Warning: Permanently added '[localhost]:55710' (ECDSA) to the list of known hosts. 2025/04/25 06:32:38 fuzzer started 2025/04/25 06:32:39 dialing manager at localhost:46629 syzkaller login: [ 95.560359] cgroup: Unknown subsys name 'net' [ 95.692809] cgroup: Unknown subsys name 'cpuset' [ 95.755242] cgroup: Unknown subsys name 'rlimit' 2025/04/25 06:32:55 syscalls: 214 2025/04/25 06:32:55 code coverage: enabled 2025/04/25 06:32:55 comparison tracing: enabled 2025/04/25 06:32:55 extra coverage: enabled 2025/04/25 06:32:55 setuid sandbox: enabled 2025/04/25 06:32:55 namespace sandbox: enabled 2025/04/25 06:32:55 Android sandbox: enabled 2025/04/25 06:32:55 fault injection: enabled 2025/04/25 06:32:55 leak checking: enabled 2025/04/25 06:32:55 net packet injection: enabled 2025/04/25 06:32:55 net device setup: enabled 2025/04/25 06:32:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/25 06:32:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/25 06:32:55 USB emulation: enabled 2025/04/25 06:32:55 hci packet injection: enabled 2025/04/25 06:32:55 wifi device emulation: enabled 2025/04/25 06:32:55 802.15.4 emulation: enabled 2025/04/25 06:32:55 fetching corpus: 0, signal 0/0 (executing program) 2025/04/25 06:32:57 starting 8 fuzzer processes 06:32:57 executing program 0: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x0, 0x3, 0x8, 0xff}, &(0x7f00000000c0)=0x20) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x105201, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/84, 0x54, 0x10000, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xff, 0x8000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000300)={0x6, 'bond0\x00', {}, 0x4}) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x12a) write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x9}, @val={0x3, 0x3, 0x2, 0x86d, 0x9, 0x101}, @ipv6=@tcp={0x3, 0x6, "7ce1f6", 0x1ec, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x2b, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0x1f, [0x0, 0x1f, 0x9, 0x1f, 0x10001, 0x2]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x6, [0x9, 0x21, 0xc37b, 0x1, 0x6ed6]}}, @generic={0x0, 0xd9, "ac9e7ca9e2d24c6dd1daa22dc99b68ba8f2e0e33a241d949652092f2f876c3a23fe6a370f427c7c1a1733e91e22cd45266ae21a2c45522d81d8ae7d3c5fb51389e74ab23b2825987d575ac4af16161769ccf33c4cddcb1d92b17eec9fc13d1dbd2115836ab831f8c574c3b3de4fff18769632eb680caf5e1ee3e5ba5d05831e52913e812bc205a184eebae17c64500bf1515a423f777266f4b65b2ed81cc5a80a0923ac9093e9d97e41a81a4eecffc706f2026b4ec4b47dcd86ba7a6383671751f86fe75afad78b81ce888bf6cfecc9b87e238ad455ea4cd3d"}]}], {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x20, 0x80, 0x3, 0x0, 0xcfcd, {[@fastopen={0x22, 0x4, "5ff6"}, @sack={0x5, 0x6, [0x3]}, @sack={0x5, 0x26, [0x9, 0x8001, 0x353, 0x80000000, 0x5, 0x794d, 0x6ec, 0x8001, 0xf1c]}, @sack={0x5, 0x26, [0x4bff8a8c, 0x7, 0x7fffffff, 0x0, 0x1000, 0x8, 0x0, 0x4, 0x7fffffff]}, @sack={0x5, 0xa, [0x5, 0x4]}, @fastopen={0x22, 0xc, "bea3af2204842e39e2ee"}]}}, {"e1290fe8"}}}}}, 0x222) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @loopback}, 0x249, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)='batadv_slave_0\x00', 0x0, 0x895, 0x3}) r4 = socket(0x1, 0x6, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000680)={0x0, {{0x2, 0x4e24, @private=0xa010100}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000780)={@mcast1, 0x101, 0x1, 0x2, 0x4, 0x8, 0x8001}, &(0x7f00000007c0)=0x20) 06:32:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x4b, 0x800, &(0x7f0000000000)="94bbe0e0f43f5260c53ef61b7ca2c60b246405fc24fc7e447377e509539b722c364220013e86a357fdb49e38fa0c0f601da6093f2f464ee16c3d768ca74956c6c1cc20b5adf0ed65c90d760635e894fe708408a106670c2751badc9f3c59254c1c731e", 0x63) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0xc0800) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0xe0, @rand_addr=0x64010100, 0x4e24, 0x0, 'sh\x00', 0x14, 0x142c, 0x5d}, 0x2c) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x8b63, 0xc0) r3 = accept$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x4c) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000002c0)={0x54, {{0x2, 0x4e23, @private=0x7}}, {{0x2, 0x4e23, @empty}}}, 0x108) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x2, 0xfffffffffffffffd, 0x7, 0x3, 0x8], 0x4, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000540)={0x0, {{0x2, 0x4e23, @local}}, 0x0, 0xa, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e20, @multicast1}}]}, 0x590) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000b00)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x62, {0x2, 0x4e24, @multicast2}, 'hsr0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r5, 0xe21674d89734bf77, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6e1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x8, 0x81, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000015}, 0x4080) recvmsg(r1, &(0x7f00000010c0)={&(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/182, 0xb6}, {&(0x7f0000001040)=""/4, 0x4}], 0x2}, 0x10020) r7 = accept$inet(r2, 0x0, &(0x7f0000001100)) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000001140)={@initdev, @loopback}, &(0x7f0000001180)=0xc) 06:32:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) bind(r1, &(0x7f00000000c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000180)={0x3, 0x200, 0x2}) r2 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x2, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000200)) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0xfffffffeffffffff, 0x4000) bind(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x2, 0x3}}, 0x80) r4 = geteuid() mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x90008, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@loose}, {@afid={'afid', 0x3d, 0x7}}, {@cache_fscache}, {@privport}, {@cache_loose}, {@posixacl}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa#\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x52, 0x9c, 0x36, 0x62, 0x66, 0x36, 0x64], 0x2d, [0x37, 0x30, 0x31, 0x37], 0x2d, [0x34, 0x37, 0x61, 0x36], 0x2d, [0x62, 0x34, 0x34, 0x65], 0x2d, [0x38, 0x66, 0x64, 0x0, 0x38, 0x63, 0x66, 0x35]}}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x63, 0x34, 0x30, 0x33, 0x64, 0x35], 0x2d, [0x62, 0x61, 0x32], 0x2d, [0x32, 0x36, 0x32, 0x38], 0x2d, [0x35, 0x65, 0x62, 0x39], 0x2d, [0x66, 0x62, 0x38, 0x34, 0x35, 0x12, 0x39, 0x61]}}}]}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f00000006c0)) r5 = pidfd_getfd(r3, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000940)={r6, 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r7, 0x3, 0x9, &(0x7f0000001940)="83b2c6890ccd632a62b8378e9ca128c5b769b596db4cb1063cb3a25e49821fca2427638aa637c89b17c620686b87ffc734032a8d2faa3c7088a425b504e447c05b04808f5da1d74aed07aa6d47e1645efd33e7adbb092fa069a8602992d6831671aeabcd42d4658150d326f5f2d0357ebe8e3b45629201e73553d352ad924c54ae72a725a92d69116c9ee91f6801a0880f9005c8a9844d7b2fa9d079601013a2b9911d9905b5210f684b832d64105550cc8216277ba4fb89390360bf3745b15ba933c2c262c1201a24d893be6b06bddf325fa0c05d254fdb8d", 0xd9) getsockname(r5, &(0x7f0000001a40)=@generic, &(0x7f0000001ac0)=0x80) 06:32:57 executing program 3: r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x0, &(0x7f0000000000)={0x100000001, 0x3}, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@remote, @multicast2, 0x0}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7628e4f827f15827}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40850}, 0x8080) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) timer_create(0x3, &(0x7f0000000380)={0x0, 0x28, 0x2, @thr={&(0x7f00000002c0)="281faf8e31af8f3167f0e88e2ce8140fedf9620870b1af31da34108512be0ad33e5b525c79f72655b68c3b1640d8344a17ffefd3f0502528c3d6404898809077f38edda61d7e95e9df6af99cde7634cab43810c2aa5ce60ae01eaaedb604928c078d9cd6a1fbee56f5551ec05d72", &(0x7f0000000340)}}, &(0x7f00000003c0)) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r4 = getpgid(r0) timer_create(0x6, &(0x7f0000000400)={0x0, 0x2f, 0x2, @tid=r4}, &(0x7f0000000440)) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7ff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x200040c0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x0, 0x4, 0x6c, {0x6c, 0x0, "524d180b34a23aa89cbf0a209e62a87a6a162db593037335ad7a9e4d25151f6eb7592ed78113538114e3d57d9af3bcd5a9a0f6ed20cd61903290befea6bc4dac7d53b5414c6388e8b2958e463ad1deff838a5e401b32d09da74f12dbd178ef5e05877338d1a1807b6c25"}}, &(0x7f0000000600)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "e0fe2d45a7820fa984da74a5141dc67155b93bb3ec60773122653f6604103cc6a08338f55d3752f18274694daa317b15746beb972c54e90bed5bd0b1a35113100e1252df997fd368fa3a9cbc02f02f47f2edeb3d9c0ae7c9b67e76ef48c36cf184909cc3ba5d285626f5cb27a8e548cb99e3682d1795faa10ac0851a5c8bde5585c5a5c2f906b8662153fb1336cf0739e8d23a663ef4bcf4bd32f8aa669ee36467fc8e26d0e84a16b4b77fc2786d07b1b54e265e5be9b015a5476b754eb39188e6aefe3d9a6cc8f93686820cf42d28246c64db08e6d6aff94aa4417db761ae2cfe5b"}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x20, 0x15, 0xa8, "4ad526d840eb7c3273a8d2f16712caa4683f842e4b49791939000be41805d946197075e80cb0a11eed20b9a529dd25df70cd3cc31cd1964e2e35b5f146f4a0e6ddc18fd92d4a7bf7b0641b5769f1b83f341353ae29a4c7e438dc79bf487e18e0df52cd7338c2b25745c2cd19b6ea382a2e99f0ceb700f8b2ab59297f6df8c4d5cfd5c10e9218f28bf275bd0b77bcac11054e0d363b604632e7fe37495a3e4b5bc3366f8ff75b38eb"}, &(0x7f0000000800)={0x0, 0xa, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xb1}, &(0x7f0000000880)={0x20, 0x81, 0x3, 'y5\"'}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "cd203f"}, &(0x7f0000000900)={0x20, 0x83, 0x1, ';'}, &(0x7f0000000940)={0x20, 0x84, 0x2, 'is'}, &(0x7f0000000980)={0x20, 0x85, 0x3, "e0811b"}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a80), 0x8000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000ac0)={'wg2\x00'}) prlimit64(r0, 0x9, &(0x7f0000000b00)={0x1, 0x7fff}, &(0x7f0000000b40)) r6 = socket$inet6(0xa, 0xa, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000b80)={'vxcan0\x00'}) syz_open_procfs$namespace(r0, &(0x7f0000000bc0)='ns/pid_for_children\x00') write$tcp_congestion(r3, &(0x7f0000000c00)='bic\x00', 0x4) [ 113.709673] audit: type=1400 audit(1745562777.395:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:32:57 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/194, 0xc2, 0x2, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/127, 0x7f, 0x1, 0x24}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}, 0x40}, @dead_binder_done, @free_buffer], 0x80, 0x0, &(0x7f00000002c0)="541391afb731a8a55ed9ee57a67edfee8c6db1e155f399e25b4587372c55ab394a996c37008f5820a3ac468b8ddc75a3561b760e9e0a6edb666b969d0c262ad5519603fa6abf7019685397b3cc5ca2b7e548aee757accde6972a6462ef89b872070a866d4cf76c23ce58d4c2131fa747bb67f4540fcb61345bca8ca12b5b71f8"}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x58, 0x0, &(0x7f0000000580)=[@acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r1}, @fd, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0xd2, 0x0, &(0x7f0000000600)="d99bfc538185849fc1160f28884603c701686d1cad8aa409c490c4388efb2a080582e93dc36ed2207ca41351aca6b25bdfaf8ef713c3455b6f68d4cb73abe6f3dda7e31ebadf7cc45e98f906a8c1190498d686db357d0ad6b81819b6867ce53321932204c3467533a74ceff06733237337ed2562bfed5624e42aea3190b8b972778b5d3ee3c9f7a319c9eeb259419224b5ed27476dde77593aa6df6dce37ada64c7c036c48ee2e7e1ee9a76efb80f25d8ee14c6494795463562406056f6a2ab7b185b96a049429c76164d9fbee96b199cef3"}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'vxcan1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4821}, 0x4045) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) r5 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x4e23, 0x80, 0x4e20, 0x1, 0x2, 0xb0, 0xa0, 0x5c, r4, r5}, {0xffffffff, 0xa1, 0x7fffffff, 0x636e, 0x7, 0x3f, 0x60, 0x8}, {0x1, 0x800, 0x7, 0x5}, 0x2, 0x6e6bb6, 0x0, 0x0, 0x3, 0x3}, {{@in6=@local, 0x4d2, 0x93}, 0x2, @in6=@private2, 0x3505, 0x4, 0x2, 0x0, 0x4}}, 0xe8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000c00)) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000c40), 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) r7 = syz_open_dev$mouse(&(0x7f0000000c80), 0x6, 0x248000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48044}, 0x8890) 06:32:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x8000, 0x14282) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc00}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) getsockname(r1, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000300)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40904}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x14, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000004c0)={{0x0, 0xfff, 0x200, 0x6, 0x10000, 0x3, 0x9, 0xfffff801, 0x25a77e74, 0xfffffff8, 0x4, 0x4, 0x1, 0x10001, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000580)={{r5, 0x5, 0x7ff, 0x7f, 0x7, 0x7dd, 0x2561, 0x4, 0x9, 0x4, 0x8, 0x4, 0x4, 0x9, 0x8000}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001580)={0x0, r6, "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", "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"}) r7 = syz_open_dev$vcsn(&(0x7f0000002580), 0x1, 0x20041) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x3f) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600), r7) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x88) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002700), 0x202141, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x34, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xd, 0x8de, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) r10 = creat(&(0x7f0000002840)='./file0\x00', 0xd4) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002880), 0x4000, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) 06:32:57 executing program 6: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x80, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x2}, @decrefs, @enter_looper, @acquire_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/108, 0x6c, 0x0, 0x18}, @fda={0x66646185, 0x4, 0x0, 0x9}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0x5, 0x0, &(0x7f00000001c0)="07ebec83a3"}) r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x40, 0x60000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@local, 0x4e23, 0xb311, 0x4e24, 0xc30, 0x2, 0x60, 0x80, 0x2c, r1}, {0x505, 0xd3, 0x100000000, 0x4, 0x1, 0x0, 0x1, 0x81}, {0x4, 0x7, 0x3, 0x7}, 0x2cdd, 0x6e6bb5, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d4, 0xff}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3507, 0x2, 0x3, 0x4, 0x2301, 0x5, 0x6a24}}, 0xe8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x0, 0x0) r3 = geteuid() r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x12, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}, {@cache_none}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '\xff\xff'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, 'batadv_slave_0\x00'}}, {@fowner_lt={'fowner<', r3}}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/dev/vcsa#\x00'}}, {@fowner_lt={'fowner<', 0xee00}}, {@permit_directio}, {@uid_lt={'uid<', r4}}]}}) ioprio_set$uid(0x3, r3, 0x2000) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}], [{@subj_type}, {@dont_appraise}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'trans=fd,'}}, {@dont_measure}]}}) r5 = socket$inet6(0xa, 0x6, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000780)={{0x0, 0x81, 0x3, 0x3, 0x8f, 0x0, 0x7, 0x7fff, 0x1, 0x7, 0x9, 0x7, 0x200, 0x3d9a356d, 0x4dd}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001780)={'TPROXY\x00'}, &(0x7f00000017c0)=0x1e) r6 = accept$inet(r0, &(0x7f0000001800)={0x2, 0x0, @dev}, &(0x7f0000001840)=0x10) mount$9p_fd(0x0, &(0x7f0000001880)='./file1\x00', &(0x7f00000018c0), 0x92000, &(0x7f0000001900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}, {@msize={'msize', 0x3d, 0x7}}, {@afid={'afid', 0x3d, 0x7e}}, {@version_L}, {@mmap}, {@cachetag={'cachetag', 0x3d, '/dev/vcsa#\x00'}}, {@access_user}], [{@dont_measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_lt={'euid<', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x62, 0x34, 0x30, 0x66, 0x39, 0x30, 0x37], 0x2d, [0x62, 0x64, 0x31, 0x33], 0x2d, [0x65, 0x39, 0x38, 0x39], 0x2d, [0x63, 0x61, 0x32, 0x31], 0x2d, [0x31, 0x30, 0x34, 0x39, 0x63, 0x62, 0x30, 0x36]}}}, {@dont_appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, '\x00'}) r7 = syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) 06:32:57 executing program 7: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x20, 0x489c, 0xff, 0xfffffffeffffffff, 0x7fff, 0x5be389ee, 0xd5, 0x40, 0x5618, 0x4, 0x1ff, 0xfd17}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x8000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2004c050) r3 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) openat$cgroup_type(r2, &(0x7f00000005c0), 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r4, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xffff8fd0, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x2f, 0x8, 0x4, 0x9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x7800, 0x8000, 0x7d2d}}) socketpair(0x2c, 0x0, 0x6, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x840, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000a00)={'nat\x00', 0x0, 0x3, 0x4b, [0x6, 0xc43, 0x2, 0x5d, 0x2, 0x20], 0x2, &(0x7f0000000940)=[{}, {}], &(0x7f0000000980)=""/75}, &(0x7f0000000a80)=0x78) [ 115.062205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.070093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.075393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.085091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.091955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.189411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.195857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.198259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.205739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.209060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.241401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.250302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.263389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.283242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.286930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.324401] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.327196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.330603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.338203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.340227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.343228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.348038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.353645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.355774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.357185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.364263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.365967] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.366976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.385714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.387254] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.397471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.397917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.407975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.412565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.414714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.432770] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.485133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.492677] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.500084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.509913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.150004] Bluetooth: hci0: command tx timeout [ 117.277512] Bluetooth: hci1: command tx timeout [ 117.341586] Bluetooth: hci2: command tx timeout [ 117.469702] Bluetooth: hci4: command tx timeout [ 117.470342] Bluetooth: hci5: command tx timeout [ 117.470389] Bluetooth: hci3: command tx timeout [ 117.596732] Bluetooth: hci7: command tx timeout [ 117.597207] Bluetooth: hci6: command tx timeout [ 119.197162] Bluetooth: hci0: command tx timeout [ 119.324781] Bluetooth: hci1: command tx timeout [ 119.388680] Bluetooth: hci2: command tx timeout [ 119.516785] Bluetooth: hci4: command tx timeout [ 119.516806] Bluetooth: hci5: command tx timeout [ 119.517888] Bluetooth: hci3: command tx timeout [ 119.644556] Bluetooth: hci6: command tx timeout [ 119.644862] Bluetooth: hci7: command tx timeout [ 121.244895] Bluetooth: hci0: command tx timeout [ 121.373650] Bluetooth: hci1: command tx timeout [ 121.436494] Bluetooth: hci2: command tx timeout [ 121.564753] Bluetooth: hci4: command tx timeout [ 121.564874] Bluetooth: hci3: command tx timeout [ 121.565626] Bluetooth: hci5: command tx timeout [ 121.692598] Bluetooth: hci7: command tx timeout [ 121.695525] Bluetooth: hci6: command tx timeout [ 123.293027] Bluetooth: hci0: command tx timeout [ 123.420616] Bluetooth: hci1: command tx timeout [ 123.485539] Bluetooth: hci2: command tx timeout [ 123.612574] Bluetooth: hci4: command tx timeout [ 123.613201] Bluetooth: hci5: command tx timeout [ 123.613354] Bluetooth: hci3: command tx timeout [ 123.740634] Bluetooth: hci6: command tx timeout [ 123.740658] Bluetooth: hci7: command tx timeout [ 177.456739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.460751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.466229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.473846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.479972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.573532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.577331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.579877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.586044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.590677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.647183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.650874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.655165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.676517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.684014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.762206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.792355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.795616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.818895] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.820941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.831154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.852023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.860968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.866547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.868022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.871831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.876473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.877987] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.881007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.900855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.908702] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.911014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.916893] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.919152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.954527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.015726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.029235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.117877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.130542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.155831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.549704] Bluetooth: hci0: command tx timeout [ 179.677619] Bluetooth: hci1: command tx timeout [ 179.741754] Bluetooth: hci2: command tx timeout [ 179.932560] Bluetooth: hci3: command tx timeout [ 179.996560] Bluetooth: hci5: command tx timeout [ 180.061815] Bluetooth: hci4: command tx timeout [ 180.125524] Bluetooth: hci6: command tx timeout [ 180.253571] Bluetooth: hci7: command tx timeout [ 181.597984] Bluetooth: hci0: command tx timeout [ 181.725799] Bluetooth: hci1: command tx timeout [ 181.789493] Bluetooth: hci2: command tx timeout [ 181.982447] Bluetooth: hci3: command tx timeout [ 182.045692] Bluetooth: hci5: command tx timeout [ 182.109532] Bluetooth: hci4: command tx timeout [ 182.173523] Bluetooth: hci6: command tx timeout [ 182.301517] Bluetooth: hci7: command tx timeout [ 183.645620] Bluetooth: hci0: command tx timeout [ 183.772544] Bluetooth: hci1: command tx timeout [ 183.837557] Bluetooth: hci2: command tx timeout [ 184.028658] Bluetooth: hci3: command tx timeout [ 184.094483] Bluetooth: hci5: command tx timeout [ 184.156710] Bluetooth: hci4: command tx timeout [ 184.221601] Bluetooth: hci6: command tx timeout [ 184.348990] Bluetooth: hci7: command tx timeout [ 185.692823] Bluetooth: hci0: command tx timeout [ 185.821737] Bluetooth: hci1: command tx timeout [ 185.885551] Bluetooth: hci2: command tx timeout [ 186.076879] Bluetooth: hci3: command tx timeout [ 186.141519] Bluetooth: hci5: command tx timeout [ 186.206066] Bluetooth: hci4: command tx timeout [ 186.268704] Bluetooth: hci6: command tx timeout [ 186.397514] Bluetooth: hci7: command tx timeout [ 239.667255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.673968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.677206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.687071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.694152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.743932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.749985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.752506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.758618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.764726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.821568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.838288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.840932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.847403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.852205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.053849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.058598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.063392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.067132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.069774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.080132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.084127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.085964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.095314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.103947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.106983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.109692] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.120506] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.126785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.132913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.135535] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.140917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.142249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.157980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.161949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.164380] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.177992] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.185098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.223300] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.228723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.756505] Bluetooth: hci0: command tx timeout [ 241.822614] Bluetooth: hci1: command tx timeout [ 241.948539] Bluetooth: hci2: command tx timeout [ 242.268544] Bluetooth: hci5: command tx timeout [ 242.268801] Bluetooth: hci3: command tx timeout [ 242.269657] Bluetooth: hci4: command tx timeout [ 242.332515] Bluetooth: hci6: command tx timeout [ 242.333261] Bluetooth: hci7: command tx timeout [ 243.804496] Bluetooth: hci0: command tx timeout [ 243.868662] Bluetooth: hci1: command tx timeout [ 243.996662] Bluetooth: hci2: command tx timeout [ 244.316594] Bluetooth: hci3: command tx timeout [ 244.317089] Bluetooth: hci4: command tx timeout [ 244.317565] Bluetooth: hci5: command tx timeout [ 244.380546] Bluetooth: hci6: command tx timeout [ 244.381022] Bluetooth: hci7: command tx timeout [ 245.854048] Bluetooth: hci0: command tx timeout [ 245.916848] Bluetooth: hci1: command tx timeout [ 246.044877] Bluetooth: hci2: command tx timeout [ 246.365055] Bluetooth: hci3: command tx timeout [ 246.366190] Bluetooth: hci5: command tx timeout [ 246.367578] Bluetooth: hci4: command tx timeout [ 246.429196] Bluetooth: hci6: command tx timeout [ 246.430112] Bluetooth: hci7: command tx timeout [ 247.900867] Bluetooth: hci0: command tx timeout [ 247.964599] Bluetooth: hci1: command tx timeout [ 248.093482] Bluetooth: hci2: command tx timeout [ 248.412512] Bluetooth: hci5: command tx timeout [ 248.412978] Bluetooth: hci4: command tx timeout [ 248.413609] Bluetooth: hci3: command tx timeout [ 248.476788] Bluetooth: hci7: command tx timeout [ 248.477263] Bluetooth: hci6: command tx timeout [ 302.589808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.598063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.603294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.614337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.630282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.831621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.833819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.838113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.847632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.858352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.963103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.976153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.987110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.994120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.007919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.011942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.015165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.028594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.028642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.055789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.087582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.091911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.097288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.117668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.126203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.134043] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.141018] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.144176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.150232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.161717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.203726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.244255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.276398] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.338282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.353875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.585130] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.592121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.596993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.621712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.627023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.668576] Bluetooth: hci0: command tx timeout [ 304.925161] Bluetooth: hci1: command tx timeout [ 305.116675] Bluetooth: hci3: command tx timeout [ 305.244634] Bluetooth: hci2: command tx timeout [ 305.244670] Bluetooth: hci4: command tx timeout [ 305.245872] Bluetooth: hci5: command tx timeout [ 305.566640] Bluetooth: hci6: command tx timeout [ 305.756758] Bluetooth: hci7: command tx timeout [ 306.716691] Bluetooth: hci0: command tx timeout [ 306.972510] Bluetooth: hci1: command tx timeout [ 307.165776] Bluetooth: hci3: command tx timeout [ 307.292604] Bluetooth: hci5: command tx timeout [ 307.293114] Bluetooth: hci4: command tx timeout [ 307.293146] Bluetooth: hci2: command tx timeout [ 307.612541] Bluetooth: hci6: command tx timeout [ 307.805656] Bluetooth: hci7: command tx timeout [ 308.765651] Bluetooth: hci0: command tx timeout [ 309.020514] Bluetooth: hci1: command tx timeout [ 309.214576] Bluetooth: hci3: command tx timeout [ 309.340603] Bluetooth: hci5: command tx timeout [ 309.340769] Bluetooth: hci2: command tx timeout [ 309.341032] Bluetooth: hci4: command tx timeout [ 309.662469] Bluetooth: hci6: command tx timeout [ 309.852475] Bluetooth: hci7: command tx timeout [ 310.812696] Bluetooth: hci0: command tx timeout [ 311.068575] Bluetooth: hci1: command tx timeout [ 311.260794] Bluetooth: hci3: command tx timeout [ 311.388735] Bluetooth: hci4: command tx timeout [ 311.389803] Bluetooth: hci2: command tx timeout [ 311.390026] Bluetooth: hci5: command tx timeout [ 311.708760] Bluetooth: hci6: command tx timeout [ 311.902562] Bluetooth: hci7: command tx timeout [ 365.297099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.302189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.308104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.322290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.334287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.426012] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.433050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.437011] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.462047] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.474292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.562380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.576682] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.606236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.633137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.644079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.707354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.711232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.719100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.733970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.748950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.765247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.775742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.788913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.804201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.808267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.880944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.890977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.927208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.939889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.952910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.988927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.991092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.002345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.005666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.013082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.013258] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.031951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.039051] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.049708] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.063338] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.388879] Bluetooth: hci0: command tx timeout [ 367.516502] Bluetooth: hci1: command tx timeout [ 367.772500] Bluetooth: hci2: command tx timeout [ 367.964611] Bluetooth: hci4: command tx timeout [ 367.965267] Bluetooth: hci3: command tx timeout [ 368.028535] Bluetooth: hci5: command tx timeout [ 368.157708] Bluetooth: hci6: command tx timeout [ 368.158898] Bluetooth: hci7: command tx timeout [ 369.436804] Bluetooth: hci0: command tx timeout [ 369.565005] Bluetooth: hci1: command tx timeout [ 369.820540] Bluetooth: hci2: command tx timeout [ 370.013529] Bluetooth: hci3: command tx timeout [ 370.014161] Bluetooth: hci4: command tx timeout [ 370.076598] Bluetooth: hci5: command tx timeout [ 370.204596] Bluetooth: hci7: command tx timeout [ 370.205562] Bluetooth: hci6: command tx timeout [ 371.484626] Bluetooth: hci0: command tx timeout [ 371.613572] Bluetooth: hci1: command tx timeout [ 371.868594] Bluetooth: hci2: command tx timeout [ 372.060619] Bluetooth: hci4: command tx timeout [ 372.061310] Bluetooth: hci3: command tx timeout [ 372.124749] Bluetooth: hci5: command tx timeout [ 372.252670] Bluetooth: hci7: command tx timeout [ 372.253355] Bluetooth: hci6: command tx timeout [ 373.534454] Bluetooth: hci0: command tx timeout [ 373.660501] Bluetooth: hci1: command tx timeout [ 373.916745] Bluetooth: hci2: command tx timeout [ 374.108530] Bluetooth: hci4: command tx timeout [ 374.109016] Bluetooth: hci3: command tx timeout [ 374.174472] Bluetooth: hci5: command tx timeout [ 374.300683] Bluetooth: hci7: command tx timeout [ 374.301157] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:38:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880325bf578 RCX=ffffffff867f39ec RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff85c1bac0 RSP=ffff8880325bf388 R8 =ffffffff867f39f0 R9 =ffff8880325bf480 R10=000000000003b0c2 R11=0000000000012abc R12=ffffffff81350bc2 R13=0000000000000206 R14=ffff888016669bc0 R15=ffff8880325bf440 RIP=ffffffff81518188 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe1a1c228e0 CR3=0000000016842000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010000 RBX=0000000000000001 RCX=0000000000000009 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf31850 RBP=ffffffff8640ecb8 RSP=ffff88806cf08bb0 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=ffffffff8640ec17 R11=0000000000098c7d R12=ffff88806cf37d00 R13=0000000000000000 R14=ffffffff8640f5a4 R15=ffff8880e574b000 RIP=ffffffff84b07600 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056465cdbc080 CR3=0000000029e30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000