syzkaller login: [ 81.070307] sshd (239) used greatest stack depth: 23152 bytes left Warning: Permanently added '[localhost]:44018' (ECDSA) to the list of known hosts. 2024/11/28 14:03:00 fuzzer started 2024/11/28 14:03:01 dialing manager at localhost:37125 [ 82.509915] cgroup: Unknown subsys name 'net' [ 82.659482] cgroup: Unknown subsys name 'cpuset' [ 82.701250] cgroup: Unknown subsys name 'rlimit' 2024/11/28 14:03:24 syscalls: 2217 2024/11/28 14:03:24 code coverage: enabled 2024/11/28 14:03:24 comparison tracing: enabled 2024/11/28 14:03:24 extra coverage: enabled 2024/11/28 14:03:24 setuid sandbox: enabled 2024/11/28 14:03:24 namespace sandbox: enabled 2024/11/28 14:03:24 Android sandbox: enabled 2024/11/28 14:03:24 fault injection: enabled 2024/11/28 14:03:24 leak checking: enabled 2024/11/28 14:03:24 net packet injection: enabled 2024/11/28 14:03:24 net device setup: enabled 2024/11/28 14:03:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/28 14:03:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/28 14:03:24 USB emulation: enabled 2024/11/28 14:03:24 hci packet injection: enabled 2024/11/28 14:03:24 wifi device emulation: enabled 2024/11/28 14:03:24 802.15.4 emulation: enabled 2024/11/28 14:03:24 fetching corpus: 50, signal 13025/14918 (executing program) 2024/11/28 14:03:24 fetching corpus: 100, signal 29235/32703 (executing program) 2024/11/28 14:03:24 fetching corpus: 150, signal 36410/41385 (executing program) 2024/11/28 14:03:25 fetching corpus: 200, signal 41651/48110 (executing program) 2024/11/28 14:03:25 fetching corpus: 250, signal 48447/56203 (executing program) 2024/11/28 14:03:25 fetching corpus: 300, signal 51984/61077 (executing program) 2024/11/28 14:03:25 fetching corpus: 350, signal 57525/67760 (executing program) 2024/11/28 14:03:25 fetching corpus: 400, signal 61390/72763 (executing program) 2024/11/28 14:03:26 fetching corpus: 450, signal 66251/78605 (executing program) 2024/11/28 14:03:26 fetching corpus: 500, signal 69254/82691 (executing program) 2024/11/28 14:03:26 fetching corpus: 550, signal 71592/86117 (executing program) 2024/11/28 14:03:26 fetching corpus: 600, signal 74441/89956 (executing program) 2024/11/28 14:03:26 fetching corpus: 650, signal 78628/94923 (executing program) 2024/11/28 14:03:27 fetching corpus: 700, signal 83448/100416 (executing program) 2024/11/28 14:03:27 fetching corpus: 750, signal 85081/103030 (executing program) 2024/11/28 14:03:27 fetching corpus: 800, signal 86360/105315 (executing program) 2024/11/28 14:03:27 fetching corpus: 850, signal 88170/108012 (executing program) 2024/11/28 14:03:27 fetching corpus: 900, signal 89613/110380 (executing program) 2024/11/28 14:03:27 fetching corpus: 950, signal 92241/113682 (executing program) 2024/11/28 14:03:28 fetching corpus: 1000, signal 93256/115607 (executing program) 2024/11/28 14:03:28 fetching corpus: 1050, signal 94979/118082 (executing program) 2024/11/28 14:03:28 fetching corpus: 1100, signal 97768/121387 (executing program) 2024/11/28 14:03:29 fetching corpus: 1150, signal 98604/123182 (executing program) 2024/11/28 14:03:29 fetching corpus: 1200, signal 100368/125587 (executing program) 2024/11/28 14:03:29 fetching corpus: 1250, signal 101258/127322 (executing program) 2024/11/28 14:03:29 fetching corpus: 1300, signal 102587/129363 (executing program) 2024/11/28 14:03:29 fetching corpus: 1350, signal 104734/131932 (executing program) 2024/11/28 14:03:29 fetching corpus: 1400, signal 106165/133984 (executing program) 2024/11/28 14:03:30 fetching corpus: 1450, signal 107630/136049 (executing program) 2024/11/28 14:03:30 fetching corpus: 1500, signal 108468/137602 (executing program) 2024/11/28 14:03:30 fetching corpus: 1550, signal 109498/139294 (executing program) 2024/11/28 14:03:30 fetching corpus: 1600, signal 110672/141042 (executing program) 2024/11/28 14:03:30 fetching corpus: 1650, signal 112491/143226 (executing program) 2024/11/28 14:03:30 fetching corpus: 1700, signal 113524/144932 (executing program) 2024/11/28 14:03:31 fetching corpus: 1750, signal 114695/146591 (executing program) 2024/11/28 14:03:31 fetching corpus: 1800, signal 115843/148245 (executing program) 2024/11/28 14:03:31 fetching corpus: 1850, signal 116509/149595 (executing program) 2024/11/28 14:03:32 fetching corpus: 1900, signal 117563/151168 (executing program) 2024/11/28 14:03:32 fetching corpus: 1950, signal 118281/152509 (executing program) 2024/11/28 14:03:32 fetching corpus: 2000, signal 119168/153947 (executing program) 2024/11/28 14:03:32 fetching corpus: 2050, signal 120296/155516 (executing program) 2024/11/28 14:03:32 fetching corpus: 2100, signal 121057/156819 (executing program) 2024/11/28 14:03:33 fetching corpus: 2150, signal 121844/158109 (executing program) 2024/11/28 14:03:33 fetching corpus: 2200, signal 122347/159240 (executing program) 2024/11/28 14:03:33 fetching corpus: 2250, signal 123243/160572 (executing program) 2024/11/28 14:03:33 fetching corpus: 2300, signal 123933/161799 (executing program) 2024/11/28 14:03:33 fetching corpus: 2350, signal 124923/163163 (executing program) 2024/11/28 14:03:34 fetching corpus: 2400, signal 125922/164467 (executing program) 2024/11/28 14:03:34 fetching corpus: 2450, signal 127528/166139 (executing program) 2024/11/28 14:03:34 fetching corpus: 2500, signal 128200/167296 (executing program) 2024/11/28 14:03:34 fetching corpus: 2550, signal 129108/168554 (executing program) 2024/11/28 14:03:34 fetching corpus: 2600, signal 129753/169647 (executing program) 2024/11/28 14:03:34 fetching corpus: 2650, signal 130739/170880 (executing program) 2024/11/28 14:03:35 fetching corpus: 2700, signal 131592/172077 (executing program) 2024/11/28 14:03:35 fetching corpus: 2750, signal 132146/173151 (executing program) 2024/11/28 14:03:35 fetching corpus: 2800, signal 133029/174321 (executing program) 2024/11/28 14:03:35 fetching corpus: 2850, signal 134087/175570 (executing program) 2024/11/28 14:03:36 fetching corpus: 2900, signal 134653/176548 (executing program) 2024/11/28 14:03:36 fetching corpus: 2950, signal 135112/177477 (executing program) 2024/11/28 14:03:36 fetching corpus: 3000, signal 135731/178459 (executing program) 2024/11/28 14:03:36 fetching corpus: 3050, signal 136127/179303 (executing program) 2024/11/28 14:03:37 fetching corpus: 3100, signal 137247/180488 (executing program) 2024/11/28 14:03:37 fetching corpus: 3150, signal 138582/181747 (executing program) 2024/11/28 14:03:37 fetching corpus: 3200, signal 139085/182626 (executing program) 2024/11/28 14:03:37 fetching corpus: 3250, signal 139704/183536 (executing program) 2024/11/28 14:03:37 fetching corpus: 3300, signal 140640/184581 (executing program) 2024/11/28 14:03:38 fetching corpus: 3350, signal 141042/185401 (executing program) 2024/11/28 14:03:38 fetching corpus: 3400, signal 141493/186206 (executing program) 2024/11/28 14:03:38 fetching corpus: 3450, signal 142024/187053 (executing program) 2024/11/28 14:03:38 fetching corpus: 3500, signal 142723/187942 (executing program) 2024/11/28 14:03:38 fetching corpus: 3550, signal 143962/189001 (executing program) 2024/11/28 14:03:38 fetching corpus: 3600, signal 144359/189745 (executing program) 2024/11/28 14:03:39 fetching corpus: 3650, signal 145885/190856 (executing program) 2024/11/28 14:03:39 fetching corpus: 3700, signal 146539/191690 (executing program) 2024/11/28 14:03:39 fetching corpus: 3750, signal 147049/192415 (executing program) 2024/11/28 14:03:40 fetching corpus: 3800, signal 148523/193422 (executing program) 2024/11/28 14:03:40 fetching corpus: 3850, signal 149083/194174 (executing program) 2024/11/28 14:03:40 fetching corpus: 3900, signal 149901/194985 (executing program) 2024/11/28 14:03:41 fetching corpus: 3950, signal 150394/195698 (executing program) 2024/11/28 14:03:41 fetching corpus: 4000, signal 150871/196377 (executing program) 2024/11/28 14:03:41 fetching corpus: 4050, signal 151593/197135 (executing program) 2024/11/28 14:03:41 fetching corpus: 4100, signal 152171/197826 (executing program) 2024/11/28 14:03:41 fetching corpus: 4150, signal 152684/198526 (executing program) 2024/11/28 14:03:42 fetching corpus: 4200, signal 153397/199181 (executing program) 2024/11/28 14:03:42 fetching corpus: 4250, signal 153780/199797 (executing program) 2024/11/28 14:03:42 fetching corpus: 4300, signal 154420/200489 (executing program) 2024/11/28 14:03:42 fetching corpus: 4350, signal 154952/201124 (executing program) 2024/11/28 14:03:42 fetching corpus: 4400, signal 155482/201777 (executing program) 2024/11/28 14:03:43 fetching corpus: 4450, signal 156084/202399 (executing program) 2024/11/28 14:03:43 fetching corpus: 4500, signal 156596/203000 (executing program) 2024/11/28 14:03:43 fetching corpus: 4550, signal 157005/203555 (executing program) 2024/11/28 14:03:43 fetching corpus: 4600, signal 157313/204121 (executing program) 2024/11/28 14:03:43 fetching corpus: 4650, signal 157760/204670 (executing program) 2024/11/28 14:03:44 fetching corpus: 4700, signal 158077/205200 (executing program) 2024/11/28 14:03:44 fetching corpus: 4750, signal 158471/205741 (executing program) 2024/11/28 14:03:44 fetching corpus: 4800, signal 158943/206281 (executing program) 2024/11/28 14:03:44 fetching corpus: 4850, signal 159317/206838 (executing program) 2024/11/28 14:03:45 fetching corpus: 4900, signal 159687/207384 (executing program) 2024/11/28 14:03:45 fetching corpus: 4950, signal 160025/207911 (executing program) 2024/11/28 14:03:45 fetching corpus: 5000, signal 160549/208408 (executing program) 2024/11/28 14:03:45 fetching corpus: 5050, signal 160885/208901 (executing program) 2024/11/28 14:03:45 fetching corpus: 5100, signal 161260/209408 (executing program) 2024/11/28 14:03:45 fetching corpus: 5150, signal 161706/209892 (executing program) 2024/11/28 14:03:45 fetching corpus: 5200, signal 162131/210368 (executing program) 2024/11/28 14:03:46 fetching corpus: 5250, signal 162534/210817 (executing program) 2024/11/28 14:03:46 fetching corpus: 5300, signal 162797/211112 (executing program) 2024/11/28 14:03:46 fetching corpus: 5350, signal 163243/211112 (executing program) 2024/11/28 14:03:46 fetching corpus: 5400, signal 163657/211112 (executing program) 2024/11/28 14:03:46 fetching corpus: 5450, signal 164230/211112 (executing program) 2024/11/28 14:03:46 fetching corpus: 5500, signal 164611/211112 (executing program) 2024/11/28 14:03:47 fetching corpus: 5550, signal 164880/211112 (executing program) 2024/11/28 14:03:47 fetching corpus: 5600, signal 165240/211112 (executing program) 2024/11/28 14:03:47 fetching corpus: 5650, signal 165649/211112 (executing program) 2024/11/28 14:03:47 fetching corpus: 5700, signal 166022/211112 (executing program) 2024/11/28 14:03:47 fetching corpus: 5750, signal 166616/211112 (executing program) 2024/11/28 14:03:47 fetching corpus: 5800, signal 166978/211112 (executing program) 2024/11/28 14:03:48 fetching corpus: 5850, signal 167307/211112 (executing program) 2024/11/28 14:03:48 fetching corpus: 5900, signal 167582/211112 (executing program) 2024/11/28 14:03:48 fetching corpus: 5950, signal 167898/211112 (executing program) 2024/11/28 14:03:48 fetching corpus: 6000, signal 168415/211112 (executing program) 2024/11/28 14:03:49 fetching corpus: 6050, signal 168749/211112 (executing program) 2024/11/28 14:03:49 fetching corpus: 6100, signal 169129/211112 (executing program) 2024/11/28 14:03:49 fetching corpus: 6150, signal 169628/211112 (executing program) 2024/11/28 14:03:49 fetching corpus: 6200, signal 169968/211112 (executing program) 2024/11/28 14:03:49 fetching corpus: 6250, signal 170309/211112 (executing program) 2024/11/28 14:03:50 fetching corpus: 6300, signal 170743/211112 (executing program) 2024/11/28 14:03:50 fetching corpus: 6350, signal 171240/211112 (executing program) 2024/11/28 14:03:50 fetching corpus: 6400, signal 171617/211112 (executing program) 2024/11/28 14:03:50 fetching corpus: 6450, signal 171925/211112 (executing program) 2024/11/28 14:03:51 fetching corpus: 6500, signal 172180/211112 (executing program) 2024/11/28 14:03:51 fetching corpus: 6550, signal 172643/211112 (executing program) 2024/11/28 14:03:51 fetching corpus: 6600, signal 172985/211112 (executing program) 2024/11/28 14:03:52 fetching corpus: 6650, signal 173260/211112 (executing program) 2024/11/28 14:03:52 fetching corpus: 6700, signal 173491/211112 (executing program) 2024/11/28 14:03:52 fetching corpus: 6750, signal 173785/211112 (executing program) 2024/11/28 14:03:52 fetching corpus: 6800, signal 174199/211112 (executing program) 2024/11/28 14:03:52 fetching corpus: 6850, signal 174654/211112 (executing program) 2024/11/28 14:03:52 fetching corpus: 6900, signal 174926/211112 (executing program) 2024/11/28 14:03:53 fetching corpus: 6950, signal 175139/211112 (executing program) 2024/11/28 14:03:53 fetching corpus: 7000, signal 175436/211112 (executing program) 2024/11/28 14:03:53 fetching corpus: 7050, signal 175756/211112 (executing program) 2024/11/28 14:03:54 fetching corpus: 7100, signal 176073/211112 (executing program) 2024/11/28 14:03:54 fetching corpus: 7150, signal 176363/211112 (executing program) 2024/11/28 14:03:54 fetching corpus: 7200, signal 176549/211112 (executing program) 2024/11/28 14:03:54 fetching corpus: 7250, signal 176811/211112 (executing program) 2024/11/28 14:03:55 fetching corpus: 7300, signal 177112/211112 (executing program) 2024/11/28 14:03:55 fetching corpus: 7350, signal 177415/211112 (executing program) 2024/11/28 14:03:56 fetching corpus: 7400, signal 177802/211112 (executing program) 2024/11/28 14:03:56 fetching corpus: 7450, signal 179204/211112 (executing program) 2024/11/28 14:03:56 fetching corpus: 7500, signal 179434/211112 (executing program) 2024/11/28 14:03:56 fetching corpus: 7550, signal 179618/211112 (executing program) 2024/11/28 14:03:56 fetching corpus: 7600, signal 179873/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7650, signal 180175/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7700, signal 180349/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7750, signal 180625/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7800, signal 180840/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7850, signal 181028/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7900, signal 181271/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 7950, signal 181524/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 8000, signal 181776/211112 (executing program) 2024/11/28 14:03:57 fetching corpus: 8050, signal 182348/211112 (executing program) 2024/11/28 14:03:58 fetching corpus: 8100, signal 182596/211112 (executing program) 2024/11/28 14:03:58 fetching corpus: 8150, signal 182839/211112 (executing program) 2024/11/28 14:03:58 fetching corpus: 8200, signal 183130/211112 (executing program) 2024/11/28 14:03:58 fetching corpus: 8250, signal 183340/211112 (executing program) 2024/11/28 14:03:58 fetching corpus: 8300, signal 183565/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8350, signal 183819/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8400, signal 184058/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8450, signal 184330/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8500, signal 184604/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8550, signal 184828/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8600, signal 185022/211112 (executing program) 2024/11/28 14:03:59 fetching corpus: 8650, signal 185175/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 8700, signal 185501/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 8750, signal 185872/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 8800, signal 186246/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 8850, signal 186657/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 8900, signal 186817/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 8950, signal 187046/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 9000, signal 187233/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 9050, signal 187440/211112 (executing program) 2024/11/28 14:04:00 fetching corpus: 9100, signal 187773/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9150, signal 188028/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9200, signal 188281/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9250, signal 188521/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9300, signal 188743/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9350, signal 188966/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9400, signal 189209/211112 (executing program) 2024/11/28 14:04:01 fetching corpus: 9450, signal 189372/211112 (executing program) 2024/11/28 14:04:02 fetching corpus: 9500, signal 189627/211112 (executing program) 2024/11/28 14:04:02 fetching corpus: 9550, signal 189841/211112 (executing program) 2024/11/28 14:04:02 fetching corpus: 9600, signal 190206/211112 (executing program) 2024/11/28 14:04:02 fetching corpus: 9650, signal 190358/211112 (executing program) 2024/11/28 14:04:02 fetching corpus: 9700, signal 190540/211112 (executing program) 2024/11/28 14:04:03 fetching corpus: 9750, signal 190914/211112 (executing program) 2024/11/28 14:04:03 fetching corpus: 9800, signal 191331/211112 (executing program) 2024/11/28 14:04:04 fetching corpus: 9850, signal 191515/211112 (executing program) 2024/11/28 14:04:04 fetching corpus: 9900, signal 191756/211112 (executing program) 2024/11/28 14:04:04 fetching corpus: 9950, signal 192043/211112 (executing program) 2024/11/28 14:04:05 fetching corpus: 10000, signal 192266/211112 (executing program) 2024/11/28 14:04:05 fetching corpus: 10050, signal 192445/211112 (executing program) 2024/11/28 14:04:05 fetching corpus: 10100, signal 192622/211112 (executing program) 2024/11/28 14:04:05 fetching corpus: 10150, signal 192802/211112 (executing program) 2024/11/28 14:04:06 fetching corpus: 10200, signal 193083/211112 (executing program) 2024/11/28 14:04:06 fetching corpus: 10250, signal 193319/211112 (executing program) 2024/11/28 14:04:06 fetching corpus: 10300, signal 193485/211112 (executing program) 2024/11/28 14:04:06 fetching corpus: 10350, signal 193828/211112 (executing program) 2024/11/28 14:04:06 fetching corpus: 10400, signal 194213/211112 (executing program) 2024/11/28 14:04:07 fetching corpus: 10450, signal 194416/211112 (executing program) 2024/11/28 14:04:07 fetching corpus: 10500, signal 194656/211112 (executing program) 2024/11/28 14:04:07 fetching corpus: 10550, signal 194877/211112 (executing program) 2024/11/28 14:04:07 fetching corpus: 10600, signal 195180/211112 (executing program) 2024/11/28 14:04:07 fetching corpus: 10650, signal 195562/211112 (executing program) 2024/11/28 14:04:08 fetching corpus: 10700, signal 195912/211112 (executing program) 2024/11/28 14:04:08 fetching corpus: 10750, signal 196063/211112 (executing program) 2024/11/28 14:04:08 fetching corpus: 10800, signal 196270/211112 (executing program) 2024/11/28 14:04:09 fetching corpus: 10850, signal 196564/211112 (executing program) 2024/11/28 14:04:09 fetching corpus: 10900, signal 196805/211112 (executing program) 2024/11/28 14:04:10 fetching corpus: 10950, signal 197002/211112 (executing program) 2024/11/28 14:04:10 fetching corpus: 11000, signal 197276/211112 (executing program) 2024/11/28 14:04:10 fetching corpus: 11050, signal 197427/211112 (executing program) 2024/11/28 14:04:10 fetching corpus: 11100, signal 197613/211112 (executing program) 2024/11/28 14:04:11 fetching corpus: 11150, signal 197741/211112 (executing program) 2024/11/28 14:04:11 fetching corpus: 11200, signal 197969/211112 (executing program) 2024/11/28 14:04:11 fetching corpus: 11250, signal 198130/211112 (executing program) 2024/11/28 14:04:11 fetching corpus: 11300, signal 198321/211112 (executing program) 2024/11/28 14:04:11 fetching corpus: 11350, signal 198523/211112 (executing program) 2024/11/28 14:04:12 fetching corpus: 11400, signal 198676/211112 (executing program) 2024/11/28 14:04:12 fetching corpus: 11450, signal 198885/211112 (executing program) 2024/11/28 14:04:12 fetching corpus: 11500, signal 199117/211112 (executing program) 2024/11/28 14:04:13 fetching corpus: 11550, signal 199348/211112 (executing program) 2024/11/28 14:04:13 fetching corpus: 11600, signal 199512/211112 (executing program) 2024/11/28 14:04:13 fetching corpus: 11650, signal 199697/211112 (executing program) 2024/11/28 14:04:13 fetching corpus: 11700, signal 199891/211112 (executing program) 2024/11/28 14:04:14 fetching corpus: 11750, signal 200145/211112 (executing program) 2024/11/28 14:04:14 fetching corpus: 11800, signal 200337/211112 (executing program) 2024/11/28 14:04:14 fetching corpus: 11850, signal 200556/211112 (executing program) 2024/11/28 14:04:15 fetching corpus: 11876, signal 200689/211112 (executing program) 2024/11/28 14:04:15 fetching corpus: 11876, signal 200689/211112 (executing program) 2024/11/28 14:04:18 starting 8 fuzzer processes 14:04:18 executing program 0: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x900) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$CDROM_DISC_STATUS(r0, 0x5327) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x14, 0x1c, 0x86, &(0x7f00000000c0)}) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x2}, {0x776}, 0x40, 0x0, 0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)="b80df9353540c4713c27948f79fdea719c4e7e707fac2613ae316eaa3d9a34817e6cbdffd34df414f3f129f9a5ff1a9a5b46c2ba66e34ef2a661aaac55e6a69c713d68f6058a400e35003e36728f30c2d0c3f9cb117f9659039512c91a33da5c5a80823b6c822f", 0x67, 0x0, &(0x7f0000000600)={0x2, 0xd7, {0x1, 0xc, 0xca, "c8c55a8b34e7894b40a9b906e4d80c20fe00d325b9f0839d088b512728ace699c08675ff2272f7f16e5fcbbfe2f35d6319755187e5d322e556945a6405e3df94971c2eb7334626c46cf42f0d5bca37b0bd60ac0d93e302de4e10c6cab348f9fcc20ae462268bbc10bb215884b0888204a52cf8ea32c1c88e2737565edf269f08c1333c3b74094c2c8af2daf65ac8be8fbb8b8443d3f4c391c50cb48f720e8e7bc519d47de18cbbf3c10cff5054f6ae2b16310d99e9791843d8a42e3deb9806af67bded6661d64467f460"}, 0xa, "da557992adf780baf818"}, 0xed}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x400200, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000bc0)={0x24, 0xa, &(0x7f00000007c0)="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"}) r2 = openat$incfs(r0, &(0x7f0000000c00)='.log\x00', 0x200002, 0x22) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000c40)={0x6}) r3 = eventfd2(0xfffff000, 0x1) r4 = dup(r3) ioctl$CDROMSTOP(r0, 0x5307) pidfd_send_signal(r0, 0x3e, &(0x7f0000000c80)={0x22, 0x4, 0x200}, 0x0) openat$incfs(r0, &(0x7f0000000d00)='.pending_reads\x00', 0x80000, 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000d40)) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001000), 0xc) 14:04:18 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xe8400, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x9d0273112cbec8a9}, 0x40080) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="bcaa6406035a0302a95866c93471", 0xe}, {&(0x7f0000000200)="2a6d09bd5bec9949cf240a02eb42e194b1ec7ea928fac672d18da111eabb7c292806d5657de374ec2495fa78c1614d471497bea583e6b9bed73a42cafe68971489c26efe03c74320c3ca959906188db894aa518c7de6c01f4192e2058918a2772a314e855c12dc6afeca8949fb5c423fd7e93c1370e2cb1be46c0f370f904fc931db1a21f2bd330458cdc1822c358266", 0x90}, {&(0x7f00000002c0)="895f9f042cbe258f78ea46e58e1ac17be0fd904a3c9b416c24b0c5701fc6e484a8fa008d5addaf527cb348c53a7ba532641a181de2a19ef65a9b296582768e24aa1ed7c2d4e06b889bf7eba2", 0x4c}], 0x3, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xec6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x7, 0xec, [@private=0xa010101]}, @noop, @timestamp={0x44, 0x8, 0x48, 0x0, 0x5, [0x14]}, @noop, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "95ee696d815f435043"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x120}, 0x8845) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000540)={0x0, @rc={0x1f, @none, 0x4}, @can, @qipcrtr={0x2a, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000500)='veth0\x00', 0xfffffffffffffffb, 0x6, 0xf66b}) r2 = timerfd_create(0x4, 0x800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000005c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000780)=0xe8) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0xc8, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@cache_mmap}, {@noextend}], [{@hash}, {@seclabel}, {@hash}, {@fowner_gt={'fowner>', r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '-'}}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x400) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x22c000, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000980), 0x1ff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000ac0)={0x7, 0x70a792f5, 0x5, 0x7f, 0x5, [{0x1, 0x3, 0xad4, '\x00', 0x100}, {0x8, 0x7, 0x3, '\x00', 0x887}, {0x4, 0x930, 0x100, '\x00', 0x102}, {0x8d, 0x2, 0x6, '\x00', 0x2000}, {0x8000, 0xac2, 0x2, '\x00', 0x2c00}]}) lseek(r0, 0x2a64aabb, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x149281, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, r6, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x56}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12f2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x4040000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000dc0)={0x0, 0x5, 0x9}) 14:04:18 executing program 1: fcntl$getflags(0xffffffffffffffff, 0x401) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) r1 = dup3(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/snd/timer\x00'}, {0x20, '/dev/snd/timer\x00'}, {0x20, '/dev/snd/timer\x00'}, {0x20, '/dev/snd/timer\x00'}, {0x20, '/dev/snd/timer\x00'}, {}, {0x20, '/dev/snd/timer\x00'}, {0x20, '(]}^'}], 0xa, "85384a8be464248b9a8cd6c53e1af676f8ea6c58d0151d726bef0d6dd4372c92867729bfb4f90b6ad097d993749ff508c38724456577b79fb3ce9e53eaca4ed3554a5019d468afea234fdd4e9e9d43aae37518ddea67d25374e27d08ec5cd127732bbdc339"}, 0xd6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x80, 0x81, 0x3, 0x2}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0242) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000200)={{0x2, 0x3, 0x5, 0x1, 0x986}}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000280)={0x401, 0x800, 0x5, 0xffff8001, 0x5, "4abb6926fce95cb698c0fe4d0ca3d77bdc2dbd", 0x8, 0x3}) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000006c0)={0x1, 0x1, 0x12, 0x6, 0x4e, &(0x7f00000002c0)}) ioctl$int_in(r3, 0x5421, &(0x7f0000000700)=0x89) r6 = fcntl$dupfd(r0, 0x406, r4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5, {0x9, 0x400}}, './file0\x00'}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x0, &(0x7f00000026c0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000002600)=[{{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000008c0)=""/50, 0x32}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/246, 0xf6}, {&(0x7f0000001c00)=""/84, 0x54}], 0x6, &(0x7f0000001d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001dc0)=""/23, 0x17}], 0x1}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/67, 0x43}, {&(0x7f0000001f80)=""/28, 0x1c}, {&(0x7f0000001fc0)=""/177, 0xb1}, {&(0x7f0000002080)=""/48, 0x30}, {&(0x7f00000020c0)=""/162, 0xa2}, {&(0x7f0000002180)=""/77, 0x4d}, {&(0x7f0000002200)=""/229, 0xe5}, {&(0x7f0000002300)=""/127, 0x7f}, {&(0x7f0000002380)=""/141, 0x8d}], 0xa, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x2001, &(0x7f0000002700)={r9, r10+60000000}) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2, &(0x7f0000002740)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@afid={'afid', 0x3d, 0x8000}}, {@dfltgid={'dfltgid', 0x3d, r11}}, {@afid={'afid', 0x3d, 0x5}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@permit_directio}, {@dont_measure}]}}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000002840)={0x3, &(0x7f0000002800)=[{0x3, 0x200}, {0xfff7, 0x2f5d}, {0x4, 0xfefc}]}) 14:04:18 executing program 3: ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f00000000c0)={"9324ac0bdf807d87588db7ea", &(0x7f0000000000)="835243a64488b27d96f175768da3e6bbc922cbf53209edb134b0ba07819c7ddf9bbb2dd5b9eeab7d6fb0", 0x2a, 0xcd, &(0x7f0000000040)={0x0, 0x0, 0x3, 0xe, 0x0, 0x1, 0x0, "6e46da0c", 0x82, "44d90874", 0x4, 0x40, 0xdc, 'zh\n', "238f0ac87c455771a918d70d518ed9719d2440cc07d08126524b54595ce4c1edb7cd5e291dde00dff58f1da1b11e"}, 0x1, 0x0, 0x1, &(0x7f0000000080)}) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x1f) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0xdb2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0xd) r1 = openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x80, 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000280)={"a20ded9305ce11cc511027e0", &(0x7f00000001c0)="e9306b28d0b0e35e7bcabbe02d8efa4ab00cb85c758139685ee3cf7891a602f6a6e43509968e89cffd68d0efc31c848401533f3e1f6a7b21e34c5a416cc0", 0x3e, 0x0, &(0x7f0000000200)={0x6, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, "3664e845", 0x80, "d725293d", 0x4, 0x6, 0x2, "3437a1", "d4cb8013aeec6dc7512b7e0f9b932cc05df4ac29e5e89d7aa935adedd94608a457b18d77760af6c1999bdbc4862f"}, 0x3, 0x9, 0x2, &(0x7f0000000240)}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x400}}, './file1\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) r5 = openat(r2, &(0x7f0000000300)='./file0/file0\x00', 0x420080, 0x40) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='ext4\x00', 0x2040, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) splice(r6, &(0x7f0000000400)=0x401, r5, &(0x7f0000000440)=0x47, 0x86, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000480)={0x1, 0x69, "db59c2ac84a29ba8f8fabb2119d314c2c965d471d9f3d38e4f54b868350d5b8f0485d80968bbcea70a33f7c7fb658ffca9f125a984b718a830b13b922ca1efa6d8ed9183988ee8305b12615fbe223789d939049b8f007487fac4875f766b49705e820e9ec8564b1af6"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "88a0553668a0e7271a24d6e82dda9c64"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001500)={r7, 0x8, 0x0, [0x9, 0x0, 0x7fff, 0x56, 0x8], [0x1, 0x3, 0x9, 0x0, 0x7ff, 0x7, 0x7cc5, 0x101, 0x1ff, 0x6, 0x96, 0x100, 0x15, 0x2, 0x3f, 0x8, 0x7, 0x3, 0x948d69, 0x1, 0x1000, 0x1, 0xb1b, 0x1, 0x6, 0x0, 0x81, 0x6, 0xa45f, 0x100000001, 0xff, 0x7, 0x6, 0xfffffffffffeffff, 0x65, 0x1, 0xfff, 0xffffffffffffffad, 0x10000, 0x7, 0x9, 0x9, 0x6, 0xfffffffffffff001, 0x0, 0x2, 0x80000001, 0xffffffffffffff01, 0x7f, 0x3, 0x3, 0x3, 0x2, 0x0, 0x6, 0x40, 0xa6ff, 0x6, 0x9, 0x2, 0x4, 0x5, 0x400, 0x401, 0x5, 0x5, 0x9, 0x9, 0xff, 0x101, 0x10001, 0x101, 0x7ff, 0x9, 0xffffffffffffb987, 0xfffffffffffff801, 0x7aa6, 0x0, 0x81, 0x0, 0x6, 0x1, 0x400, 0x5, 0x7fffffff, 0xfd, 0x5, 0x7, 0x2a, 0x5, 0x5, 0x2, 0x3ff, 0x3, 0x0, 0x92a6, 0x7f, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x73, 0x1, 0xbf, 0x8, 0x4, 0x1ff, 0x2b, 0x1, 0x1, 0x3ff, 0x3, 0x1, 0x9e48, 0x8000, 0x6, 0x8001, 0x8b72, 0x3]}) preadv2(0xffffffffffffffff, &(0x7f0000001dc0)=[{&(0x7f0000001980)=""/149, 0x95}, {&(0x7f0000001a40)=""/35, 0x23}, {&(0x7f0000001a80)=""/72, 0x48}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/174, 0xae}, {&(0x7f0000001cc0)=""/234, 0xea}], 0x6, 0x5, 0x40, 0x10) 14:04:18 executing program 7: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x0, 0x61e984f7, 0x7, 0x0, 0x3}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x3, 0xfe, 0x0, 0x7}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) readahead(r1, 0x1, 0x3722f82f) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) lseek(r2, 0x1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x169180, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x948, 0x400a00) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x6, 0x2, 0x2, 0x1, 0x0, 0x0, 0xa10a1, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa2, 0x3, @perf_config_ext={0x3, 0x27}, 0x40080, 0xffffffff, 0x352f, 0x3, 0x8, 0x1, 0x6, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r1, 0x2) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000300)={@loopback, @multicast1}, &(0x7f0000000340)=0xc) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000600)) read(0xffffffffffffffff, &(0x7f0000000680)=""/4096, 0x1000) 14:04:18 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xcc2a, 0x442480) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0xfffffff7, 0x3, {0x832a4217ffdf7627, 0x0, 0x7, 0x2, 0xb8a8}, 0x200}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x6, 0x9, 0x0, 0x496, 0x6}) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x1}, 0x8) r1 = signalfd4(r0, &(0x7f0000000180)={[0x3000000000]}, 0x8, 0x40800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1a, 0x8001, 0x5, 0xffffffffffffff01, 0x0, 0xffff, 0x9, 0x7fffffff, 0x6}}, 0x43) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x93c5, 0xd0, 0x6, 0xfffffffe}]}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000002c0)={0x6fcf, {0x10, 0xcd, 0x6f01, 0x5, 0x4}}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000300)={0xe209, 0x8, 0x6, 0x0, 0x6, [{0xbba, 0x3, 0x7}, {0x3, 0x4, 0x100000001, '\x00', 0x801}, {0x101, 0x28a1, 0x3, '\x00', 0x1100}, {0x3ff, 0x3, 0x7, '\x00', 0x2108}, {0x101, 0x100000001, 0xffff, '\x00', 0x200}, {0x400, 0x5, 0x6, '\x00', 0x100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x0, &(0x7f0000000480)}) r3 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r3, &(0x7f0000000500)="fbb1809ceb88e7c919b281bc1a006196030711110979ba218fdefdaa7c5e1ea77fe7f8bc5c6e4a2b6321822a592b3888c600b2e52791427e8e31a2aac9afcaa6fd5e28e6116fc44ce8bb5a0353a973a8cc01b94f2f8c350aead87cfb", 0x5c, 0x15) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd4, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd4}}, 0x20000004) write$P9_RSTAT(r0, &(0x7f0000000740)={0x5d, 0x7d, 0x2, {0x0, 0x56, 0x400, 0x8, {0x80, 0x0, 0x2}, 0x80200000, 0x7, 0x4a, 0x4, 0x4, 'pci\x00', 0x15, '\\+\xa7:@!:/:k:-(@+])(\\+:', 0xa, 'netdevsim\x00'}}, 0x5d) r4 = openat$cgroup_freezer_state(r1, &(0x7f00000007c0), 0x2, 0x0) r5 = signalfd4(r4, &(0x7f0000000800)={[0x5]}, 0x8, 0x80800) r6 = openat2(r5, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x400, 0x191, 0x11}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000008c0)=r6, 0x1) write(r2, &(0x7f0000000900)="f3e6ea3acc936949a07e8b3a692238f7ff99600a37de3156270ff8404137c24ead113abd15f3b8d3d983aa06753677418a", 0x31) [ 159.487729] audit: type=1400 audit(1732802658.511:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:04:18 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3c1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff9c}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa9b7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x9ed]}, 0x8, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x180a000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20048000) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/raw\x00') r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000001}, 0x4004010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0xe, 0x6, 0x600, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x40005) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x110003}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x811) ioctl$LOOP_CLR_FD(r1, 0x4c01) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pread64(r8, &(0x7f0000000980)=""/69, 0x45, 0x1ee) r9 = eventfd(0x3) io_submit(0x0, 0x6, &(0x7f00000010c0)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0xaaed, r7, &(0x7f0000000a00)="5874a868b9ea3b76d68c254c57a62806ef04d0b3d2466f2735b8e2649601e0e0f9a8eb0d53f7d894c83ce31141c73800f54679f3a4113a37623dc86463f561dd17ce01406b0825934845b53bd37330812bdf5bf15e6c7c60c0bfc47cd3ff485012f933d2b6c366b22a8d4907dc8dfb90f310f7c885190a5be715cd7f031c204a39dc31fb95295e1316544bb9ce4dc15e24d4b136", 0x94, 0x8, 0x0, 0x2, r3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x5, r8, &(0x7f0000000b00)="36f5e3ee595f05493f9517c07ad44a7e0b74dd5e8da9966724bd97b5beefde678ed9d03efe476cecca5218450efcabdc1777df16f3d6a50359eaeeb13d2130dc152b6652cc7423f021a77653051fbd76fb66de51b1fa7620b2f4ed24ff8b6c5793c8a13393ac525fa7c1ddb19c9cac779590176440cea9c53919400168246facf13a3092f647979681474383ff9b55a26b89e21cd4c02e3907b7d4daf87f4d75e932f578107a757c0566cfb75a6117ee1f0f72b912e93062727a28546d9a453561cdb4b1464dc71909be6b4b132d957a138eee8eef467898e48d9063b4b2a090ec0bc9588e605f8a18ee46c54e96eb68c420366b590f147026", 0xf9, 0x0, 0x0, 0x3, r3}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x9, r9, &(0x7f0000000c40)="d0a0a3206695a4fa9a1e5780a252d6b0c2b2dd5be475d90ba18011d62ada21fa87d3d45608715029d203ff09df9694f8fe16bbc7e5079afa7b9fb27c8b3ed9d1fce8b775be55b607321d97cdc3470f3d66ec2aa9a8518b2f6130b9986ac1b488e399f9c184da79e3f60333d22f6caf24a976fce969d252eafbdf314a", 0x7c, 0x0, 0x0, 0x3}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x800, r4, &(0x7f0000000d00)="2bae5e3a9634d3462aa847a7565888fe7c4687d0af098f7291e2902ff9f86c0ce02a42cb3627e321bccc67bab6fadcbf4bd8b3c2994ede3c7abe5309211c75c69ab3d3819d5f0155480e2931050c5500035466c208528985fdec018989ec87274658fcf2d0b2f39f94c67a70cb1864b832e0de144b78e32a610bb0d28e4d02e0ff1244cd04cec2f94cfda98ff79e234c98b40526850d6a861eb5f15968e4dfd48e16d7359b2f85a66e59fe402622a5fd8f939e76659cbd44e1035b95142f33da907e3139a5", 0xc5, 0x0, 0x0, 0x2, r3}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x8, 0x200, r1, &(0x7f0000000e40)="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", 0xfc, 0x4, 0x0, 0x2}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x7, 0xffff, r8, &(0x7f0000000f80)="1d7d893916375b283408419897fd023eb295d82d35a1d9e9d7c8b42d6baa9e12987f42a9335abdefa7da2dbed523eccd4107a0d537daf2d702ba57598fcf1fc9299f6f4edd6866a824c7476c8470b318ab969ffe9e75ee29c00b6ba416c807cba2a5463f4e84800f5d7fa41c74e83c0e6595f6a1f2d98892ffac1218d503adeaed55593b3f7b8a735a679ea19826566a58dc3df96f76d41f6bce55e783a8309ebdb64c9ec18e1846ce67573533a109a35c3b82bae8ed5a7b333de9191815b44fd1567b47007cf033f863140b124ce9cbdf08d03adee47179accdcb", 0xdb, 0x1, 0x0, 0x2, r4}]) 14:04:18 executing program 6: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2200, 0x4) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1500a2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@privport}, {@access_client}], [{@obj_type={'obj_type', 0x3d, '+#%'}}]}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000200)) r2 = epoll_create1(0x0) flock(r2, 0x8) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000240)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) syz_open_dev$tty20(0xc, 0x4, 0x1) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@nfs={0x90, 0x24, {0x101, 0xdaea, 0x0, 0x80, "3d95951c6fa13bd6bdecb0f87a7b569666a2db67b72c82062c3648bc6a3ef2f9f007d196a574cae8a2dab67cc25ef1c1ba75dbfe4778c2fd9162ae47b0a0531577ea4ad4582d181c5fb78847de063ff6a06c4f7636c21de68571933d457d8eb1be723b51a1b8e2bd2d69d4113d7afffbcc62b888be6783552958db372ba6cf78"}}, &(0x7f00000003c0), 0x400) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000400)={0x3, 0x7, 0x8, 0xd468d5b0, 0x11, "e28fc17dc342b2062bd8f248771303dce0ec39"}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000440)) r3 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000004c0)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000500)={0xfffe, 0x5, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000540)={0xfffffeff, 0x3, 0xd8b, 0x9d3, 0x11, "d5dd51059abf5eaa8eb9983564424592cf1ac5"}) [ 160.821987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.824721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.827457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.830910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.832943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.836335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.892946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.896917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.905987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.910568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.912396] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.920731] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.923317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.926115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.928866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.948634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.959849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.961563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.967704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.969449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.971937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.989126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.996852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.004110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.006171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.012441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.016013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.035006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.043044] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.045166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.092216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.101194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.102768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.109499] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.113023] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.115106] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.116486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.118707] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.120290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.123864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.126567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.147950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.149340] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.181813] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.185059] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.202224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.216663] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.223887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.912282] Bluetooth: hci0: command tx timeout [ 162.975899] Bluetooth: hci1: command tx timeout [ 163.041666] Bluetooth: hci2: command tx timeout [ 163.103772] Bluetooth: hci4: command tx timeout [ 163.105197] Bluetooth: hci3: command tx timeout [ 163.168863] Bluetooth: hci5: command tx timeout [ 163.295870] Bluetooth: hci6: command tx timeout [ 163.296889] Bluetooth: hci7: command tx timeout [ 164.959931] Bluetooth: hci0: command tx timeout [ 165.023734] Bluetooth: hci1: command tx timeout [ 165.087809] Bluetooth: hci2: command tx timeout [ 165.153656] Bluetooth: hci3: command tx timeout [ 165.155081] Bluetooth: hci4: command tx timeout [ 165.215932] Bluetooth: hci5: command tx timeout [ 165.345643] Bluetooth: hci6: command tx timeout [ 165.347089] Bluetooth: hci7: command tx timeout [ 167.007673] Bluetooth: hci0: command tx timeout [ 167.071710] Bluetooth: hci1: command tx timeout [ 167.136886] Bluetooth: hci2: command tx timeout [ 167.199832] Bluetooth: hci3: command tx timeout [ 167.200499] Bluetooth: hci4: command tx timeout [ 167.263736] Bluetooth: hci5: command tx timeout [ 167.391701] Bluetooth: hci6: command tx timeout [ 167.392284] Bluetooth: hci7: command tx timeout [ 169.055779] Bluetooth: hci0: command tx timeout [ 169.120813] Bluetooth: hci1: command tx timeout [ 169.183803] Bluetooth: hci2: command tx timeout [ 169.248671] Bluetooth: hci3: command tx timeout [ 169.249263] Bluetooth: hci4: command tx timeout [ 169.311939] Bluetooth: hci5: command tx timeout [ 169.439707] Bluetooth: hci6: command tx timeout [ 169.441194] Bluetooth: hci7: command tx timeout [ 223.794350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.797063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.798356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.806609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.809076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.811901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.853295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.861184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.866832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.869435] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.870426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.871887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.876754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.878022] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.879217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.880271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.882353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.883838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.886105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.887901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.891347] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.894795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.895786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.905845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.938318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.940978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.942402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.952012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.952917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.954109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.964055] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.966594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.971010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.978304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.981039] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.981892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.984073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.991311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.992834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.995865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.996865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.000252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.001450] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 224.009770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.013868] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.015893] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.020804] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 224.021950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.823811] Bluetooth: hci0: command tx timeout [ 225.952674] Bluetooth: hci2: command tx timeout [ 225.953535] Bluetooth: hci1: command tx timeout [ 226.017658] Bluetooth: hci5: command tx timeout [ 226.017757] Bluetooth: hci3: command tx timeout [ 226.079875] Bluetooth: hci6: command tx timeout [ 226.079935] Bluetooth: hci7: command tx timeout [ 226.080559] Bluetooth: hci4: command tx timeout [ 227.871668] Bluetooth: hci0: command tx timeout [ 228.000491] Bluetooth: hci2: command tx timeout [ 228.001095] Bluetooth: hci1: command tx timeout [ 228.065683] Bluetooth: hci5: command tx timeout [ 228.065707] Bluetooth: hci3: command tx timeout [ 228.127772] Bluetooth: hci4: command tx timeout [ 228.128245] Bluetooth: hci7: command tx timeout [ 228.129693] Bluetooth: hci6: command tx timeout [ 229.919671] Bluetooth: hci0: command tx timeout [ 230.047924] Bluetooth: hci2: command tx timeout [ 230.048466] Bluetooth: hci1: command tx timeout [ 230.111831] Bluetooth: hci3: command tx timeout [ 230.112343] Bluetooth: hci5: command tx timeout [ 230.178759] Bluetooth: hci7: command tx timeout [ 230.179279] Bluetooth: hci6: command tx timeout [ 230.180728] Bluetooth: hci4: command tx timeout [ 231.967772] Bluetooth: hci0: command tx timeout [ 232.096113] Bluetooth: hci1: command tx timeout [ 232.096868] Bluetooth: hci2: command tx timeout [ 232.159822] Bluetooth: hci3: command tx timeout [ 232.160343] Bluetooth: hci5: command tx timeout [ 232.223700] Bluetooth: hci7: command tx timeout [ 232.224912] Bluetooth: hci6: command tx timeout [ 232.225394] Bluetooth: hci4: command tx timeout [ 286.321887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.324413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.326284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.333074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.334994] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.336166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.588241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.591996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.594931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.598046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.599722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.601488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.603807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.605147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.609790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.610959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.618783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.619990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.702324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.707060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.708237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.712308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.718804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.720157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.731865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.733525] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.734524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.750501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.754030] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.755253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.796252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.800142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.806511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.812028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.828786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.834798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.858661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.863141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.864743] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 286.878214] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.899769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.899844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.909127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.920726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.929906] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.951779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.957044] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.959073] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.351764] Bluetooth: hci0: command tx timeout [ 288.671706] Bluetooth: hci2: command tx timeout [ 288.672676] Bluetooth: hci1: command tx timeout [ 288.864996] Bluetooth: hci4: command tx timeout [ 288.927687] Bluetooth: hci3: command tx timeout [ 288.992666] Bluetooth: hci6: command tx timeout [ 289.055789] Bluetooth: hci7: command tx timeout [ 289.056824] Bluetooth: hci5: command tx timeout [ 290.399749] Bluetooth: hci0: command tx timeout [ 290.721400] Bluetooth: hci2: command tx timeout [ 290.722173] Bluetooth: hci1: command tx timeout [ 290.913607] Bluetooth: hci4: command tx timeout [ 290.975790] Bluetooth: hci3: command tx timeout [ 291.039904] Bluetooth: hci6: command tx timeout [ 291.103864] Bluetooth: hci5: command tx timeout [ 291.104434] Bluetooth: hci7: command tx timeout [ 292.448599] Bluetooth: hci0: command tx timeout [ 292.767688] Bluetooth: hci1: command tx timeout [ 292.768207] Bluetooth: hci2: command tx timeout [ 292.959749] Bluetooth: hci4: command tx timeout [ 293.024643] Bluetooth: hci3: command tx timeout [ 293.087865] Bluetooth: hci6: command tx timeout [ 293.151783] Bluetooth: hci7: command tx timeout [ 293.153179] Bluetooth: hci5: command tx timeout [ 294.495914] Bluetooth: hci0: command tx timeout [ 294.818719] Bluetooth: hci2: command tx timeout [ 294.819288] Bluetooth: hci1: command tx timeout [ 295.007723] Bluetooth: hci4: command tx timeout [ 295.071645] Bluetooth: hci3: command tx timeout [ 295.135918] Bluetooth: hci6: command tx timeout [ 295.200001] Bluetooth: hci5: command tx timeout [ 295.200912] Bluetooth: hci7: command tx timeout [ 348.832682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.843110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.852768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.861192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.863402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.871161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.230114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.234768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.237181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.240842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.244848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.247022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.383309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.390848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.396512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.400423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.412647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.414636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.422922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.430004] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.433911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.437889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.440921] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.442862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.455462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.471953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.473304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.476832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.480354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.490806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.491130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.507433] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.521411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.524459] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 349.527845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.530402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 349.538385] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.555883] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.556112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.572056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.573064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 349.578805] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 349.579937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.608390] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.615457] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.638944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.662185] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 349.671346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.943904] Bluetooth: hci0: command tx timeout [ 351.265002] Bluetooth: hci1: command tx timeout [ 351.521805] Bluetooth: hci3: command tx timeout [ 351.522120] Bluetooth: hci2: command tx timeout [ 351.648386] Bluetooth: hci5: command tx timeout [ 351.648419] Bluetooth: hci4: command tx timeout [ 351.711835] Bluetooth: hci7: command tx timeout [ 351.712841] Bluetooth: hci6: command tx timeout [ 352.991624] Bluetooth: hci0: command tx timeout [ 353.311802] Bluetooth: hci1: command tx timeout [ 353.567711] Bluetooth: hci3: command tx timeout [ 353.567778] Bluetooth: hci2: command tx timeout [ 353.696130] Bluetooth: hci5: command tx timeout [ 353.696719] Bluetooth: hci4: command tx timeout [ 353.760722] Bluetooth: hci6: command tx timeout [ 353.760749] Bluetooth: hci7: command tx timeout [ 355.039670] Bluetooth: hci0: command tx timeout [ 355.360848] Bluetooth: hci1: command tx timeout [ 355.615843] Bluetooth: hci3: command tx timeout [ 355.615872] Bluetooth: hci2: command tx timeout [ 355.744255] Bluetooth: hci4: command tx timeout [ 355.745601] Bluetooth: hci5: command tx timeout [ 355.807668] Bluetooth: hci7: command tx timeout [ 355.808741] Bluetooth: hci6: command tx timeout [ 357.087687] Bluetooth: hci0: command tx timeout [ 357.407678] Bluetooth: hci1: command tx timeout [ 357.664635] Bluetooth: hci3: command tx timeout [ 357.665142] Bluetooth: hci2: command tx timeout [ 357.791742] Bluetooth: hci5: command tx timeout [ 357.792623] Bluetooth: hci4: command tx timeout [ 357.855780] Bluetooth: hci7: command tx timeout [ 357.856619] Bluetooth: hci6: command tx timeout [ 411.502836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.507742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.512468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.519036] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.522357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 411.526615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.880827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.886014] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.888350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.892174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.895033] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 411.898046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.948661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.954679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.956315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.960074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.964735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.968006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.971005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.973895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.978872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.983004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.986667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.989475] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 411.992100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.001494] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.006276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.011242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.015346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.019380] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 412.025022] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.029886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.032163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.034333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.037886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.040753] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.051946] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 412.060812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.068232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.117468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 412.120876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 412.124818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 412.133199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 412.136562] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 412.139117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 412.142080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.152003] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 412.157921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.535642] Bluetooth: hci0: command tx timeout [ 413.920598] Bluetooth: hci1: command tx timeout [ 414.047792] Bluetooth: hci4: command tx timeout [ 414.112176] Bluetooth: hci3: command tx timeout [ 414.175738] Bluetooth: hci6: command tx timeout [ 414.177900] Bluetooth: hci2: command tx timeout [ 414.239670] Bluetooth: hci5: command tx timeout [ 414.240761] Bluetooth: hci7: command tx timeout [ 415.583737] Bluetooth: hci0: command tx timeout [ 415.967736] Bluetooth: hci1: command tx timeout [ 416.097581] Bluetooth: hci4: command tx timeout [ 416.159858] Bluetooth: hci3: command tx timeout [ 416.223709] Bluetooth: hci6: command tx timeout [ 416.225101] Bluetooth: hci2: command tx timeout [ 416.287949] Bluetooth: hci7: command tx timeout [ 416.289370] Bluetooth: hci5: command tx timeout [ 417.632589] Bluetooth: hci0: command tx timeout [ 418.015637] Bluetooth: hci1: command tx timeout [ 418.143630] Bluetooth: hci4: command tx timeout [ 418.208672] Bluetooth: hci3: command tx timeout [ 418.272662] Bluetooth: hci2: command tx timeout [ 418.274173] Bluetooth: hci6: command tx timeout [ 418.335614] Bluetooth: hci5: command tx timeout [ 418.337005] Bluetooth: hci7: command tx timeout [ 419.679624] Bluetooth: hci0: command tx timeout [ 420.064739] Bluetooth: hci1: command tx timeout [ 420.191699] Bluetooth: hci4: command tx timeout [ 420.256641] Bluetooth: hci3: command tx timeout [ 420.319776] Bluetooth: hci2: command tx timeout [ 420.321411] Bluetooth: hci6: command tx timeout [ 420.383655] Bluetooth: hci5: command tx timeout [ 420.385085] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:09:20 Registers: info registers vcpu 0 RAX=0000000000000008 RBX=0000000000000040 RCX=ffffffff847db8b6 RDX=ffff888033d18000 RSI=ffffffff847db8c9 RDI=0000000000000000 RBP=ffff8880333a9200 RSP=ffff888030c47500 R8 =0000000000000001 R9 =ffff888030c47b20 R10=000000000000000a R11=0000000000000001 R12=000000000000000a R13=ffff888030c476c8 R14=dffffc0000000000 R15=ffff888030c476c0 RIP=ffffffff8151ff68 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558737e52080 CR3=00000000132f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81527e1e RBX=ffffffff85c6dbc0 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c16140 RBP=00007fb787aafbda RSP=ffff88802c507920 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff863f9e97 R11=00000000000c3d2f R12=00007fb787aafbda R13=0000000000000000 R14=0000000000000002 R15=ffff88801b558200 RIP=ffffffff81303e9d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb78758f540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f802e7c9710 CR3=0000000032a26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0066305f315f315f4c53534e45504f XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000