Warning: Permanently added '[localhost]:31142' (ECDSA) to the list of known hosts. 2025/01/23 00:17:18 fuzzer started 2025/01/23 00:17:19 dialing manager at localhost:38529 syzkaller login: [ 67.563304] cgroup: Unknown subsys name 'net' [ 67.706986] cgroup: Unknown subsys name 'cpuset' [ 67.769659] cgroup: Unknown subsys name 'rlimit' [ 73.647841] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 83.848849] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 00:17:35 syscalls: 2217 2025/01/23 00:17:35 code coverage: enabled 2025/01/23 00:17:35 comparison tracing: enabled 2025/01/23 00:17:35 extra coverage: enabled 2025/01/23 00:17:35 setuid sandbox: enabled 2025/01/23 00:17:35 namespace sandbox: enabled 2025/01/23 00:17:35 Android sandbox: enabled 2025/01/23 00:17:35 fault injection: enabled 2025/01/23 00:17:35 leak checking: enabled 2025/01/23 00:17:35 net packet injection: enabled 2025/01/23 00:17:35 net device setup: enabled 2025/01/23 00:17:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 00:17:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 00:17:35 USB emulation: enabled 2025/01/23 00:17:35 hci packet injection: enabled 2025/01/23 00:17:35 wifi device emulation: enabled 2025/01/23 00:17:35 802.15.4 emulation: enabled 2025/01/23 00:17:35 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 00:17:35 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 00:17:35 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 00:17:35 fetching corpus: 0, signal 0/6463 (executing program) 2025/01/23 00:17:35 fetching corpus: 0, signal 0/6463 (executing program) 2025/01/23 00:17:38 starting 8 fuzzer processes 00:17:38 executing program 0: r0 = inotify_init1(0x80000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl$FIONCLEX(r0, 0x5450) recvmmsg$unix(r1, &(0x7f0000005880)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000340)=""/132, 0x84}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/111, 0x6f}, {&(0x7f0000002600)=""/2, 0x2}, {&(0x7f0000002640)=""/69, 0x45}, {&(0x7f00000026c0)=""/39, 0x27}], 0x7}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002780)=""/135, 0x87}, {&(0x7f0000002840)=""/239, 0xef}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000002b00)=""/197, 0xc5}, {&(0x7f0000002c00)=""/224, 0xe0}, {&(0x7f0000002d00)=""/124, 0x7c}, {&(0x7f0000002d80)=""/183, 0xb7}, {&(0x7f0000002e40)=""/220, 0xdc}, {&(0x7f0000002f40)=""/116, 0x74}, {&(0x7f0000002fc0)=""/245, 0xf5}, {&(0x7f00000030c0)=""/150, 0x96}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x9, &(0x7f0000004240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000004380), 0x6e, &(0x7f0000005400)=[{&(0x7f0000004400)=""/4096, 0x1000}], 0x1, &(0x7f0000005440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005480)=@abs, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000005500)=""/23, 0x17}, {&(0x7f0000005540)=""/194, 0xc2}, {&(0x7f0000005640)=""/146, 0x92}, {&(0x7f0000005700)=""/191, 0xbf}], 0x4, &(0x7f0000005800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x6, 0x40000000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000005a00)) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000005b00)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) clone3(&(0x7f0000005d40)={0x400, &(0x7f0000005b40), &(0x7f0000005b80), &(0x7f0000005bc0), {0x36}, &(0x7f0000005c00)=""/20, 0x14, &(0x7f0000005c40)=""/181, &(0x7f0000005d00)=[r2, r2], 0x2}, 0x58) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000005dc0)=0x7) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005e00), 0x220c0, 0x0) setsockopt$inet6_int(r8, 0x29, 0x9, &(0x7f0000005e40)=0x40, 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000005f80)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005f40)={&(0x7f0000005f00)={0x3c, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x44041) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000005fc0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) ioctl$EVIOCRMFF(r10, 0x40044581, &(0x7f0000006000)=0x2) fstatfs(r4, &(0x7f0000006040)=""/214) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000007dc0)=0x2) 00:17:38 executing program 1: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000080)) r0 = add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="eff28fe21eeed9d87aa4ac4cf01ca0d6bd1c29ac9faa238a389bdb42ac5553cdbb96faaab035b9d700ceb4286de66caba1e1ca6d0b7b32b72b535978ab03360076c048443156255bd320b4e702579aee1c6981134b5c71b41a08e824a7a7021fb7501b2369c1f6562503d34a89cafe2dfd051dcbc74b5489fcb3e63feb034f6f7003bb775d47b63bbcdc3b600a6a2d964483d8d4c1897af06f3902007e6549febb5f6131231e", 0xa6}, {&(0x7f0000000200)="24143835cff61ed2982e0007d55b31b4b8ba999674a25ac7ffbe413d5ee8eba98ee62643c297b16e947118d3f5462bcbb793e6f488ccfff144ad4ae81aabadb68bbcd0ad03f9c684", 0x48}, {&(0x7f0000000280)="eb1bf719445c0f98b4c67b8e2a2a1d1e2b44e4ec38f235fee15878a37fde8109ed59dbedbc00acd514b13c3d14dce6861bb5cdf6b9c6543c4dfbfd7eecc5d685baf4d59459a5f58c8637f1751b9be4599c4575f825a8306793e6048ca4efeadcd9b24810c95f8c9fce15065054565544b5cf5078a94cab86394d6ef0117e2228f229c0c67e94b14634ca0efb764345c7a02e7eda4191913eeaebe198b72c662aaabab598081a2dfa9e69eed1d32b7f56bff09b0275755ef3ffcafa83188fd7a3985413fd7f51b92d2b43fbb12e54353dd44cc6534f01ee426cb803b7c4367e8988", 0xe1}], 0x3) r2 = add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="dd4c15fa3e5aa5c23e049ba5fc09eba0aec6f09b4d47cdec1be04c12b3cf3eadd360f484e600cda46d31fee21d7f8ff25d2860f0345b28b6f7a1975d064779c8ab91dd3d70e2a778422ddc3945a1f7011af9237efe3f7d24e8fccb704ef90e3f1dbb569e39ef4ae3744703a5233485d504d43250cf2f38dc95b88df47f34d209cab38ac2b576ac7dbb6fecc36c7e02f5eed85a8913858f57db8d1a2a860b29d35dac00c19533bc1e2da176afdd40b15042d2e5a92d9b093c4221eb", 0xbb, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000500)='asymmetric\x00', &(0x7f0000000540)='(\x00') ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000580)="0b5d9a059b02e9b1d333b240658faa3800529c42f82970f9b64b20fd8928d5c3063540d946bb2774bb7faedcd13f3493b462bb56ab0567c22d9a9caf44583c8534405a2427870357055d3b0ebe67c838c0617f03bc11ff1faae1d045832f91a83ca09964190f8cc6e2dcc1cd514514097f1b816b788f5205f2775f4cbef2bca8f503c89b010f2dce7ef2ece01bc5a6da0aba0f2a27e1c24f2ddbdafa5b15d49afa4987ffa9efd52dd04053b11ae9c06a43042e1a34") sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x5f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4010) r3 = memfd_secret(0x0) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000740)='trusted\x00', &(0x7f0000000780)='cifs.spnego\x00') r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}]}, 0x24}}, 0x20000000) 00:17:38 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x0, 0xee00}, {0x2, 0x1}, {0x2, 0x2, 0xee00}, {0x2, 0x4}, {0x2, 0x3, r0}, {0x2, 0x2, r1}], {0x4, 0x1}, [{0x8, 0x3, r3}], {0x10, 0x5}, {0x20, 0x7}}, 0x5c, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x65a}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x88f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x1001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/clocksource', 0x400042, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x240400d0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000680)={0x0, 0x1, 0x3, 0xddb}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) r7 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) r9 = getpgid(0xffffffffffffffff) r10 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x401) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0) r13 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x8100, 0x0) r14 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002000)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000001ec0)=[{{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ac0)=""/129, 0x81}, {&(0x7f0000000b80)=""/152, 0x98}, {&(0x7f0000000c40)=""/151, 0x97}, {&(0x7f0000000d00)=""/243, 0xf3}, {&(0x7f0000000e00)=""/163, 0xa3}, {&(0x7f0000000ec0)=""/169, 0xa9}], 0x6, &(0x7f0000001000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001500)=[{&(0x7f00000010c0)=""/199, 0xc7}, {&(0x7f00000011c0)=""/246, 0xf6}, {&(0x7f00000012c0)=""/26, 0x1a}, {&(0x7f0000001300)=""/173, 0xad}, {&(0x7f00000013c0)=""/167, 0xa7}, {&(0x7f0000001480)=""/80, 0x50}], 0x6, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/12, 0xc}, {&(0x7f0000001700)=""/136, 0x88}], 0x3, &(0x7f0000001800)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000019c0)=""/247, 0xf7}, {&(0x7f0000001ac0)=""/2, 0x2}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/203, 0xcb}], 0x4, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/129, 0x81}], 0x1, &(0x7f0000001e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x5, 0x40020020, &(0x7f0000002040)={r15, r16+60000000}) sendmmsg$unix(r6, &(0x7f0000002e00)=[{{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000780)="d8ba25e8a1", 0x5}, {&(0x7f00000007c0)="a48aed0f4f5f59dc9a38baf6a143d733134b9b9fad8bc74a0ca212ac2a36be024db02eee04c3292880af55300ce32c989e5730e983c943199d9ad4c40d9d766dfd673ebc59233f781acb3a024cc981f516385b85326579ad3b994767402256a19ed5678a4dd3200ab969dff75f87bb0e57270333e5358792dfcb61ae6daf68c62cec1acb802e6ab587a0f2a71dcc0aad84ac3bfbf065418f99ec0c4814c19e8694a52b62b9", 0xa5}, {&(0x7f0000000880)="bca9fe9a7422adc480ed8d117dd942be0a30090d845daae0caef35b1bf5fa647a04a6657cb4b845e41e57eb90cb69d26fb72a14f2662a57c87", 0x39}], 0x3, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r2}}}, @cred={{0x1c, 0x1, 0x2, {r9, r0, r3}}}, @rights={{0x34, 0x1, 0x1, [r5, r5, r5, r5, r10, r5, r5, r11, r5]}}, @rights={{0x1c, 0x1, 0x1, [r5, r12, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, r5, r5, r5, r5, r5]}}, @rights={{0x24, 0x1, 0x1, [r13, r5, r5, r14, r5]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee01}}}, @cred={{0x1c}}], 0x168, 0x4040010}}, {{&(0x7f0000002440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002680)=[{&(0x7f00000024c0)}, {&(0x7f0000002500)="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", 0xfb}, {&(0x7f0000002600)="ef4382443ead529428bc31c874223ec6bc49d549716b448d93eb0928416a07695a1a004967e9449715be32f8cdd324488251f013af38cebfb5f433c284028283bd8f7b59777c869018de5338657f14b033eba1bcf7e8009bc3233ed24a5218363c33", 0x62}], 0x3, &(0x7f0000002880)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x40}}, {{&(0x7f0000002900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002980)}, {&(0x7f00000029c0)="d536079dbc6bd2c8253a0f876c134062120f62668558ac80fc921568455acdb135be554f60a8cfd68dc28933a1033214ee4aab69d36773a1e2e9db3ea28b13d3c09d19b5f075eb01cdf682f71d132e43b11afca1f492fb3b29193237c87a9d627480aa6e69376216", 0x68}], 0x2, &(0x7f0000002a80)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, 0xee01}}}], 0x38, 0x80}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)="74585bf4ca04c379e258911f2db3640e1f6364094dbf037f08fcdb4abe4f995adb18b91b4e8134a90aa2192c8ce9513ee11b7971a5138ae959b21182b6b730c0531cf368bfb4727b1feac6dfcd79c088d371fa5f3b2c826fb155db32494a634c8575b8ae1ddfeaf86789b5d5273e60200d659938e4b41a48f6d094c6c4cf675f82a88b654aa4e6d3c7f2a1ccd68ad196", 0x90}, {&(0x7f0000002b80)="a5cdb72bec4a0341dfb967395b4d12765d6ce5c172483a8fd0acf3fa689f3151b660316ccf659622bfceb1ae694f1bb4adc4478bc2604f809c65820751d1de8add8d", 0x42}, {&(0x7f0000002c00)="e81cbbcb8bd28ea69e122b9d895181a5b668454575f7d0c3609ef8fa4ce061f3560311c795530ee166ab9c412a2f41c910f7f0488de76a3b1577dadeb159801cf05ede21380c069c749f77153d3961c077f1fd760ee18e6ba52d31f05881030ec9ed775a54817e4129329d025546b42d51d44395917cc8f5230ce2d5f673b7c0874cff2e1bbc04488e8bf3b64386ab13b76326612b136092208f8c43ceaf97f51082e384ce52729578c7e18a552095d43e502d5dde9cebb6dbf65221219b38af1aee739d03", 0xc5}, {&(0x7f0000002d00)="bf800bdc096d1d4f1d374b12172807e4a237bd4d44f9d9bce3757a899042d2756a66ccb98b97380a8bd069eae508c036d5625b16bfd4aaf248b9fc0199f89770972cac3b124bfb462591ec92594e5cc247a2453f8bd4fceb781edce7275ed20e65ebb1ccbbe9fa16e4ccee13958bd605ff7adadff2442be3bda2f32b71a619a20390143d533203ee8628c1f57f1636f68a4b6d7fc0997f5ec22fd3083d", 0x9d}], 0x4, 0xfffffffffffffffc, 0x0, 0x40}}], 0x4, 0x20040005) [ 86.918341] audit: type=1400 audit(1737591458.589:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:17:38 executing program 3: ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000700)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/event_source', 0x0, 0x146) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000780)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$TCFLSH(r2, 0x540b, 0x1) shutdown(r0, 0x1) sendmsg$AUDIT_SET(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x3e9, 0x20, 0x70bd2a, 0x25dfdbff, {0x4, 0x1, 0x5c0f4f57b1bdd4cd, 0x0, 0x7, 0xffff, 0x99, 0x0, 0x0, 0xfffffff8}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x4015) r3 = pidfd_getfd(r1, r0, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000900)) write$binfmt_aout(r0, &(0x7f0000000940)={{0x108, 0x9, 0x4, 0x0, 0x256, 0x3f, 0x299, 0xf2b}, "ce26de58ee919a3d40cc2fb177e69948f85485d6dfa8bead0c28eb1ca062646bc740b243b3d042f14cf4efd29b366edface233370703a9a8d607959cfa75b65bb8504bbb8b13bfc7ceb1b35767a109010e014c7c024ad1890fd51a9f46e1f684e6a8a10376bfe655b8159b3aab2bef9ee797c017dc4ecc618b61b2ed296b01a329cc23e04ce3c5354c11c67014a5de078cc0bde2b496ab8d3b23586fa0d3057ebd599ac70e9391083cb8fd737bf914640a743301dfe582d46a1042d3d9bef8317c7508ae"}, 0xe4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40), 0x200100, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000a80)={{r4}, 0x80, 0x40, 0x9}) socketpair(0xf, 0x5, 0x5, &(0x7f0000000ac0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8020000a}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x9c, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x20801) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000cc0), &(0x7f0000000d40)=0x6e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000000d80)={0x8, 'veth1_to_hsr\x00', {'veth1_macvtap\x00'}, 0x20}) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000dc0)={0x5, 0x2, 0x0, 0x80000, 0x3}) 00:17:38 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x0, "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"}) ioctl$TIOCEXCL(r0, 0x540c) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000280)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000002c0)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000300)={0x7, 0x9, 0x98867af, 0x2, 0x18, "13db2800f668ec96ed988ffffad22a429d7a09"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r2 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x1, 0x6, &(0x7f0000000780)=[{&(0x7f0000000400)="6f9ccdf4961c", 0x6, 0x1}, {&(0x7f0000000440)="5285497df32c54037147fe53bd91c73388718c6eea3f5a2640b804a185542675beeca4cb5e7860beabcf01efe395ee25bf87655c2a07194c4b72ee368b15b3859961b56ac8434e176b82bc06a3d8a162f526bc0b912f40b6803d314692079b6580d698912ded49b143fc0903223af54d3cbff1c63aa4066a67b642e3840df4de4a2bbd56cc456c8a9b51f4a1064c0354", 0x90, 0x4}, {&(0x7f0000000500)="2c0ac5ac5daac3ff2bee8d3aae54c0b4f17d47ccd1acd0ebcdc48d6ebef274999096a5d1b8bb899135b288cc2f8f72d83314a26eced3d0f9a5e0c281e8d0c69725c281b759e6971c36e7d8ab87f06a88d95e0e38588d4744cddf38d96fcf702839b6fc3f64536740d5a5869d31991cc97432045111ac75841a1b91ef4799baff86e941f5c90ce33034cff8cf8f717b787583eb57a3f0dae19b2376290d4cb396c1bbe921e35217a07f49", 0xaa, 0x2}, {&(0x7f00000005c0)="6991097a6fd53aaf9e71595e1872e695968822d68eb043a8df8bbc16262394b77169987858d32600eb15c33669dbf4ee4ff5d734046bec2b67976fd65c25b7ca3f4f1114cf77d8504bc68aa01d4aa75237b165d5e56a6a1c616d876ae309fb1d198242c1bcfcecd89242b70a7db22ab0e79861414b17ee70efef127d9461ffd2079f4d0ac243c5f84e2afd57353507c43ca21af4eb873ec3655fd3bb8cf5a946ecb2c9a680fe708de4dcfd749393557ed1e4a16f2f8d425996c5f9cdb971a2e25528a23ce6071b1ec12d09b6b6c467896de053d250816797f64392e6b08551ed1e7940f09b3625cdafd885c018d50f26b8de0d0adc", 0xf5, 0x3ebd}, {&(0x7f00000006c0)="31f75e5ec472e96b9b4f4615fe05c888f9a1b0aa1185668c34e8ef4c8b6d7558dc95dbe06756e4cc1a6cfa", 0x2b, 0x5}, {&(0x7f0000000700)="0a1dcd7f48e5ed90e121aec99a9fbd50e5bacaf291abb3ccf39add7671023c2d869d2a83fd72b2013052e46b6212d4f4b809ad86cc5f431e79189a23c07c5a4bc9d4c858626cae2bd3e5f8c6636dadf19b837c41642b2fe1b54c219acc66884a83d118b62210230c80c99da1c0a31531432041eedc", 0x75, 0x1000}], 0x1, &(0x7f0000000840)={[{@block={'block', 0x3d, 0x400}}, {@hide}, {@uid}, {@unhide}, {@mode={'mode', 0x3d, 0x5}}, {@utf8}], [{@smackfsdef={'smackfsdef', 0x3d, '-/'}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, './cgroup/syz1\x00'}}, {@subj_type}, {@smackfsdef}, {@smackfsfloor={'smackfsfloor', 0x3d, '-\\\'/6'}}, {@uid_gt={'uid>', 0xee00}}, {@context={'context', 0x3d, 'user_u'}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, './cgroup/syz1\x00'}}]}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000009c0)={{r1}, 0x3, &(0x7f0000000980)=[0x400, 0x1c, 0x400], 0x2, 0x6, [0x3f, 0xfffffffffffffffd, 0x201f5e1, 0x4]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x204, 0x0) unlinkat(r3, &(0x7f0000000a80)='./file0\x00', 0x200) r4 = openat$cgroup_int(r3, &(0x7f0000000ac0)='rdma.max\x00', 0x2, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000b00), 0x5, 0x30000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f0000000b40), &(0x7f0000000b80)='\x00', 0x100000000000, 0x3, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="e26591ac6c543b364e5acd705658bca1d22a07045ef86d6b26df01652e8a4af6f881184d41250ad8d631a3a18b708bf8a4e592ce3053351d46", 0x39, 0x80000000}, {&(0x7f0000000c00)="b858578e97c6377d5326f84551e9a4cff40a801f8053d76065289379e1e35e68a4e28ec4b11dc9ad42b9e22309bcfbf037a499", 0x33, 0xfff}, {&(0x7f0000000c40)="96c5b10ae00e597812d9dbc2fa1ee9653a8c49aa144131f5aeabcdd1f57836dadce7fc9257501370bc4ce73df8", 0x2d, 0x100000000}], 0x10008, &(0x7f0000000d00)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x38]}}}}, {@huge_never}, {@huge_within_size}], [{@subj_type={'subj_type', 0x3d, 'mode'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@audit}, {@euid_lt={'euid<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'uid>'}}]}) fcntl$addseals(r6, 0x409, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)=""/60, 0x3c) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 00:17:38 executing program 5: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x6, 0x1, [0x8, 0x4, 0x40, 0x5, 0x8], [0x2, 0xc2, 0x5, 0x12, 0x10001, 0x8472, 0x5, 0x80, 0x0, 0x4, 0x1, 0x0, 0x610, 0x7fff, 0xc00000000000000, 0x80000000, 0xfffffffffffffffa, 0x7ff, 0x4, 0x1, 0x3, 0x8, 0x4, 0x49f9, 0x56, 0x800, 0x3ff, 0x1, 0x80000001, 0x7, 0x1, 0x10001, 0x5, 0x2, 0x4f8, 0x20, 0x3, 0x800, 0xce1, 0x9, 0x8, 0x1000, 0x7, 0x6, 0x40, 0xffffffffffffff98, 0x5b4, 0x4, 0x74c, 0x8000, 0x5, 0x200, 0x8, 0x80000001, 0x2f0, 0xcbb5, 0x9, 0x6ab7, 0xfffffffffffffffa, 0x7ff, 0x3, 0x6, 0x100000001, 0x6c74, 0x40, 0x1, 0x6f, 0x5, 0x1000, 0x0, 0x552, 0x1, 0x7, 0x7, 0x7, 0x40, 0x10000, 0xd4b1, 0x0, 0x8, 0x80000000, 0x100000000, 0x100000001, 0x1ff, 0x7, 0x1, 0xff, 0x1, 0x0, 0x24, 0x3, 0x1, 0xffffffffffffffe1, 0x10000, 0x9, 0x3ff, 0xc075, 0xff, 0xfffffffffffffffe, 0x9d2, 0x2, 0x195, 0x1f, 0x5, 0x8, 0x5, 0x20, 0x0, 0x6, 0x619, 0x10001, 0x87, 0x400, 0x6098, 0x3ff, 0xff, 0xd31, 0x4, 0x1, 0x6, 0xb283]}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat$cgroup(r0, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000480)='memory.pressure\x00', 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x408300, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000500)=[r0, r0, r1, r0, r0, r2, r3, r0, r0], 0x9) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000580)={@remote, 0x1ff, 0x2, 0x0, 0x8, 0x7, 0x4}, &(0x7f00000005c0)=0x20) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x1, 0x8, 0x67, @local, @local, 0x10, 0x8, 0x0, 0xdd}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000740)=0x2) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000780)={0x0, 0x1, 0xd}) timerfd_settime(r6, 0x0, &(0x7f00000007c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000800)) fcntl$setpipe(r6, 0x407, 0x3) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x400) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000840)={0xfffffff8, 0x7, 0x2, 0x8, 0x6, "4cb26f67a14458e6f5fcd484919414ecdbe151"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000880)) 00:17:38 executing program 6: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1000}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x31, 0x5b, "f5e2b8e917c0b79dcd08cd37550b3313be352f727e12bc22dae243e67a1d78166c488721458ef2f2635a1234ae"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008851}, 0x4000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r0, 0x10, 0x70bd2d, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004a041}, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000380), &(0x7f00000003c0)=0x8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10020000}, 0x40) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000540)={0x2}) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000580)=""/101, &(0x7f0000000600)=0x65) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000640)={0x0, 0xfffffffffffffff7, @status={[0x5, 0x400000004000, 0xb59f, 0x9, 0x6, 0x7f]}, [0x800, 0x9, 0x7, 0x1f, 0x2, 0x8, 0x5, 0x9, 0x5, 0x6, 0x9, 0x3, 0x1, 0x0, 0x3ff, 0x20, 0x4, 0x4, 0x5, 0x1, 0x5, 0x0, 0x4, 0x2, 0x3, 0x3, 0x10000, 0x9a6, 0x0, 0xff, 0x3, 0x1, 0x8, 0x0, 0x8, 0xd9, 0x2, 0x91d, 0x7b4f, 0x3c4, 0x8, 0x40, 0x7ff, 0x7, 0x3f, 0xc60, 0x4, 0x7, 0x7fffffff, 0x9a3, 0x6, 0x2, 0x478, 0xff, 0x9, 0xffffffffffff4fda, 0x4, 0x3f, 0xfffffffffffffffe, 0x5286, 0x7, 0x4, 0x5]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000001080)={0x4, 0x7f, 0x3}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000010c0)=0x11, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001100)={0x81, 0x3, 0x0, 0x2, 0x4, [{0x7, 0x100, 0x9, '\x00', 0x3f055ee832c3436d}, {0xebc6, 0x1f, 0x80000001, '\x00', 0x2400}, {0x4, 0x1000, 0x4, '\x00', 0x86}, {0x7, 0x3, 0x6, '\x00', 0x1001}]}) ioctl$int_out(r2, 0x0, &(0x7f0000001200)) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xdc, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9f, 0x9}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "99337510eeaf118daf349a856ce849ba598884556bb761de"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "77e21413caaf4805209de523baadb577d1ee65e61887af2a"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "031177be8e37d2c8f08ee26fa7b5008a70b80f838e50c19c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x44100, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, 0x0, 0xd30, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000001640)=@ccm_128={{0x304}, "7f4ec32b2f6c3df9", "482d607feba0852ca6efbbd220466440", "87639cc7", "0c6059e2c7fb171d"}, 0x28) 00:17:38 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x80000) fcntl$addseals(r1, 0x409, 0x8) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x200000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000002c0)) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) ppoll(&(0x7f0000000400)=[{r5, 0x4008}, {r2, 0x686c}, {r1, 0x2}, {0xffffffffffffffff, 0x91ed}], 0x4, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000500)) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x40, 0x1, 0x4e24, 0x2, 0x2, 0xa0, 0x20, 0x33, 0x0, 0xffffffffffffffff}, {0x2, 0x4, 0x101, 0x5, 0x35, 0x6, 0x0, 0x6}, {0x5, 0x4, 0x4, 0x101}, 0x4, 0x6e6bbc, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x3, 0x1, 0x0, 0x0, 0x2, 0x313}}, 0xe8) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_WRITE={0x17, 0x2, 0x2007, @fd=r6, 0xfff, &(0x7f0000000640)="c9369bbb56d07a5684c44a2c62522fb07321230bba2cd3d2884f7d772ce81288a24a90317d9f07909af9f342e34ca3a92d71dac0649abd37801847b798d08458b7c806fc36a2f1fc31b643a530075c593b1d914bc1ddfb29c169951df9ab77651c989c1a9920d02e83b4497dc5795e79bf53aa33610fdb0a83aeb5a01cccc802513a4ba6cdad2e62269a54147b1a61f287bdfb51905e4ccbfde5eb8d8ac17df43f0a7e4778908764028639cc97eceb154b0b7216e1cc2d6ef122662f9a4efea790938871382fad953498c3227926f801e7", 0xd1, 0x2, 0x1, {0x0, r8}}, 0x200) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000780)=0x5, 0x2) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000007c0)={0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) [ 88.116057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.120962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.123448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.128013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.130930] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.132985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.392316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.398348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.402078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.410214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.418324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.425122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.517796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.519314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.525078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.533057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.543294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.544711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.545306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.547968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.550872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.552353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.558110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.572838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.574579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.576817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.579210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.583367] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.585480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.588726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.614176] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.614887] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.624120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.625012] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.627195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.629014] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.629922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.633141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.635395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.640365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.647004] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.653232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.722148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.746162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.779372] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.787250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.798898] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.805962] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.203574] Bluetooth: hci0: command tx timeout [ 90.458797] Bluetooth: hci1: command tx timeout [ 90.650775] Bluetooth: hci5: command tx timeout [ 90.715046] Bluetooth: hci4: command tx timeout [ 90.715409] Bluetooth: hci2: command tx timeout [ 90.779349] Bluetooth: hci6: command tx timeout [ 90.779719] Bluetooth: hci3: command tx timeout [ 90.908674] Bluetooth: hci7: command tx timeout [ 92.251780] Bluetooth: hci0: command tx timeout [ 92.506752] Bluetooth: hci1: command tx timeout [ 92.699723] Bluetooth: hci5: command tx timeout [ 92.764838] Bluetooth: hci4: command tx timeout [ 92.765065] Bluetooth: hci2: command tx timeout [ 92.826910] Bluetooth: hci3: command tx timeout [ 92.827144] Bluetooth: hci6: command tx timeout [ 92.954791] Bluetooth: hci7: command tx timeout [ 94.300879] Bluetooth: hci0: command tx timeout [ 94.554915] Bluetooth: hci1: command tx timeout [ 94.747533] Bluetooth: hci5: command tx timeout [ 94.810767] Bluetooth: hci2: command tx timeout [ 94.810915] Bluetooth: hci4: command tx timeout [ 94.874762] Bluetooth: hci6: command tx timeout [ 94.874910] Bluetooth: hci3: command tx timeout [ 95.002747] Bluetooth: hci7: command tx timeout [ 96.346743] Bluetooth: hci0: command tx timeout [ 96.602656] Bluetooth: hci1: command tx timeout [ 96.794709] Bluetooth: hci5: command tx timeout [ 96.858747] Bluetooth: hci4: command tx timeout [ 96.858871] Bluetooth: hci2: command tx timeout [ 96.923766] Bluetooth: hci3: command tx timeout [ 96.924089] Bluetooth: hci6: command tx timeout [ 97.050699] Bluetooth: hci7: command tx timeout [ 148.406399] syz-executor.3 (284) used greatest stack depth: 23552 bytes left [ 150.948562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.955499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.958427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.965444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.971134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.974180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.020028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.023684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.028061] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.037057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.042676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.045042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.142809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.149211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.150309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.153743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.159561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.163321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.165395] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.167769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.180189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.188934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.199842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.202492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.280809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.292402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.301453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.307446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.309751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.324363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.331366] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.338061] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.338553] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.348755] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.355187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.357184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.367010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.375235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.388512] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.389688] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.396705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.396833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.806246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.822728] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.831750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.868680] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.882948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.885771] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.050955] Bluetooth: hci0: command tx timeout [ 153.115264] Bluetooth: hci1: command tx timeout [ 153.242684] Bluetooth: hci2: command tx timeout [ 153.306695] Bluetooth: hci3: command tx timeout [ 153.434701] Bluetooth: hci4: command tx timeout [ 153.498778] Bluetooth: hci5: command tx timeout [ 153.562891] Bluetooth: hci7: command tx timeout [ 153.946694] Bluetooth: hci6: command tx timeout [ 155.099364] Bluetooth: hci0: command tx timeout [ 155.162687] Bluetooth: hci1: command tx timeout [ 155.290703] Bluetooth: hci2: command tx timeout [ 155.355646] Bluetooth: hci3: command tx timeout [ 155.484650] Bluetooth: hci4: command tx timeout [ 155.547719] Bluetooth: hci5: command tx timeout [ 155.610659] Bluetooth: hci7: command tx timeout [ 155.997666] Bluetooth: hci6: command tx timeout [ 157.146737] Bluetooth: hci0: command tx timeout [ 157.210771] Bluetooth: hci1: command tx timeout [ 157.338651] Bluetooth: hci2: command tx timeout [ 157.403790] Bluetooth: hci3: command tx timeout [ 157.530760] Bluetooth: hci4: command tx timeout [ 157.594769] Bluetooth: hci5: command tx timeout [ 157.658653] Bluetooth: hci7: command tx timeout [ 158.042751] Bluetooth: hci6: command tx timeout [ 159.195744] Bluetooth: hci0: command tx timeout [ 159.259918] Bluetooth: hci1: command tx timeout [ 159.387057] Bluetooth: hci2: command tx timeout [ 159.450723] Bluetooth: hci3: command tx timeout [ 159.578712] Bluetooth: hci4: command tx timeout [ 159.644638] Bluetooth: hci5: command tx timeout [ 159.708639] Bluetooth: hci7: command tx timeout [ 160.090801] Bluetooth: hci6: command tx timeout [ 213.225313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.228026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.230239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.239342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.242670] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.246233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.291845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.296161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.298855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.299390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.301253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.302118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.305281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.308381] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.310518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.315515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.318388] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.321271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.399716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.409040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.410173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.418758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.421204] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.424767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.506790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.508719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.510958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.520922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.524535] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.526083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.596444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.630328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.634530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.685815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.691784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.698443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.743484] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.753011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.754827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.781780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.796837] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.798445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.911123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.917106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.929549] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.967469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.989833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.990705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.322924] Bluetooth: hci0: command tx timeout [ 215.386722] Bluetooth: hci2: command tx timeout [ 215.386743] Bluetooth: hci1: command tx timeout [ 215.450727] Bluetooth: hci3: command tx timeout [ 215.771870] Bluetooth: hci4: command tx timeout [ 215.834813] Bluetooth: hci5: command tx timeout [ 216.026731] Bluetooth: hci7: command tx timeout [ 216.154815] Bluetooth: hci6: command tx timeout [ 217.372644] Bluetooth: hci0: command tx timeout [ 217.434754] Bluetooth: hci1: command tx timeout [ 217.435749] Bluetooth: hci2: command tx timeout [ 217.498950] Bluetooth: hci3: command tx timeout [ 217.820638] Bluetooth: hci4: command tx timeout [ 217.882769] Bluetooth: hci5: command tx timeout [ 218.074694] Bluetooth: hci7: command tx timeout [ 218.202814] Bluetooth: hci6: command tx timeout [ 219.418849] Bluetooth: hci0: command tx timeout [ 219.482688] Bluetooth: hci2: command tx timeout [ 219.482790] Bluetooth: hci1: command tx timeout [ 219.546770] Bluetooth: hci3: command tx timeout [ 219.866737] Bluetooth: hci4: command tx timeout [ 219.930781] Bluetooth: hci5: command tx timeout [ 220.122809] Bluetooth: hci7: command tx timeout [ 220.251643] Bluetooth: hci6: command tx timeout [ 221.467609] Bluetooth: hci0: command tx timeout [ 221.530654] Bluetooth: hci1: command tx timeout [ 221.530745] Bluetooth: hci2: command tx timeout [ 221.594842] Bluetooth: hci3: command tx timeout [ 221.914783] Bluetooth: hci4: command tx timeout [ 221.978645] Bluetooth: hci5: command tx timeout [ 222.170698] Bluetooth: hci7: command tx timeout [ 222.298742] Bluetooth: hci6: command tx timeout [ 276.204371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.210353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.214485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.242216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.247218] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.251461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.345080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.359506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.362388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.371102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.376136] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.378527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.397721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.401530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.405059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.415349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.422894] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.426966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.485360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.489978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.493929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.499221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.502027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.504436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.542802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.552198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.557257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.560132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.560797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.563693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.566498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.583919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.587844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.591944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.604822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.606426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.619911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.625184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.628999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.631333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.633981] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.644876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.651204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.663165] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.681212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.704312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.726140] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.728753] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.298717] Bluetooth: hci0: command tx timeout [ 278.492641] Bluetooth: hci1: command tx timeout [ 278.492667] Bluetooth: hci2: command tx timeout [ 278.619975] Bluetooth: hci4: command tx timeout [ 278.620132] Bluetooth: hci3: command tx timeout [ 278.747740] Bluetooth: hci5: command tx timeout [ 278.811383] Bluetooth: hci6: command tx timeout [ 278.940673] Bluetooth: hci7: command tx timeout [ 280.346718] Bluetooth: hci0: command tx timeout [ 280.538768] Bluetooth: hci1: command tx timeout [ 280.540344] Bluetooth: hci2: command tx timeout [ 280.666828] Bluetooth: hci3: command tx timeout [ 280.669617] Bluetooth: hci4: command tx timeout [ 280.795693] Bluetooth: hci5: command tx timeout [ 280.859777] Bluetooth: hci6: command tx timeout [ 280.987652] Bluetooth: hci7: command tx timeout [ 282.396102] Bluetooth: hci0: command tx timeout [ 282.587801] Bluetooth: hci2: command tx timeout [ 282.588113] Bluetooth: hci1: command tx timeout [ 282.714664] Bluetooth: hci4: command tx timeout [ 282.714732] Bluetooth: hci3: command tx timeout [ 282.844653] Bluetooth: hci5: command tx timeout [ 282.908785] Bluetooth: hci6: command tx timeout [ 283.036716] Bluetooth: hci7: command tx timeout [ 284.442847] Bluetooth: hci0: command tx timeout [ 284.634774] Bluetooth: hci1: command tx timeout [ 284.635041] Bluetooth: hci2: command tx timeout [ 284.763665] Bluetooth: hci3: command tx timeout [ 284.763835] Bluetooth: hci4: command tx timeout [ 284.891754] Bluetooth: hci5: command tx timeout [ 284.955720] Bluetooth: hci6: command tx timeout [ 285.083696] Bluetooth: hci7: command tx timeout [ 337.962097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.965103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.971204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.978928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.982448] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.985195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.104691] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.110957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.113470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.118796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.126821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.129072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.302628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.306079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.307008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.308493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.310107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.313821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.314345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.318113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.319835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.321964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.329755] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.332136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.372451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.377828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.400153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.400979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.419521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.420245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.426315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.428175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.429983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.438520] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.454429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.458999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.466149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.472784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.479936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.479952] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.510998] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.518224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.879315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.917148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.923058] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.015950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.027884] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.035916] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.059724] Bluetooth: hci0: command tx timeout [ 340.187697] Bluetooth: hci1: command tx timeout [ 340.378696] Bluetooth: hci2: command tx timeout [ 340.442822] Bluetooth: hci3: command tx timeout [ 340.634865] Bluetooth: hci4: command tx timeout [ 340.635517] Bluetooth: hci5: command tx timeout [ 340.636054] Bluetooth: hci6: command tx timeout [ 341.146740] Bluetooth: hci7: command tx timeout [ 342.107679] Bluetooth: hci0: command tx timeout [ 342.234711] Bluetooth: hci1: command tx timeout [ 342.426664] Bluetooth: hci2: command tx timeout [ 342.490632] Bluetooth: hci3: command tx timeout [ 342.683039] Bluetooth: hci4: command tx timeout [ 342.683146] Bluetooth: hci6: command tx timeout [ 342.683234] Bluetooth: hci5: command tx timeout [ 343.194626] Bluetooth: hci7: command tx timeout [ 344.154769] Bluetooth: hci0: command tx timeout [ 344.282633] Bluetooth: hci1: command tx timeout [ 344.474656] Bluetooth: hci2: command tx timeout [ 344.538650] Bluetooth: hci3: command tx timeout [ 344.731074] Bluetooth: hci4: command tx timeout [ 344.731823] Bluetooth: hci5: command tx timeout [ 344.731940] Bluetooth: hci6: command tx timeout [ 345.243089] Bluetooth: hci7: command tx timeout [ 346.202648] Bluetooth: hci0: command tx timeout [ 346.330837] Bluetooth: hci1: command tx timeout [ 346.523617] Bluetooth: hci2: command tx timeout [ 346.586641] Bluetooth: hci3: command tx timeout [ 346.778737] Bluetooth: hci6: command tx timeout [ 346.778846] Bluetooth: hci5: command tx timeout [ 346.778906] Bluetooth: hci4: command tx timeout [ 347.292308] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:22:47 Registers: info registers vcpu 0 RAX=0000000000001a49 RBX=000000000008d100 RCX=1ffffffff0fe3ff4 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88800da175c8 RBP=ffff88800da175c8 RSP=ffff88800e807b70 R8 =0000000000000001 R9 =fffffbfff0fe19ea R10=ffffffff87f0cf57 R11=0000000000000001 R12=ffff88800942fc80 R13=ffffea0000dcefc0 R14=0000000000000000 R15=ffff8880373bfc40 RIP=ffffffff81aeeabe RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fea6c3f0000 CR3=0000000036f1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff84dd6fa2 RCX=ffff8880336579d0 RDX=0000000000000001 RSI=ffffffff84d218e1 RDI=ffffffff84dd6fa1 RBP=0000000000000073 RSP=ffff8880336578c8 R8 =0000000000000018 R9 =0000000000000000 R10=ffff888033657af0 R11=0000000000000001 R12=ffffffff84d218e1 R13=dffffc0000000000 R14=0000000000000018 R15=dffffc0000000000 RIP=ffffffff84a5175e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f53323c56f4 CR3=000000002dbd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000