Warning: Permanently added '[localhost]:20038' (ECDSA) to the list of known hosts. 2025/01/17 02:53:18 fuzzer started 2025/01/17 02:53:18 dialing manager at localhost:45115 syzkaller login: [ 78.244144] cgroup: Unknown subsys name 'net' [ 78.333771] cgroup: Unknown subsys name 'cpuset' [ 78.369117] cgroup: Unknown subsys name 'rlimit' [ 84.715029] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 96.191861] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 02:53:45 syscalls: 204 2025/01/17 02:53:45 code coverage: enabled 2025/01/17 02:53:45 comparison tracing: enabled 2025/01/17 02:53:45 extra coverage: enabled 2025/01/17 02:53:45 setuid sandbox: enabled 2025/01/17 02:53:45 namespace sandbox: enabled 2025/01/17 02:53:45 Android sandbox: enabled 2025/01/17 02:53:45 fault injection: enabled 2025/01/17 02:53:45 leak checking: enabled 2025/01/17 02:53:45 net packet injection: enabled 2025/01/17 02:53:45 net device setup: enabled 2025/01/17 02:53:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 02:53:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 02:53:45 USB emulation: enabled 2025/01/17 02:53:45 hci packet injection: enabled 2025/01/17 02:53:45 wifi device emulation: enabled 2025/01/17 02:53:45 802.15.4 emulation: enabled 2025/01/17 02:53:45 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 02:53:47 starting 8 fuzzer processes 02:53:47 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x90082, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000200)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000240)={0x0, 0x3, 0xc7}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x1, 0x70bd25, 0xc6d2, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8c6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) rt_sigtimedwait(&(0x7f00000007c0)={[0x6]}, 0x0, &(0x7f0000000800)={0x77359400}, 0x8) r4 = mq_open(&(0x7f0000000840)='{\xb2.\x18^\x00', 0x80, 0x21, &(0x7f0000000880)={0x2, 0x1000, 0x3, 0x8001}) mq_timedreceive(r4, &(0x7f00000008c0)=""/14, 0xe, 0x36a4, &(0x7f0000000900)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder1\x00', 0xc00, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) r7 = openat$cgroup_ro(r1, &(0x7f00000009c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000000a00)=""/4096) 02:53:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x24400) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x2, 0xbc3, 0x9}, {{}, 0x0, 0xf13, 0x2}, {{r1, r2/1000+60000}, 0x2, 0x8, 0x42e}], 0x48) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x7, 0x7]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000180)={0x2, 0x20, 0x1f, 0x0, "8810981cb7b44a5030af48ebfe8a77e95ff919667a2fc499d0dd15bff8dea299"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x77503069b4912b8f}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8810) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001300)={"f2053a16623c6643bcfb329779f9993f", 0x0, 0x0, {0x876e, 0x200}, {0x3, 0x3e00}, 0x5, [0x9, 0x8, 0x3, 0x0, 0x0, 0xa156, 0x8, 0x7f, 0x7, 0x5, 0x3ff, 0x1, 0x7749, 0x81, 0x3, 0x20]}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001480)={{r0}, r6, 0xe, @inherit={0x60, &(0x7f0000001400)={0x1, 0x3, 0x1, 0xa36, {0x10, 0x4, 0x400, 0x1}, [0x1f, 0x0, 0xff]}}, @subvolid=0xfffffffffffffffe}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x34, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000002640)={'syztnl2\x00', &(0x7f00000025c0)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x94, 0x3, 0x10, @empty, @private2, 0x700, 0x10, 0x1f, 0x3}}) r10 = openat$cgroup_subtree(r3, &(0x7f0000002680), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f00000026c0)={0x0, 0x200, 0xccc2, 0xfafb7c68a451ef3c}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002ac0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000002bc0)={{}, r7, 0x12, @inherit={0x68, &(0x7f0000002b40)={0x0, 0x4, 0x1, 0x8000, {0x10, 0x12, 0xc54f, 0x7ff, 0x1ff}, [0x100, 0xff, 0x101, 0x3f]}}, @subvolid=0x7}) 02:53:47 executing program 2: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x200, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffd60a}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r0 = fsmount(0xffffffffffffffff, 0x1, 0xf0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = fsmount(r0, 0x1, 0x80) sendmsg$AUDIT_USER(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x3ed, 0x200, 0x70bd2d, 0x25dfdbfb, "9e602563a7fefdb11b42f9768316f8ab7ebbbdddb810ce956ee85be8ba0f5f5b80e661e52fa68c1f2128a97a40f37d161e9f586254de22d7f877e0fb109f4b329a7cdefe580624c6d47dc072f7e714", ["", ""]}, 0x60}, 0x1, 0x0, 0x0, 0xd6b3f5617315ee5e}, 0x20000004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x80, 0x7, 0x8, 0x80, {{0x2c, 0x4, 0x3, 0x1, 0xb0, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp_prespec={0x44, 0x4, 0x66, 0x3, 0x6}, @end, @timestamp_prespec={0x44, 0x24, 0xc1, 0x3, 0x8, [{@remote, 0x400}, {@broadcast, 0x939}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@multicast2, 0xff}]}, @timestamp_addr={0x44, 0x24, 0xf0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x20}, {@remote, 0xffffcd2c}, {@rand_addr=0x64010100, 0x7}, {@local, 0x949a}]}, @end, @end, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x2, 0x5, "46f8d4"}, {0x2, 0xd, "6bb30f8a80a5cb4ea0c18b"}, {0x6, 0x11, "ec4fb6984248882800d0a233423217"}, {0x2, 0x4, "0ec9"}, {0x1, 0xa, "392c22c7cd78e837"}]}, @timestamp={0x44, 0x14, 0xa6, 0x0, 0x0, [0xffffffff, 0x2, 0x2, 0xffff]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', r2, 0x7, 0x20, 0x4, 0x3443, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x68, 0x0, 0xd0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x258082}, 0xc, &(0x7f0000000a00)={&(0x7f0000000580)={0x444, 0x3f4, 0x400, 0x70bd25, 0x25dfdbff, {0x1, 0x1, 0x13, [0x40, 0x101, 0x33ed, 0x0, 0x6, 0x5, 0x1, 0xffffcd09, 0x20, 0x4, 0x3, 0x8, 0x8, 0x2, 0x12a4, 0x5, 0x2, 0x8000, 0x7fffffff, 0xba2, 0x4, 0x0, 0x6, 0x2, 0x7, 0x40, 0x88c, 0x4, 0x100, 0x8, 0x1, 0x2, 0x7ff, 0x3ff, 0x20, 0x5, 0x5, 0x4, 0x4, 0x0, 0x40, 0x49759533, 0x5, 0x8, 0x81, 0x7a, 0x2, 0xdc, 0x23e, 0x8de, 0x3, 0xedf1156, 0x3, 0x1000, 0x5, 0xfffffff7, 0x9, 0x3f, 0x4, 0xfff, 0x101, 0xa0, 0x1, 0x8001], [0x6, 0x3ff, 0xb491, 0x9, 0x7, 0x20, 0x10000, 0x7, 0xfffffeff, 0xfffffff7, 0x4, 0xc3, 0xffffffc0, 0x9, 0x654, 0x5d1b, 0x8, 0x5, 0x3, 0x4, 0x4, 0xffff, 0x20, 0xffff, 0x2, 0x100, 0x5, 0xe9, 0x101, 0xffffff7f, 0x1f, 0x5, 0x0, 0xc3, 0x3ff, 0x4, 0x1, 0x5, 0x2, 0xfffffc01, 0x800000, 0x2b67, 0x9429, 0x0, 0x0, 0x8000, 0xa4, 0xa4, 0x49f8, 0x9, 0x1, 0x6, 0x80000001, 0x2, 0x5, 0x9, 0x7, 0x20, 0x5, 0x0, 0xffffffff, 0x0, 0x2, 0x4], [0x1, 0x8000, 0x7f, 0x4, 0x2, 0x8, 0x4417, 0x5, 0x6, 0x2, 0x80000001, 0x1000, 0x10001, 0xc0, 0x1, 0x981, 0x14e3, 0x0, 0x8, 0x6, 0x0, 0x8, 0x1, 0x400, 0x0, 0x5, 0x4, 0x1a, 0x0, 0x9, 0x2, 0x0, 0x7ff, 0x6, 0x1, 0xfff, 0x9, 0x7, 0x7ff, 0x100, 0x9, 0x4, 0xc4d, 0x7, 0x9f, 0xffffffc5, 0x2, 0x86d7, 0x100, 0x9d, 0x549e, 0x4, 0xffffff0e, 0x7, 0xd28, 0x3, 0x5d96, 0x80000000, 0x9, 0x1, 0x1e, 0xff, 0x6, 0xee], [0x3ff, 0xfffffffd, 0x0, 0x1ff, 0xfffffc00, 0x9, 0x8000, 0x8, 0x3, 0x0, 0x5, 0x80000001, 0x80, 0x6, 0x81, 0x6, 0x4, 0x4, 0x4, 0x5, 0xbf4, 0x9, 0x0, 0x20, 0x8, 0x4, 0x3, 0x9, 0x4, 0xffffffff, 0x7, 0x1, 0xfff, 0xb9c6, 0x74, 0xfffffffd, 0x80, 0x9, 0x4, 0x5, 0x3cd9, 0x2, 0x71cd, 0xffffff84, 0x4, 0x7fffffff, 0x1, 0x0, 0x2, 0x1, 0x80000001, 0x2feafa38, 0x101, 0x6, 0x40, 0x3ff, 0x7100000, 0x1, 0x5, 0x6, 0x7fff, 0x10000, 0x286c80], 0x23, ['gre0\x00', 'tunl0\x00', 'ip_vti0\x00', '!#\x8c[^&:\'!\x00', 'tunl0\x00']}, ["", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x80}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000b00)=0x8, 0x4) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000b40), 0x5070c0, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000b80), 0x80000000, &(0x7f0000000c00)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e00)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 02:53:47 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x10001, 0x0, &(0x7f0000000040)=[r0, r0]}, 0x2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='/dev/hpet\x00', 0x0, r0) r1 = syz_io_uring_setup(0x110e, &(0x7f0000000100)={0x0, 0xf545, 0x1, 0x0, 0x1bf}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fsmount(r0, 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='*\x00', 0x0, r3) r4 = io_uring_setup(0x50fa, &(0x7f0000000240)={0x0, 0x62d5, 0x0, 0x2, 0x1e5}) openat$cgroup_subtree(r0, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c9c}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8adc96efa317bdfc}, 0x0) r7 = syz_io_uring_setup(0x283c, &(0x7f0000000440)={0x0, 0x1da8, 0x0, 0x1, 0x32, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) r8 = mq_open(&(0x7f0000000540)='\x00', 0x80, 0x122, &(0x7f0000000580)={0x5, 0x9, 0xfffffffffffff000, 0xffffffffffff0000}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = fsopen(&(0x7f00000005c0)='ufs\x00', 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[r5, r1, r3, r8, r9, r10]}, 0x6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000680)='/dev/hpet\x00', 0x0, r11) [ 106.610702] audit: type=1400 audit(1737082427.669:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:53:47 executing program 4: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x36, 0x0, &(0x7f0000000080)=[r3, r0]}, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000180)=""/90) r5 = fsmount(r4, 0x1, 0x9) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x308, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5d6b7bd7fb1b580cbbac3187376586b2ce201930a8bcf8a3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "727254e68925b624dd9211dc3e0f881852e7a66cd603"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0xbccc}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "36e71fa0aae0b527b6856bf8c7dd451d40cbde3a9f9928e8b1c97f"}}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "fb809bc261bd2d8aa1be031a7234d9f07e3f8e64b83c5f2b5a718886a25f5ee24c3917136af680c21f1cf99e9e38fe725135d0657f53808053e57cc238bd33cc2869faff6b38abc3c409ce79075be83317bd91514d3443ba97d7887bcd76dfc1de5ed750a75d"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3432194}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000640)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa) r7 = openat$cgroup_ro(r0, &(0x7f0000000680)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008844}, 0x20000000) 02:53:47 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000200)={{r0, 0x3, 0x3, 0x3f, 0x0, 0xc8, 0x2, 0x80, 0x386, 0xec, 0x9, 0xffff, 0x8, 0x1000, 0x3}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x10001) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x81, 0x2b, 0x65, 0x20, 0x0, 0x7fffffff, 0x4400, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fffffff, 0x9}, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x7c45167f, 0x0, 0xe27}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x428, 0x3f4, 0x400, 0x70bd27, 0x25dfdbfc, {0x2, 0x1, 0x12, [0xffffd924, 0x7f, 0xc06, 0xfffffff7, 0x9, 0x2, 0x80000, 0x7, 0x4, 0xb37, 0xee, 0x0, 0x1, 0x7f, 0x5, 0x7, 0x100, 0x309, 0x5, 0x0, 0x20, 0xb5, 0x3, 0xfffffffd, 0x200, 0x8, 0x9, 0x8000, 0x1, 0x1dba, 0xdfe, 0x44051903, 0x1, 0x4, 0x7fffffff, 0x4, 0x101, 0x6, 0x80, 0x0, 0x40000000, 0x7fffffff, 0x4, 0x1, 0x21, 0x9, 0x80000000, 0x6, 0x7, 0x80, 0x1, 0x3ff, 0x0, 0x3ff, 0x4, 0x6, 0x9, 0x5, 0xb728, 0x9, 0x3, 0x4, 0x0, 0x2], [0x1, 0x8, 0x1, 0x80000000, 0x1, 0x8, 0x81, 0x1, 0x200, 0xef1, 0x3, 0x2, 0xeb8, 0x6e2d, 0x1, 0x1, 0x20, 0x10000, 0x81, 0x3, 0x101, 0x7, 0x5f, 0x4, 0x1, 0x9c4, 0x8c4e, 0x1, 0xfffffffe, 0x9, 0x4, 0x4, 0x4, 0x8, 0x1, 0xffff8001, 0x1c1, 0x3a, 0x9, 0x401, 0x2, 0x2, 0x73b, 0x8, 0x5, 0xfffffff9, 0x4, 0x2, 0x1ac7, 0x4, 0x4889, 0x0, 0x9, 0x10000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x7, 0x9a, 0x0, 0x6, 0x2a0], [0x4106, 0x1, 0x2, 0x2, 0x0, 0x0, 0x6, 0x3f, 0x7, 0x2, 0x4, 0x7, 0x6a31, 0x4, 0x1ff, 0x5, 0x8, 0x4b, 0x953d8069, 0x9, 0x8000, 0xfffffffa, 0xfffff2fa, 0x4fc0, 0x81, 0x30, 0x3f, 0x1, 0x8, 0x2, 0xfffffffb, 0x5, 0x10001, 0xce0, 0xfffffffa, 0x7fffffff, 0x1, 0x6, 0x1200, 0x2, 0x7f, 0x7, 0xffffffff, 0xbd, 0x8, 0x9, 0x3, 0x0, 0x6, 0x2, 0x1639, 0x9f, 0x5c8b, 0xa32e, 0x2, 0x7fffffff, 0xffffffff, 0x6, 0x9, 0x3, 0x8, 0x8, 0x8000, 0x7], [0x3f, 0x10000, 0x8000, 0x88, 0x0, 0x51b, 0x7, 0x9, 0x3, 0x2, 0x7, 0x394, 0xa28, 0x0, 0x7f, 0x3, 0x2, 0x3, 0x7, 0xffff, 0x1, 0xcbb00, 0x0, 0x800, 0x3, 0x9, 0x6, 0xffffffff, 0xffffffff, 0x4, 0x7, 0x2, 0x401, 0x8001, 0x8, 0x1e, 0x6, 0x7f, 0x0, 0x7f, 0x8, 0x5, 0x4, 0x8e, 0x7, 0x3, 0x4, 0x8000, 0x1, 0x2, 0x1f, 0x4, 0xb5, 0x4, 0x4, 0x7, 0x10001, 0xfffffffa, 0x80000001, 0x2, 0x8, 0x2, 0x9], 0x5, [']}$#\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x700, 0x7, 0x22a6, 0x80, {{0x1e, 0x4, 0x1, 0x3a, 0x78, 0x68, 0x0, 0xaa, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @lsrr={0x83, 0xf, 0xc7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @remote]}, @timestamp_prespec={0x44, 0x24, 0x32, 0x3, 0x1, [{@rand_addr=0x64010100, 0x9}, {@multicast1, 0x8000}, {@remote, 0x6}, {@multicast1, 0x9}]}, @rr={0x7, 0x17, 0xaf, [@private=0x7fff, @empty, @loopback, @local, @loopback]}, @rr={0x7, 0x17, 0x27, [@broadcast, @broadcast, @remote, @empty, @remote]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000000980)={0x7a0, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x744, 0x8, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2c6d46a593fdfc7546cc642e9d7c947ae782960a8e102f9efbe1326516d65af0"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x99}]}, {0x64c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1642d14059fb5a31e3004bc2c1da4ff3bbc1d670dbcbb8da2a371cefaa2c04b8"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x5d4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @loopback, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001200)='-\x97]\']\x00', &(0x7f0000001240)="0da4025662b4845a8449bcf8322c59b75ea425a7e69fcd078a5f23e069e07da051065a92e43f789c5618dcca4c5a58bc28fdcd0710403e2e57a41157e5f540b933102b99c7ed97c8a5308dca3e4bb88d85b76f2a9bf32c7ff351d5d26ada23a81e484b261ba0db417a79cd3e3d0bfcc98e1bf3bb31fbc27a736bc4b049cc9fdd5ccad5f6219671296bb7df9f40b30ae3f70b67d3809085515263daacb1dd3d0d4efdcb54d7793f34219c29b530ef20f4c169978ceff746fd45b398ede12d83b533f1fb423324450487c1be65db4f5932dd2578763630111e46864fb5ea6d85bf0fb98ff8e6023e1d56a7dd3c370c7a049f4d9343e8", 0xf5) r4 = openat$cgroup_ro(r3, &(0x7f0000001340)='memory.events.local\x00', 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x72) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}}, 0x48c00) fsmount(r5, 0x0, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001480)) r6 = fsmount(r3, 0x1, 0x74) openat$cgroup_procs(r6, &(0x7f0000001680)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x78, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffb764}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xca20}]}, 0x78}, 0x1, 0x0, 0x0, 0x8808}, 0x40000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000001840)=0x7) 02:53:47 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4c0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x1000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x105400, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/36) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/181) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)=[0x100, 0x7]) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)={0x3209e91d, 0x0, &(0x7f0000000200)=[r1, r2, r0, r1, 0xffffffffffffffff, r0, r0, r0, r0]}, 0x9) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000280)=""/220) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000380)=0x101) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000400)=0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x240000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x600088d0) r5 = syz_open_dev$evdev(&(0x7f0000000580), 0x7ff, 0x24000) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000005c0)={0x0, 0x8, 0x6b2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000009c0)={r6, 0x5, 0x0, [0x7fff, 0x0, 0x8, 0x8], [0x9f, 0x1, 0x7, 0x1, 0x1, 0x6d, 0x7, 0x541d1921, 0xe3f, 0x7, 0x0, 0x7, 0x7, 0xfffffffffffffc00, 0x3, 0x9, 0x7fd, 0xc7f, 0xffffffffffffffde, 0x8, 0x8, 0xfff, 0x0, 0x89, 0x2, 0x5, 0x100000000, 0x7f, 0x4, 0x4080000000000, 0x1, 0x1, 0x6, 0x8, 0x6, 0x2, 0x0, 0xfffffffffffffffc, 0x200, 0x3, 0x1, 0x1d9, 0xef, 0xfffffffffffffe0e, 0xff, 0x3ff, 0x3ff, 0x81, 0x6, 0x1, 0x8, 0x1f, 0x1a04ed35, 0x6, 0x7fff, 0x4, 0x0, 0xc5, 0x7, 0x9, 0x34a, 0x927, 0x100000001, 0x8000, 0x3, 0x7fffffff, 0x80000000, 0x6, 0x0, 0x8, 0x1, 0xfffffffffffff5c6, 0x8, 0x80000000, 0x2, 0x7, 0xd80a, 0x5, 0x7ff, 0x100000000, 0x7, 0x732, 0x80000001, 0x386d, 0x4, 0x0, 0x1ff, 0x1, 0x7, 0x6, 0x0, 0x0, 0x26b, 0x40, 0x10000, 0x3, 0x73c, 0x1f, 0x8000000, 0x8, 0x5, 0x0, 0x6, 0x3, 0x6, 0x20, 0x1f, 0x6b, 0x8, 0x8, 0x100, 0x5, 0x8, 0x92e, 0x7, 0xfffffffffffffffd, 0x1ff, 0x4d0f, 0x8, 0x68058dee, 0x3a8f01b3]}) syz_io_uring_setup(0x53f6, &(0x7f0000000e00)={0x0, 0x1406, 0x8, 0x0, 0x1e0}, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000000e80), &(0x7f0000000ec0)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000f00)={0xe0, 0x20, 0x9, 0x76, 0x3bb}) 02:53:47 executing program 7: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x8001, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}}, 0x6d15c7f5fd31943a) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000091}, 0x24004080) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000580)={0x5, 0x12, 0x4, 0x1000, "a02395d476d2540ac5fe71fc650ce89784e5237c7f9921645568975bafb333e2"}) r2 = fsmount(r0, 0x1, 0x0) r3 = fsmount(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xc0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40085) r7 = fsmount(r0, 0x0, 0x70) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000800) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x88004) [ 108.172676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.179548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.185579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.196495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.204960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.207424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.293893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.295857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.299446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.313452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.315948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.330166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.374660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.377756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.379614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.381796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.395437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.395787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.399354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.399829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.402639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.410130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.417280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.417889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.418232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.428854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.429222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.430526] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.430897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.435321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.436158] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.436620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.440392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.442314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.443449] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.443822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.446988] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.449832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.453866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.460521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.463662] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.464616] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.464982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.474242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.477992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.486492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 108.495187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 108.496419] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.260431] Bluetooth: hci0: command tx timeout [ 110.387370] Bluetooth: hci1: command tx timeout [ 110.451164] Bluetooth: hci4: command tx timeout [ 110.516269] Bluetooth: hci5: command tx timeout [ 110.516413] Bluetooth: hci6: command tx timeout [ 110.516633] Bluetooth: hci2: command tx timeout [ 110.517000] Bluetooth: hci3: command tx timeout [ 110.579833] Bluetooth: hci7: command tx timeout [ 112.308245] Bluetooth: hci0: command tx timeout [ 112.435215] Bluetooth: hci1: command tx timeout [ 112.500245] Bluetooth: hci4: command tx timeout [ 112.563499] Bluetooth: hci3: command tx timeout [ 112.563701] Bluetooth: hci5: command tx timeout [ 112.565758] Bluetooth: hci2: command tx timeout [ 112.565855] Bluetooth: hci6: command tx timeout [ 112.627383] Bluetooth: hci7: command tx timeout [ 114.355302] Bluetooth: hci0: command tx timeout [ 114.483247] Bluetooth: hci1: command tx timeout [ 114.549152] Bluetooth: hci4: command tx timeout [ 114.611392] Bluetooth: hci6: command tx timeout [ 114.612563] Bluetooth: hci2: command tx timeout [ 114.613542] Bluetooth: hci5: command tx timeout [ 114.614510] Bluetooth: hci3: command tx timeout [ 114.675661] Bluetooth: hci7: command tx timeout [ 116.404136] Bluetooth: hci0: command tx timeout [ 116.533085] Bluetooth: hci1: command tx timeout [ 116.596098] Bluetooth: hci4: command tx timeout [ 116.660200] Bluetooth: hci3: command tx timeout [ 116.660898] Bluetooth: hci5: command tx timeout [ 116.661700] Bluetooth: hci2: command tx timeout [ 116.661787] Bluetooth: hci6: command tx timeout [ 116.725111] Bluetooth: hci7: command tx timeout [ 170.432916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.436506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.439606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.446489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.451721] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.455519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.521497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.533897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.536699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.550816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.555460] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.557734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.565376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.572938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.583512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.584745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.595505] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.599850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.613134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.635521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.638239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.669453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.674600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.679794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.680479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.691139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.694421] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.696579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.698389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.702603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.703256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.706651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.712632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.714189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.718346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.721899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.723633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.724182] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.728464] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.737286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.761422] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.764079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.775782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.806930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.809830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.816232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.824965] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.831498] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.531250] Bluetooth: hci0: command tx timeout [ 172.659229] Bluetooth: hci2: command tx timeout [ 172.659284] Bluetooth: hci1: command tx timeout [ 172.788778] Bluetooth: hci3: command tx timeout [ 172.788837] Bluetooth: hci4: command tx timeout [ 172.851268] Bluetooth: hci5: command tx timeout [ 172.852110] Bluetooth: hci6: command tx timeout [ 172.915114] Bluetooth: hci7: command tx timeout [ 174.579710] Bluetooth: hci0: command tx timeout [ 174.708161] Bluetooth: hci2: command tx timeout [ 174.708180] Bluetooth: hci1: command tx timeout [ 174.835441] Bluetooth: hci4: command tx timeout [ 174.836145] Bluetooth: hci3: command tx timeout [ 174.901203] Bluetooth: hci5: command tx timeout [ 174.901239] Bluetooth: hci6: command tx timeout [ 174.963504] Bluetooth: hci7: command tx timeout [ 176.627265] Bluetooth: hci0: command tx timeout [ 176.756169] Bluetooth: hci2: command tx timeout [ 176.756280] Bluetooth: hci1: command tx timeout [ 176.884440] Bluetooth: hci3: command tx timeout [ 176.884540] Bluetooth: hci4: command tx timeout [ 176.947217] Bluetooth: hci5: command tx timeout [ 176.948444] Bluetooth: hci6: command tx timeout [ 177.011226] Bluetooth: hci7: command tx timeout [ 178.675237] Bluetooth: hci0: command tx timeout [ 178.803574] Bluetooth: hci2: command tx timeout [ 178.803734] Bluetooth: hci1: command tx timeout [ 178.931167] Bluetooth: hci3: command tx timeout [ 178.931209] Bluetooth: hci4: command tx timeout [ 178.995146] Bluetooth: hci6: command tx timeout [ 178.995310] Bluetooth: hci5: command tx timeout [ 179.059156] Bluetooth: hci7: command tx timeout [ 232.322241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.329843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.334805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.342822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.351514] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.356701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.636905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.639845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.640738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.643732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.645376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.646551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.719143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.721832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.723628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.726518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.726930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.730744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.738753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.740944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.746248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.748459] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.748870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.751360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.814513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.828532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.832584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.865104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.882442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.885853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.931186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.931670] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.937375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.941828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.950614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.953684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.955146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.957151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.958140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.967566] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.968944] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.969837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.043539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.052536] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.056811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.072955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.079599] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.082141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.419269] Bluetooth: hci0: command tx timeout [ 234.675976] Bluetooth: hci1: command tx timeout [ 234.803230] Bluetooth: hci3: command tx timeout [ 234.868124] Bluetooth: hci2: command tx timeout [ 234.995698] Bluetooth: hci5: command tx timeout [ 235.123443] Bluetooth: hci7: command tx timeout [ 235.124789] Bluetooth: hci4: command tx timeout [ 235.187340] Bluetooth: hci6: command tx timeout [ 236.468058] Bluetooth: hci0: command tx timeout [ 236.724068] Bluetooth: hci1: command tx timeout [ 236.851193] Bluetooth: hci3: command tx timeout [ 236.915430] Bluetooth: hci2: command tx timeout [ 237.044084] Bluetooth: hci5: command tx timeout [ 237.172197] Bluetooth: hci4: command tx timeout [ 237.172370] Bluetooth: hci7: command tx timeout [ 237.235182] Bluetooth: hci6: command tx timeout [ 238.515125] Bluetooth: hci0: command tx timeout [ 238.771212] Bluetooth: hci1: command tx timeout [ 238.899259] Bluetooth: hci3: command tx timeout [ 238.963369] Bluetooth: hci2: command tx timeout [ 239.091100] Bluetooth: hci5: command tx timeout [ 239.221150] Bluetooth: hci4: command tx timeout [ 239.221616] Bluetooth: hci7: command tx timeout [ 239.283087] Bluetooth: hci6: command tx timeout [ 240.563170] Bluetooth: hci0: command tx timeout [ 240.819139] Bluetooth: hci1: command tx timeout [ 240.947180] Bluetooth: hci3: command tx timeout [ 241.011145] Bluetooth: hci2: command tx timeout [ 241.139086] Bluetooth: hci5: command tx timeout [ 241.267265] Bluetooth: hci7: command tx timeout [ 241.267398] Bluetooth: hci4: command tx timeout [ 241.333226] Bluetooth: hci6: command tx timeout [ 294.911540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.915791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.918309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.925976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.930785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.933839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.982839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.985327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.988306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.004192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.009927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.013055] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.063604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.068256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.075207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.080321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.087387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.096708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.102678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.105569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.108320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.120769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.122279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.123174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.124517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.128618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 295.130565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.137928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.139749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.151437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.157764] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.161539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.163713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.201469] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.201857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.208681] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 295.210735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.236664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.239658] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.268753] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.275513] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.284888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.301637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.324542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.331498] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 295.333512] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 295.347523] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.362922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.011220] Bluetooth: hci0: command tx timeout [ 297.079099] Bluetooth: hci1: command tx timeout [ 297.203188] Bluetooth: hci2: command tx timeout [ 297.267221] Bluetooth: hci4: command tx timeout [ 297.268704] Bluetooth: hci3: command tx timeout [ 297.332136] Bluetooth: hci5: command tx timeout [ 297.460500] Bluetooth: hci7: command tx timeout [ 297.461247] Bluetooth: hci6: command tx timeout [ 299.059092] Bluetooth: hci0: command tx timeout [ 299.124165] Bluetooth: hci1: command tx timeout [ 299.252130] Bluetooth: hci2: command tx timeout [ 299.316210] Bluetooth: hci4: command tx timeout [ 299.316447] Bluetooth: hci3: command tx timeout [ 299.379400] Bluetooth: hci5: command tx timeout [ 299.508223] Bluetooth: hci6: command tx timeout [ 299.509609] Bluetooth: hci7: command tx timeout [ 301.110185] Bluetooth: hci0: command tx timeout [ 301.172211] Bluetooth: hci1: command tx timeout [ 301.300259] Bluetooth: hci2: command tx timeout [ 301.364104] Bluetooth: hci3: command tx timeout [ 301.364219] Bluetooth: hci4: command tx timeout [ 301.433855] Bluetooth: hci5: command tx timeout [ 301.556248] Bluetooth: hci6: command tx timeout [ 301.556745] Bluetooth: hci7: command tx timeout [ 303.157111] Bluetooth: hci0: command tx timeout [ 303.221029] Bluetooth: hci1: command tx timeout [ 303.348131] Bluetooth: hci2: command tx timeout [ 303.411204] Bluetooth: hci4: command tx timeout [ 303.411788] Bluetooth: hci3: command tx timeout [ 303.476039] Bluetooth: hci5: command tx timeout [ 303.604624] Bluetooth: hci7: command tx timeout [ 303.605711] Bluetooth: hci6: command tx timeout [ 357.313592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.316177] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.322888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.331051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.335767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.338923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.374261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.376652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.377819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.383475] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.386416] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.389345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.488673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.496041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.498094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.517674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.527872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 357.530687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.611952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.617941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.627219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.637295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.649253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.655952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.723186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.745500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.756514] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.794746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.800472] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.804591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.975674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.982296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.983563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.000824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.002239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 358.003143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.003437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.007908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.012347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.017758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.030116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.052226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.054939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.056721] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.069669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.071711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.086297] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 358.097441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.412353] Bluetooth: hci0: command tx timeout [ 359.476146] Bluetooth: hci1: command tx timeout [ 359.605043] Bluetooth: hci2: command tx timeout [ 359.731154] Bluetooth: hci3: command tx timeout [ 359.859060] Bluetooth: hci6: command tx timeout [ 360.115068] Bluetooth: hci4: command tx timeout [ 360.180484] Bluetooth: hci7: command tx timeout [ 360.243502] Bluetooth: hci5: command tx timeout [ 361.460138] Bluetooth: hci0: command tx timeout [ 361.524218] Bluetooth: hci1: command tx timeout [ 361.652138] Bluetooth: hci2: command tx timeout [ 361.780492] Bluetooth: hci3: command tx timeout [ 361.908739] Bluetooth: hci6: command tx timeout [ 362.164262] Bluetooth: hci4: command tx timeout [ 362.228051] Bluetooth: hci7: command tx timeout [ 362.292039] Bluetooth: hci5: command tx timeout [ 363.507031] Bluetooth: hci0: command tx timeout [ 363.572024] Bluetooth: hci1: command tx timeout [ 363.701189] Bluetooth: hci2: command tx timeout [ 363.828200] Bluetooth: hci3: command tx timeout [ 363.956002] Bluetooth: hci6: command tx timeout [ 364.212037] Bluetooth: hci4: command tx timeout [ 364.276084] Bluetooth: hci7: command tx timeout [ 364.340096] Bluetooth: hci5: command tx timeout [ 365.556095] Bluetooth: hci0: command tx timeout [ 365.620161] Bluetooth: hci1: command tx timeout [ 365.747361] Bluetooth: hci2: command tx timeout [ 365.877185] Bluetooth: hci3: command tx timeout [ 366.004493] Bluetooth: hci6: command tx timeout [ 366.259239] Bluetooth: hci4: command tx timeout [ 366.324184] Bluetooth: hci7: command tx timeout [ 366.389050] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 02:58:57 Registers: info registers vcpu 0 RAX=00000000000001ba RBX=ffff88800c004b98 RCX=ffffffff8196e03e RDX=1ffff1100180096d RSI=ffffffff8196daa6 RDI=ffff88800c004b60 RBP=dffffc0000000000 RSP=ffff888023f5f908 R8 =0000000000000001 R9 =ffffed1006702bde R10=0000000000000001 R11=0000000000000001 R12=00007f9d0e288000 R13=ffff88800c004b98 R14=0000000000000000 R15=ffff888033f5d3b8 RIP=ffffffff8196dadc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7bd6ad2540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f559b06e000 CR3=000000002d4ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff815ec430 RCX=ffff88806cf09ae0 RDX=1ffff1100d9e1353 RSI=ffffffff815ec7bf RDI=ffff88806cf09b08 RBP=ffff88806cf09ad8 RSP=ffff88806cf09a30 R8 =0000000000000001 R9 =ffff88806cf09a80 R10=000000000003ab8d R11=000000000000433c R12=ffff88806cf09b08 R13=0000000000000000 R14=ffff888015a75340 R15=ffff88800dbbf620 RIP=ffffffff815ec43f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9aa9be4540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9aa9d7f4a1 CR3=000000002436e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000