syzkaller login: [ 54.972536] hrtimer: interrupt took 2906428 ns Warning: Permanently added '[localhost]:24394' (ECDSA) to the list of known hosts. 2024/11/13 13:08:45 fuzzer started 2024/11/13 13:08:45 dialing manager at localhost:46317 [ 74.850375] cgroup: Unknown subsys name 'net' [ 74.931780] cgroup: Unknown subsys name 'cpuset' [ 74.950052] cgroup: Unknown subsys name 'rlimit' 2024/11/13 13:09:03 syscalls: 222 2024/11/13 13:09:03 code coverage: enabled 2024/11/13 13:09:03 comparison tracing: enabled 2024/11/13 13:09:03 extra coverage: enabled 2024/11/13 13:09:03 setuid sandbox: enabled 2024/11/13 13:09:03 namespace sandbox: enabled 2024/11/13 13:09:03 Android sandbox: enabled 2024/11/13 13:09:03 fault injection: enabled 2024/11/13 13:09:03 leak checking: enabled 2024/11/13 13:09:03 net packet injection: enabled 2024/11/13 13:09:03 net device setup: enabled 2024/11/13 13:09:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 13:09:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 13:09:03 USB emulation: enabled 2024/11/13 13:09:03 hci packet injection: enabled 2024/11/13 13:09:03 wifi device emulation: enabled 2024/11/13 13:09:03 802.15.4 emulation: enabled 2024/11/13 13:09:03 fetching corpus: 0, signal 0/0 (executing program) 2024/11/13 13:09:04 starting 8 fuzzer processes 13:09:04 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc573b8dc88bae0f6}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000009}, 0x4) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)={0x10000000}) socketpair(0x5, 0xa, 0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x0, 0x804, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40000000}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xfffff001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1b6}, {0x8, 0x15, 0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x48001}, 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000480), 0x7fff, 0xaa00) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c805) read$usbmon(r4, &(0x7f0000000700)=""/53, 0x35) r6 = syz_open_dev$vcsa(&(0x7f0000000740), 0x2, 0x41) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x5, 0x8800}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r6) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008844}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xd, 0xb798, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r9 = syz_open_dev$vcsa(&(0x7f0000000a00), 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb0, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1ff}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x5}}]}, 0xb0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 13:09:04 executing program 1: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x79c, 0x7fffffff, 0x2}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000080)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=0xffffffffffffffff) r0 = epoll_create(0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_pts(r2, 0x72000) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000140)={0x1, 0x1, 0x101, 0x381b, 0x4}) r4 = epoll_create(0x9) epoll_pwait2(r4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x7ff]}, 0x8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000680)={0x1, 0x1, 0x6, 0xf, 0x13, &(0x7f0000000280)}) ioctl$VT_DISALLOCATE(r5, 0x5608) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x21) r6 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x80000000, 0x4a000) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000b00)={0x3, 0x1, 0xe, 0x6, 0x1fa, &(0x7f0000000700)}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x84) 13:09:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r2 = syz_open_pts(r0, 0x440140) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x8, 0x2, 0x1, 0x4, 0x0, 0x1ff}) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x402880) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x15, 0x0, 0xf7, &(0x7f00000000c0)}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000006c0)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/101, 0x65}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000700)) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000740)={0x3, 0x8, 0x20, 0x5, 0x3, 0x7fff}) socketpair(0x9, 0x3, 0x81, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000d80)={0x3, 0x0, 0x1a, 0x15, 0x149, &(0x7f0000000980)}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000dc0)=0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000e40)) 13:09:04 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x3, 0x2, 0x4207, 0x1e, 0x7f, 0x3a, 0x80000000, 0x40}, &(0x7f0000000040)={0x8, 0x4, 0x1ff, 0x268, 0x4f5, 0x6, 0x3, 0xa3e1}, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x4, 0x100, 0x9f6, 0xf487, 0x9}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x652a80, 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x3, 0x0, 0x2}) r0 = epoll_create(0x9) epoll_pwait2(r0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)={[0x8]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x1}, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x6, 0x400) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x1, 0xb5, 0x879}) r2 = syz_open_dev$vcsa(&(0x7f0000000440), 0x7, 0x80000) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_nanosleep(0x6, 0x50ecd1db17e9cb4e, &(0x7f00000004c0)={r3, r4+10000000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2e, 0xa8, @random="77675beda526a27fc48c65a60e0aaa741e0a821e1fd0b0454410ea149a2d2aaca85ae75f43c45a31414a"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) read$snapshot(r2, &(0x7f00000006c0)=""/214, 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000800)) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r7, 0x3590505a61d97ecc, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x200040d0}, 0x20000010) [ 93.299692] audit: type=1400 audit(1731503344.869:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:09:04 executing program 4: ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000000)={{0x7, 0x40}, {0xfff, 0x3}, 0x2, 0x1}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2bb) ioctl$KDSKBLED(r0, 0x4b65, 0x100) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5c}, {0x6, 0x16, 0x3ff}, {0x5}}]}, 0x94}}, 0x40061) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000800)={0x3, 0x0, 0x1, 0x18, 0x143, &(0x7f0000000400)}) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000840)=r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000c80)={0x1, 0x1, 0xd, 0x1e, 0xda, &(0x7f0000000880)}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000cc0)='bbr\x00', 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000d00)={0x1, 0x2, 0x8000}) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) 13:09:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x5, 0x9}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = syz_open_pts(r1, 0x200001) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000100)={0x4, 0x8, 0x6, 0x1, 0x9}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000580)={0x3, 0x0, 0xf, 0xa, 0x38, &(0x7f0000000180)}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000005c0)={0x9, 0x40, 0x1, 0x1, 0x0, 0x7}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x140, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x84b062f984796f4e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x49025222b067453d}}]}, 0x140}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000840)={0x401, 0x7f, 0x0, 0xff, 0x6}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000880)) r6 = syz_open_dev$usbmon(&(0x7f00000008c0), 0x8d9b, 0x200000) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) 13:09:04 executing program 6: r0 = io_uring_setup(0x444c, &(0x7f0000000000)={0x0, 0x5f95, 0x2, 0x2, 0x21d}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x12, r0, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x7fffffff, 0x1, 0xae1}) syz_io_uring_setup(0x2f71, &(0x7f0000000100)={0x0, 0xd3c0, 0x8, 0x0, 0x1c9, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9}, 0x1) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000240)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7ff, 0x200, 0x3, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x400) syz_io_uring_setup(0x7cb5, &(0x7f00000003c0)={0x0, 0xe6a4, 0x1, 0x3, 0x343, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r4 = io_uring_setup(0x42b8, &(0x7f00000004c0)={0x0, 0x530, 0x2, 0x3, 0xbd}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r3) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000680), 0x5, 0x4000) epoll_wait(r7, &(0x7f00000006c0)=[{}, {}], 0x2, 0x0) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48c0}, 0x4040091) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000880)='cubic\x00', 0x6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@multicast1, @in6=@private2, 0x4e24, 0x5, 0x4e23, 0x9, 0xa, 0x20, 0x30, 0x2b}, {0x6, 0x1e26, 0x61, 0xed38, 0x1ff, 0x3, 0x6, 0xfffffffffffffffd}, {0x7ff, 0x7ff, 0x0, 0x2}, 0x200, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x3506, 0x2, 0x0, 0xd1, 0x81, 0x9, 0x2}}, 0xe8) 13:09:05 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x800) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6ebb2) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5ad0a59, 0x141000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000000c0)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x50006012}) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x4, 0x101000) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000180)={0x1e}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000000200)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000280)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x4) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) epoll_create(0x7) [ 94.767164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.770305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.771187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.772377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.774532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.778356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.779813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.781157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.782942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.790490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.791536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.794348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.796871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.799041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.800799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.802375] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.806034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.806069] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.811496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.814184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.820436] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.826460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.840704] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.843098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.863311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.869900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.871176] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.880917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.889459] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.894024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.920857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.924254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.932832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.938181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.951830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.956127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.994152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.009467] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.010800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.014328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.015872] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.017207] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.023315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.061357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.063999] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.128907] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.153463] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.165838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.884081] Bluetooth: hci1: command tx timeout [ 96.884092] Bluetooth: hci3: command tx timeout [ 96.884322] Bluetooth: hci2: command tx timeout [ 96.884918] Bluetooth: hci0: command tx timeout [ 96.963825] Bluetooth: hci4: command tx timeout [ 97.012446] Bluetooth: hci5: command tx timeout [ 97.075854] Bluetooth: hci6: command tx timeout [ 97.204677] Bluetooth: hci7: command tx timeout [ 98.931707] Bluetooth: hci0: command tx timeout [ 98.933775] Bluetooth: hci2: command tx timeout [ 98.933853] Bluetooth: hci1: command tx timeout [ 98.934220] Bluetooth: hci3: command tx timeout [ 98.995757] Bluetooth: hci4: command tx timeout [ 99.059691] Bluetooth: hci5: command tx timeout [ 99.124241] Bluetooth: hci6: command tx timeout [ 99.261693] Bluetooth: hci7: command tx timeout [ 100.980809] Bluetooth: hci3: command tx timeout [ 100.981390] Bluetooth: hci0: command tx timeout [ 100.982133] Bluetooth: hci1: command tx timeout [ 100.982655] Bluetooth: hci2: command tx timeout [ 101.044981] Bluetooth: hci4: command tx timeout [ 101.107664] Bluetooth: hci5: command tx timeout [ 101.171841] Bluetooth: hci6: command tx timeout [ 101.299649] Bluetooth: hci7: command tx timeout [ 103.027728] Bluetooth: hci3: command tx timeout [ 103.028250] Bluetooth: hci1: command tx timeout [ 103.028786] Bluetooth: hci2: command tx timeout [ 103.029250] Bluetooth: hci0: command tx timeout [ 103.091869] Bluetooth: hci4: command tx timeout [ 103.157479] Bluetooth: hci5: command tx timeout [ 103.220638] Bluetooth: hci6: command tx timeout [ 103.348702] Bluetooth: hci7: command tx timeout [ 157.248585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.252290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.256971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.258442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.260127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.261697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.261816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.271927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.272964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.274475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.275449] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.276706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.319238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.320884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.322139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.324814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.326272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.327982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.391339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.415156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.418406] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.422269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.424979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.427784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.438223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.440840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.442921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.446296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.449424] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.451477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.495238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.523734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.533793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.536202] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.543045] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.549899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.557732] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.560462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.570405] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.572882] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.574382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.575328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.578672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.597323] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.607823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.609156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.621727] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.633205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.347787] Bluetooth: hci2: command tx timeout [ 159.347890] Bluetooth: hci1: command tx timeout [ 159.348801] Bluetooth: hci0: command tx timeout [ 159.476674] Bluetooth: hci4: command tx timeout [ 159.540908] Bluetooth: hci3: command tx timeout [ 159.667690] Bluetooth: hci6: command tx timeout [ 159.668333] Bluetooth: hci5: command tx timeout [ 159.731652] Bluetooth: hci7: command tx timeout [ 161.395639] Bluetooth: hci1: command tx timeout [ 161.397328] Bluetooth: hci2: command tx timeout [ 161.398055] Bluetooth: hci0: command tx timeout [ 161.525738] Bluetooth: hci4: command tx timeout [ 161.587629] Bluetooth: hci3: command tx timeout [ 161.715799] Bluetooth: hci6: command tx timeout [ 161.716311] Bluetooth: hci5: command tx timeout [ 161.779737] Bluetooth: hci7: command tx timeout [ 163.443671] Bluetooth: hci0: command tx timeout [ 163.444224] Bluetooth: hci2: command tx timeout [ 163.445771] Bluetooth: hci1: command tx timeout [ 163.572670] Bluetooth: hci4: command tx timeout [ 163.636163] Bluetooth: hci3: command tx timeout [ 163.763645] Bluetooth: hci5: command tx timeout [ 163.764157] Bluetooth: hci6: command tx timeout [ 163.828631] Bluetooth: hci7: command tx timeout [ 165.491742] Bluetooth: hci1: command tx timeout [ 165.492766] Bluetooth: hci0: command tx timeout [ 165.493226] Bluetooth: hci2: command tx timeout [ 165.621637] Bluetooth: hci4: command tx timeout [ 165.684658] Bluetooth: hci3: command tx timeout [ 165.814604] Bluetooth: hci6: command tx timeout [ 165.815145] Bluetooth: hci5: command tx timeout [ 165.876756] Bluetooth: hci7: command tx timeout [ 222.485798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.488303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.494755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.499748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.502815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.505173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.508072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.514433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.515470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.528044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.532609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.533105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.537680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.540403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.541132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.543148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 222.543764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.544166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.546662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.546817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.547718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.548080] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.565190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.565811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.566401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 222.567908] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.573417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.573431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.575079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.582269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.583204] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 222.586292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.588662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.596699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.598972] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.603181] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.603203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.604712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.604792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 222.605709] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 222.609287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.620715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.623279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.629447] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.652427] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 222.655001] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 222.655887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 222.657895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.691787] Bluetooth: hci1: command tx timeout [ 224.691955] Bluetooth: hci2: command tx timeout [ 224.692819] Bluetooth: hci4: command tx timeout [ 224.693329] Bluetooth: hci0: command tx timeout [ 224.693808] Bluetooth: hci7: command tx timeout [ 224.694234] Bluetooth: hci3: command tx timeout [ 224.695521] Bluetooth: hci5: command tx timeout [ 224.756685] Bluetooth: hci6: command tx timeout [ 226.739752] Bluetooth: hci2: command tx timeout [ 226.740287] Bluetooth: hci5: command tx timeout [ 226.740329] Bluetooth: hci3: command tx timeout [ 226.740790] Bluetooth: hci4: command tx timeout [ 226.741230] Bluetooth: hci7: command tx timeout [ 226.741664] Bluetooth: hci1: command tx timeout [ 226.742053] Bluetooth: hci0: command tx timeout [ 226.803890] Bluetooth: hci6: command tx timeout [ 228.788608] Bluetooth: hci0: command tx timeout [ 228.789185] Bluetooth: hci4: command tx timeout [ 228.790341] Bluetooth: hci1: command tx timeout [ 228.790396] Bluetooth: hci7: command tx timeout [ 228.790435] Bluetooth: hci2: command tx timeout [ 228.790474] Bluetooth: hci3: command tx timeout [ 228.791653] Bluetooth: hci5: command tx timeout [ 228.852689] Bluetooth: hci6: command tx timeout [ 230.836813] Bluetooth: hci5: command tx timeout [ 230.838403] Bluetooth: hci4: command tx timeout [ 230.838808] Bluetooth: hci3: command tx timeout [ 230.839813] Bluetooth: hci0: command tx timeout [ 230.840356] Bluetooth: hci2: command tx timeout [ 230.841741] Bluetooth: hci7: command tx timeout [ 230.842985] Bluetooth: hci1: command tx timeout [ 230.899629] Bluetooth: hci6: command tx timeout [ 281.956076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.991445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.992503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.994129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.999458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.000969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.003118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.004903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.006222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.007338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.011339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.011431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.119141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.126273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.130713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.141472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.146702] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.152737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.239483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.243900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.248345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.258132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.279201] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.284277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.312273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.314821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.322752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.326646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.329287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.331787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.334198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.336834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.339178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.342045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.344235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.350699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.352278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.356667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.359472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.374910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.376091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.380671] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.382013] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.382953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.384991] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.386445] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.392825] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.397406] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.083885] Bluetooth: hci0: command tx timeout [ 284.084585] Bluetooth: hci1: command tx timeout [ 284.211645] Bluetooth: hci2: command tx timeout [ 284.339689] Bluetooth: hci3: command tx timeout [ 284.404798] Bluetooth: hci4: command tx timeout [ 284.405609] Bluetooth: hci7: command tx timeout [ 284.406763] Bluetooth: hci5: command tx timeout [ 284.467655] Bluetooth: hci6: command tx timeout [ 286.132585] Bluetooth: hci1: command tx timeout [ 286.134139] Bluetooth: hci0: command tx timeout [ 286.260685] Bluetooth: hci2: command tx timeout [ 286.387706] Bluetooth: hci3: command tx timeout [ 286.451708] Bluetooth: hci7: command tx timeout [ 286.452328] Bluetooth: hci4: command tx timeout [ 286.453077] Bluetooth: hci5: command tx timeout [ 286.516667] Bluetooth: hci6: command tx timeout [ 288.179650] Bluetooth: hci1: command tx timeout [ 288.179837] Bluetooth: hci0: command tx timeout [ 288.309026] Bluetooth: hci2: command tx timeout [ 288.437618] Bluetooth: hci3: command tx timeout [ 288.500824] Bluetooth: hci5: command tx timeout [ 288.501325] Bluetooth: hci4: command tx timeout [ 288.502403] Bluetooth: hci7: command tx timeout [ 288.563599] Bluetooth: hci6: command tx timeout [ 290.227656] Bluetooth: hci1: command tx timeout [ 290.228616] Bluetooth: hci0: command tx timeout [ 290.356621] Bluetooth: hci2: command tx timeout [ 290.484649] Bluetooth: hci3: command tx timeout [ 290.547712] Bluetooth: hci4: command tx timeout [ 290.547767] Bluetooth: hci5: command tx timeout [ 290.549712] Bluetooth: hci7: command tx timeout [ 290.613573] Bluetooth: hci6: command tx timeout [ 344.416853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.433667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.435446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.442272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.445825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.448675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.530891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.534149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.535230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.537612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.539182] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.543356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.561252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.568865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.572836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.594247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.605746] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.609912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.734243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.743011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.745434] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.750768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.751102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.755251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.757887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.757895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.771630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.783744] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.784180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.789142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.794911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.800811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.807772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.810766] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.820080] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.828151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.830234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.830275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.831941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.847337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.849613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.857021] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.862078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.867360] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.875190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.877445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.907799] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.910462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.483635] Bluetooth: hci0: command tx timeout [ 346.611718] Bluetooth: hci1: command tx timeout [ 346.675642] Bluetooth: hci2: command tx timeout [ 346.867945] Bluetooth: hci4: command tx timeout [ 346.996611] Bluetooth: hci5: command tx timeout [ 347.061384] Bluetooth: hci7: command tx timeout [ 347.063022] Bluetooth: hci6: command tx timeout [ 347.251769] Bluetooth: hci3: command tx timeout [ 348.533569] Bluetooth: hci0: command tx timeout [ 348.660597] Bluetooth: hci1: command tx timeout [ 348.724133] Bluetooth: hci2: command tx timeout [ 348.915764] Bluetooth: hci4: command tx timeout [ 349.043669] Bluetooth: hci5: command tx timeout [ 349.108190] Bluetooth: hci7: command tx timeout [ 349.109747] Bluetooth: hci6: command tx timeout [ 349.300576] Bluetooth: hci3: command tx timeout [ 350.580610] Bluetooth: hci0: command tx timeout [ 350.710545] Bluetooth: hci1: command tx timeout [ 350.771566] Bluetooth: hci2: command tx timeout [ 350.963579] Bluetooth: hci4: command tx timeout [ 351.091572] Bluetooth: hci5: command tx timeout [ 351.155632] Bluetooth: hci7: command tx timeout [ 351.157003] Bluetooth: hci6: command tx timeout [ 351.348579] Bluetooth: hci3: command tx timeout [ 352.627682] Bluetooth: hci0: command tx timeout [ 352.755591] Bluetooth: hci1: command tx timeout [ 352.820676] Bluetooth: hci2: command tx timeout [ 353.013577] Bluetooth: hci4: command tx timeout [ 353.139641] Bluetooth: hci5: command tx timeout [ 353.203582] Bluetooth: hci7: command tx timeout [ 353.204990] Bluetooth: hci6: command tx timeout [ 353.396569] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 13:14:15 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=ffff88800dc80000 RCX=ffffffff8192b2c1 RDX=ffff88800dc80000 RSI=ffffffff8192b22d RDI=0000000000000001 RBP=ffff8880167b2f00 RSP=ffff888009707e70 R8 =0000000000000000 R9 =ffffed1001b90000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffed1001b90000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8151d967 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f895fe00260 CR3=0000000031040000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007f5d73641000 RCX=ffffffff81798b94 RDX=ffff888028d5b700 RSI=ffffffff8179b1f4 RDI=0000000000000006 RBP=00007f5d73641000 RSP=ffff88800d207888 R8 =0000000000000000 R9 =ffff888028d5c138 R10=00007f5d73641000 R11=ffff88800dc82028 R12=00007f5d73641000 R13=0000000000000000 R14=00007f5d73641000 R15=ffff88800d207ce0 RIP=ffffffff8485d8c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa69ab9c028 CR3=000000000c68a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000