci1: command tx timeout [ 362.696180] Bluetooth: hci2: command tx timeout [ 362.828041] Bluetooth: hci5: command tx timeout [ 362.828071] Bluetooth: hci4: command tx timeout [ 362.828610] Bluetooth: hci3: command tx timeout [ 362.888235] Bluetooth: hci6: command tx timeout [ 362.952170] Bluetooth: hci7: command tx timeout [ 364.617141] Bluetooth: hci0: command tx timeout [ 364.680247] Bluetooth: hci1: command tx timeout [ 364.744101] Bluetooth: hci2: command tx timeout [ 364.904151] Bluetooth: hci3: command tx timeout [ 364.904669] Bluetooth: hci4: command tx timeout [ 364.905168] Bluetooth: hci5: command tx timeout [ 364.937057] Bluetooth: hci6: command tx timeout [ 365.000054] Bluetooth: hci7: command tx timeout [ 366.665198] Bluetooth: hci0: command tx timeout [ 366.729852] Bluetooth: hci1: command tx timeout [ 366.795165] Bluetooth: hci2: command tx timeout [ 366.920215] Bluetooth: hci5: command tx timeout [ 366.920744] Bluetooth: hci4: command tx timeout [ 366.921447] Bluetooth: hci3: command tx timeout [ 366.984369] Bluetooth: hci6: command tx timeout [ 367.052229] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:49:16 Registers: info registers vcpu 0 RAX=ffff88802fa78000 RBX=ffff888032a6b9a8 RCX=ffff88802abaa340 RDX=ffff88800f35c1a0 RSI=ffff88802abaa2a0 RDI=0000000000000000 RBP=ffff888013ae3250 RSP=ffff88802cdaf8e0 R8 =0000000000000000 R9 =ffffed10059b5f0d R10=0000000000000003 R11=00000000000c33ea R12=ffff88802abaa2a0 R13=00000000000000a0 R14=0000000000000001 R15=0000000000000286 RIP=ffffffff818ee731 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f29eecb2540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f29ef18c000 CR3=0000000035762000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800dbaaf00 RCX=ffffffff8179923f RDX=ffff8880276f1b80 RSI=0000000000000000 RDI=0000000000000007 RBP=00000000088ec005 RSP=ffff888034987898 R8 =0000000000000000 R9 =fffff9400004475e R10=00000000088ec005 R11=ffff8880096d5728 R12=00000000088ec025 R13=0000000000000000 R14=00007f9640be0000 R15=ffff888034987ce0 RIP=ffffffff81799242 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9640bee6f4 CR3=000000000f95a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f9640bfd47000007f9640bfcf20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000