Warning: Permanently added '[localhost]:62926' (ECDSA) to the list of known hosts. 2024/11/07 15:04:07 fuzzer started 2024/11/07 15:04:07 dialing manager at localhost:46317 syzkaller login: [ 78.027946] cgroup: Unknown subsys name 'net' [ 78.121622] cgroup: Unknown subsys name 'cpuset' [ 78.134008] cgroup: Unknown subsys name 'rlimit' 2024/11/07 15:04:24 syscalls: 202 2024/11/07 15:04:24 code coverage: enabled 2024/11/07 15:04:24 comparison tracing: enabled 2024/11/07 15:04:24 extra coverage: enabled 2024/11/07 15:04:24 setuid sandbox: enabled 2024/11/07 15:04:24 namespace sandbox: enabled 2024/11/07 15:04:24 Android sandbox: enabled 2024/11/07 15:04:24 fault injection: enabled 2024/11/07 15:04:24 leak checking: enabled 2024/11/07 15:04:24 net packet injection: enabled 2024/11/07 15:04:24 net device setup: enabled 2024/11/07 15:04:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/07 15:04:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/07 15:04:24 USB emulation: enabled 2024/11/07 15:04:24 hci packet injection: enabled 2024/11/07 15:04:24 wifi device emulation: enabled 2024/11/07 15:04:24 802.15.4 emulation: enabled 2024/11/07 15:04:24 fetching corpus: 0, signal 0/0 (executing program) 2024/11/07 15:04:26 starting 8 fuzzer processes 15:04:26 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/33) r0 = semget$private(0x0, 0x0, 0x80) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000040)=""/223) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000140)=""/255) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x3, 0xee00, 0xffffffffffffffff, r1, 0x0, 0xe8, 0x40}, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x79}) semctl$GETVAL(r0, 0x4, 0xc, &(0x7f0000000380)=""/185) r2 = semget$private(0x0, 0x1, 0x1c0) semctl$SEM_STAT_ANY(r2, 0xe8a7df1e49df86fc, 0x14, &(0x7f0000000440)=""/59) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x64}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40000) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f00000005c0)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0) r3 = semget$private(0x0, 0x0, 0x620) r4 = geteuid() getresgid(&(0x7f00000015c0), &(0x7f0000001600)=0x0, &(0x7f0000001640)) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001680)={{0x1, r1, 0x0, r4, r5, 0x80, 0x9}, 0xb3fe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), 0xffffffffffffffff) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000001740)=""/228) r6 = semget$private(0x0, 0x2, 0x80) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f0000001840)=""/85) 15:04:26 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{0xe, 0x1}, 'port0\x00', 0xc8, 0x80001, 0x21d1, 0x6, 0x1, 0x8001, 0x7, 0x0, 0x5, 0x7f}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x0, 0x3]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1000c0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)={{0x3, 0x6}, 0x1, 0x5, 0x7, {0x0, 0x5f}, 0x1, 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000380)={0x6, 0x0, 0x1, 'queue0\x00', 0xffffffe1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000440)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x22000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000540)={{0x1, 0x9}, 'port0\x00', 0x20, 0x100010, 0x9, 0x1, 0x1f, 0x81, 0x1, 0x0, 0x6, 0xff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0xff, 0xcf}, 0x1, 0xc2f, 0x5, {0xff, 0x7}, 0x4, 0x90f}) prctl$PR_SET_ENDIAN(0x14, 0x0) r2 = creat(&(0x7f0000000680)='./file0\x00', 0x81) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000006c0)={0x4, 0x7f, 0x1, 'queue0\x00', 0x1}) r3 = creat(&(0x7f0000000780)='./file0\x00', 0xb0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000007c0)={{0x6, 0xfc}, {0x6, 0x6}, 0x9, 0x5, 0xff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000840)=""/179) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000900)=""/125) setxattr$security_evm(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)=@ng={0x4, 0x6, "e5293bcb66e5bbe3a723a1"}, 0xd, 0x2) 15:04:26 executing program 2: r0 = fork() r1 = getpgid(r0) gettid() getpgrp(r1) r2 = fork() socket$inet6_icmp(0xa, 0x2, 0x3a) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, @in_args={0x2}}, './file0\x00'}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0, 0x0) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f00000000c0)) write$cgroup_freezer_state(r5, &(0x7f0000000100)='THAWED\x00', 0x7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x2, 0x2236, 0x0, 0x7f, 0x3ff}, 0x14) getpgrp(r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xab}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x16}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000001) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xe99}}, './file0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}}, 0x20004095) 15:04:26 executing program 3: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040)=0x7fffffff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/165, 0xa5, 0x1, &(0x7f0000000140)=""/173, 0xad}, &(0x7f0000000240)=0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="2bfea420f06bc379ba679c84f730a978", 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80c0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x240440c4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008001) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000780)="b976b262169c0603641c2e55800506b5de6ea4065d7fc82b5497832e6db5d67a236af7c969812340b81bc4b71a78d16058a396c5c592ee56d4f5d373276b3eb2d43d9b1f25502e40bd663e97f464308d", 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x48085) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000980)="692cd54177296498a8ab940dfb5d6e010cf91044f05b9202538d49611615", 0x1e) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r1) [ 96.414107] audit: type=1400 audit(1730991866.632:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:04:26 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/167, 0xa7}, {&(0x7f00000010c0)=""/172, 0xac}], 0x3, &(0x7f00000011c0)=""/8, 0x8}, 0x1}, {{&(0x7f0000001200)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)=""/70, 0x46}], 0x1, &(0x7f0000001340)=""/117, 0x75}, 0xaa}], 0x2, 0x12003, &(0x7f0000001440)={0x0, 0x989680}) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001480), 0x2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x8, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001580), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000015c0)=@gcm_128={{0x303}, "0265ce1137cb4e0f", "6fab0a67f37fb742b03b2f914a803647", "4c3c0ab9", "a64f7cfe2fcb0451"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000001600)) write$cgroup_type(r0, &(0x7f0000001640), 0x9) r3 = syz_open_dev$hidraw(&(0x7f0000001680), 0x4, 0x408800) setxattr$security_evm(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), &(0x7f0000001740)=@ng={0x4, 0x11, "6657d0f9e99b460dc81c659b5054fa23e0"}, 0x13, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001780), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f00000017c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/139, 0x8b}, {&(0x7f0000001900)}], 0x2, &(0x7f0000001980)=""/43, 0x2b}, 0x6}, {{&(0x7f00000019c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/159, 0x9f}, 0x3}, {{&(0x7f0000001b40), 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)=""/42, 0x2a}], 0x1, &(0x7f0000001c40)=""/45, 0x2d}}, {{&(0x7f0000001c80)=@alg, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/196, 0xc4}], 0x1}, 0xfff}, {{&(0x7f0000001e40)=@qipcrtr, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/163, 0xa3}], 0x1, &(0x7f0000001fc0)=""/117, 0x75}, 0x8}, {{&(0x7f0000002040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002680)=[{&(0x7f00000020c0)=""/169, 0xa9}, {&(0x7f0000002180)=""/17, 0x11}, {&(0x7f00000021c0)=""/122, 0x7a}, {&(0x7f0000002240)=""/153, 0x99}, {&(0x7f0000002300)=""/224, 0xe0}, {&(0x7f0000002400)=""/216, 0xd8}, {&(0x7f0000002500)=""/141, 0x8d}, {&(0x7f00000025c0)=""/176, 0xb0}], 0x8, &(0x7f0000002700)=""/175, 0xaf}, 0x8}, {{&(0x7f00000027c0)=@qipcrtr, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002840)=""/246, 0xf6}, {&(0x7f0000002940)=""/73, 0x49}, {&(0x7f00000029c0)=""/194, 0xc2}], 0x3, &(0x7f0000002b00)=""/149, 0x95}, 0x6d58}, {{&(0x7f0000002bc0)=@isdn, 0x80, &(0x7f0000004140)=[{&(0x7f0000002c40)=""/188, 0xbc}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/80, 0x50}, {&(0x7f0000003d80)=""/193, 0xc1}, {&(0x7f0000003e80)=""/116, 0x74}, {&(0x7f0000003f00)=""/188, 0xbc}, {&(0x7f0000003fc0)=""/193, 0xc1}, {&(0x7f00000040c0)=""/97, 0x61}], 0x8, &(0x7f00000041c0)=""/62, 0x3e}, 0x400}], 0x8, 0x2000, &(0x7f0000004400)={0x0, 0x3938700}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000004440)='scalable\x00', 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000004a00)="88c624adf97321a82f98848893b692fe1ffea7f2e03ef544eb2936ff64b2d3fcb729a5e9ec4739f4872496e74c207fbfb5d3cc943e0df7219604d4ce8aee2d09291a7f44e173cdda0dd170a30055acf1c69347aaf2376c3a0c07205b29857cb9873da7425e778d39be88e8152ad9d43ac5025772c2e4ce10379345e4fbc1", 0x7e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000004a80)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000004ac0)={0x54, 0x800, 0x81, {0x40, 0x8}, {0x1, 0xffff}, @cond=[{0x200, 0x9, 0x0, 0x0, 0x7, 0x2}, {0x7, 0x5, 0x0, 0x6, 0x0, 0x3ff}]}) openat$cgroup_freezer_state(r6, &(0x7f0000004b00), 0x2, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000004b40)="64880000926e24d9c35a1a8599f846da61d6aa1bc05641ec5541b53044fb69e022f58f4c5646dc7fea189c5ecf6946d357bddbe189f5e77816112566ac6f2d1dee8b66a4e6719d9494d7db6f68b02a936b80a535f01b2c3f240ba2d944d85c1b49b8371a7c12377908012f7f996d1237aa720afdc543da08cf159ef1e6760afc223f242ba3fd3caf45a75d02f0af8ea1d279bea3d051444d9c27b1d27c9ccd2816b616b0cae7ee46839b4340038f01b90d4f34dc20f698bd43120a24187ee5807a79053fab4ea8f033f3b8689e7627144ff93fa3556e549a860845edf7", 0xdd) 15:04:26 executing program 6: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x200, 0xdad]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x1, 0x9, 0x4, 0xfff, "b3c4c9aef63fbaf8064f5c7c15e7d654bb020921d382f9a067905727fd731e68"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/21) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x14f1, 0x101]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/201) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x20, 0x10800) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/155) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000380)=0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) inotify_add_watch(r3, &(0x7f0000000400)='./file0\x00', 0xc0000000) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_dev$evdev(&(0x7f0000000480), 0x9, 0x10000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000004c0)=""/4096) prctl$PR_SET_ENDIAN(0x14, 0x2) r4 = creat(&(0x7f00000014c0)='./file0\x00', 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000001500)=""/229) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000001600)=""/237) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001740)) 15:04:26 executing program 5: r0 = shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x7000) shmdt(r0) shmdt(r0) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmdt(r1) shmdt(r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0xc2, &(0x7f0000000040)={@local, @broadcast, @val={@val={0x9100, 0x3, 0x1, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@x25={0x805, {0x0, 0x8, 0xf, "21176c6d2b0947456a62a171482047eb6e879469208d6617553d1c80c95fe5934fc5bda0e741fa364c5c39a790e9b61686bad361e2d1ff358c4f459738a195b8693bc1389089d5b5104d7a41cc2e9f3d26d6372d2629c236f8191263ce36c6db12ffe55a8a756b9af06d305fa86880798f8b053e5f2efa9f8c5a788b3959e56b1dddbeaeae00567bd5471178d8b340c019872d11d34b31a189df97f62eaedf9e818cbb578f47ff9bf2"}}}}, &(0x7f0000000140)={0x0, 0x4, [0x6e1, 0xe02, 0x584, 0x56c]}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0x4c91, 0x9, 0x0, 'queue1\x00', 0x8aa}) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r3) openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000004c0), 0x8001, 0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000580)={'\x00', &(0x7f0000000500)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000600)={{0x0, 0x1f}, 0x1, 0x9055, 0x7fffffff, {0x4, 0x6}, 0x7f, 0xfffffbd9}) 15:04:26 executing program 7: r0 = getgid() fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getgroups(0x3, &(0x7f0000000140)=[r2, r1, r0]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x7, 0x0, {0xffffffffffffffff, 0x2, 0x5, 0x3, 0x401}, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000002c0)={0x3, 0x0, {0x2, 0x0, 0x1000, 0x2, 0x9}, 0x8}) prctl$PR_SET_ENDIAN(0x14, 0x0) setgroups(0x2, &(0x7f0000000340)=[r4, 0xee00]) mkdir(&(0x7f0000000380)='./file0\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000003c0)={0x6, 0x1, {0x1, 0x1, 0x7d3c, 0x0, 0x2}, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000440)={0x1, 0xfffffffc, 0x0, 'queue1\x00', 0x3f}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000540)={0x101, 0x7, 0x0, 'queue0\x00', 0xfffffffb}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000600)={0x7, 0x0, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xda2}, 0x2}) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000680)) getgroups(0x1, &(0x7f00000006c0)=[r0]) fstat(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000780)=[r5]) getgroups(0x5, &(0x7f00000007c0)=[r3, r2, r7, r2, r8]) [ 97.935716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.941178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.943936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.953105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.956613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.959204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.993033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.998304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.000988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.003577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.006932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.009208] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.011423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.014672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.016945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.018343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.020182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.023130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.024430] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.028436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.030676] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.032024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.035300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.036455] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.039085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.049082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.057686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.060053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.076326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.078738] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.081679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.087583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.089688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.094192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.096698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.108653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.110753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.133577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.143172] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.146680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.162930] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.166070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.169492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.171610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.186202] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.187911] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.190281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.190317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.028622] Bluetooth: hci0: command tx timeout [ 100.089868] Bluetooth: hci4: command tx timeout [ 100.152884] Bluetooth: hci3: command tx timeout [ 100.154555] Bluetooth: hci2: command tx timeout [ 100.217895] Bluetooth: hci7: command tx timeout [ 100.219968] Bluetooth: hci1: command tx timeout [ 100.281101] Bluetooth: hci6: command tx timeout [ 100.283010] Bluetooth: hci5: command tx timeout [ 102.074980] Bluetooth: hci0: command tx timeout [ 102.138236] Bluetooth: hci4: command tx timeout [ 102.201050] Bluetooth: hci3: command tx timeout [ 102.202663] Bluetooth: hci2: command tx timeout [ 102.265926] Bluetooth: hci1: command tx timeout [ 102.267671] Bluetooth: hci7: command tx timeout [ 102.329939] Bluetooth: hci6: command tx timeout [ 102.331464] Bluetooth: hci5: command tx timeout [ 104.121078] Bluetooth: hci0: command tx timeout [ 104.185912] Bluetooth: hci4: command tx timeout [ 104.249909] Bluetooth: hci3: command tx timeout [ 104.251491] Bluetooth: hci2: command tx timeout [ 104.314938] Bluetooth: hci7: command tx timeout [ 104.316581] Bluetooth: hci1: command tx timeout [ 104.377918] Bluetooth: hci6: command tx timeout [ 104.379429] Bluetooth: hci5: command tx timeout [ 106.170155] Bluetooth: hci0: command tx timeout [ 106.233011] Bluetooth: hci4: command tx timeout [ 106.298827] Bluetooth: hci3: command tx timeout [ 106.300408] Bluetooth: hci2: command tx timeout [ 106.362118] Bluetooth: hci1: command tx timeout [ 106.363688] Bluetooth: hci7: command tx timeout [ 106.426086] Bluetooth: hci6: command tx timeout [ 106.427925] Bluetooth: hci5: command tx timeout [ 160.455424] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.457090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.458351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.460579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.463061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.465261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.470190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.476611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.479539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.487377] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.490507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.507589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.521306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.525199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.527485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.531749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.533616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.535426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.601911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.611314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.614269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.641644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.642929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.649016] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.650082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.651165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.655986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.696116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.703947] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.706983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.738348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.754091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.755483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.774046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.808802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.818937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.819295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.833261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.834996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.836752] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.838112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.839231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.842904] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.844382] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.845479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.868175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.899574] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.915032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.552974] Bluetooth: hci0: command tx timeout [ 162.554546] Bluetooth: hci2: command tx timeout [ 162.555162] Bluetooth: hci1: command tx timeout [ 162.680870] Bluetooth: hci3: command tx timeout [ 162.746459] Bluetooth: hci4: command tx timeout [ 162.873973] Bluetooth: hci5: command tx timeout [ 162.937896] Bluetooth: hci7: command tx timeout [ 163.001043] Bluetooth: hci6: command tx timeout [ 164.602815] Bluetooth: hci2: command tx timeout [ 164.603365] Bluetooth: hci1: command tx timeout [ 164.603955] Bluetooth: hci0: command tx timeout [ 164.728927] Bluetooth: hci3: command tx timeout [ 164.794055] Bluetooth: hci4: command tx timeout [ 164.921856] Bluetooth: hci5: command tx timeout [ 164.984943] Bluetooth: hci7: command tx timeout [ 165.049840] Bluetooth: hci6: command tx timeout [ 166.649106] Bluetooth: hci2: command tx timeout [ 166.649685] Bluetooth: hci0: command tx timeout [ 166.650445] Bluetooth: hci1: command tx timeout [ 166.777009] Bluetooth: hci3: command tx timeout [ 166.841298] Bluetooth: hci4: command tx timeout [ 166.970853] Bluetooth: hci5: command tx timeout [ 167.032849] Bluetooth: hci7: command tx timeout [ 167.097986] Bluetooth: hci6: command tx timeout [ 168.697927] Bluetooth: hci1: command tx timeout [ 168.699692] Bluetooth: hci2: command tx timeout [ 168.701127] Bluetooth: hci0: command tx timeout [ 168.825907] Bluetooth: hci3: command tx timeout [ 168.888846] Bluetooth: hci4: command tx timeout [ 169.016899] Bluetooth: hci5: command tx timeout [ 169.081976] Bluetooth: hci7: command tx timeout [ 169.145301] Bluetooth: hci6: command tx timeout [ 223.260939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.262593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.266671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.268199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.269621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.273184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.279609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.280911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.284210] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.288036] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.295475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.305365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.307660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.310859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.315248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.328980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.334617] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.336682] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.436278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.437866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.440502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.443088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.446268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.447602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.514352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.536056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.541533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.572351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.578886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.592965] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.596458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.602345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.603911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.610277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.614063] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.615222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.616330] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.616409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.618423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.658576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.689433] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.695619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.830554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.835134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.845261] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.878039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.885351] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.888052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.337051] Bluetooth: hci1: command tx timeout [ 225.338035] Bluetooth: hci0: command tx timeout [ 225.400860] Bluetooth: hci2: command tx timeout [ 225.528860] Bluetooth: hci3: command tx timeout [ 225.785911] Bluetooth: hci5: command tx timeout [ 225.786585] Bluetooth: hci6: command tx timeout [ 225.787253] Bluetooth: hci4: command tx timeout [ 225.978130] Bluetooth: hci7: command tx timeout [ 227.384928] Bluetooth: hci0: command tx timeout [ 227.385484] Bluetooth: hci1: command tx timeout [ 227.449822] Bluetooth: hci2: command tx timeout [ 227.579790] Bluetooth: hci3: command tx timeout [ 227.833858] Bluetooth: hci4: command tx timeout [ 227.834399] Bluetooth: hci6: command tx timeout [ 227.834943] Bluetooth: hci5: command tx timeout [ 228.025935] Bluetooth: hci7: command tx timeout [ 229.433857] Bluetooth: hci0: command tx timeout [ 229.434409] Bluetooth: hci1: command tx timeout [ 229.496853] Bluetooth: hci2: command tx timeout [ 229.626107] Bluetooth: hci3: command tx timeout [ 229.881971] Bluetooth: hci5: command tx timeout [ 229.883835] Bluetooth: hci6: command tx timeout [ 229.884687] Bluetooth: hci4: command tx timeout [ 230.074078] Bluetooth: hci7: command tx timeout [ 231.481871] Bluetooth: hci1: command tx timeout [ 231.482417] Bluetooth: hci0: command tx timeout [ 231.544863] Bluetooth: hci2: command tx timeout [ 231.673921] Bluetooth: hci3: command tx timeout [ 231.929863] Bluetooth: hci4: command tx timeout [ 231.930420] Bluetooth: hci5: command tx timeout [ 231.930944] Bluetooth: hci6: command tx timeout [ 232.124410] Bluetooth: hci7: command tx timeout [ 285.204528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.206144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.208944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.224056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.226627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.228100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.406198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.411026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.412626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.417426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.419618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.422058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.439384] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.447627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.456050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.471437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.477028] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.480980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.526005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.527543] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.537855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.542091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.549036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.556043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.570463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.574324] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.577315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.579857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.582360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.601697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.607428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.619065] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.619991] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.624196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.636126] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.637044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.638383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.651134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.652382] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.653200] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.654293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.657242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.662262] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.664963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 285.666806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.672506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.707091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.714058] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.291055] Bluetooth: hci0: command tx timeout [ 287.481064] Bluetooth: hci1: command tx timeout [ 287.544880] Bluetooth: hci2: command tx timeout [ 287.675896] Bluetooth: hci5: command tx timeout [ 287.736858] Bluetooth: hci7: command tx timeout [ 287.736965] Bluetooth: hci3: command tx timeout [ 287.738957] Bluetooth: hci4: command tx timeout [ 287.800908] Bluetooth: hci6: command tx timeout [ 289.336912] Bluetooth: hci0: command tx timeout [ 289.528900] Bluetooth: hci1: command tx timeout [ 289.600809] Bluetooth: hci2: command tx timeout [ 289.720879] Bluetooth: hci5: command tx timeout [ 289.784864] Bluetooth: hci3: command tx timeout [ 289.784924] Bluetooth: hci4: command tx timeout [ 289.785329] Bluetooth: hci7: command tx timeout [ 289.848864] Bluetooth: hci6: command tx timeout [ 291.384915] Bluetooth: hci0: command tx timeout [ 291.576884] Bluetooth: hci1: command tx timeout [ 291.640933] Bluetooth: hci2: command tx timeout [ 291.768932] Bluetooth: hci5: command tx timeout [ 291.833249] Bluetooth: hci4: command tx timeout [ 291.834077] Bluetooth: hci7: command tx timeout [ 291.834117] Bluetooth: hci3: command tx timeout [ 291.896836] Bluetooth: hci6: command tx timeout [ 293.432817] Bluetooth: hci0: command tx timeout [ 293.624990] Bluetooth: hci1: command tx timeout [ 293.688849] Bluetooth: hci2: command tx timeout [ 293.817024] Bluetooth: hci5: command tx timeout [ 293.881924] Bluetooth: hci3: command tx timeout [ 293.882014] Bluetooth: hci7: command tx timeout [ 293.882389] Bluetooth: hci4: command tx timeout [ 293.945922] Bluetooth: hci6: command tx timeout [ 347.591408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.593364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.601649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.613303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.624451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.626954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.649522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.652229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.659891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.663903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.670010] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.671340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.784638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.788857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.792126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.799232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.803893] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.806484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.843471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.849136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.863332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.868354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.876935] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.881608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.924597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.932078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.935939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.943704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.950358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.951322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.954959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.964252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.976956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.978331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.980039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.982625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.984330] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 347.985516] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.004159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.038614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.040870] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.042646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.052540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.057172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.060485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.068838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.070698] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.071990] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.688961] Bluetooth: hci1: command tx timeout [ 349.689847] Bluetooth: hci0: command tx timeout [ 349.880848] Bluetooth: hci2: command tx timeout [ 349.944797] Bluetooth: hci3: command tx timeout [ 350.010869] Bluetooth: hci6: command tx timeout [ 350.200854] Bluetooth: hci5: command tx timeout [ 350.200895] Bluetooth: hci4: command tx timeout [ 350.968843] Bluetooth: hci7: command tx timeout [ 351.737167] Bluetooth: hci1: command tx timeout [ 351.738015] Bluetooth: hci0: command tx timeout [ 351.930783] Bluetooth: hci2: command tx timeout [ 351.992900] Bluetooth: hci3: command tx timeout [ 352.056827] Bluetooth: hci6: command tx timeout [ 352.250808] Bluetooth: hci4: command tx timeout [ 352.250903] Bluetooth: hci5: command tx timeout [ 353.016882] Bluetooth: hci7: command tx timeout [ 353.784924] Bluetooth: hci0: command tx timeout [ 353.784960] Bluetooth: hci1: command tx timeout [ 353.977982] Bluetooth: hci2: command tx timeout [ 354.040781] Bluetooth: hci3: command tx timeout [ 354.105920] Bluetooth: hci6: command tx timeout [ 354.297076] Bluetooth: hci5: command tx timeout [ 354.297843] Bluetooth: hci4: command tx timeout [ 355.064866] Bluetooth: hci7: command tx timeout [ 355.832901] Bluetooth: hci1: command tx timeout [ 355.832970] Bluetooth: hci0: command tx timeout [ 356.024889] Bluetooth: hci2: command tx timeout [ 356.091864] Bluetooth: hci3: command tx timeout [ 356.153848] Bluetooth: hci6: command tx timeout [ 356.344848] Bluetooth: hci4: command tx timeout [ 356.346286] Bluetooth: hci5: command tx timeout [ 357.114776] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:09:37 Registers: info registers vcpu 0 RAX=ffffed100d9c1387 RBX=1ffff1100d9c1387 RCX=ffffffff814091b3 RDX=0000000000000018 RSI=ffffffff81409e6e RDI=ffffffff88282308 RBP=0000000041d418f2 RSP=ffff88806ce09c28 R8 =0000000000000000 R9 =0000000000000008 R10=0000000000000008 R11=0000000000000000 R12=ffffffff88282308 R13=ffffffff81409e6e R14=ffffffff85a9ce60 R15=0000000000000000 RIP=ffffffff81300b00 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3e5ff09260 CR3=000000000d934000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000010000 RBX=ffff88806cf2d758 RCX=ffffffff814014c3 RDX=ffff888033bfb700 RSI=00000000000f4240 RDI=0000000000000006 RBP=00000000000f4240 RSP=ffff88806cf09d98 R8 =0000000000000000 R9 =fffffbfff0ef96e1 R10=0000005e8e84e580 R11=00000000fa83b2da R12=0000005e8e84e580 R13=0000005e8e75a340 R14=0000000000000001 R15=0000005e8e75a340 RIP=ffffffff814014c6 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f77510f6540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f77512914a1 CR3=000000000fc36000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000