Warning: Permanently added '[localhost]:9053' (ECDSA) to the list of known hosts. 2025/04/22 17:29:07 fuzzer started 2025/04/22 17:29:07 dialing manager at localhost:42967 syzkaller login: [ 131.950733] cgroup: Unknown subsys name 'net' [ 132.219753] cgroup: Unknown subsys name 'cpuset' [ 132.331686] cgroup: Unknown subsys name 'rlimit' 2025/04/22 17:29:28 syscalls: 235 2025/04/22 17:29:28 code coverage: enabled 2025/04/22 17:29:28 comparison tracing: enabled 2025/04/22 17:29:28 extra coverage: enabled 2025/04/22 17:29:28 setuid sandbox: enabled 2025/04/22 17:29:28 namespace sandbox: enabled 2025/04/22 17:29:28 Android sandbox: enabled 2025/04/22 17:29:28 fault injection: enabled 2025/04/22 17:29:28 leak checking: enabled 2025/04/22 17:29:28 net packet injection: enabled 2025/04/22 17:29:28 net device setup: enabled 2025/04/22 17:29:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/22 17:29:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/22 17:29:28 USB emulation: enabled 2025/04/22 17:29:28 hci packet injection: enabled 2025/04/22 17:29:28 wifi device emulation: enabled 2025/04/22 17:29:28 802.15.4 emulation: enabled 2025/04/22 17:29:28 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 17:29:30 starting 8 fuzzer processes 17:29:30 executing program 0: ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000040)={@lba=0x6, 0x2, 0xa, &(0x7f0000000000)=""/10}) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000080)=@type=0x4) r0 = syz_open_dev$mouse(&(0x7f0000000900), 0xffffffffffffffff, 0x6080) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/uts\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0xfff9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r2 = syz_open_dev$mouse(&(0x7f0000000a80), 0x1f0000000000, 0x100) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000ac0)) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x1) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x78, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x98, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r4 = syz_io_uring_complete(0x0) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000e00)={0x8, 0x8, 0xf, 0x0, @lba=0x7f, 0x5}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000ec0)={0x77359400}, &(0x7f0000000f00)={[0x5]}, 0x8) r5 = syz_io_uring_complete(0x0) ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000f40)={0x81, 0x6}) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000f80)={0x40, 0x4, 0x7f, 0x1, 0x2, 0x3}) 17:29:30 executing program 1: ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x309882, 0x0) ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000040)={0x56, 0x20, 0x9, 0x9, 0x1, 0xf2}) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x8, 0xa9, 0x6a}) r1 = syz_io_uring_complete(0x0) ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f00000000c0)={0x7, 0x80, 0xf8, 0xe9}) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000100)={0xc5, 0x3f, 0x3, 0x46, 0x5, 0x40}) r2 = syz_io_uring_complete(0x0) ioctl$CDROMSTOP(r2, 0x5307) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b80)={'wg1\x00'}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000bc0), 0x121b03, 0x0) ioctl$CDROM_MEDIA_CHANGED(r3, 0x5325, 0x3) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x2) clock_getres(0x6, &(0x7f0000000c00)) ioctl$CDROMGETSPINDOWN(r2, 0x531d, &(0x7f0000000c40)) epoll_wait(0xffffffffffffffff, &(0x7f0000000c80)=[{}], 0x1, 0x3dc) ioctl$CDROMREADALL(r2, 0x5318, &(0x7f0000000cc0)) ioctl$CDROMRESUME(r1, 0x5302) 17:29:30 executing program 2: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) r0 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = accept(r0, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x3, 0xbd, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x80, 0x1f, 0x3}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x100, 0x7, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000800) r3 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x20c81, 0x0) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f0000000440)={0x0, 0x3f, 0x8, 0x0, 0xe5, 0x2}) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000ec0)) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f00000010c0)=@llc={0x1a, 0x110, 0xff, 0x28, 0x5, 0x2, @multicast}}, 0x1) ioctl$CDROM_MEDIA_CHANGED(r3, 0x5325, 0x9) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000001180)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x1, 0x6, 0x5, 0x8, 0xa8b828fe666063d1}, 0x5) r6 = syz_open_dev$loop(&(0x7f0000001200), 0x7, 0x8082) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) r7 = syz_open_dev$loop(&(0x7f0000001240), 0x7, 0x4480) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000001280)={0x20000000}) 17:29:30 executing program 3: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_DEBUG(r0, 0x5330, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x7) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMRESUME(r1, 0x5302) getrusage(0x1, &(0x7f0000000080)) ioctl$CDROMPAUSE(r0, 0x5301) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x408400, 0x0) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f00000001c0)={@lba=0x81, 0x2, 0x26, &(0x7f0000000180)=""/38}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000240)) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000280)={0x5, 0x4, 0x56, 0x1, 0x7, 0x4}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x2f, 0xce, 0x5, 0x6, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, @local, 0x10, 0x7800, 0x6, 0x83b0}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x24, &(0x7f0000000380)={0x0, 0x24, 0xb2, {0xb2, 0x8, "3806cc21a1cce4ae56b927b815cb95835c96eb178dbd7c32a2cd6046c471c8715b47a837d1ee3c3556e90bb8deb49887db462f5b722f9fa648616088fb84a1bbfd642f23e89775a6c09a20a733eb0d86e5a05112e5a5750825755460c475ce35fb4b623a49c290c2f26cbb16346aba4e92bd89a5e1418f985d73b8f9baeb0ab005229a09fc3852bfe6d97607d4ddcf79a631c33a6f2132dd234fdeee1b956205f0ba3274c6e88d4796e4b9f3127c5b70"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "440847e4"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x43e7, 0x7, 0x1, {0x22, 0x18d}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x20, 0xf, 0x2e, "18176d483d0ba15018b88920e8ace89ea5d7db4481cb84554d8cedd3e5225e2a551f1a678c7461601f58335203fc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xd6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000600)={0x20, 0x1, 0x45, "33bc812517624627ce113ea7bd9625d46b20a1347412fbb3764187131fca4dee117e0b8edf84a52b89d849b16bc06a01e201c7025cdbabbe09353f08b7b4b032624abd1a1e"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0xff}}) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000700)=0xb) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000740)={0x20, 0x13, 0xae, 0xee, 0x6, 0xf8}) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f00000011c0)) r4 = syz_open_dev$mouse(&(0x7f0000001c40), 0x2, 0x620902) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) [ 154.164703] audit: type=1400 audit(1745342970.469:8): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:29:30 executing program 4: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="cd4831702679fa099d08490c677f0917dcade45aaf52cfc5955e28b788c53706cc9507721d54a83a353c9d964538dbd5fc51ee3e53e9a3b3dd43e7ccf5deb4bfbbf626630255cb7206f8f31ef7b8a5677c02c1f39d279e32eff392c17f6dcd18cd99f7a75bc4475412eb7c6f0c39b0cf8c820850b14c44581d8558593ad97b103816e4208d9f4ea1d44c656711cd5983af6a855f96293a6ac430aeae527f3300ae40f582c97707439edc8c6d89dfd9efbc28eb526b35b483d8808dbe82fcc5765a26ca0d5f7eb04e1e2db2a3e66215d0afeb24e14dd3179952e7bf187dbdd40d664e17f38e1900", 0xe7) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="3d6f585b6eb2d334c6aabaeba0bb3f5005d53f4209503776286e556ad95ba758da455a1137d169726bbd5d5c181446bd40ebfdf02adf8532242814b855c10808571d5882b8b989aa85e2faffc3d533b93661ea2ca8ae900d9bdc5560a0477e55743eb0b2530efc46a81fd1a091b8bf2df3b8dca73b94843a1883943f0df083864a1ac9439515f91d24e9c08c8e9d55aa4fd088fcf8c8d8", 0x97) r0 = syz_io_uring_complete(0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f00000001c0)={0x5, 0x8, 0xb, 0x1, @lba=0x80000000, 0x1}) r1 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)=0xf67) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000240)={0x1, 0x81, 0x1, 0x2, 0x8, 0x4}) getrlimit(0xc, &(0x7f0000000cc0)) r2 = syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x4c0040) ioctl$CDROMSTART(r2, 0x5308) r3 = syz_io_uring_complete(0x0) ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f0000000d40)) r4 = syz_open_dev$mouse(&(0x7f00000017c0), 0x4, 0x4000) io_uring_setup(0x554e, &(0x7f0000001800)={0x0, 0x2469, 0x1, 0x0, 0x27d, 0x0, r4}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x280, 0x0) ioctl$CDROM_GET_CAPABILITY(r5, 0x5331) r6 = syz_open_dev$sg(&(0x7f00000018c0), 0x8, 0x220000) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000001900)) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000001a80)) 17:29:30 executing program 5: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000801) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x5) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000080)) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x40100) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x10000000) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x100010, r0, 0x0) r2 = accept(r0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x80) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000340)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000380)={0xffffffffffffffff, r2, 0x1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000003c0)=0x9, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f0000000440)="38f5771e8c58ac464335c5e54e782b1aafdfe76337a0e9198a07bf2376dfb161e8e6e39957d563b86afa50e6d64895397b1cd747407a29644d91ff5b1f2080a9d73eacadac82b60e71c01f1fcc70d7cc488ba3ac91c0d22b25e3c6b5f28328137e4ca160937187bd8a665ef2e41ea4ff755e0d19d7c1be594c27211446ec626c9128b9492529c36d7f299ca24c0791842439f7b86227398bed05b97ac9c72446a3ca5836ee329b1098830b4cc68be7065c406356156e5f356d57f93c2d62592db61e8d676ad682a303fe732d908412ac4d487e80688d82d15a3bbc388d22c8b8018a29d07d5ea1", 0xe7, 0x4004050, 0x1}, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00'}) r5 = syz_open_dev$mouse(&(0x7f00000005c0), 0x1, 0x14d400) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r5, 0x8000000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000600)=0x3ff) 17:29:30 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000040)={0x7, 0x9, 0x5, 0xe8}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x6540, 0x0) ioctl$CDROMVOLREAD(r1, 0x5313, &(0x7f00000000c0)) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x100) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_io_uring_complete(0x0) ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000280)={"a872b8ecbc7907eefbf57e63", &(0x7f00000001c0)="26c0398c5030f571073956d3c7f97eecea2c20344e9e983413", 0x19, 0x3, &(0x7f0000000200)={0x9, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, "a8caf9b1", 0x80, "b14f592e", 0x64, 0x4, 0x0, "a23ee3", "6ed59daff519807e300f2d7f18fcc500547e4bb1e6e308e4dc8beab4e14ae9c4acab4f9cc431bc9c197d7328848e"}, 0x3, 0x4, 0x7ff, &(0x7f0000000240)}) r4 = syz_open_dev$mouse(&(0x7f00000002c0), 0x80000000, 0x2) ioctl$CDROMREADAUDIO(r4, 0x530e, &(0x7f0000000340)={@msf={0x0, 0x0, 0x1}, 0x2, 0x28, &(0x7f0000000300)=""/40}) r5 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0) ioctl$CDROMSTOP(r5, 0x5307) ioctl$CDROMREADAUDIO(r5, 0x530e, &(0x7f0000000400)={@lba=0x5, 0x3, 0x1a, &(0x7f00000003c0)=""/26}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$CDROMRESUME(r0, 0x5302) r6 = epoll_create(0x7fff) epoll_pwait2(r6, &(0x7f0000000440)=[{}, {}], 0x2, &(0x7f0000000480), &(0x7f00000004c0), 0x8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1000c061) 17:29:30 executing program 7: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffb, 0x400280) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000100), 0xffffffffffffffd7, 0x3c100) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x7, 0xfff, 0x7c24}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x4, 0x4, 0x6, 0x200, 0xcc88c5a71cf7e4e7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x788, 0x700, 0x7, 0x80000001}}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000340)={0x3, 0x46, 0xa1, 0x4, 0x1f, 0x3f}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000dc0)={'sit0\x00', r4, 0x29, 0xff, 0x0, 0xffff, 0x1, @loopback, @mcast2, 0x708, 0x7800, 0xfffffff8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'syztnl0\x00', r5, 0x324a3d368958e842, 0x20, 0x40, 0x400, 0x8, @remote, @loopback, 0x7, 0x7, 0x0, 0x1000}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000fc0)={'ip6tnl0\x00', &(0x7f0000000f40)={'syztnl0\x00', r4, 0x4, 0x0, 0x98, 0x1, 0x4c, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x20, 0x3f, 0x5}}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001040)={'batadv_slave_1\x00'}) [ 155.432651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.435437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.440385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.450618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.457153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.461416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.690662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.697323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.699154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.700681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.703317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.707672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.711767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.716351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.717552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.724066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.727225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.729528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.738578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.764192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.766443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.770721] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.775624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.779932] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.781540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.786750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.794796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.829174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.841268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.842956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.845155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.849774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.851261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.854178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.856377] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.859900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.898804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.952567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.958510] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.959514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.972095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.987557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.988254] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.016323] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.023301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.025353] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.049502] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.054151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.513170] Bluetooth: hci0: command tx timeout [ 157.766513] Bluetooth: hci1: command tx timeout [ 157.894521] Bluetooth: hci5: command tx timeout [ 157.895287] Bluetooth: hci3: command tx timeout [ 157.895739] Bluetooth: hci2: command tx timeout [ 157.958233] Bluetooth: hci4: command tx timeout [ 158.086182] Bluetooth: hci7: command tx timeout [ 158.150910] Bluetooth: hci6: command tx timeout [ 159.558066] Bluetooth: hci0: command tx timeout [ 159.815904] Bluetooth: hci1: command tx timeout [ 159.942200] Bluetooth: hci5: command tx timeout [ 159.943090] Bluetooth: hci2: command tx timeout [ 159.943680] Bluetooth: hci3: command tx timeout [ 160.007916] Bluetooth: hci4: command tx timeout [ 160.135038] Bluetooth: hci7: command tx timeout [ 160.199587] Bluetooth: hci6: command tx timeout [ 161.608955] Bluetooth: hci0: command tx timeout [ 161.862916] Bluetooth: hci1: command tx timeout [ 161.989996] Bluetooth: hci2: command tx timeout [ 161.990606] Bluetooth: hci3: command tx timeout [ 161.991137] Bluetooth: hci5: command tx timeout [ 162.055372] Bluetooth: hci4: command tx timeout [ 162.182896] Bluetooth: hci7: command tx timeout [ 162.246573] Bluetooth: hci6: command tx timeout [ 163.655942] Bluetooth: hci0: command tx timeout [ 163.911903] Bluetooth: hci1: command tx timeout [ 164.039507] Bluetooth: hci5: command tx timeout [ 164.041157] Bluetooth: hci3: command tx timeout [ 164.042482] Bluetooth: hci2: command tx timeout [ 164.102955] Bluetooth: hci4: command tx timeout [ 164.230920] Bluetooth: hci7: command tx timeout [ 164.294999] Bluetooth: hci6: command tx timeout [ 216.148797] syz-executor.1 (290) used greatest stack depth: 23248 bytes left [ 218.786580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.791356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.796293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.805763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.809739] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.815513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.986678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.988927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.995093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.012796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.020288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.030571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.038313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.046988] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.057513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.061373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.067080] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.071641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.081309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.084618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.087129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.089117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.091791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.094244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.131792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.140048] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.141097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.142226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.142552] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.146028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.148757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.150891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.153633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.158029] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.161576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.173452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.183351] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.187213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.191634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.194796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.199266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.210420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.216028] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.220586] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.228426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.281394] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.302222] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.308256] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.871922] Bluetooth: hci0: command tx timeout [ 221.126009] Bluetooth: hci6: command tx timeout [ 221.254382] Bluetooth: hci3: command tx timeout [ 221.254426] Bluetooth: hci1: command tx timeout [ 221.318077] Bluetooth: hci4: command tx timeout [ 221.383023] Bluetooth: hci2: command tx timeout [ 221.383053] Bluetooth: hci5: command tx timeout [ 221.446453] Bluetooth: hci7: command tx timeout [ 222.919017] Bluetooth: hci0: command tx timeout [ 223.177062] Bluetooth: hci6: command tx timeout [ 223.301935] Bluetooth: hci3: command tx timeout [ 223.302287] Bluetooth: hci1: command tx timeout [ 223.365979] Bluetooth: hci4: command tx timeout [ 223.430433] Bluetooth: hci5: command tx timeout [ 223.430466] Bluetooth: hci2: command tx timeout [ 223.494386] Bluetooth: hci7: command tx timeout [ 224.967016] Bluetooth: hci0: command tx timeout [ 225.222048] Bluetooth: hci6: command tx timeout [ 225.350290] Bluetooth: hci1: command tx timeout [ 225.350988] Bluetooth: hci3: command tx timeout [ 225.414896] Bluetooth: hci4: command tx timeout [ 225.478066] Bluetooth: hci5: command tx timeout [ 225.478299] Bluetooth: hci2: command tx timeout [ 225.542213] Bluetooth: hci7: command tx timeout [ 227.013958] Bluetooth: hci0: command tx timeout [ 227.271896] Bluetooth: hci6: command tx timeout [ 227.398666] Bluetooth: hci1: command tx timeout [ 227.398696] Bluetooth: hci3: command tx timeout [ 227.462152] Bluetooth: hci4: command tx timeout [ 227.525948] Bluetooth: hci5: command tx timeout [ 227.527046] Bluetooth: hci2: command tx timeout [ 227.590168] Bluetooth: hci7: command tx timeout [ 281.124472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.127770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.131687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.146080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.152203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.154809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.458664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.466657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.472270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.486444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.494215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.509447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.509736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.514254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.517258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.545297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.566327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.576704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.764512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.774261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.778730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.803027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.828373] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.856816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.863324] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.870388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.877282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.884053] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.914935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.916854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.920590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.927438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.928668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.936697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.962684] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.973771] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.975675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.977315] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.989482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.996927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.998206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.000148] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.007243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.012428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.017238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.024529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.029407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.067078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.207210] Bluetooth: hci0: command tx timeout [ 283.589996] Bluetooth: hci1: command tx timeout [ 283.672690] Bluetooth: hci2: command tx timeout [ 283.911141] Bluetooth: hci3: command tx timeout [ 284.103186] Bluetooth: hci6: command tx timeout [ 284.166255] Bluetooth: hci7: command tx timeout [ 284.232501] Bluetooth: hci5: command tx timeout [ 284.232546] Bluetooth: hci4: command tx timeout [ 285.254328] Bluetooth: hci0: command tx timeout [ 285.638025] Bluetooth: hci1: command tx timeout [ 285.702255] Bluetooth: hci2: command tx timeout [ 285.958255] Bluetooth: hci3: command tx timeout [ 286.151466] Bluetooth: hci6: command tx timeout [ 286.214880] Bluetooth: hci7: command tx timeout [ 286.278201] Bluetooth: hci5: command tx timeout [ 286.279665] Bluetooth: hci4: command tx timeout [ 287.301955] Bluetooth: hci0: command tx timeout [ 287.686337] Bluetooth: hci1: command tx timeout [ 287.751012] Bluetooth: hci2: command tx timeout [ 288.007097] Bluetooth: hci3: command tx timeout [ 288.197966] Bluetooth: hci6: command tx timeout [ 288.262264] Bluetooth: hci7: command tx timeout [ 288.326363] Bluetooth: hci4: command tx timeout [ 288.326907] Bluetooth: hci5: command tx timeout [ 289.350946] Bluetooth: hci0: command tx timeout [ 289.735458] Bluetooth: hci1: command tx timeout [ 289.797937] Bluetooth: hci2: command tx timeout [ 290.054149] Bluetooth: hci3: command tx timeout [ 290.246042] Bluetooth: hci6: command tx timeout [ 290.310977] Bluetooth: hci7: command tx timeout [ 290.373938] Bluetooth: hci5: command tx timeout [ 290.375153] Bluetooth: hci4: command tx timeout [ 344.003359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.005504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.010270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.014072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.016610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.018697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.362008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.365784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.369133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.373962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.414079] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.415673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.450429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.465217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.467074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.474564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.477465] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.479131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.504148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.509328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.516605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.553482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.560332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.567317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.579986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.590292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.594601] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.599100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.603067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.610432] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.619505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.620781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.622114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.631542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.632747] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.635684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.636658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.639446] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.641564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.644637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.656633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.670349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.678131] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.680405] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.686802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.694311] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.696776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.698342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.054966] Bluetooth: hci0: command tx timeout [ 346.502104] Bluetooth: hci2: command tx timeout [ 346.502242] Bluetooth: hci1: command tx timeout [ 346.822214] Bluetooth: hci3: command tx timeout [ 346.886013] Bluetooth: hci5: command tx timeout [ 346.950002] Bluetooth: hci6: command tx timeout [ 347.079232] Bluetooth: hci7: command tx timeout [ 347.142022] Bluetooth: hci4: command tx timeout [ 348.102423] Bluetooth: hci0: command tx timeout [ 348.551025] Bluetooth: hci2: command tx timeout [ 348.552791] Bluetooth: hci1: command tx timeout [ 348.871634] Bluetooth: hci3: command tx timeout [ 348.934931] Bluetooth: hci5: command tx timeout [ 348.999206] Bluetooth: hci6: command tx timeout [ 349.125974] Bluetooth: hci7: command tx timeout [ 349.190941] Bluetooth: hci4: command tx timeout [ 350.149918] Bluetooth: hci0: command tx timeout [ 350.597946] Bluetooth: hci2: command tx timeout [ 350.600927] Bluetooth: hci1: command tx timeout [ 350.918923] Bluetooth: hci3: command tx timeout [ 350.983486] Bluetooth: hci5: command tx timeout [ 351.046973] Bluetooth: hci6: command tx timeout [ 351.175294] Bluetooth: hci7: command tx timeout [ 351.239349] Bluetooth: hci4: command tx timeout [ 352.199029] Bluetooth: hci0: command tx timeout [ 352.646370] Bluetooth: hci1: command tx timeout [ 352.646464] Bluetooth: hci2: command tx timeout [ 352.968607] Bluetooth: hci3: command tx timeout [ 353.032241] Bluetooth: hci5: command tx timeout [ 353.093955] Bluetooth: hci6: command tx timeout [ 353.222981] Bluetooth: hci7: command tx timeout [ 353.285943] Bluetooth: hci4: command tx timeout [ 406.757504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.783403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.791653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.803742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.809058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 406.818053] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.966468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.973233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.975496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.980681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.987678] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 406.989778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.266929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.276082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.279237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.290195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.299056] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.322584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.329675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.334923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.344253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.354041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.367406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.377930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.398028] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 407.414428] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 407.422347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 407.425075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.427647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.432268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.460407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.468808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 407.470276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 407.480539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.484119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.490666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.497784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.499127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 407.501260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.502334] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.509309] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.529671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.539985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.594256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.596564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.600941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.632288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 407.635410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 408.904116] Bluetooth: hci0: command tx timeout [ 409.029974] Bluetooth: hci1: command tx timeout [ 409.478155] Bluetooth: hci2: command tx timeout [ 409.542993] Bluetooth: hci3: command tx timeout [ 409.606026] Bluetooth: hci6: command tx timeout [ 409.606197] Bluetooth: hci5: command tx timeout [ 409.671086] Bluetooth: hci7: command tx timeout [ 409.734224] Bluetooth: hci4: command tx timeout [ 410.949960] Bluetooth: hci0: command tx timeout [ 411.078957] Bluetooth: hci1: command tx timeout [ 411.527816] Bluetooth: hci2: command tx timeout [ 411.591934] Bluetooth: hci3: command tx timeout [ 411.654040] Bluetooth: hci6: command tx timeout [ 411.656039] Bluetooth: hci5: command tx timeout [ 411.717943] Bluetooth: hci7: command tx timeout [ 411.782137] Bluetooth: hci4: command tx timeout [ 412.998888] Bluetooth: hci0: command tx timeout [ 413.126180] Bluetooth: hci1: command tx timeout [ 413.574393] Bluetooth: hci2: command tx timeout [ 413.637990] Bluetooth: hci3: command tx timeout [ 413.703285] Bluetooth: hci6: command tx timeout [ 413.705967] Bluetooth: hci5: command tx timeout [ 413.767326] Bluetooth: hci7: command tx timeout [ 413.832879] Bluetooth: hci4: command tx timeout [ 415.047287] Bluetooth: hci0: command tx timeout [ 415.173983] Bluetooth: hci1: command tx timeout [ 415.622942] Bluetooth: hci2: command tx timeout [ 415.686877] Bluetooth: hci3: command tx timeout [ 415.750443] Bluetooth: hci6: command tx timeout [ 415.750492] Bluetooth: hci5: command tx timeout [ 415.814062] Bluetooth: hci7: command tx timeout [ 415.878224] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 17:34:37 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff814f850e RDX=1ffff110068364c6 RSI=0000000000000008 RDI=ffffffff87f13e40 RBP=ffff8880341b2610 RSP=ffff88802f5ef7f0 R8 =0000000000000001 R9 =0000000000020005 R10=0000000000000000 R11=0000000000022b93 R12=ffff8880341b1bc0 R13=ffffffff85c19780 R14=0000000000000000 R15=0000000000020000 RIP=ffffffff81ac3628 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd25226e38 CR3=0000000034688000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85c19780 RDI=ffff888032fb83fc RBP=ffff888032fb8000 RSP=ffff88802cd27708 R8 =0000000000000001 R9 =ffff888032fb8a48 R10=ffffffff864040d7 R11=000000000000436f R12=ffff888032fb8000 R13=ffff88802cd27840 R14=ffff88802cd27890 R15=ffff88802cd277f8 RIP=ffffffff815a6fa3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f05d6561b90 CR3=0000000028fd2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000