syzkaller login: [ 99.823674] hrtimer: interrupt took 2885922 ns Warning: Permanently added '[localhost]:2899' (ECDSA) to the list of known hosts. 2025/04/23 17:59:34 fuzzer started 2025/04/23 17:59:35 dialing manager at localhost:42253 [ 105.044091] cgroup: Unknown subsys name 'net' [ 105.176179] cgroup: Unknown subsys name 'cpuset' [ 105.212162] cgroup: Unknown subsys name 'rlimit' 2025/04/23 17:59:54 syscalls: 213 2025/04/23 17:59:54 code coverage: enabled 2025/04/23 17:59:54 comparison tracing: enabled 2025/04/23 17:59:54 extra coverage: enabled 2025/04/23 17:59:54 setuid sandbox: enabled 2025/04/23 17:59:54 namespace sandbox: enabled 2025/04/23 17:59:54 Android sandbox: enabled 2025/04/23 17:59:54 fault injection: enabled 2025/04/23 17:59:54 leak checking: enabled 2025/04/23 17:59:54 net packet injection: enabled 2025/04/23 17:59:54 net device setup: enabled 2025/04/23 17:59:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 17:59:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 17:59:54 USB emulation: enabled 2025/04/23 17:59:54 hci packet injection: enabled 2025/04/23 17:59:54 wifi device emulation: enabled 2025/04/23 17:59:54 802.15.4 emulation: enabled 2025/04/23 17:59:54 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 17:59:55 starting 8 fuzzer processes 17:59:55 executing program 0: semctl$SEM_INFO(0xffffffffffffffff, 0x4, 0x13, &(0x7f0000000000)=""/100) r0 = semget(0x1, 0x0, 0xa) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x3, 0x230) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000001080)=""/4096) r2 = semget(0x2, 0x1, 0x84) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget(0x2, 0x1, 0x4a1) semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000002080)=""/236) semctl$GETVAL(r3, 0x3, 0xc, &(0x7f0000002180)=""/33) accept4$packet(0xffffffffffffffff, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002200)=0x14, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002240)={'ip6tnl0\x00', r4, 0x4, 0x40, 0x1f, 0x800, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x700, 0x3, 0x4}}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000002340), &(0x7f0000002380)=0x4) r6 = semget(0x0, 0x4, 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000023c0)=[0xfff, 0x1, 0x2, 0x1]) r7 = semget(0x1, 0x4, 0x10) semctl$GETPID(r7, 0x2, 0xb, &(0x7f0000002400)=""/52) 17:59:55 executing program 1: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x100000000}, 0xf) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x1, 0x4, 0x7}, 0x7f}}, 0x18) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0xe4, 0x29, 0x2, {0x4, [{{0x2, 0x0, 0x6}, 0x9, 0x7, 0x7, './file0'}, {{0x40, 0x2, 0x1}, 0x1ff, 0x1f, 0x7, './file0'}, {{0x1, 0x2, 0x3}, 0x6, 0x2, 0x7, './file0'}, {{0x8, 0x4, 0x1}, 0x9b, 0x40, 0x7, './file0'}, {{0x4, 0x0, 0x1}, 0xc6b3, 0x8, 0x7, './file0'}, {{0x2, 0x4, 0x7}, 0x1, 0x7c, 0x7, './file0'}, {{0x8, 0x1, 0x5}, 0x4b4, 0xeb, 0x7, './file0'}]}}, 0xe4) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18, 0x71, 0x1, {{0x1, 0x2, 0x2}, 0x8}}, 0x18) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x1}, 0x7) write$P9_RLCREATE(r0, &(0x7f00000002c0)={0x18, 0xf, 0x2, {{0x20, 0x1, 0x6}, 0xfff}}, 0x18) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000300)="47e33dde9fddfef8d566cdae79883c64237526bfe7f015470eaca8b4b592803233bb324c543014c603334a2e9fab3315ec3cf1e07acdc1d99a682a6edac72df43cacc743c347cbd8528248676a87d64992e1562b4d2e785730033cbbb307c065acb6c6ea46aa7d67615246efd91f92e1a1e8aeefc76655a0a39acfe463769d268472811ffd3acdc2bdb5b4d879affa58c2e42da07716e441a8051fe9eed98e4c92e723e0bb6ee4c53c369be1a894fc2ba1a36c") write$P9_RREAD(r0, &(0x7f00000003c0)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000001400)={0x0, 0x1, 0x2, 0x2, 0x15, "b567898a83e5b2eb11be48f5bb50e242741b5e"}) pipe2$9p(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000001480)={0x7, 0x7b, 0x1}, 0x7) write$P9_RSYMLINK(r2, &(0x7f00000014c0)={0x14, 0x11, 0x1, {0x80, 0x4, 0x4}}, 0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe31}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000001600)={0xd, 0xfffff801}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001680)={0x0, 0x2, r3, 0x4, 0x80000}) 17:59:55 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mei', 0x800, 0x10) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x80, 0x1, 0x1}}, 0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x34}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x48001}, 0x24000010) ioctl$VT_DISALLOCATE(r0, 0x5608) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLERROR(r1, &(0x7f00000002c0)={0x19, 0x7, 0x1, {0x10, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x19) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x814) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x10, 0x1, 0x20) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000480)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ip6erspan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', r6, 0x80, 0x8, 0xb41, 0x200, {{0x42, 0x4, 0x1, 0x3f, 0x108, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0xc, 0x36, 0x0, 0x7, [0x10001, 0x80]}, @cipso={0x86, 0x58, 0x0, [{0x2, 0xe, "d66aec9d8f929f48b1b0b71a"}, {0x0, 0x5, "19ddf1"}, {0x0, 0xb, "a8f817f0e8005cab4c"}, {0x6, 0x10, "785eb7078c1b160464ad13fa094b"}, {0x2, 0x11, "c0ef0a3f76050162a7634f8d3caa8e"}, {0x0, 0x7, "81a3648743"}, {0x1, 0xc, "ea05b0fbd3105b27a1a7"}]}, @timestamp={0x44, 0x20, 0x3a, 0x0, 0x2, [0x2, 0x800, 0x80000001, 0x78, 0xd4, 0x6, 0x4]}, @rr={0x7, 0xf, 0xd, [@multicast2, @multicast1, @empty]}, @noop, @rr={0x7, 0x7, 0x4b, [@remote]}, @cipso={0x86, 0x43, 0x2, [{0x7, 0xd, "d83c4e8e243b8b6bb30ca3"}, {0x1, 0x2}, {0x6, 0x9, "d22b02d073d12a"}, {0x2, 0x5, "0d34c4"}, {0x5, 0x10, "f229a0da0213c2c92953b40dcf5f"}, {0x0, 0xc, "38354d6e622419daee4a"}, {0x7, 0x4, '?o'}]}, @noop, @cipso={0x86, 0x14, 0x3, [{0x6, 0xa, "3542f0ff53ee80c9"}, {0x7, 0x2}, {0x7, 0x2}]}]}}}}}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000680)) [ 125.370277] audit: type=1400 audit(1745431195.794:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:59:55 executing program 3: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/55) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x212000, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x20, 0x3, 0x1}) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x0, 0x0, 0x2}, 0xb37a}}, 0x18) write$P9_RMKNOD(r0, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x8, 0x4}}, 0x14) sendto$packet(r0, &(0x7f0000000140)="07f957f6edde7064585a0073af0fbc035d2fbf9248396c831a60ba8a5fb0235b586e085f5867787a96aae470340fd596c07de7731f54c5add30594466173f2f507018ff2fe23b692be0a595a95e6f91b7676ded9946665d4e01c092a1990fe1ea5bd5963c4e1b031763c3e0b26bebdf3be3755a0cf1140482893bd8f03ffe458da28b0e0571858b48380", 0x8a, 0x4000800, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0xcb, 0x6, @broadcast}, 0x14) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) write$P9_ROPEN(r0, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x8}, 0x7fff}}, 0x18) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff2793}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x40}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48081}, 0x4004000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/tcp6\x00') getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000004c0), &(0x7f0000000500)=0x4) pipe2$9p(&(0x7f0000000540), 0x4800) write$P9_RMKNOD(r1, &(0x7f0000000580)={0x14, 0x13, 0x1, {0x2, 0x2}}, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$P9_RMKDIR(r1, &(0x7f00000006c0)={0x14, 0x49, 0x2, {0x10, 0x2, 0x1}}, 0x14) r3 = socket(0x29, 0x2, 0x1ff) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000700)={0x7782d0d3}, 0x4) 17:59:55 executing program 4: r0 = semget(0x2, 0x3, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/80) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0xe) semctl$IPC_RMID(r0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x7, 0x9, 0x400, 0x80000001, 0x4, "3af4c6b77aa2fc443212d60c80f0b0b9a0facc"}) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f00000000c0)=""/38) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000100)=""/61) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000140)=""/228) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000240)=""/231) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000340)) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000380)=""/35) r1 = semget(0x2, 0x2, 0x448) semctl$GETPID(r1, 0x3, 0xb, &(0x7f00000003c0)=""/103) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x2, 0x2, 0x0) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000440)=""/241) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000540)=""/100) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000005c0)={0x0, 0x1}, 0x4) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000600)="6c0eed4c41197662575d07cccb683d506a7b626eae81db68428de8f181e7b09570df5e9895165446dcab53ecc6d5ab50fea9896b4bdcbc2b466cb909cb481441f92dc6a3581b68ad15284fa65764cae9c38ce8fec29ef5cd378b78d6b10e279255cec5923f9bd13c2ced9a5aa7f48ef9e9ef875c4478e3515916a72132bb") 17:59:55 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2d) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2, &(0x7f0000000000)=""/5) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x40, 0x2, 0x3}, {0x3, 0x8, 0x9, 0x7}, {0x8, 0xe1, 0x40, 0x7fff}]}, 0x10) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x80, 0x2, 0x8}, 0x3ff}}, 0x18) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x0, 0x4, 0x3}}, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$P9_RATTACH(r0, &(0x7f0000000180)={0x14, 0x69, 0x2, {0x0, 0x0, 0x1}}, 0x14) write$P9_RLCREATE(r0, &(0x7f00000001c0)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x6}, 0x3}}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) write$P9_RSTAT(r0, &(0x7f0000000200)={0x4a, 0x7d, 0x1, {0x0, 0x43, 0x3, 0x1, {0x10, 0x2}, 0x4000000, 0x101, 0x0, 0x69de, 0x1, '.', 0x8, '.]*!&#^+', 0x3, '-@^', 0x4, '*&)-'}}, 0x4a) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) write$P9_RCREATE(r0, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x2}, 0x10000}}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x9, 0xfffffff8, 0x400, 0x5e, 0x1, r1}) r2 = syz_open_pts(0xffffffffffffffff, 0x80500) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000400)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/rcu_expedited', 0x0, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x81, 0x67, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0xdee, 0x88}}) 17:59:55 executing program 6: semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000000)=""/38) r0 = semget(0x3, 0x1, 0xc0) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000040)=""/8) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000080)=""/4096) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000001100)=""/36) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000001140)=""/101) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r2, 0x110, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x76}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001300), 0x22400, 0x0) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000001340)=""/174) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r3) r4 = semget(0x1, 0x3, 0x610) semctl$GETVAL(r4, 0x2, 0xc, &(0x7f0000001440)) r5 = semget(0x3, 0x2, 0x2) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000001480)=""/39) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000014c0)={0xd, 0x3}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000001500)) r6 = semget(0x0, 0x3, 0x400) semctl$SETVAL(r6, 0x1, 0x10, &(0x7f0000001540)=0x5d) 17:59:55 executing program 7: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x401, 0x2, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x65, 0x0, 0x80, 0x29, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x18, 0x68, 0x0, 0x5, [0x3, 0x6a, 0x5, 0x1ff, 0x2]}, @end, @timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x3}]}, @cipso={0x86, 0x41, 0x0, [{0x6, 0xf, "26d77d862c5c36f3e03151c898"}, {0x5, 0xc, "59d46f2171a7cc25d95d"}, {0x7, 0x5, "a0e8ca"}, {0x6, 0x6, "dfbe529d"}, {0x1, 0x6, "8aa64e06"}, {0x6, 0xf, "59e3853c602d2d13035a210448"}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', r0, 0x1, 0x7, 0x7, 0x3, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0x68, 0x0, 0x1f, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x22, 0x2, [{0x0, 0xf, "1b7e4b2db96c6ed2970a767b28"}, {0x5, 0xd, "52ee67cb1928c67f9b2ddf"}]}, @ssrr={0x89, 0x17, 0xab, [@remote, @remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffffffb}]}, @generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x80000000}]}, @cipso={0x86, 0x2f, 0x3, [{0x2, 0x8, "6be806103c08"}, {0x1, 0x11, "32b25cb61821c682da8a9f8e74316d"}, {0x1, 0x10, "9d04237bf89045cc971c63c33428"}]}]}}}}}) pselect6(0x40, &(0x7f0000000200)={0x7, 0x9, 0x100, 0x2255, 0x2, 0x0, 0xff, 0x100}, &(0x7f0000000240)={0x80000000, 0x0, 0x7, 0x7fffffff, 0x67a0000000000, 0x91, 0x101, 0x8000}, &(0x7f0000000280)={0x7, 0xc2, 0x69a, 0x1, 0x100000000, 0x2, 0xfffffffffffffffe, 0x4}, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x480) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000380)="f357d1f59bdc9384997dd89e205752f0fa6c92ab4018e1b01288971e2d605d63353b48885137be0ac8d92462d9e5917e5019acf9c7a9002b435ff5864aadbde6c349c666f1b89a0430ac7f39fe303576f9617848800bf1f0d3e5a6d072de825bc41fed8bdf1ce3cbfe29dcaf6a01b2fbc9b260be790e7789e98e5657705f378600d2368ad96e5535739cefa7f714e07475b311e2913e89259609446076758d50fa5635c94836262702046616a9a7c3764dceaafcccbf70793c21bfd8a6a686335c85c2b457e25386d3d56b3805ef2143c241ddfae06f") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x5) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0xd, 0x4}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000004c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000500)={0x8, 0x6}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'team0\x00'}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000a40)={0x3, 0x1, 0x14, 0x1e, 0x1b8, &(0x7f0000000640)}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000a80)=0x2, 0x4) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000b40)='pkcs7_test\x00', &(0x7f0000000c80)=@chain) [ 126.917967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.927749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.929216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.932206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.934815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.944575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.963052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.967680] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.000955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.014037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.015804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.016804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.019263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.022559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.025102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.026676] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.028706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.029888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.039850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.041871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.043978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.045934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.049710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.056166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.058796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.062814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.067068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.068434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.070043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.092216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.097294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.129672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.140052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.160090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.169006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.172951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.174475] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.187353] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.215231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.262799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.026869] Bluetooth: hci0: command tx timeout [ 129.091059] Bluetooth: hci4: command tx timeout [ 129.154437] Bluetooth: hci3: command tx timeout [ 129.155985] Bluetooth: hci1: command tx timeout [ 129.157507] Bluetooth: hci2: command tx timeout [ 129.218483] Bluetooth: hci5: command tx timeout [ 129.220001] Bluetooth: hci6: command tx timeout [ 129.346504] Bluetooth: hci7: command tx timeout [ 131.075355] Bluetooth: hci0: command tx timeout [ 131.139497] Bluetooth: hci4: command tx timeout [ 131.203618] Bluetooth: hci1: command tx timeout [ 131.204124] Bluetooth: hci3: command tx timeout [ 131.204652] Bluetooth: hci2: command tx timeout [ 131.267462] Bluetooth: hci5: command tx timeout [ 131.267996] Bluetooth: hci6: command tx timeout [ 131.394443] Bluetooth: hci7: command tx timeout [ 133.124596] Bluetooth: hci0: command tx timeout [ 133.187621] Bluetooth: hci4: command tx timeout [ 133.252355] Bluetooth: hci2: command tx timeout [ 133.252835] Bluetooth: hci3: command tx timeout [ 133.253282] Bluetooth: hci1: command tx timeout [ 133.315421] Bluetooth: hci6: command tx timeout [ 133.315934] Bluetooth: hci5: command tx timeout [ 133.442646] Bluetooth: hci7: command tx timeout [ 135.171784] Bluetooth: hci0: command tx timeout [ 135.236404] Bluetooth: hci4: command tx timeout [ 135.298469] Bluetooth: hci1: command tx timeout [ 135.298944] Bluetooth: hci3: command tx timeout [ 135.299830] Bluetooth: hci2: command tx timeout [ 135.362406] Bluetooth: hci5: command tx timeout [ 135.362882] Bluetooth: hci6: command tx timeout [ 135.490387] Bluetooth: hci7: command tx timeout [ 187.110151] syz-executor.5 (286) used greatest stack depth: 24648 bytes left [ 187.195166] syz-executor.3 (283) used greatest stack depth: 24576 bytes left [ 189.526632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.529091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.537038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.561053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.578928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.595848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.601081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.605000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.606535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.609264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.610101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.612121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.615695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.617277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.619116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.620819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.626011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.630222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.637511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.645698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.778672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.792706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.804897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.810660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.813881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.860503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.875702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.877420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.895999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.911666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.932976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.940761] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.949904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.969488] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.970350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.008664] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.009541] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.020399] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.026834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.034625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.682694] Bluetooth: hci1: command tx timeout [ 191.683775] Bluetooth: hci2: command tx timeout [ 191.684689] Bluetooth: hci0: command tx timeout [ 191.746449] Bluetooth: hci3: command tx timeout [ 191.874412] Bluetooth: hci4: command tx timeout [ 192.066491] Bluetooth: hci5: command tx timeout [ 192.067374] Bluetooth: hci6: command tx timeout [ 192.194459] Bluetooth: hci7: command tx timeout [ 193.730462] Bluetooth: hci1: command tx timeout [ 193.731011] Bluetooth: hci2: command tx timeout [ 193.731584] Bluetooth: hci0: command tx timeout [ 193.794428] Bluetooth: hci3: command tx timeout [ 193.923356] Bluetooth: hci4: command tx timeout [ 194.114499] Bluetooth: hci5: command tx timeout [ 194.115036] Bluetooth: hci6: command tx timeout [ 194.243037] Bluetooth: hci7: command tx timeout [ 195.779513] Bluetooth: hci0: command tx timeout [ 195.780087] Bluetooth: hci2: command tx timeout [ 195.782409] Bluetooth: hci1: command tx timeout [ 195.842439] Bluetooth: hci3: command tx timeout [ 195.972425] Bluetooth: hci4: command tx timeout [ 196.162582] Bluetooth: hci5: command tx timeout [ 196.162742] Bluetooth: hci6: command tx timeout [ 196.290412] Bluetooth: hci7: command tx timeout [ 197.828377] Bluetooth: hci2: command tx timeout [ 197.828566] Bluetooth: hci1: command tx timeout [ 197.829370] Bluetooth: hci0: command tx timeout [ 197.891381] Bluetooth: hci3: command tx timeout [ 198.019389] Bluetooth: hci4: command tx timeout [ 198.210466] Bluetooth: hci5: command tx timeout [ 198.210984] Bluetooth: hci6: command tx timeout [ 198.338424] Bluetooth: hci7: command tx timeout [ 252.036022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.041265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.045808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.048944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.054830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.057075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.059685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.062707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.072676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.079885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.118834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.123741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.125875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.139666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.143230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.185247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.197278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.203625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.227701] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.232494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.320197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.321437] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.324084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.327176] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.332249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.339467] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.361747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.365834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.379971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.390933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.397646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.400952] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.408422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.410057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.428181] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.430079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.431775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.441940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.447631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.453728] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.082416] Bluetooth: hci1: command tx timeout [ 254.147883] Bluetooth: hci0: command tx timeout [ 254.211532] Bluetooth: hci2: command tx timeout [ 254.338542] Bluetooth: hci3: command tx timeout [ 254.466433] Bluetooth: hci5: command tx timeout [ 254.530625] Bluetooth: hci6: command tx timeout [ 254.530743] Bluetooth: hci4: command tx timeout [ 254.531367] Bluetooth: hci7: command tx timeout [ 256.132463] Bluetooth: hci1: command tx timeout [ 256.194446] Bluetooth: hci0: command tx timeout [ 256.259424] Bluetooth: hci2: command tx timeout [ 256.386392] Bluetooth: hci3: command tx timeout [ 256.514560] Bluetooth: hci5: command tx timeout [ 256.578676] Bluetooth: hci7: command tx timeout [ 256.580061] Bluetooth: hci4: command tx timeout [ 256.580647] Bluetooth: hci6: command tx timeout [ 258.178555] Bluetooth: hci1: command tx timeout [ 258.242639] Bluetooth: hci0: command tx timeout [ 258.306611] Bluetooth: hci2: command tx timeout [ 258.434418] Bluetooth: hci3: command tx timeout [ 258.562656] Bluetooth: hci5: command tx timeout [ 258.626405] Bluetooth: hci4: command tx timeout [ 258.626896] Bluetooth: hci6: command tx timeout [ 258.626956] Bluetooth: hci7: command tx timeout [ 260.227719] Bluetooth: hci1: command tx timeout [ 260.291879] Bluetooth: hci0: command tx timeout [ 260.357338] Bluetooth: hci2: command tx timeout [ 260.482527] Bluetooth: hci3: command tx timeout [ 260.610756] Bluetooth: hci5: command tx timeout [ 260.674437] Bluetooth: hci4: command tx timeout [ 260.674506] Bluetooth: hci7: command tx timeout [ 260.674893] Bluetooth: hci6: command tx timeout [ 314.718842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.726217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.728101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.731693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.734881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.766649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.769117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.770510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.771769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.773525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.774859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.779034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.781214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.783567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.790991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.916995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.927971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.929968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.933119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.935859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.981477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.992317] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.994367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.002611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.004771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.011050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.012986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.014563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.014838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.028867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.028961] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.030092] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.032814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.034087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.047612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.062656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.063612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.066581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.087032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.088608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.802443] Bluetooth: hci1: command tx timeout [ 316.803469] Bluetooth: hci0: command tx timeout [ 316.867938] Bluetooth: hci2: command tx timeout [ 316.995400] Bluetooth: hci3: command tx timeout [ 317.059410] Bluetooth: hci5: command tx timeout [ 317.186612] Bluetooth: hci6: command tx timeout [ 317.253392] Bluetooth: hci4: command tx timeout [ 317.254064] Bluetooth: hci7: command tx timeout [ 318.851386] Bluetooth: hci1: command tx timeout [ 318.851933] Bluetooth: hci0: command tx timeout [ 318.915189] Bluetooth: hci2: command tx timeout [ 319.042575] Bluetooth: hci3: command tx timeout [ 319.106396] Bluetooth: hci5: command tx timeout [ 319.234535] Bluetooth: hci6: command tx timeout [ 319.298775] Bluetooth: hci4: command tx timeout [ 319.299262] Bluetooth: hci7: command tx timeout [ 320.898701] Bluetooth: hci1: command tx timeout [ 320.899246] Bluetooth: hci0: command tx timeout [ 320.962390] Bluetooth: hci2: command tx timeout [ 321.090456] Bluetooth: hci3: command tx timeout [ 321.154664] Bluetooth: hci5: command tx timeout [ 321.282505] Bluetooth: hci6: command tx timeout [ 321.346500] Bluetooth: hci7: command tx timeout [ 321.346998] Bluetooth: hci4: command tx timeout [ 322.946443] Bluetooth: hci1: command tx timeout [ 322.946986] Bluetooth: hci0: command tx timeout [ 323.010678] Bluetooth: hci2: command tx timeout [ 323.138429] Bluetooth: hci3: command tx timeout [ 323.202686] Bluetooth: hci5: command tx timeout [ 323.330394] Bluetooth: hci6: command tx timeout [ 323.395352] Bluetooth: hci4: command tx timeout [ 323.395844] Bluetooth: hci7: command tx timeout [ 377.448270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.453799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.457002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.469085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.479014] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.552079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.555691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.558461] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.562609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.567234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.654580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.657366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.660623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.681993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.685893] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.720052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.750758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.768576] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.775993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.783595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.808855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.819608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.832797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.840635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.842116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.847947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.851717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.854656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.875828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.882842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.883567] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.884828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.896631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.902734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.912486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.914943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.955633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.974649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.993268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.018946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.522424] Bluetooth: hci0: command tx timeout [ 379.650580] Bluetooth: hci1: command tx timeout [ 379.778579] Bluetooth: hci2: command tx timeout [ 379.971674] Bluetooth: hci3: command tx timeout [ 380.034400] Bluetooth: hci4: command tx timeout [ 380.035118] Bluetooth: hci6: command tx timeout [ 380.099410] Bluetooth: hci5: command tx timeout [ 380.165391] Bluetooth: hci7: command tx timeout [ 381.571412] Bluetooth: hci0: command tx timeout [ 381.698374] Bluetooth: hci1: command tx timeout [ 381.827387] Bluetooth: hci2: command tx timeout [ 382.019423] Bluetooth: hci3: command tx timeout [ 382.083689] Bluetooth: hci4: command tx timeout [ 382.085229] Bluetooth: hci6: command tx timeout [ 382.147431] Bluetooth: hci5: command tx timeout [ 382.213354] Bluetooth: hci7: command tx timeout [ 383.618375] Bluetooth: hci0: command tx timeout [ 383.746387] Bluetooth: hci1: command tx timeout [ 383.874705] Bluetooth: hci2: command tx timeout [ 384.067439] Bluetooth: hci3: command tx timeout [ 384.131642] Bluetooth: hci4: command tx timeout [ 384.133544] Bluetooth: hci6: command tx timeout [ 384.194952] Bluetooth: hci5: command tx timeout [ 384.259363] Bluetooth: hci7: command tx timeout [ 385.668756] Bluetooth: hci0: command tx timeout [ 385.795701] Bluetooth: hci1: command tx timeout [ 385.922639] Bluetooth: hci2: command tx timeout [ 386.115693] Bluetooth: hci3: command tx timeout [ 386.179775] Bluetooth: hci6: command tx timeout [ 386.181566] Bluetooth: hci4: command tx timeout [ 386.243395] Bluetooth: hci5: command tx timeout [ 386.307663] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:05:04 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00000000000e55d0 RCX=0000000000000008 RDX=0000000000000003 RSI=ffff888034925dc0 RDI=ffffffff81ae0e34 RBP=ffff888008c4b780 RSP=ffff88806ce08dc8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8640ed17 R11=0000000000000000 R12=0000000000000200 R13=0000000000000001 R14=0000000000000000 R15=ffff88800fed0128 RIP=ffffffff817aff2a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f84a9039008 CR3=0000000027480000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=800000003575e065 RCX=ffffffff819f0a89 RDX=ffff88800fe5b780 RSI=ffffffff819f0aac RDI=0000000000000007 RBP=800000003575e067 RSP=ffff88802f3879e8 R8 =0000000000000001 R9 =ffffed10067e281d R10=800000003575e065 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff888033f140e8 R15=00007fc7d441e000 RIP=ffffffff84b06800 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc7d3f4b540 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7d4425000 CR3=00000000252d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000