Warning: Permanently added '[localhost]:9771' (ECDSA) to the list of known hosts. 2025/06/08 01:17:35 fuzzer started 2025/06/08 01:17:35 dialing manager at localhost:40003 syzkaller login: [ 94.181933] cgroup: Unknown subsys name 'net' [ 94.317142] cgroup: Unknown subsys name 'cpuset' [ 94.362269] cgroup: Unknown subsys name 'rlimit' 2025/06/08 01:17:52 syscalls: 205 2025/06/08 01:17:52 code coverage: enabled 2025/06/08 01:17:52 comparison tracing: enabled 2025/06/08 01:17:52 extra coverage: enabled 2025/06/08 01:17:52 setuid sandbox: enabled 2025/06/08 01:17:52 namespace sandbox: enabled 2025/06/08 01:17:52 Android sandbox: enabled 2025/06/08 01:17:52 fault injection: enabled 2025/06/08 01:17:52 leak checking: enabled 2025/06/08 01:17:52 net packet injection: enabled 2025/06/08 01:17:52 net device setup: enabled 2025/06/08 01:17:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 01:17:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 01:17:52 USB emulation: enabled 2025/06/08 01:17:52 hci packet injection: enabled 2025/06/08 01:17:52 wifi device emulation: enabled 2025/06/08 01:17:52 802.15.4 emulation: enabled 2025/06/08 01:17:53 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 01:17:55 starting 8 fuzzer processes 01:17:55 executing program 0: r0 = geteuid() r1 = getuid() geteuid() syz_io_uring_setup(0x3d55, &(0x7f0000000000)={0x0, 0x4755, 0x0, 0x1, 0x163}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x8, 0x1, 0x0, 0xd4ae, 0x0, 0x1}, 0x6) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x7, &(0x7f0000002680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/28, 0x1c}, {&(0x7f0000002780)=""/59, 0x3b}], 0x2, &(0x7f0000002800)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002880), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002900)=""/95, 0x5f}, {&(0x7f0000002980)=""/100, 0x64}, {&(0x7f0000002a00)=""/94, 0x5e}, {&(0x7f0000002a80)=""/146, 0x92}, {&(0x7f0000002b40)=""/159, 0x9f}, {&(0x7f0000002c00)=""/121, 0x79}, {&(0x7f0000002c80)=""/252, 0xfc}, {&(0x7f0000002d80)=""/32, 0x20}], 0x8, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x3, 0x10040, &(0x7f0000003040)={0x77359400}) ioprio_set$uid(0x3, r6, 0x0) r10 = msgget$private(0x0, 0x8) r11 = getuid() r12 = getpid() msgctl$IPC_SET(r10, 0x1, &(0x7f0000004600)={{0x0, r11, r5, r1, 0xee01, 0x0, 0x41}, 0x0, 0x0, 0x4f, 0x80000000, 0x7, 0x9f6, 0x3, 0x7, 0x4, 0x40ef, r12, r4}) msgget(0x1, 0x26) r13 = msgget$private(0x0, 0x2) getresuid(&(0x7f0000004680), &(0x7f00000046c0)=0x0, &(0x7f0000004700)) getresuid(&(0x7f0000004740), &(0x7f0000004780), &(0x7f00000047c0)) ioprio_set$uid(0x3, 0xee01, 0x6000) r15 = clone3(&(0x7f0000004a40)={0x40100100, &(0x7f0000004800), &(0x7f0000004840), &(0x7f0000004880), {0x35}, &(0x7f00000048c0)=""/35, 0x23, &(0x7f0000004900)=""/229, &(0x7f0000004a00)=[r7, r7, r9, r9, r7], 0x5, {r3}}, 0x58) msgctl$IPC_SET(r13, 0x1, &(0x7f0000004ac0)={{0x1, r14, r8, r0, r8, 0x4, 0x4}, 0x0, 0x0, 0x8001, 0x4, 0xffffffffffffcaf8, 0x5, 0x7, 0x200, 0x6, 0x100, r15, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) 01:17:55 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xcf9, 0x4, 0x1, 0x1}, 0x8) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x8) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x1}, 0x8) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000140)={'\x00', 0x9, 0x1, 0x4}) pipe(&(0x7f00000001c0)) r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x43, 0x40) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000240)=""/4096) r1 = syz_open_dev$vcsu(&(0x7f0000001240), 0x3aac, 0x0) recvmmsg$unix(r1, &(0x7f0000002e80)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/184, 0xb8}, {&(0x7f00000013c0)=""/206, 0xce}], 0x2, &(0x7f0000001500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/42, 0x2a}, {&(0x7f0000001680)=""/26, 0x1a}], 0x2, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001800)=""/177, 0xb1}, {&(0x7f00000018c0)=""/184, 0xb8}, {&(0x7f0000001980)=""/65, 0x41}, {&(0x7f0000001a00)=""/200, 0xc8}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/31, 0x1f}, {&(0x7f0000002b40)=""/91, 0x5b}, {&(0x7f0000002bc0)=""/129, 0x81}, {&(0x7f0000002c80)=""/123, 0x7b}, {&(0x7f0000002d00)=""/102, 0x66}], 0xa, &(0x7f0000002e40)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x40002001, &(0x7f0000002f40)) read$rfkill(r4, &(0x7f0000002f80), 0x8) pidfd_send_signal(r2, 0x27, &(0x7f0000002fc0)={0xe, 0x1, 0x40}, 0x0) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000003040)) syz_io_uring_setup(0xc77, &(0x7f0000003080)={0x0, 0x3db4, 0x2, 0x3, 0x18, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000003100)=0x0, &(0x7f0000003140)) syz_io_uring_submit(r5, 0x0, &(0x7f0000003180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000031c0), 0x800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x50, r6, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000003200), 0x4, 0x100) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000003240)={0x11}) 01:17:55 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="1e05caefe85587096f960c8f75b4acc6aa24921159afd5a531a06c4aa392b3ab831b5e784a9b0612ac1410203044", 0x2e, r0}, 0x68) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0x2, 0x3, 0x8, 0x0, 0x80}, 0x100, 0x8, 'id1\x00', 'timer0\x00', 0x0, 0x7b, 0x100000000, 0x100, 0x2}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x10001, 0x22fe, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0x4c}}, 0x898) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000340)) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = syz_open_dev$hidraw(&(0x7f0000000480), 0x1, 0x3c880) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000004c0)={0x4, "6e06fb815b64d3da0cbd14b5d234c105dac655844f5d90b654d0bfac056e31ddb1d1a18d97cec8fd4a80c99bf0e733b25414cb27c11a8cdef414637d74adf9ce"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000540)="8b4986f927e52d1a12c6a36fdf98d0f0cb9a9b9473f97eb6263dbbbc5cc7231416021b6fc32d4692002521a2109512fb66ee5f14bf4ab0e4c63f18298c49d01bf463df6d4f3ad038ff831628e516858610c22a93ffe835e758e32ead29131d7effc823aa0877d4c812", 0x69, r3}, 0x68) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x3b3101) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x1f, 0x10100) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x29, 0x81, 0x1f, 0x100, 0x11, @empty, @mcast2, 0x40, 0x8, 0x8de3, 0x4}}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000041}, 0x40) syz_open_dev$hidraw(&(0x7f00000009c0), 0x100, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000a00)={{0x1, 0x1, 0x6b210534, 0x1, 0x7e8}, 0x2, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x2, 0x401, 0xe1, 0x8}) [ 113.439893] audit: type=1400 audit(1749345475.236:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:17:55 executing program 3: mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/229) mlock(&(0x7f0000003000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000003000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000004000/0x1000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/40, 0x28, 0x1, &(0x7f0000000140)=""/163, 0xa3}, &(0x7f0000000240)=0x40) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000280)=""/73) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r1, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000340)=""/136) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000400)=0x400) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x81010, 0xffffffffffffffff, 0x8000000) socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x1, 0x0, 0x0, 0x8, &(0x7f0000000440)) sendmsg$802154_raw(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000600)={&(0x7f0000000540)="80e7c72f22c2e82a1aaaebaae8ca8b77a7f4b4524d4109d1655a8521f2c91de0b481ca56e29530017ddf19b2952d5b3e7bc1d57ecba12804fe8bb388603628c2d22ff2fe675a7bc43f55f20a17ec5665c19053fea452d573931c2c89c6ab5f9cfca5eab542d3e7e0cef5ff6a7982737522e5455099a42bfbe9735c958f73ad81324771c739e4f38e5e05b78a2a2b9888de2f2cdcd74e5a1ca82f1b12437a146414bc5b6d5f8f0ad2063d50344a00cd9703ae1dcd77", 0xb5}}, 0x48000) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x6) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000680)=""/134) 01:17:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)="f64c65c672a8e77e503203bfdcd33e3bce9ba9c71216b9eda270130a9c2de871d8ff257c313a9a31eed24817694510d0c27f392a5292ace761079e236b4d4b2381694dd2adb207fa3436e86708016e362b4b17cac97e3b23254692ff090887dcfad2e95ffda68debf40ca8fd5d6dd0f6c60ceeb0e291c27eddc443ca34e83f7f35de2a168d091812441de88e1ad2", 0x8e, r0}, 0x68) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000006, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0xa, 0x40, 0x0, 0x1, 0x1, 0x1}, 0x10001) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000280)={'veth0_vlan\x00', @ifru_addrs=@ethernet}) r3 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x1, 0x400100) read$hidraw(r3, &(0x7f0000000300)=""/194, 0xc2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in=@loopback}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) read$hidraw(r3, &(0x7f0000000540)=""/64, 0x40) syz_open_dev$vcsa(&(0x7f0000000580), 0xeb0, 0x124000) accept(r0, &(0x7f00000005c0)=@nfc, &(0x7f0000000640)=0x80) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x14) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x81, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$rfkill(r5, &(0x7f0000000700), 0x8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000780)={0x2, &(0x7f0000000740)=[{0x7, 0x1, 0x0, 0x5}, {0x2, 0xa1, 0x40, 0x3}]}) 01:17:55 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0xc0000) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x4010, r0, 0x7a1dc0f9) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7fffffff, 0x4a0e0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x1ebd}, 0xf) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000100)={0x55d, "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"}) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000680)={0x3, 0x1f}) sendmsg$802154_raw(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000780)={&(0x7f0000000700)="2b87576053380f28e0ab1c6ed38aed85fa823a7213f2630c23deee661139cc12f65a347ee25501f4f7024160947fd426d1331c60b0a3d88a8ca915ed6e16b1c4102843a47bdde771f5e5473605093145d46118e6176e2ea741f15fe0e86042706b22ff2495738df2b3a04b16a6f1", 0x6e}, 0x1, 0x0, 0x0, 0x4004010}, 0x8014) recvmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/179, 0xb3}, {&(0x7f00000018c0)=""/136, 0x88}, {&(0x7f0000001980)=""/233, 0xe9}], 0x4}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/99, 0x63}, {&(0x7f0000001bc0)=""/232, 0xe8}, {&(0x7f0000001cc0)=""/79, 0x4f}], 0x3, &(0x7f0000001d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f80)=""/157, 0x9d}], 0x1}}, {{&(0x7f0000002080), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000002100)=""/238, 0xee}, {&(0x7f0000002200)=""/40, 0x28}, {&(0x7f0000002240)=""/49, 0x31}, {&(0x7f0000002280)=""/92, 0x5c}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/147, 0x93}], 0x6}}, {{&(0x7f0000003440)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/64, 0x40}], 0x1, &(0x7f0000003540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x5, 0x40002101, &(0x7f00000036c0)={0x0, 0x989680}) write$rfkill(r4, &(0x7f0000003700)={0x7f, 0x2, 0x1}, 0x8) r5 = syz_open_dev$vcsu(&(0x7f0000003740), 0xfffffffffffffff7, 0x10000) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000003780)={0x29f}, 0x4) recvmmsg$unix(r3, &(0x7f0000005400)=[{{&(0x7f00000037c0), 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003840)=""/174, 0xae}, {&(0x7f0000003900)=""/13, 0xd}, {&(0x7f0000003940)=""/158, 0x9e}, {&(0x7f0000003a00)=""/137, 0x89}, {&(0x7f0000003ac0)=""/252, 0xfc}], 0x5, &(0x7f0000003c40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003dc0)=""/40, 0x28}, {&(0x7f0000003e00)=""/196, 0xc4}, {&(0x7f0000003f00)=""/48, 0x30}], 0x3, &(0x7f0000003f80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003fc0)=@abs, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004040)=""/206, 0xce}, {&(0x7f0000004140)=""/144, 0x90}, {&(0x7f0000004200)=""/92, 0x5c}, {&(0x7f0000004280)=""/78, 0x4e}], 0x4, &(0x7f0000004340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000043c0), 0x6e, &(0x7f0000004780)=[{&(0x7f0000004440)=""/225, 0xe1}, {&(0x7f0000004540)=""/50, 0x32}, {&(0x7f0000004580)=""/222, 0xde}, {&(0x7f0000004680)=""/43, 0x2b}, {&(0x7f00000046c0)=""/139, 0x8b}], 0x5, &(0x7f0000004800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000004940), 0x6e, &(0x7f0000004b80)=[{&(0x7f00000049c0)=""/246, 0xf6}, {&(0x7f0000004ac0)=""/130, 0x82}], 0x2, &(0x7f0000004bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004cc0)=""/91, 0x5b}, {&(0x7f0000004d40)=""/172, 0xac}, {&(0x7f0000004e00)=""/68, 0x44}, {&(0x7f0000004e80)=""/189, 0xbd}, {&(0x7f0000004f40)=""/110, 0x6e}, {&(0x7f0000004fc0)}, {&(0x7f0000005000)=""/126, 0x7e}, {&(0x7f0000005080)=""/76, 0x4c}, {&(0x7f0000005100)=""/48, 0x30}, {&(0x7f0000005140)=""/67, 0x43}], 0xa, &(0x7f0000005280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}], 0x6, 0x2, &(0x7f0000005580)={0x0, 0x3938700}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000055c0)) r7 = syz_open_dev$vcsa(&(0x7f0000005600), 0x10001, 0x101000) write$P9_RREADLINK(r7, &(0x7f0000005640)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) pipe(&(0x7f0000005680)) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000056c0)={{{@in=@empty, @in=@empty}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000057c0)=0xe8) 01:17:55 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x1, 0x2, 0x6}, 0xb039}}, 0x18) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2080, 0x0) io_uring_setup(0x124c, &(0x7f0000000140)={0x0, 0x5b94, 0x10, 0x0, 0x90}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$P9_RAUTH(r2, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8, 0x2, 0x7}}, 0x14) syz_io_uring_setup(0x76d4, &(0x7f0000000200)={0x0, 0x5454, 0x20, 0x3, 0x142}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x0, 0x204400) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000340)) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f00000003c0)={'\x00', 0x40, 0x1, 0x3f}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000580)=""/16, 0x10}], 0x2}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/3, 0x3}, {&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f0000000900)=""/215, 0xd7}], 0x5, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000d80)=""/115, 0x73}, {&(0x7f0000000e00)=""/2, 0x2}], 0x4, &(0x7f0000000e80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000f80)=""/109, 0x6d}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/175, 0xaf}], 0x3, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002180)=@abs, 0x6e, &(0x7f0000002280)=[{&(0x7f0000002200)=""/110, 0x6e}], 0x1}}, {{&(0x7f00000022c0), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002340)=""/30, 0x1e}, {&(0x7f0000002380)=""/253, 0xfd}, {&(0x7f0000002480)=""/74, 0x4a}], 0x3, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x6, 0x40, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x9, 0x1, 0x0, 0x4, 0x810a0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb3, 0x2, @perf_bp={&(0x7f0000000440), 0xc}, 0x1811c, 0x6, 0x5, 0x2, 0x1f, 0x9, 0xf2, 0x0, 0x9}, r6, 0x3, r1, 0x3) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000002780)={{0x8, 0x8001}, {0x1000, 0x1000}, 0x7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f00000027c0)={0x9}) read$ptp(r4, &(0x7f0000002c80)=""/188, 0xbc) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000002d40)={'\x00', 0x9, 0x0, 0xcd31}) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000002dc0)={'\x00', 0x1b3, 0x3, 0x5ff6}) 01:17:55 executing program 7: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) r0 = io_uring_setup(0x3364, &(0x7f00000000c0)={0x0, 0x1bd5, 0x8, 0x0, 0x314}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r0, 0x3, 0x0, 0x0, 0x5}, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0x8000000) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$sock_ifreq(r1, 0x891c, &(0x7f00000001c0)={'sit0\x00', @ifru_flags}) r2 = io_uring_setup(0x6eb7, &(0x7f0000000200)={0x0, 0x979f, 0x8, 0x3, 0x1, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r2, 0x8000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14, 0x67, 0x2, {0x0, 0x3, 0x2}}, 0x14) pipe2$9p(&(0x7f00000002c0), 0x80000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4, 0x2000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x430dc0, 0x0) write$P9_RWALK(r3, &(0x7f0000000340)={0x3d, 0x6f, 0x2, {0x4, [{0x20, 0x3}, {0x2, 0x2, 0x1}, {0x8, 0x3, 0x3}, {0x1, 0x3}]}}, 0x3d) r4 = pidfd_getfd(r3, r2, 0x0) bind$802154_raw(r4, &(0x7f0000000380)={0x24, @none={0x0, 0x2}}, 0x14) r5 = msgget(0x0, 0x220) msgctl$IPC_SET(r5, 0x1, &(0x7f00000081c0)={{0x0, 0xffffffffffffffff, 0x0, 0xee01, 0x0, 0x60, 0x8}, 0x0, 0x0, 0x80000001, 0x4, 0x1, 0x81, 0xe8e1, 0x8, 0x8001, 0x5, 0xffffffffffffffff}) [ 114.691078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.694221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.696449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.703766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.708099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.877521] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.882308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.885508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.890584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.893155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.916860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.919961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.921523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.936120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.942426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.958178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.961519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.965145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.983260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.995125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.003462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.007031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.009332] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.013955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.015960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.056408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.066178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.072279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.074189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.078318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.081433] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.090093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.103566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.109377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.134103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.135209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.139569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.145846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.146585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.170113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.782937] Bluetooth: hci0: command tx timeout [ 116.972717] Bluetooth: hci1: command tx timeout [ 116.972738] Bluetooth: hci2: command tx timeout [ 117.098837] Bluetooth: hci3: command tx timeout [ 117.098881] Bluetooth: hci6: command tx timeout [ 117.227368] Bluetooth: hci7: command tx timeout [ 117.227427] Bluetooth: hci4: command tx timeout [ 117.228051] Bluetooth: hci5: command tx timeout [ 118.827707] Bluetooth: hci0: command tx timeout [ 119.018755] Bluetooth: hci1: command tx timeout [ 119.019968] Bluetooth: hci2: command tx timeout [ 119.146748] Bluetooth: hci6: command tx timeout [ 119.148054] Bluetooth: hci3: command tx timeout [ 119.274861] Bluetooth: hci7: command tx timeout [ 119.275698] Bluetooth: hci5: command tx timeout [ 119.275753] Bluetooth: hci4: command tx timeout [ 120.875902] Bluetooth: hci0: command tx timeout [ 121.068018] Bluetooth: hci2: command tx timeout [ 121.068055] Bluetooth: hci1: command tx timeout [ 121.197687] Bluetooth: hci3: command tx timeout [ 121.198173] Bluetooth: hci6: command tx timeout [ 121.322871] Bluetooth: hci4: command tx timeout [ 121.322928] Bluetooth: hci7: command tx timeout [ 121.323388] Bluetooth: hci5: command tx timeout [ 122.922840] Bluetooth: hci0: command tx timeout [ 123.114754] Bluetooth: hci2: command tx timeout [ 123.115250] Bluetooth: hci1: command tx timeout [ 123.243419] Bluetooth: hci3: command tx timeout [ 123.244043] Bluetooth: hci6: command tx timeout [ 123.370824] Bluetooth: hci7: command tx timeout [ 123.371328] Bluetooth: hci4: command tx timeout [ 123.371367] Bluetooth: hci5: command tx timeout [ 177.031471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.035271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.038425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.046314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.052855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.154200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.160292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.162878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.170072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.173915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.226851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.232901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.242457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.246126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.250613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.256318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.269145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.274608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.281255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.297933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.398951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.411329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.415366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.422574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.426601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.665239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.675217] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.686241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.693535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.700364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.705100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.711013] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.717236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.723154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.793949] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.794080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.794719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.799902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.821382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.823073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.116185] Bluetooth: hci0: command tx timeout [ 179.243946] Bluetooth: hci1: command tx timeout [ 179.370752] Bluetooth: hci2: command tx timeout [ 179.563727] Bluetooth: hci3: command tx timeout [ 179.690891] Bluetooth: hci4: command tx timeout [ 180.011932] Bluetooth: hci6: command tx timeout [ 180.012846] Bluetooth: hci7: command tx timeout [ 180.076105] Bluetooth: hci5: command tx timeout [ 181.163374] Bluetooth: hci0: command tx timeout [ 181.291726] Bluetooth: hci1: command tx timeout [ 181.420093] Bluetooth: hci2: command tx timeout [ 181.611707] Bluetooth: hci3: command tx timeout [ 181.739685] Bluetooth: hci4: command tx timeout [ 182.058941] Bluetooth: hci6: command tx timeout [ 182.059436] Bluetooth: hci7: command tx timeout [ 182.123937] Bluetooth: hci5: command tx timeout [ 183.212773] Bluetooth: hci0: command tx timeout [ 183.338709] Bluetooth: hci1: command tx timeout [ 183.467731] Bluetooth: hci2: command tx timeout [ 183.659712] Bluetooth: hci3: command tx timeout [ 183.787703] Bluetooth: hci4: command tx timeout [ 184.106842] Bluetooth: hci6: command tx timeout [ 184.107343] Bluetooth: hci7: command tx timeout [ 184.170733] Bluetooth: hci5: command tx timeout [ 185.258699] Bluetooth: hci0: command tx timeout [ 185.387040] Bluetooth: hci1: command tx timeout [ 185.515670] Bluetooth: hci2: command tx timeout [ 185.706864] Bluetooth: hci3: command tx timeout [ 185.834694] Bluetooth: hci4: command tx timeout [ 186.155114] Bluetooth: hci7: command tx timeout [ 186.155624] Bluetooth: hci6: command tx timeout [ 186.219105] Bluetooth: hci5: command tx timeout [ 239.422471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.425544] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.429395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.434885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.439482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.484387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.490171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.497211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.505473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.511000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.582528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.600463] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.628511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.631185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.649821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.662187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.667371] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.675154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.684044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.687891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.841739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.845843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.855693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.860786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.863987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.866329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.871547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.875229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.903552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.908202] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.911195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.916733] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.922206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.939195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.973145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.036089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.047008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.075271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.133741] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.146964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.514751] Bluetooth: hci0: command tx timeout [ 241.578767] Bluetooth: hci1: command tx timeout [ 241.707280] Bluetooth: hci3: command tx timeout [ 241.836208] Bluetooth: hci2: command tx timeout [ 241.898923] Bluetooth: hci7: command tx timeout [ 242.091853] Bluetooth: hci4: command tx timeout [ 242.091886] Bluetooth: hci5: command tx timeout [ 242.282734] Bluetooth: hci6: command tx timeout [ 243.562817] Bluetooth: hci0: command tx timeout [ 243.627010] Bluetooth: hci1: command tx timeout [ 243.756670] Bluetooth: hci3: command tx timeout [ 243.882781] Bluetooth: hci2: command tx timeout [ 243.946861] Bluetooth: hci7: command tx timeout [ 244.138855] Bluetooth: hci5: command tx timeout [ 244.139335] Bluetooth: hci4: command tx timeout [ 244.331660] Bluetooth: hci6: command tx timeout [ 245.610705] Bluetooth: hci0: command tx timeout [ 245.675761] Bluetooth: hci1: command tx timeout [ 245.803015] Bluetooth: hci3: command tx timeout [ 245.930871] Bluetooth: hci2: command tx timeout [ 245.995716] Bluetooth: hci7: command tx timeout [ 246.186982] Bluetooth: hci4: command tx timeout [ 246.190006] Bluetooth: hci5: command tx timeout [ 246.380211] Bluetooth: hci6: command tx timeout [ 247.659205] Bluetooth: hci0: command tx timeout [ 247.722892] Bluetooth: hci1: command tx timeout [ 247.850728] Bluetooth: hci3: command tx timeout [ 247.978713] Bluetooth: hci2: command tx timeout [ 248.043831] Bluetooth: hci7: command tx timeout [ 248.234975] Bluetooth: hci5: command tx timeout [ 248.235023] Bluetooth: hci4: command tx timeout [ 248.428924] Bluetooth: hci6: command tx timeout [ 301.826328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.831837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.835032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.844736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.851440] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.084868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.088494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.092535] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.102362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.113570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.232291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.240067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.245160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.265544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.276214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.352271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.360406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.363253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.367611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.371011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.375334] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.379158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.384603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.387455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.393513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.396140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.402208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.402854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.418249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.431165] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.439024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.446118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.472202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.474216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.479929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.482879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.494148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.505081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.510438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.534169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.917716] Bluetooth: hci0: command tx timeout [ 304.170969] Bluetooth: hci1: command tx timeout [ 304.363969] Bluetooth: hci2: command tx timeout [ 304.490872] Bluetooth: hci5: command tx timeout [ 304.811334] Bluetooth: hci6: command tx timeout [ 304.811362] Bluetooth: hci3: command tx timeout [ 304.874724] Bluetooth: hci4: command tx timeout [ 305.068386] Bluetooth: hci7: command tx timeout [ 305.963672] Bluetooth: hci0: command tx timeout [ 306.219107] Bluetooth: hci1: command tx timeout [ 306.411126] Bluetooth: hci2: command tx timeout [ 306.539191] Bluetooth: hci5: command tx timeout [ 306.859739] Bluetooth: hci6: command tx timeout [ 306.859866] Bluetooth: hci3: command tx timeout [ 306.922983] Bluetooth: hci4: command tx timeout [ 307.114814] Bluetooth: hci7: command tx timeout [ 308.012549] Bluetooth: hci0: command tx timeout [ 308.267833] Bluetooth: hci1: command tx timeout [ 308.458737] Bluetooth: hci2: command tx timeout [ 308.588664] Bluetooth: hci5: command tx timeout [ 308.906956] Bluetooth: hci3: command tx timeout [ 308.907140] Bluetooth: hci6: command tx timeout [ 308.970847] Bluetooth: hci4: command tx timeout [ 309.162765] Bluetooth: hci7: command tx timeout [ 310.060849] Bluetooth: hci0: command tx timeout [ 310.315698] Bluetooth: hci1: command tx timeout [ 310.509703] Bluetooth: hci2: command tx timeout [ 310.634949] Bluetooth: hci5: command tx timeout [ 310.954896] Bluetooth: hci6: command tx timeout [ 310.955871] Bluetooth: hci3: command tx timeout [ 311.018718] Bluetooth: hci4: command tx timeout [ 311.210725] Bluetooth: hci7: command tx timeout [ 364.355063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.358502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.366026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.378800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.387211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.488224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.492888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.497225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.504975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.515263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.633193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.636226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.640280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.641590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.644173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.656436] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.658525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.663718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.669550] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.677940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.773908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.796848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.809089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.818225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.822604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.828565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.829937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.837193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.841143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.850256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.874122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.879291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.885050] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.888488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.910603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.919152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.938491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.950106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.964148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.971210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.442713] Bluetooth: hci0: command tx timeout [ 366.571706] Bluetooth: hci1: command tx timeout [ 366.762753] Bluetooth: hci3: command tx timeout [ 366.762785] Bluetooth: hci2: command tx timeout [ 366.954848] Bluetooth: hci5: command tx timeout [ 367.082759] Bluetooth: hci6: command tx timeout [ 367.083718] Bluetooth: hci7: command tx timeout [ 367.083761] Bluetooth: hci4: command tx timeout [ 368.490729] Bluetooth: hci0: command tx timeout [ 368.619730] Bluetooth: hci1: command tx timeout [ 368.810776] Bluetooth: hci3: command tx timeout [ 368.810894] Bluetooth: hci2: command tx timeout [ 369.003765] Bluetooth: hci5: command tx timeout [ 369.131030] Bluetooth: hci4: command tx timeout [ 369.131065] Bluetooth: hci7: command tx timeout [ 369.131523] Bluetooth: hci6: command tx timeout [ 370.539018] Bluetooth: hci0: command tx timeout [ 370.666981] Bluetooth: hci1: command tx timeout [ 370.858718] Bluetooth: hci2: command tx timeout [ 370.859722] Bluetooth: hci3: command tx timeout [ 371.050867] Bluetooth: hci5: command tx timeout [ 371.178878] Bluetooth: hci6: command tx timeout [ 371.182927] Bluetooth: hci7: command tx timeout [ 371.182952] Bluetooth: hci4: command tx timeout [ 372.587014] Bluetooth: hci0: command tx timeout [ 372.714702] Bluetooth: hci1: command tx timeout [ 372.906861] Bluetooth: hci3: command tx timeout [ 372.906984] Bluetooth: hci2: command tx timeout [ 373.098708] Bluetooth: hci5: command tx timeout [ 373.226942] Bluetooth: hci7: command tx timeout [ 373.227057] Bluetooth: hci4: command tx timeout [ 373.227434] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:23:03 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880173b7d68 RCX=ffff8880173b7d68 RDX=ffff88800f9a1b80 RSI=00007ff52415f000 RDI=ffff88800f931480 RBP=ffff8880173b7de8 RSP=ffff8880173b7cc8 R8 =ffff8880173b7de8 R9 =0000000000000000 R10=0000000031ad9007 R11=0000000000000001 R12=00007ff52415f000 R13=ffff8880312b3900 R14=0000000031ad9007 R15=ffff8880308eaea0 RIP=ffffffff81a11c6e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff523c9d540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff52415f008 CR3=000000000f161000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888034bc7c40 RCX=ffffffff818ca887 RDX=fffff9400003a719 RSI=0000000000000008 RDI=ffffea00001d38c0 RBP=ffffea00001d38c0 RSP=ffff888034bc7b20 R8 =0000000000000000 R9 =fffff9400003a718 R10=ffffea00001d38c7 R11=0000000000000001 R12=0000000000000160 R13=dffffc0000000000 R14=0000000000000000 R15=ffff888034bc7d88 RIP=ffffffff818ca887 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3604cf6540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3604e7e8f0 CR3=0000000029f66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000