syzkaller login: [   55.135364] sshd (237) used greatest stack depth: 24216 bytes left
Warning: Permanently added '[localhost]:32239' (ECDSA) to the list of known hosts.
2024/11/09 08:27:16 fuzzer started
2024/11/09 08:27:17 dialing manager at localhost:46317
[   77.253671] cgroup: Unknown subsys name 'net'
[   77.427000] cgroup: Unknown subsys name 'cpuset'
[   77.459452] cgroup: Unknown subsys name 'rlimit'
2024/11/09 08:27:42 syscalls: 200
2024/11/09 08:27:42 code coverage: enabled
2024/11/09 08:27:42 comparison tracing: enabled
2024/11/09 08:27:42 extra coverage: enabled
2024/11/09 08:27:42 setuid sandbox: enabled
2024/11/09 08:27:42 namespace sandbox: enabled
2024/11/09 08:27:42 Android sandbox: enabled
2024/11/09 08:27:42 fault injection: enabled
2024/11/09 08:27:42 leak checking: enabled
2024/11/09 08:27:42 net packet injection: enabled
2024/11/09 08:27:42 net device setup: enabled
2024/11/09 08:27:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/09 08:27:42 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/09 08:27:42 USB emulation: enabled
2024/11/09 08:27:42 hci packet injection: enabled
2024/11/09 08:27:42 wifi device emulation: enabled
2024/11/09 08:27:42 802.15.4 emulation: enabled
2024/11/09 08:27:42 fetching corpus: 0, signal 0/0 (executing program)
2024/11/09 08:27:44 starting 8 fuzzer processes
08:27:44 executing program 0:
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0xb, 0x0, &(0x7f0000000040)="5282050fdc456b10cf7524"})
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x0, 0x12a, 0x1})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0xdf, 0x4, 0x0, 0x0, 0x0, 0xfeb3, 0x30800, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x4ef, 0x7}, 0x1200, 0x4, 0x7, 0x3, 0x98, 0x5, 0xffff, 0x0, 0xfffffffd, 0x0, 0xcb74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xc4, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x2}, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/71, 0x47, 0x1, 0x24}, @fda={0x66646185, 0x3, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x2, 0x23}, @fda={0x66646185, 0x2, 0x2, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/74, 0x4a, 0x2, 0x28}}, &(0x7f0000000400)={0x0, 0x20, 0x40}}}], 0x1000, 0x0, &(0x7f0000000540)="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"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001580)={'ip_vti0\x00', <r2=>0x0, 0x8, 0x20, 0x6, 0x800, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x64, 0x0, 0xd, 0x4, 0x0, @multicast1, @multicast2, {[@generic={0x7, 0x8, "9ddec889209e"}]}}}}})
r3 = syz_open_procfs(0x0, &(0x7f0000001600)='net/raw\x00')
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000016c0)={'erspan0\x00', &(0x7f0000001640)={'syztnl1\x00', <r4=>r2, 0x8, 0x7800, 0x8, 0xa7, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x66, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @local, {[@ssrr={0x89, 0x1f, 0x72, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @timestamp={0x44, 0x8, 0xc0, 0x0, 0x7, [0x6]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xf1, 0x0, 0x9, [0x9, 0x3ff, 0x1, 0xad2, 0x52, 0x5e55, 0x1]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000017c0)={'gretap0\x00', &(0x7f0000001740)={'syztnl0\x00', <r5=>r2, 0x700, 0x7, 0x9, 0x1, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x28}, {[@rr={0x7, 0xf, 0x14, [@multicast1, @multicast1, @multicast2]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001b00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001800)={0x298, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5e048279}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x40015}, 0x40480)
r6 = gettid()
r7 = syz_open_procfs(r6, &(0x7f0000001b40)='net/psched\x00')
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r8 = fsopen(&(0x7f0000001b80)='hostfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x30020000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x14)
r9 = syz_open_procfs(r6, &(0x7f0000001cc0)='uid_map\x00')
ioctl$BLKRAGET(r9, 0x1263, &(0x7f0000001d00))
write$tun(r3, &(0x7f0000001d40)={@void, @val={0x2, 0x1, 0x0, 0x8f, 0x9, 0x1}, @arp=@generic={0x310, 0xf5, 0x6, 0x6, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, "bea658b7cd2e", @broadcast, "5fb6c90c2398c7ed6a5d"}}, 0x2e)

08:27:44 executing program 1:
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00'})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x802, 0x0)
r3 = getpgrp(0x0)
ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000180)={r3})
recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000340)=""/51, 0x33}], 0x2, &(0x7f00000003c0)=""/4096, 0x1000}, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000001400)={r3, 0x0, 0x6})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r4 = syz_open_procfs(r3, &(0x7f0000001440)='sessionid\x00')
ioctl$TUNSETOWNER(r4, 0x400454cc, 0xee00)
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x108, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd8}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x55, 0x3, "ee3c56bd6b05f2ad5ec5b74d06c8636dd5c9e61100ff73b613d4df267dbb65e2b787b606afc8654d14bfcacf3d25e6cbf0f13df0b32ea69acdd18348c9f4c4706ea3b8bee2dfc906765b7013c63984d482"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "d9e4194eb642697325437d31217457fdba53c22a21a7cf2132f6317c493e0bf3de59"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
getpgrp(0xffffffffffffffff)
recvmsg$unix(r4, &(0x7f0000001bc0)={&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001700)=""/12, 0xc}, {&(0x7f0000001740)=""/250, 0xfa}, {&(0x7f0000001840)=""/237, 0xed}, {&(0x7f0000001940)=""/86, 0x56}, {&(0x7f00000019c0)=""/200, 0xc8}], 0x5, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x58}, 0x40000022)
r6 = getegid()
ioctl$TUNSETGROUP(r5, 0x400454ce, r6)

08:27:44 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80000)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040))
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x2d, 0x2, 0x1})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000100)=0x20)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x9)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0xff, 0x9c, 0x3a, &(0x7f0000000180)="e15dd63775150598f0750debb52f799ecde9fcc30b79038275e6c619e04cf78f8502c52ea2a9f3c3b0139d87213b52161b78b42ce334d67accd5"})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)=')/--},.%\',^\x00', 0x0, r1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='coredump_filter\x00')
ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000280))
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfa)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='comm\x00')
ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000300)={0x3, 0x7, 0x3, 0x10000})
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0)
openat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)={0x40000034})
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000003c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x35c0903eaeb012fb, 0x0)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000440)=0x5)

08:27:44 executing program 3:
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x10000, 0x2})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x3, 0xffffffffffffff7e, 0x1000, 0x78})
inotify_init()
r1 = socket(0x6, 0xa, 0x9)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x840)
r2 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x87b07c0000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000)
gettid()
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffc}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x81, 0xff]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)
r3 = socket(0x0, 0x3, 0x2)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "17715a92499ccbf3fd8997661f2b712b5ca9036ffe55b7bf269f6235c0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fa3e08c12203a62e644b37d3c3c295f3773b10ae7a5ef61a90bd6d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48001}, 0x40)
r4 = socket(0x15, 0x2, 0x7)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004800}, 0x1)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000880)=',()\x00', 0x0, r1)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000d00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000900)={0x390, 0x0, 0x6, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1020}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbbc, @private2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7f, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c6eb17f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb50}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x20048830}, 0x2004c000)
recvmsg$unix(r6, &(0x7f00000031c0)={&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/120, 0x78}, {&(0x7f0000001e40)=""/91, 0x5b}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/158, 0x9e}, {&(0x7f0000002f80)=""/148, 0x94}], 0x6, &(0x7f00000030c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x6d34f6eebd63baf8)

[  103.994941] audit: type=1400 audit(1731140864.712:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:27:44 executing program 4:
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x1c})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x40}, 0x1)
r5 = gettid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create(0x6)
kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r6, &(0x7f0000001140)={r7, r0, 0x7ff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001180))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f00000011c0)={0xe0000006})
syz_open_procfs(r5, &(0x7f0000001200)='net/rt_acct\x00')
recvmsg$unix(r3, &(0x7f0000001540)={&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/141, 0x8d}, {&(0x7f0000001380)=""/72, 0x48}, {&(0x7f0000001400)=""/64, 0x40}], 0x3, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x10020)
epoll_pwait(r10, &(0x7f0000001580)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000015c0), 0x8)
ioctl$BLKIOMIN(r12, 0x1278, &(0x7f0000001600))
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000001640)={0x0, 0x282})
ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000001680))
r13 = syz_open_procfs$namespace(r1, &(0x7f00000016c0)='ns/cgroup\x00')
kcmp$KCMP_EPOLL_TFD(0x0, r8, 0x7, r13, &(0x7f0000001700)={r12, r9, 0x5})
ioctl$BLKROGET(r11, 0x125e, &(0x7f0000001740))
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000017c0)={0x3})

08:27:44 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='totmaps\x00')
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='-\x00', &(0x7f0000000080)=':]*[#\x00', 0x0)
r1 = accept(r0, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80)
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @llc={@llc={0x4e, 0xf8, 'k4', "2f20ac8dcd244838b8861eb9ead1215a986f483cf51936c472233bdcc028e03b1631145ddf80fac76176d55f87a46d3e21f77968a48d7ae332a32d9dedc129fee472e671b99abdc267cbfc66dfd1970912b7a93357462d37c5088b00324b1a2ffe514f85682a7f8c78292b691a33c1e102f32525e0d7"}}}, 0x7a)
r2 = fsopen(&(0x7f0000000200)='9p\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000240)='net/ip_vs_stats_percpu\x00')
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000002c0)=@buf={0x2f, &(0x7f0000000280)="ce70b3cc3cf0089d3e6ef6cab6b383bb071846846d5f0407d8a492d0b39f116d171c6f01eee9049fc966fbf5a8635b"})
r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "e5d497e88f2b54144f4f548eb4b1e10b13f692b46bae7f55b39ae5398e95665a703bfc54983ec0372d0019c0d6165695276c18f74f9e5aa3bb0448b6a0af9d7a3e3e8002ce91ef19169d2c9b4a938a99c7fd1814234c7c07b95a2e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3e0}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000001}, 0x5086e143fb98915)
epoll_create1(0x80000)
inotify_add_watch(r4, &(0x7f0000000500)='./file0\x00', 0x200)
r6 = fspick(r5, &(0x7f0000000540)='./file0/../file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x14, @empty, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7800, 0x7, 0xffff0000}})
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x0, 0x604, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @loopback, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2eb}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x48040}, 0x4040)
write$cgroup_int(r6, &(0x7f0000000880)=0x10001, 0x12)
r7 = syz_open_procfs(r3, &(0x7f00000008c0)='attr/prev\x00')
ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f0000000900)={0x10001, 0x0, 0x1})

08:27:44 executing program 6:
r0 = accept4(0xffffffffffffffff, &(0x7f0000002200)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000002280)=0x80, 0xc0000)
bind$bt_hci(r0, &(0x7f00000022c0)={0x1f, 0x2, 0x4}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000002300)=[{}, {}], 0x2, &(0x7f0000002340), &(0x7f0000002380)={[0x4]}, 0x8)
perf_event_open(&(0x7f00000023c0)={0x1, 0x80, 0x80, 0x40, 0xff, 0x0, 0x0, 0x2, 0x30, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x6431}, 0x304, 0x9, 0x5, 0x0, 0x2, 0x612, 0x9, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002540)={'syztnl2\x00', &(0x7f0000002480)={'syztnl2\x00', <r2=>0x0, 0x7, 0x8, 0x41, 0xa87, {{0x1d, 0x4, 0x3, 0x26, 0x74, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local, {[@cipso={0x86, 0x18, 0x3, [{0x6, 0x12, "ff41c1af8400042e0e2d65de54b781e5"}]}, @rr={0x7, 0x2b, 0xc6, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101, @loopback, @loopback, @multicast1, @local, @loopback]}, @generic={0x86, 0x2}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x6, 0xe, "15d4b4f8126f6a2577f795a1"}, {0x6, 0x5, "478bf2"}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002600)={'ip6gre0\x00', &(0x7f0000002580)={'sit0\x00', <r3=>r2, 0x2f, 0x7, 0xe2, 0x400, 0x28, @dev={0xfe, 0x80, '\x00', 0xa}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x100, 0x2}})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002680), r1)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x800810}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40810)
recvmsg$unix(r0, &(0x7f0000002ec0)={&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002800)=""/74, 0x4a}, {&(0x7f0000002880)=""/93, 0x5d}, {&(0x7f0000002900)=""/253, 0xfd}, {&(0x7f0000002a00)=""/39, 0x27}, {&(0x7f0000002a40)=""/192, 0xc0}, {&(0x7f0000002b00)=""/213, 0xd5}, {&(0x7f0000002c00)=""/111, 0x6f}, {&(0x7f0000002c80)=""/236, 0xec}], 0x8, &(0x7f0000002e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000002f80)={'syztnl0\x00', &(0x7f0000002f00)={'ip6gre0\x00', <r9=>r3, 0x29, 0x5b, 0x9a, 0x4, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8000, 0x40, 0x8, 0xb9b}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000003040)={'tunl0\x00', &(0x7f0000002fc0)={'syztnl1\x00', r9, 0x8, 0x40, 0xffffffff, 0x7fffffff, {{0x18, 0x4, 0x2, 0x2, 0x60, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, {[@lsrr={0x83, 0xf, 0xab, [@broadcast, @empty, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xa9, 0x3, 0xb, [{@rand_addr=0x64010101}, {@local, 0x2}, {@local, 0xffffffff}, {@rand_addr=0x64010101, 0x3b8}, {@rand_addr=0x64010102}, {@empty, 0x2}, {@remote, 0x2}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003100)={'ip6gre0\x00', &(0x7f0000003080)={'syztnl0\x00', r9, 0x4, 0x5, 0x8, 0x401, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x80, 0x7800, 0x8, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f00000031c0)={'syztnl0\x00', &(0x7f0000003140)={'syztnl1\x00', r2, 0x4, 0x3, 0xa7, 0xad, 0x43, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2, 0x20, 0x700, 0x9, 0xdc1}})
r10 = socket(0xb, 0x5, 0x8)
sendmsg$FOU_CMD_ADD(r10, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8084)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000003640)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f0000003340)={0x2a4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x550c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7866b4ee}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x12e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf83d740}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x98c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf04}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x92, @mcast2, 0x7}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xee}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa879}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x978}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x493}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40080}, 0x800)
sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x37, 0x3, "5699bc39d22895a2add5de85dab34230c1631658a628423cbf499b58b2f1f979d42d05f4fd20bc924f1078a6f45f9cfe094532"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
inotify_rm_watch(0xffffffffffffffff, 0x0)

08:27:44 executing program 7:
r0 = getpgrp(0xffffffffffffffff)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r0})
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x9)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x1})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0)
r2 = accept(r1, &(0x7f0000000140)=@caif, &(0x7f00000001c0)=0x80)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000280)=""/133, 0x85}], 0x2, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}], 0x40}, 0x3001)
clock_nanosleep(0x4, 0x1, &(0x7f0000000400), &(0x7f0000000440))
r6 = syz_open_procfs(r5, &(0x7f0000000480)='net/xfrm_stat\x00')
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000004c0))
recvmsg$unix(r4, &(0x7f00000007c0)={&(0x7f0000000500), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/102, 0x66}], 0x2, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @cred={{0x1c}}], 0x78}, 0x40010000)
getegid()
recvmsg$unix(r3, &(0x7f0000000e40)={&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/210, 0xd2}, {&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a00)=""/110, 0x6e}, {&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f0000000c40)=""/183, 0xb7}], 0x7, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x20)
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000e80))
r10 = openat$cgroup_ro(r6, &(0x7f0000001140)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r10, 0x40046205, &(0x7f0000001180)=0x40)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000011c0)={r8, 0x0, 0x5})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000001200)={0x40000010})

[  105.477087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.480517] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.483162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.488542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.490565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.492585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.499348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.505621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.507772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.510030] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.512711] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  105.514075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.517266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.518980] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  105.521881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.531058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.533751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.534991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.539160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.543634] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  105.546624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.554723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.559683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.560664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.564979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  105.566462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.575532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.580928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.589778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.591290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.593125] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  105.594571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  105.613663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.625474] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  105.627108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  105.628769] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  105.633203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  105.635255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  105.640738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  105.642463] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  105.643191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  105.645715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  105.648709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.650839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  105.652083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.653130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  105.656015] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  105.657512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  107.569163] Bluetooth: hci2: command tx timeout
[  107.569166] Bluetooth: hci4: command tx timeout
[  107.631623] Bluetooth: hci5: command tx timeout
[  107.631960] Bluetooth: hci3: command tx timeout
[  107.633826] Bluetooth: hci1: command tx timeout
[  107.695501] Bluetooth: hci7: command tx timeout
[  107.697786] Bluetooth: hci0: command tx timeout
[  107.698469] Bluetooth: hci6: command tx timeout
[  109.615639] Bluetooth: hci4: command tx timeout
[  109.615702] Bluetooth: hci2: command tx timeout
[  109.679538] Bluetooth: hci1: command tx timeout
[  109.680116] Bluetooth: hci3: command tx timeout
[  109.681440] Bluetooth: hci5: command tx timeout
[  109.743527] Bluetooth: hci6: command tx timeout
[  109.745957] Bluetooth: hci7: command tx timeout
[  109.747449] Bluetooth: hci0: command tx timeout
[  111.664464] Bluetooth: hci2: command tx timeout
[  111.666097] Bluetooth: hci4: command tx timeout
[  111.727449] Bluetooth: hci3: command tx timeout
[  111.729074] Bluetooth: hci5: command tx timeout
[  111.729109] Bluetooth: hci1: command tx timeout
[  111.793024] Bluetooth: hci7: command tx timeout
[  111.793089] Bluetooth: hci0: command tx timeout
[  111.793681] Bluetooth: hci6: command tx timeout
[  113.711548] Bluetooth: hci2: command tx timeout
[  113.711683] Bluetooth: hci4: command tx timeout
[  113.777429] Bluetooth: hci1: command tx timeout
[  113.778885] Bluetooth: hci3: command tx timeout
[  113.779435] Bluetooth: hci5: command tx timeout
[  113.839508] Bluetooth: hci0: command tx timeout
[  113.841025] Bluetooth: hci6: command tx timeout
[  113.841043] Bluetooth: hci7: command tx timeout
[  167.880726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.882420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.883457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.894113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.895930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.899538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  167.900572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.919632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.922586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.925587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.935570] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  167.943845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.966642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.973664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.975273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.979520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.980836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.982262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.985744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.987929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.989850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.013093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  168.015061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  168.018556] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  168.019282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  168.021337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.023830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.057009] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  168.058474] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  168.059643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  168.067912] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  168.074857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  168.076507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  168.078855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  168.110137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  168.111260] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  168.114596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  168.116499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  168.118314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  168.120211] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  168.127183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  168.128630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  168.129658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  168.130825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  168.133660] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  168.144017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  168.198624] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  168.199853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  169.968471] Bluetooth: hci0: command tx timeout
[  169.970607] Bluetooth: hci1: command tx timeout
[  170.159553] Bluetooth: hci5: command tx timeout
[  170.159576] Bluetooth: hci2: command tx timeout
[  170.159996] Bluetooth: hci3: command tx timeout
[  170.223541] Bluetooth: hci4: command tx timeout
[  170.224574] Bluetooth: hci7: command tx timeout
[  170.351574] Bluetooth: hci6: command tx timeout
[  172.015480] Bluetooth: hci1: command tx timeout
[  172.017219] Bluetooth: hci0: command tx timeout
[  172.207518] Bluetooth: hci5: command tx timeout
[  172.208136] Bluetooth: hci3: command tx timeout
[  172.208209] Bluetooth: hci2: command tx timeout
[  172.273404] Bluetooth: hci7: command tx timeout
[  172.273424] Bluetooth: hci4: command tx timeout
[  172.400439] Bluetooth: hci6: command tx timeout
[  174.064627] Bluetooth: hci0: command tx timeout
[  174.064647] Bluetooth: hci1: command tx timeout
[  174.255450] Bluetooth: hci2: command tx timeout
[  174.256011] Bluetooth: hci3: command tx timeout
[  174.256428] Bluetooth: hci5: command tx timeout
[  174.319460] Bluetooth: hci7: command tx timeout
[  174.319482] Bluetooth: hci4: command tx timeout
[  174.447546] Bluetooth: hci6: command tx timeout
[  176.111465] Bluetooth: hci0: command tx timeout
[  176.111478] Bluetooth: hci1: command tx timeout
[  176.303636] Bluetooth: hci3: command tx timeout
[  176.305164] Bluetooth: hci5: command tx timeout
[  176.305394] Bluetooth: hci2: command tx timeout
[  176.367490] Bluetooth: hci7: command tx timeout
[  176.368421] Bluetooth: hci4: command tx timeout
[  176.496423] Bluetooth: hci6: command tx timeout
[  230.177898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.180607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.189996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.195825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.197536] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  230.198941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.204827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.207311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.210548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.217025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.224158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  230.225219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.264181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.273891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.275413] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.278645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.281250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  230.282632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.334738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.336117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.337708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.341591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.343122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.344319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.396237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.401106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.404793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.421734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.423252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  230.424738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  230.528843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  230.536075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  230.537306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  230.552004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  230.557218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  230.562146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  230.565779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  230.581494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  230.581656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  230.585613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  230.593022] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  230.594863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  230.595971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  230.598756] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  230.599934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  230.607812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  230.611201] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  230.612594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  232.267434] Bluetooth: hci0: command tx timeout
[  232.303602] Bluetooth: hci2: command tx timeout
[  232.304012] Bluetooth: hci1: command tx timeout
[  232.432420] Bluetooth: hci3: command tx timeout
[  232.495608] Bluetooth: hci4: command tx timeout
[  232.623465] Bluetooth: hci7: command tx timeout
[  232.688439] Bluetooth: hci5: command tx timeout
[  232.688515] Bluetooth: hci6: command tx timeout
[  234.287442] Bluetooth: hci0: command tx timeout
[  234.351453] Bluetooth: hci2: command tx timeout
[  234.351930] Bluetooth: hci1: command tx timeout
[  234.479453] Bluetooth: hci3: command tx timeout
[  234.545442] Bluetooth: hci4: command tx timeout
[  234.671685] Bluetooth: hci7: command tx timeout
[  234.735443] Bluetooth: hci6: command tx timeout
[  234.737002] Bluetooth: hci5: command tx timeout
[  236.337386] Bluetooth: hci0: command tx timeout
[  236.399556] Bluetooth: hci1: command tx timeout
[  236.399744] Bluetooth: hci2: command tx timeout
[  236.527669] Bluetooth: hci3: command tx timeout
[  236.592500] Bluetooth: hci4: command tx timeout
[  236.719611] Bluetooth: hci7: command tx timeout
[  236.783444] Bluetooth: hci5: command tx timeout
[  236.785023] Bluetooth: hci6: command tx timeout
[  238.383434] Bluetooth: hci0: command tx timeout
[  238.447620] Bluetooth: hci1: command tx timeout
[  238.448617] Bluetooth: hci2: command tx timeout
[  238.575839] Bluetooth: hci3: command tx timeout
[  238.640546] Bluetooth: hci4: command tx timeout
[  238.768495] Bluetooth: hci7: command tx timeout
[  238.831519] Bluetooth: hci6: command tx timeout
[  238.833001] Bluetooth: hci5: command tx timeout
[  292.480987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  292.484063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  292.486128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  292.497843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  292.506874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  292.509874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  292.727839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.730443] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.731641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  292.735070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  292.736686] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  292.738741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  292.805952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.807981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  292.810959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  292.812188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.812297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  292.814994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.817183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  292.819739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  292.822522] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  292.828717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.841982] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  292.845887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.879597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.887603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  292.892943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  292.896788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  292.912769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  292.913513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  292.932810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  292.934025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  292.948835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  292.949050] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  292.950855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  292.953080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  292.964583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  292.966445] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  292.967491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  292.976020] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  292.977396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  292.989827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  293.001112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  293.005043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  293.010961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  293.022068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  293.024012] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  293.025174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  294.576474] Bluetooth: hci0: command tx timeout
[  294.768127] Bluetooth: hci1: command tx timeout
[  294.831562] Bluetooth: hci2: command tx timeout
[  294.896451] Bluetooth: hci3: command tx timeout
[  295.024455] Bluetooth: hci4: command tx timeout
[  295.087637] Bluetooth: hci6: command tx timeout
[  295.089413] Bluetooth: hci5: command tx timeout
[  295.089462] Bluetooth: hci7: command tx timeout
[  296.625459] Bluetooth: hci0: command tx timeout
[  296.816440] Bluetooth: hci1: command tx timeout
[  296.879585] Bluetooth: hci2: command tx timeout
[  296.944402] Bluetooth: hci3: command tx timeout
[  297.071540] Bluetooth: hci4: command tx timeout
[  297.135505] Bluetooth: hci6: command tx timeout
[  297.135992] Bluetooth: hci7: command tx timeout
[  297.136459] Bluetooth: hci5: command tx timeout
[  298.671449] Bluetooth: hci0: command tx timeout
[  298.863507] Bluetooth: hci1: command tx timeout
[  298.927375] Bluetooth: hci2: command tx timeout
[  298.991420] Bluetooth: hci3: command tx timeout
[  299.121395] Bluetooth: hci4: command tx timeout
[  299.184441] Bluetooth: hci7: command tx timeout
[  299.185584] Bluetooth: hci5: command tx timeout
[  299.186223] Bluetooth: hci6: command tx timeout
[  300.719434] Bluetooth: hci0: command tx timeout
[  300.911574] Bluetooth: hci1: command tx timeout
[  300.975479] Bluetooth: hci2: command tx timeout
[  301.041499] Bluetooth: hci3: command tx timeout
[  301.167562] Bluetooth: hci4: command tx timeout
[  301.231488] Bluetooth: hci6: command tx timeout
[  301.232065] Bluetooth: hci7: command tx timeout
[  301.233295] Bluetooth: hci5: command tx timeout
[  354.818193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  354.822559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  354.825724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  354.834205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  354.836881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  354.850840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  354.852034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  354.858276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  354.860346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  354.865804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  354.875797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  354.878775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  355.004605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  355.013256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  355.018642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  355.024559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  355.039722] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  355.044613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.088487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  355.095742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  355.097904] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  355.099668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  355.110552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  355.126532] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  355.136157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  355.137883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  355.140397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  355.160577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  355.165839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  355.169003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  355.191572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.213187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.236933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  355.241274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  355.243756] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.249579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  355.251885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  355.260744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  355.261561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.286049] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  355.288250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.303242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  355.309237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  355.314510] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  355.316626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  355.320899] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  355.323125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  355.325269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  356.911427] Bluetooth: hci0: command tx timeout
[  356.913584] Bluetooth: hci1: command tx timeout
[  357.104401] Bluetooth: hci2: command tx timeout
[  357.168443] Bluetooth: hci4: command tx timeout
[  357.231665] Bluetooth: hci3: command tx timeout
[  357.359691] Bluetooth: hci6: command tx timeout
[  357.360403] Bluetooth: hci7: command tx timeout
[  357.360979] Bluetooth: hci5: command tx timeout
[  358.959499] Bluetooth: hci0: command tx timeout
[  358.960030] Bluetooth: hci1: command tx timeout
[  359.151597] Bluetooth: hci2: command tx timeout
[  359.216404] Bluetooth: hci4: command tx timeout
[  359.279388] Bluetooth: hci3: command tx timeout
[  359.407535] Bluetooth: hci5: command tx timeout
[  359.409107] Bluetooth: hci7: command tx timeout
[  359.409150] Bluetooth: hci6: command tx timeout
[  361.007423] Bluetooth: hci0: command tx timeout
[  361.008864] Bluetooth: hci1: command tx timeout
[  361.199394] Bluetooth: hci2: command tx timeout
[  361.263529] Bluetooth: hci4: command tx timeout
[  361.327395] Bluetooth: hci3: command tx timeout
[  361.455381] Bluetooth: hci6: command tx timeout
[  361.455681] Bluetooth: hci7: command tx timeout
[  361.456757] Bluetooth: hci5: command tx timeout
[  363.055557] Bluetooth: hci0: command tx timeout
[  363.057159] Bluetooth: hci1: command tx timeout
[  363.248432] Bluetooth: hci2: command tx timeout
[  363.311404] Bluetooth: hci4: command tx timeout
[  363.376381] Bluetooth: hci3: command tx timeout
[  363.504368] Bluetooth: hci7: command tx timeout
[  363.505963] Bluetooth: hci5: command tx timeout
[  363.506021] Bluetooth: hci6: command tx timeout
[  390.362681] hrtimer: interrupt took 5361018 ns

VM DIAGNOSIS:
08:32:46  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88806ce00000 RCX=ffffffff81827f4e RDX=0000000000000000
RSI=0000000000000008 RDI=ffff88806ce365d0 RBP=000000000003a6cc RSP=ffff888035a77738
R8 =0000000000000000 R9 =fffffbfff0c7eef2 R10=ffffffff863f7797 R11=00000000000007e0
R12=0000000000000000 R13=dffffc0000000000 R14=ffffea0000d56e08 R15=0000000000000000
RIP=ffffffff8139207d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffa29c7c820 CR3=000000002a43c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000544000f RBX=ffffed1001a8e94d RCX=ffffffff84a0148a RDX=000000000000332b
RSI=00000000affe998b RDI=0000000000000002 RBP=ffff888008c4f780 RSP=ffff88806cf09dd8
R8 =ffff88806c6b99c0 R9 =0000000000000000 R10=ffffffff863f7797 R11=00000000000c33ea
R12=ffff88800d474a68 R13=ffffea0000351d00 R14=0000000000000000 R15=ffff88800d474a68
RIP=ffffffff818bb51d RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055556bb2d400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f23d55f46f4 CR3=0000000033120000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000001000000010000000000000000
XMM02=0000000000000000ff00000000000000 XMM03=00000000000000000000ff0000000000
XMM04=00ff0000000000000000ff0000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000