Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:59309' (ECDSA) to the list of known hosts. 2024/10/23 08:28:26 fuzzer started 2024/10/23 08:28:27 dialing manager at localhost:45639 syzkaller login: [ 72.423437] cgroup: Unknown subsys name 'net' [ 72.525761] cgroup: Unknown subsys name 'cpuset' [ 72.585165] cgroup: Unknown subsys name 'rlimit' 2024/10/23 08:28:44 syscalls: 207 2024/10/23 08:28:44 code coverage: enabled 2024/10/23 08:28:44 comparison tracing: enabled 2024/10/23 08:28:44 extra coverage: enabled 2024/10/23 08:28:44 setuid sandbox: enabled 2024/10/23 08:28:44 namespace sandbox: enabled 2024/10/23 08:28:44 Android sandbox: enabled 2024/10/23 08:28:44 fault injection: enabled 2024/10/23 08:28:44 leak checking: enabled 2024/10/23 08:28:44 net packet injection: enabled 2024/10/23 08:28:44 net device setup: enabled 2024/10/23 08:28:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/23 08:28:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/23 08:28:44 USB emulation: enabled 2024/10/23 08:28:44 hci packet injection: enabled 2024/10/23 08:28:44 wifi device emulation: enabled 2024/10/23 08:28:44 802.15.4 emulation: enabled 2024/10/23 08:28:44 fetching corpus: 0, signal 0/0 (executing program) 2024/10/23 08:28:46 starting 8 fuzzer processes 08:28:46 executing program 0: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0xc014) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r2, 0x2f, 0xf7, 0x26, 0x998c, 0x36, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x40, 0xd3, 0x8b6e}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe0, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) r7 = accept(r1, &(0x7f0000000600)=@qipcrtr, &(0x7f0000000680)=0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x3, 0x8, 0x802, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept(r0, &(0x7f00000007c0)=@nl=@proc, &(0x7f0000000840)=0x80) r8 = accept4$packet(r1, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000900)={r4, 0x1, 0x6, @multicast}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r7) accept4$packet(r7, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a00)=0x14, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000c40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x184, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x184}}, 0x90) openat2$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x2, 0x170, 0x12}, 0x18) recvfrom$packet(r8, &(0x7f0000000d00)=""/14, 0xe, 0x101, &(0x7f0000000e00)={0x11, 0x6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 08:28:46 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = accept(r0, 0x0, &(0x7f00000001c0)) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008084}, 0xc0c0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) clone3(&(0x7f00000014c0)={0x4000, &(0x7f0000000300)=0xffffffffffffffff, &(0x7f0000000340)=0x0, &(0x7f0000000380), {0x6}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/131, &(0x7f0000001480)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) pidfd_open(r3, 0x0) pidfd_open(0xffffffffffffffff, 0x0) r4 = pidfd_getfd(r2, r0, 0x0) pidfd_send_signal(r4, 0xe, &(0x7f0000001540)={0x2d, 0x7, 0xf1670000}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000015c0)=0x1) syz_io_uring_setup(0x41f1, &(0x7f0000001600)={0x0, 0x1a0c, 0x2, 0x1, 0xd5, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000001700)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1}, 0xdfca) getsockname$packet(r0, &(0x7f0000001740)={0x11, 0x0, 0x0}, &(0x7f0000001780)=0x14) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000002d40)=@IORING_OP_RECVMSG={0xa, 0xc05783268c85cf1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000017c0)=""/187, 0xbb}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001940)=""/11, 0xb}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/49, 0x31}, {&(0x7f00000029c0)=""/200, 0xc8}, {&(0x7f0000002ac0)=""/176, 0xb0}, {&(0x7f0000002b80)=""/72, 0x48}, {&(0x7f0000002c00)=""/57, 0x39}], 0x9}, 0x0, 0x20, 0x1, {0x2}}, 0x1) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000035c0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f0000003440)={0x134, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x14}, 0x20000800) 08:28:46 executing program 2: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420200, 0x0, 0xa}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cgroups\x00', 0x0, 0x0) clone3(&(0x7f0000000340)={0x1000080, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x3b}, &(0x7f00000001c0)=""/28, 0x1c, &(0x7f0000000200)=""/185, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0/file0\x00', 0x7) r2 = openat$incfs(r1, &(0x7f0000000440)='.log\x00', 0x0, 0x1) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x48}, 0x6040002) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x680400, 0x47) renameat(r2, &(0x7f0000000580)='./file1\x00', r3, &(0x7f0000000600)='./file0\x00') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r4, 0x0, &(0x7f0000000640)) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x10000, 0x40) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x40) unlinkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/custom1\x00', 0x1800, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$packet(0x11, 0x2, 0x300) r5 = openat$incfs(r0, &(0x7f00000008c0)='.log\x00', 0x20101, 0x2) faccessat(r5, &(0x7f0000000900)='./file1\x00', 0x40) 08:28:46 executing program 3: getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/128, 0x80) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/233, 0xe9) r0 = getuid() r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f0000000440)=[{&(0x7f0000000240)="f2a34687ca5b8fd98d1ef17539356c290e7446a5ce86c8a17a0778365746317074c560f70f079cf5ad8889ab46e2cbeb54badcabffc16b9469c5f6bc46386522a328ebb830f23f98e64ba033ad99ebbaba6599e19c091feb4e6517c135e4054ce4b0e99831d83c3920f59a07de91db9c4d602bd3e75a325b1134443fcc190169d9cbe2262447a9e89486dc967d4d295fed9851025e59ca883399b6ba267709fecace34456098ef91960855bf51944fb6780ed382a2bc22ffb27c636fbb6b1cdee75fc9d7ad2117c98eecef6df2", 0xcd, 0x8000}, {&(0x7f0000000340)="4d8d99e54f0fc2302ec660785a651a5b26fea984865c461963d9675f629604ea1bbbf75e505994c011e8516c18bd0b2c164c4ea0a842d63f31ed11d9f8a3805f39c159e7e610667386c2bb15cb6db357f169ab77c755d7d7c8d0fd0fa361f1f0", 0x60, 0x2}, {&(0x7f00000003c0)="5ac47ba0bcf9dc47a365bb30049db0d4bf068a30ca327e798f36030e5015c3b5ea6f6850a7f6fe0b8bec0d1106b801eb15697c8353fa5fb1c80ef0aeb145be3cbe3ceef945f5d0d1f873d92960e463c931d5174ec1", 0x55, 0x7}], 0x800000, &(0x7f00000004c0)={[{@huge_advise}, {@uid={'uid', 0x3d, r0}}, {@huge_within_size}, {@huge_within_size}, {@huge_never}, {@huge_advise}, {@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0xffff}}], [{@permit_directio}, {@appraise}, {@seclabel}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x152) r2 = openat$incfs(r1, &(0x7f00000005c0)='.pending_reads\x00', 0xa0040, 0x1) socketpair(0xa, 0x800, 0x8, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000640)) mknodat$loop(r2, &(0x7f0000000680)='./file0\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f00000006c0)={0x8}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000800)) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x2, &(0x7f00000009c0)=[{&(0x7f00000008c0)="52fdd90869c322ffc54ff921137edd964dc585d42d6614893c0f471d85dd41e34a0a664ebdbb78375c8ca108aa90a9d5f0f4913d8cdd9f1f1c2a9b2f5379403a7a74ba6e351f6cefadaa058113f1d96a3616451658cbaa3a72805a7f81e79b861ff13eb4a6efb16049d2e0b843c77f483dbcc3fa7d28", 0x76, 0x2}, {&(0x7f0000000940)="5c476024e435c3ec5340e3a215826ad3b3f491606832516733a9b3098f378d5c06e2cb84e5f5893fc673f70622e77ae28840dbc14fb51fea6bd535474877b62ec1449740cdacde857fd4a5815c31da2a63a201de3a2dd9f37a4b", 0x5a, 0x10001}], 0x2000000, &(0x7f0000000a00)={[{@utf8}], [{@fsuuid={'fsuuid', 0x3d, {[0xea02a6a790561e30, 0x32, 0x34, 0x65, 0x0, 0x34, 0x39, 0x64], 0x2d, [0x36, 0x61, 0x61, 0x30], 0x2d, [0x3, 0x63, 0x30, 0x35], 0x2d, [0x30, 0x66, 0x0, 0x64], 0x2d, [0x36, 0x63, 0x32, 0x32, 0x31, 0x32, 0x35, 0x30]}}}, {@permit_directio}]}) accept(r3, &(0x7f0000000a40)=@x25={0x9, @remote}, &(0x7f0000000ac0)=0x80) r5 = openat$incfs(r2, &(0x7f0000000b00)='.pending_reads\x00', 0x5032c2, 0x0) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x1f, 0x6, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="78f98ca130fb53c44504076746e3c86199fef214448971ccb7e6bdfe87fa39fa32acbf04855ad16b988c8c6cd9c2d1f7376ac1abda65182ee9f0", 0x3a, 0x6}, {&(0x7f0000000c00)="cdbbfbfb5ce657bdb623d6f81f4b1026ae9d3ccb100d27c47ecc14bbed9e5825f5cf9bff5c4aa4e2a70fd2113d6e6bed79a176f2a6383d7895766775679cdf7d282cb27630164ff75b70b7c271e2dd405d010a69942df7605fc2b7dc9ef0fb74e021cf2a94dd44bead9d8ab1c60a769ce7fb967093fc6db5944335d2ac84a8f3c8fae695ef16cf9738f30f72827a1ca13de7859f4d1f77081c8d", 0x9a, 0x1000}, {&(0x7f0000000cc0)="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", 0xfd, 0x4}, {&(0x7f0000000dc0)="3f053bfdae6a251285faf4c33500a045fef7ae9596c6e24300fd7e9e8b04d334", 0x20, 0x8ed7}, {&(0x7f0000000e00)="797f284391984da4ffb40b47fe4a5ca8667d4cbb534f55ee83d7cb424448368d5f3f854057947e35cba81d32793d74053438692801f98d16c068ee150b4ab39bca78e8bb4d0b4687cd55084d4c316b1dc83b33b52b2a2697f30ec142322c8b7bcee8fc4ee7df51983b0d962dd679d96d136a3b17d35db0232653013b4f04903b55e4c94d681c8177", 0x88, 0x5c}, {&(0x7f0000000ec0)="4cd2f53fe14fd3f88523d28c38d90cfb253affc459b7fbcb04a4b2030d328b5412a88370754ff91bfd79d1db8bb5e500bba20b1f5ca7c813bbfe75a992a439e82efe025eaf182cd7440635d3c4a0998cc0ee90e68002bc179b9f6599f2a7ca1f5812445ef29c81605ba13c7e2bfc93ee31877188c83c32a68b6425bf6dde2a1e6895f8dbc98c5c16822e27e83c32e248b49dc3c470dd5272436607f0955a33f50a8bc655c95a23110b3299ec84210c0616fa1fb653250aff16236ec0c35af022dce6", 0xc2, 0x4}], 0x20, &(0x7f0000001080)={[{@shortname_lower}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@nonumtail}], [{@smackfsfloor}, {@subj_role={'subj_role', 0x3d, '{'}}]}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f00000012c0), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001580)={0x0, 0x0}) clone3(&(0x7f0000001680)={0x10000, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380), {0x28}, &(0x7f00000013c0)=""/147, 0x93, &(0x7f0000001480)=""/203, &(0x7f0000001600)=[r7], 0x1}, 0x58) [ 90.466424] audit: type=1400 audit(1729672126.431:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:28:46 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040)=0xfff, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x5b6c, &(0x7f00000000c0)={0x0, 0xd076, 0x4, 0x0, 0x134}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x26c0, &(0x7f00000001c0)={0x0, 0xda92, 0x10, 0x2, 0x134}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x3, 0x0, r5, &(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x4, 0x800}, 0x2a) socket$packet(0x11, 0x2, 0x300) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x2, 0x3, 0x301, 0x0, 0x0, {0xf20dbf3698c958e9, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2b}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008090}, 0x8011) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf4, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ef8a45}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1e84636dfb76bd10}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000740), &(0x7f0000000780)=0x4) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x268, 0x1, 0x5, 0x304, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x8}, 0x20, 0xab, 0x4, 0x200, 0x1, 'syz1\x00', "92a43079fdbcf29dcb15c72d86e59777bb94584c08c312c2750df5493752a720", "f5661aed9b9602c28d3bcbd8c7d1572f518080778927af623a8535acb081822e", [{0xd4, 0x2, {0x2, 0x7}}, {0x9, 0x1000, {0x2, 0x7}}, {0x7fff, 0x9, {0x1, 0x8}}, {0x8, 0x9, {0x2, 0x2}}, {0xff, 0xc77, {0x2, 0x3f}}, {0x5, 0x6, {0x2, 0x8}}, {0x7ff, 0xfc00, {0x1, 0x99}}, {0x7ff, 0x9}, {0x4, 0x6, {0x3, 0x7f}}, {0xd6, 0x7, {0x0, 0x6}}, {0x1, 0x9aa1, {0x0, 0xfff}}, {0xab0, 0x114e, {0x0, 0x7}}, {0xff00, 0x200, {0x1, 0x400}}, {0x1, 0x4b3, {0x2, 0xcd}}, {0x5, 0xc000, {0x1, 0xd9}}, {0x7ff, 0x7f, {0x3, 0x6}}, {0x1, 0x101, {0x2, 0x7ff}}, {0x3, 0xf6f4, {0x2, 0x9}}, {0x0, 0x6, {0x2, 0x6}}, {0x6, 0x4, {0x3, 0x9}}, {0x200, 0x1000}, {0x5, 0xfffd, {0x2, 0xffffffff}}, {0x4, 0x3, {0x3, 0xfff}}, {0x6, 0x5, {0x3, 0x5}}, {0x6, 0xff, {0x3, 0x1}}, {0xfd, 0x5, {0x2, 0x8}}, {0x8000, 0x9, {0x2, 0x1}}, {0x0, 0xfff, {0x2, 0x8000}}, {0x9, 0x401, {0x1, 0xfb71}}, {0xfffa, 0x1, {0x0, 0x9}}, {0x1f, 0xe1, {0x2, 0x35a}}, {0x1, 0x2, {0x3, 0x9}}, {0x4, 0x1, {0x2, 0x8}}, {0x5, 0x9, {0x2, 0x75}}, {0x20, 0x1, {0x0, 0x3ff}}, {0x67, 0x18, {0x2, 0x6}}, {0x5, 0x3526, {0x2, 0x7}}, {0x95, 0x20, {0x3, 0x9}}, {0x7, 0x20, {0x2, 0x6}}, {0x9f, 0x92, {0x3, 0x9}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8080}, 0x5) r6 = io_uring_setup(0x7c52, &(0x7f0000000b00)={0x0, 0xb202, 0x2, 0x2, 0x11d, 0x0, r3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x80010, r6, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80), r5) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1) getgid() socket$packet(0x11, 0x2, 0x300) 08:28:46 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x40800, 0x1bc) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000080)) socketpair(0x18, 0x6, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0xcc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x60040c0}, 0x20000) r3 = getuid() syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x5, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000340)="f6dba3b133d59b3b9368571c51b6e8c68a24e3d1f600bc7c61b3e78d149818e95d5e4eb3e60294a2196bc99d3b4632beff176a19478a8075ce02c37e93682f1c2298a1ca8396957c0f206cb5e4c3747f60f784f784da5ddc09b04823c103623191efa1a77cade2a5297afa1c52c51bfb19c81229e5dbf4cc51faa6f686e3970decb1509490b8820ec503c6342199ec0f23a9f8d459636cc9cd19228617e1f67d472a706b4bd8b60f5e23df4850a7b60f40fb7fccfab8705fbe74f40e789ed858db051a8300b4cd153a320aa81ceb5ea6b5e42f379f7b85665c0ce5646f3b4f537daeba1981e5870893eb790cb0", 0xed, 0xfffffffffffffc00}, {&(0x7f0000000440)="3cdd977a08218ff80330adb188028cc944bba9e360b88e69d8954e93500e76f16c01381c6e1dd018f7f01f50399731350874ec97fbda69f57fcb8b39b578e76461ddbd9d6869a593b16448076326deba28f28fa065fe870479dac971e45e686624b49390035f589f9214dc5629c2", 0x6e, 0x8}], 0x1101882, &(0x7f0000000540)={[{@shortname_winnt}, {@rodir}], [{@fowner_gt={'fowner>', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@hash}]}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="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", 0xfe, 0x20000045, &(0x7f00000006c0)={0x11, 0xf6, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x110206}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x100, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x761c}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\xaa\xaa\xaa\xaa\xaa'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4000000}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4bc}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000008c0)) r4 = pidfd_getfd(r0, r2, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a80)={'wg1\x00', 0x0}) accept4$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa0, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x43dc1c516ebf2ee}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4009c) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000c80)=0xc4) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x0, 0x3}) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000d00)={0x4, 0x20}) 08:28:46 executing program 6: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x6, &(0x7f0000000080)={[0x80]}, 0x8) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x790) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000140)=[@request_death, @register_looper, @register_looper], 0x22, 0x0, &(0x7f0000000180)="d8abfc3b219b207962848daa5e1e26bee959110d3383fff511a34b72b66365dbe0c1"}) r0 = epoll_create1(0x80000) epoll_pwait2(r0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000300)={0x14}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000380)=0xffffffff) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x3, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x8001) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x60, 0x0, &(0x7f00000006c0)=[@clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x6, 0x1, 0xc}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/140, 0x8c, 0x2, 0x39}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000680)={0x0, 0x20, 0x48}}, 0x1000}, @exit_looper], 0x6d, 0x0, &(0x7f0000000740)="84af26bf83218244ee0319f8eff3d4895fad6e1c0fa6f3e392d2524dc8b78f91f6ea575a1f1949d66d0cf44c05ba5984216bd58c10a0c4dfa94fb10cee19cbf1c1c1d32dacf6d007372c7a2a34fc3a4ade2352c4440e994518f05a6ab9f67c9a6ccacde02b63cd0e6977f7168c"}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x27}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e40)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e00)={&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000980)=""/143, 0x8f}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/170, 0xaa}], 0x4, &(0x7f0000000d00)=""/244, 0xf4}, 0x0, 0x40000040, 0x1}, 0x800) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000e80)='.log\x00', 0xeb4ab908c78ced69, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x0, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbff}]}]}, 0x68}}, 0x22040005) epoll_wait(r0, &(0x7f0000001000)=[{}], 0x1, 0xffffff28) r3 = epoll_create1(0x80000) clone3(&(0x7f0000001280)={0x8000000, &(0x7f0000001040)=0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0), {0x28}, &(0x7f0000001100)=""/200, 0xc8, &(0x7f0000001200)=""/43, &(0x7f0000001240)=[0x0, 0xffffffffffffffff], 0x2, {r2}}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001300)={0x10000000}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000001680)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001380)={0x2a4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1474c85f3f91ed2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 08:28:46 executing program 7: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080)) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0xe6080, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x242080, 0x28) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"f138bf411890d5a43a9f318bc3e2d89c", 0x0, 0x0, {0xdca, 0xfc}, {0x6, 0x5a2}, 0x1, [0x80000001, 0x0, 0x9, 0x0, 0xffffffffffff8000, 0x3810000000000, 0x80000001, 0x52, 0x1000, 0xffff, 0x9, 0x0, 0x4, 0xdfc, 0x10001, 0xb2f]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"5bee91e88a4237e27a5ba7d5e8af1120", 0x0, 0x0, {0x0, 0x9}, {0x35, 0xfffffffb}, 0x7, [0x100, 0x9362, 0xffffffffffff9585, 0x20, 0x28f, 0x0, 0x8000, 0x4, 0x9, 0x8, 0x9, 0xfffffffffffffc00, 0x9, 0x1, 0x555]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000380)={"5f98fb65201e70fba538979b6e043462", r2, r3, {0x8, 0x7ff}, {0x9, 0xfffffffc}, 0xc6df, [0x155, 0x3, 0x5, 0x800, 0xfff, 0x9, 0x2, 0x8, 0x41d, 0x100, 0x0, 0x8001, 0x0, 0x2, 0x3, 0x7fff]}) r4 = openat$incfs(r0, &(0x7f0000000480)='.log\x00', 0x4a0000, 0x11c) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f00000004c0)) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000500)=0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000580)={0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x3) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000600)=0x99) r7 = accept4$packet(r6, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14, 0x80000) r8 = accept(r7, &(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000740)=0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000840)={0x0, 0x2, r8, 0x2, 0x80000}) [ 91.861048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.864356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.866516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.868701] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.871744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.875117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.880163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.882265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.883599] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.884827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.895032] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.902695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.921634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.923001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.924265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.925640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.928084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.929228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.930695] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.931553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.932791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.946624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.950177] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.951227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.976470] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.983358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.987573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.988442] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.989259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.990792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.994533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.996177] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.997238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.004266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.007091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.008676] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.009786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.010906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.013422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.014798] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.020225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.020974] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.034457] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.041057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.043059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.046829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.053734] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.054855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.947596] Bluetooth: hci3: command tx timeout [ 93.948710] Bluetooth: hci1: command tx timeout [ 93.949347] Bluetooth: hci0: command tx timeout [ 94.012111] Bluetooth: hci2: command tx timeout [ 94.075864] Bluetooth: hci6: command tx timeout [ 94.076599] Bluetooth: hci7: command tx timeout [ 94.077238] Bluetooth: hci4: command tx timeout [ 94.140088] Bluetooth: hci5: command tx timeout [ 95.995457] Bluetooth: hci1: command tx timeout [ 95.996077] Bluetooth: hci0: command tx timeout [ 95.996527] Bluetooth: hci3: command tx timeout [ 96.059236] Bluetooth: hci2: command tx timeout [ 96.126018] Bluetooth: hci6: command tx timeout [ 96.126498] Bluetooth: hci4: command tx timeout [ 96.127014] Bluetooth: hci7: command tx timeout [ 96.188122] Bluetooth: hci5: command tx timeout [ 98.043296] Bluetooth: hci3: command tx timeout [ 98.043849] Bluetooth: hci0: command tx timeout [ 98.044620] Bluetooth: hci1: command tx timeout [ 98.108048] Bluetooth: hci2: command tx timeout [ 98.172236] Bluetooth: hci7: command tx timeout [ 98.172732] Bluetooth: hci4: command tx timeout [ 98.173616] Bluetooth: hci6: command tx timeout [ 98.235073] Bluetooth: hci5: command tx timeout [ 100.091060] Bluetooth: hci1: command tx timeout [ 100.091600] Bluetooth: hci0: command tx timeout [ 100.092211] Bluetooth: hci3: command tx timeout [ 100.156252] Bluetooth: hci2: command tx timeout [ 100.219108] Bluetooth: hci7: command tx timeout [ 100.219626] Bluetooth: hci6: command tx timeout [ 100.220368] Bluetooth: hci4: command tx timeout [ 100.284022] Bluetooth: hci5: command tx timeout [ 154.574660] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.577418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.578901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.580678] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.581881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.584476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.586718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.587860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.589236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.590490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.593247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.599224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.600251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.605791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.609210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.616202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.621735] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.623520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.639643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.642153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.643374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.648040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.651768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.653003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.663623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.683559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.688828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.700445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.707906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.710379] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.711483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.718044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.719344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.720818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.723131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.730176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.734333] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.738337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.749586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.750662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.763067] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.768192] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.803511] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.815159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.830495] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.847169] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.869300] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.871986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.667044] Bluetooth: hci2: command tx timeout [ 156.668008] Bluetooth: hci0: command tx timeout [ 156.734047] Bluetooth: hci3: command tx timeout [ 156.734827] Bluetooth: hci1: command tx timeout [ 156.795045] Bluetooth: hci5: command tx timeout [ 156.795866] Bluetooth: hci6: command tx timeout [ 156.796704] Bluetooth: hci4: command tx timeout [ 156.988039] Bluetooth: hci7: command tx timeout [ 158.715097] Bluetooth: hci0: command tx timeout [ 158.715627] Bluetooth: hci2: command tx timeout [ 158.779028] Bluetooth: hci1: command tx timeout [ 158.779544] Bluetooth: hci3: command tx timeout [ 158.843087] Bluetooth: hci4: command tx timeout [ 158.843601] Bluetooth: hci6: command tx timeout [ 158.844129] Bluetooth: hci5: command tx timeout [ 159.035163] Bluetooth: hci7: command tx timeout [ 160.763143] Bluetooth: hci0: command tx timeout [ 160.763677] Bluetooth: hci2: command tx timeout [ 160.827194] Bluetooth: hci1: command tx timeout [ 160.827717] Bluetooth: hci3: command tx timeout [ 160.891415] Bluetooth: hci5: command tx timeout [ 160.891977] Bluetooth: hci6: command tx timeout [ 160.892425] Bluetooth: hci4: command tx timeout [ 161.083041] Bluetooth: hci7: command tx timeout [ 162.811125] Bluetooth: hci2: command tx timeout [ 162.811275] Bluetooth: hci0: command tx timeout [ 162.875028] Bluetooth: hci1: command tx timeout [ 162.875146] Bluetooth: hci3: command tx timeout [ 162.939033] Bluetooth: hci4: command tx timeout [ 162.939058] Bluetooth: hci6: command tx timeout [ 162.939568] Bluetooth: hci5: command tx timeout [ 163.131069] Bluetooth: hci7: command tx timeout [ 216.775533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.781309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.783568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.796515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.799295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.800658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.854829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.858805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.860870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.865743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.869322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.871715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.040110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.042546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.047144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.051119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.052634] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.054681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.118009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.121224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.123744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.128267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.130009] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.131292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.153869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.155999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.158196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.167887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.169783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.170935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.218856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.221271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.224524] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.230004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.238526] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.241601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.284560] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.287399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.289926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.294398] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.297219] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.299534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.364739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.388225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.421247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.479216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.489141] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.507691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.813025] Bluetooth: hci0: command tx timeout [ 218.940026] Bluetooth: hci1: command tx timeout [ 219.131056] Bluetooth: hci2: command tx timeout [ 219.195173] Bluetooth: hci4: command tx timeout [ 219.195200] Bluetooth: hci3: command tx timeout [ 219.259134] Bluetooth: hci5: command tx timeout [ 219.323210] Bluetooth: hci6: command tx timeout [ 219.708862] Bluetooth: hci7: command tx timeout [ 220.859002] Bluetooth: hci0: command tx timeout [ 220.989081] Bluetooth: hci1: command tx timeout [ 221.178985] Bluetooth: hci2: command tx timeout [ 221.243052] Bluetooth: hci4: command tx timeout [ 221.244551] Bluetooth: hci3: command tx timeout [ 221.308000] Bluetooth: hci5: command tx timeout [ 221.370973] Bluetooth: hci6: command tx timeout [ 221.755975] Bluetooth: hci7: command tx timeout [ 222.907104] Bluetooth: hci0: command tx timeout [ 223.036278] Bluetooth: hci1: command tx timeout [ 223.228075] Bluetooth: hci2: command tx timeout [ 223.293065] Bluetooth: hci3: command tx timeout [ 223.293373] Bluetooth: hci4: command tx timeout [ 223.357980] Bluetooth: hci5: command tx timeout [ 223.419976] Bluetooth: hci6: command tx timeout [ 223.802982] Bluetooth: hci7: command tx timeout [ 224.956092] Bluetooth: hci0: command tx timeout [ 225.084031] Bluetooth: hci1: command tx timeout [ 225.274998] Bluetooth: hci2: command tx timeout [ 225.339972] Bluetooth: hci3: command tx timeout [ 225.339998] Bluetooth: hci4: command tx timeout [ 225.403050] Bluetooth: hci5: command tx timeout [ 225.467014] Bluetooth: hci6: command tx timeout [ 225.852942] Bluetooth: hci7: command tx timeout [ 279.238444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.240128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.241214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.247631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.250620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.252755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.304567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.307343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.309866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.313240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.314773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.317342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.434737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.442236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.447321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.466381] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.471347] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.473608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.598589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.614335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.642250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.656091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.662845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.665214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.670561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.680511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.682772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.687828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.702279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.705430] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.707721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.717218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.721150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.731168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.733219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.739176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.741529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.751720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.754718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.756577] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.758600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.762730] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.765551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.767022] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.767036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.769975] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.772096] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.774832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.276016] Bluetooth: hci0: command tx timeout [ 281.404030] Bluetooth: hci1: command tx timeout [ 281.531011] Bluetooth: hci2: command tx timeout [ 281.724006] Bluetooth: hci3: command tx timeout [ 281.851114] Bluetooth: hci7: command tx timeout [ 281.851264] Bluetooth: hci5: command tx timeout [ 281.852366] Bluetooth: hci4: command tx timeout [ 281.852604] Bluetooth: hci6: command tx timeout [ 283.323248] Bluetooth: hci0: command tx timeout [ 283.450987] Bluetooth: hci1: command tx timeout [ 283.579143] Bluetooth: hci2: command tx timeout [ 283.771107] Bluetooth: hci3: command tx timeout [ 283.900054] Bluetooth: hci4: command tx timeout [ 283.900586] Bluetooth: hci5: command tx timeout [ 283.901314] Bluetooth: hci7: command tx timeout [ 283.901777] Bluetooth: hci6: command tx timeout [ 285.371977] Bluetooth: hci0: command tx timeout [ 285.500932] Bluetooth: hci1: command tx timeout [ 285.627607] Bluetooth: hci2: command tx timeout [ 285.819963] Bluetooth: hci3: command tx timeout [ 285.948979] Bluetooth: hci7: command tx timeout [ 285.949133] Bluetooth: hci5: command tx timeout [ 285.950305] Bluetooth: hci4: command tx timeout [ 285.950349] Bluetooth: hci6: command tx timeout [ 287.419981] Bluetooth: hci0: command tx timeout [ 287.548045] Bluetooth: hci1: command tx timeout [ 287.676965] Bluetooth: hci2: command tx timeout [ 287.868044] Bluetooth: hci3: command tx timeout [ 287.995034] Bluetooth: hci6: command tx timeout [ 287.995602] Bluetooth: hci5: command tx timeout [ 287.995705] Bluetooth: hci4: command tx timeout [ 287.996129] Bluetooth: hci7: command tx timeout [ 341.517285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.520349] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.523206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.537245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.541242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.543845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.576569] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.580234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.584079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.589093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.595131] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.597270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.767552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.775081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.776603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.779095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.781064] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.784283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.844694] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.847394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.855278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.861745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.866785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.875195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.896105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.901125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.903427] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.910781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.914705] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.918110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.963122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.965659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.968475] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.972731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.978466] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.980815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.006984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.009464] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.012259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.015852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.020295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.022407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.035579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.082443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.085855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.092531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.094700] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.097278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.612144] Bluetooth: hci0: command tx timeout [ 343.675246] Bluetooth: hci1: command tx timeout [ 343.867094] Bluetooth: hci2: command tx timeout [ 343.930990] Bluetooth: hci3: command tx timeout [ 343.999094] Bluetooth: hci4: command tx timeout [ 344.059100] Bluetooth: hci6: command tx timeout [ 344.059235] Bluetooth: hci5: command tx timeout [ 344.189046] Bluetooth: hci7: command tx timeout [ 345.660040] Bluetooth: hci0: command tx timeout [ 345.722966] Bluetooth: hci1: command tx timeout [ 345.914978] Bluetooth: hci2: command tx timeout [ 345.978950] Bluetooth: hci3: command tx timeout [ 346.042953] Bluetooth: hci4: command tx timeout [ 346.120423] Bluetooth: hci5: command tx timeout [ 346.120503] Bluetooth: hci6: command tx timeout [ 346.235431] Bluetooth: hci7: command tx timeout [ 347.709119] Bluetooth: hci0: command tx timeout [ 347.770961] Bluetooth: hci1: command tx timeout [ 347.962960] Bluetooth: hci2: command tx timeout [ 348.027011] Bluetooth: hci3: command tx timeout [ 348.092047] Bluetooth: hci4: command tx timeout [ 348.154968] Bluetooth: hci6: command tx timeout [ 348.156906] Bluetooth: hci5: command tx timeout [ 348.282962] Bluetooth: hci7: command tx timeout [ 349.755100] Bluetooth: hci0: command tx timeout [ 349.819008] Bluetooth: hci1: command tx timeout [ 350.011232] Bluetooth: hci2: command tx timeout [ 350.075030] Bluetooth: hci3: command tx timeout [ 350.138971] Bluetooth: hci4: command tx timeout [ 350.203201] Bluetooth: hci5: command tx timeout [ 350.203271] Bluetooth: hci6: command tx timeout [ 350.331265] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:33:56 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=000000000000000c RCX=ffffffff812ef5ee RDX=fffffbfff0fda9d5 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff888018c8b700 RSP=ffff88806ce09b30 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=00000000000c2f81 R12=ffff888018c8c190 R13=0000000000000000 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812ef5f6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffaeb5381f0 CR3=0000000034e1c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff813e921f RCX=ffff88806cf09a88 RDX=1ffff1100d9e1348 RSI=ffff88806cf09a80 RDI=ffffffff813e921f RBP=ffff88806cf09a40 RSP=ffff88806cf099c0 R8 =0000000000000001 R9 =ffff88806cf09a28 R10=000000000003c001 R11=0000000000003f0d R12=ffff88806cf09ab0 R13=0000000000000000 R14=ffff888029619b80 R15=ffff888007169580 RIP=ffffffff8121ea41 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f028a1e3540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d61db704c8 CR3=000000003410a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000