Warning: Permanently added '[localhost]:13551' (ECDSA) to the list of known hosts. 2025/04/27 10:37:16 fuzzer started 2025/04/27 10:37:17 dialing manager at localhost:46629 syzkaller login: [ 100.611632] cgroup: Unknown subsys name 'net' [ 100.754636] cgroup: Unknown subsys name 'cpuset' [ 100.810638] cgroup: Unknown subsys name 'rlimit' 2025/04/27 10:37:33 syscalls: 200 2025/04/27 10:37:33 code coverage: enabled 2025/04/27 10:37:33 comparison tracing: enabled 2025/04/27 10:37:33 extra coverage: enabled 2025/04/27 10:37:33 setuid sandbox: enabled 2025/04/27 10:37:33 namespace sandbox: enabled 2025/04/27 10:37:33 Android sandbox: enabled 2025/04/27 10:37:33 fault injection: enabled 2025/04/27 10:37:33 leak checking: enabled 2025/04/27 10:37:33 net packet injection: enabled 2025/04/27 10:37:33 net device setup: enabled 2025/04/27 10:37:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 10:37:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 10:37:33 USB emulation: enabled 2025/04/27 10:37:33 hci packet injection: enabled 2025/04/27 10:37:33 wifi device emulation: enabled 2025/04/27 10:37:33 802.15.4 emulation: enabled 2025/04/27 10:37:33 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 10:37:35 starting 8 fuzzer processes 10:37:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80a00) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/4) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/211) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000001c0)={0x0, 0xfffffffb, 0xdb6, 0x8, 0xe17d, 0x3}) write$P9_RLOPEN(r1, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0xd388034976124278, 0x1, 0x3}, 0x1ff}}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0x200) write$P9_RREADLINK(r1, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$P9_RREADDIR(r1, &(0x7f00000002c0)={0xcb, 0x29, 0x2, {0x2, [{{0x20, 0x4, 0x7}, 0x8, 0x80, 0x7, './file0'}, {{0x10, 0x3, 0x3}, 0xa6b, 0x6e, 0x7, './file0'}, {{0x8, 0x1, 0x3}, 0x100000000, 0x2, 0xd, './file0/file0'}, {{0x4, 0x2, 0x4}, 0x80000000, 0x2, 0x7, './file0'}, {{0x0, 0x1}, 0x80, 0xff, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x0, 0x1, 0x7, './file0'}]}}, 0xcb) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000003c0)=[0x5]) write$P9_RVERSION(r1, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/155) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0x4f, 0x29, 0x2, {0x9, [{{0x20, 0x2, 0x5}, 0x0, 0x4, 0xd, './file0/file0'}, {{0xc0}, 0x4265, 0x12, 0x7, './file0'}]}}, 0x4f) write$P9_RATTACH(r1, &(0x7f0000000580)={0x14, 0x69, 0x1, {0x8, 0x2}}, 0x14) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000005c0)=""/14) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000600)=""/219) r2 = syz_io_uring_complete(0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000700)="9aa4a3f624341d40d92df248ae5b60"}) write$P9_RWRITE(r2, &(0x7f0000000780)={0xb, 0x77, 0x2, 0x101}, 0xb) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000800)=0x80000) 10:37:35 executing program 1: ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f00000000c0)=@bca={0x3, 0xbc, "5695e19072a8f261d7f71a7b6fe0acab57676a592fc6cbeb82d6b4379241532641369dbb9f1214943e0e3384383e389805bbbe3a5d46350919ee7782afea32bcb526d1127f1ee1d89fc3ae555e4d21e17b2b638888cc7ddcc2cc6ba0efb676985b662b5a738d9e9faabaccda80e51f6181c43e1ff1e531ac1fd308df805d7f1016de29c7052f3d77e0a1dbaa680e4bd2f8315130602805721d0afd536a7a5db6c9aaba7e160b5afad2318e18ab97393bd766de6ef1507063750a3cd3"}) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000900)={0x7, 0x2}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000940)=0x3, 0x4) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0) ioctl$CDROMEJECT(r2, 0x5309) ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f00000009c0)) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000a00)=""/130) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}]}, 0x4c}}, 0x40000) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x8000, 0x5, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x40001) clock_settime(0x7, &(0x7f0000000f00)={0x0, 0x989680}) socket(0x1, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x94, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "bb779b8ee65ec75729e7b0fb114eccd2cd91ef81e7c0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10:37:35 executing program 2: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000000)=""/46) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/4096) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000001040)=""/169) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001100)=""/246) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000001200), 0x9, 0x1) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000001240)=""/105) r1 = syz_io_uring_complete(0x0) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f00000012c0)={0x40, 0x77, 0x5, 0x3f, 0x9, 0x1}) r2 = inotify_add_watch(r1, &(0x7f0000001300)='./file0\x00', 0x10000000) inotify_rm_watch(r1, r2) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000001340)=[0xa6bc, 0x4]) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001380)={0x49, 0x29, 0x2, {0x1, [{{0x8, 0x0, 0x6}, 0x9, 0x5, 0x7, './file0'}, {{0x40, 0x2, 0x2}, 0x4436, 0xff, 0x7, './file1'}]}}, 0x49) r3 = socket(0x9, 0x6, 0x10001) syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r3) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001440)=""/146) write$P9_RLINK(r1, &(0x7f0000001500)={0x7, 0x47, 0x1}, 0x7) r4 = syz_open_dev$evdev(&(0x7f0000001540), 0x937, 0x2) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000001580)=""/217) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000001680)=0x3) 10:37:35 executing program 3: r0 = inotify_init1(0x800) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1000501) inotify_rm_watch(r1, r2) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x8) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'gretap0', 0x32, 0x32}, 0xa) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x8000, 0x103000) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000140)=[0x1, 0x100]) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r4 = syz_io_uring_complete(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x4) inotify_init1(0x80800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_open_dev$evdev(&(0x7f00000002c0), 0x8, 0x80) r6 = syz_io_uring_complete(0x0) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000300)=""/4096) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000001300)) [ 119.020232] audit: type=1400 audit(1745750255.752:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:37:35 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000100)={0xa0, 0x19, 0x2, {0x100, {0x8, 0x4, 0x2}, 0x28, 0xee00, 0x0, 0x3, 0x7fff, 0x1ff, 0x6ee6, 0x0, 0x4, 0xfb1, 0x2, 0x0, 0x3, 0x6, 0x81, 0x8, 0x100000000, 0x7ff}}, 0xa0) r3 = syz_io_uring_complete(0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x6a, 0x7d, 0x1, {0x0, 0x63, 0x85e, 0x800, {0xa, 0x3, 0x5}, 0xc0810000, 0xffff, 0xd, 0x9, 0x12, '/dev/loop-control\x00', 0xa, '/dev/hpet\x00', 0x2, ':\xf7', 0x12, '/dev/loop-control\x00'}}, 0x6a) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000280)=""/66) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000300)) write$P9_RSETATTR(r4, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7) write$P9_RUNLINKAT(r3, &(0x7f0000000380)={0x7, 0x4d, 0x2}, 0x7) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x6d, 0x1}, 0x7) write$P9_RREAD(r3, &(0x7f0000000400)={0x28, 0x75, 0x1, {0x1d, "7a19d70f01cd51131c8d9a25cba1da6a59695c222da34386cef30d47f1"}}, 0x28) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATu(r5, &(0x7f0000000480)={0x67, 0x7d, 0x1, {{0x0, 0x50, 0x200, 0x7, {0x80, 0x0, 0x2}, 0x0, 0x7fffffff, 0x800000, 0x79a, 0xa, '/dev/hpet\x00', 0xa, '/dev/hpet\x00', 0x5, '!+\\)[', 0x4, '#{&\''}, 0x2, ':\xf7', 0xffffffffffffffff, 0xffffffffffffffff}}, 0x67) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) write$P9_RRENAMEAT(r6, &(0x7f0000000540)={0x7, 0x4b, 0x1}, 0x7) 10:37:35 executing program 5: r0 = syz_io_uring_complete(0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0xdd, 0x29, 0x1, {0x9, [{{0x40, 0x4, 0x6}, 0x80, 0x3f, 0x7, './file0'}, {{0x20, 0x2, 0x6}, 0x1, 0x40, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x7}, {{0x40, 0x1, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x40, 0x1, 0x1}, 0xffffffffffffff01, 0xc, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x3, 0x39, 0x7, './file0'}, {{0x20, 0x1, 0x4}, 0x8, 0x80, 0x7, './file0'}]}}, 0xdd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x48467637a9e6d1b9) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0xe4, 0x29, 0x1, {0xaa, [{{0x10, 0x1, 0x1}, 0x7, 0x20, 0x7, './file0'}, {{0x40, 0x1}, 0x0, 0x68, 0x7, './file0'}, {{0x10, 0x0, 0x6}, 0x3a, 0x4, 0x7, './file0'}, {{0x1, 0x0, 0x6}, 0x6, 0x40, 0x7, './file0'}, {{0x4, 0x0, 0x6}, 0x2, 0x3f, 0x7, './file0'}, {{0x0, 0x3, 0x3}, 0x8, 0x70, 0x7, './file0'}, {{0x10, 0x4, 0x6}, 0x100000001, 0x73, 0x7, './file0'}]}}, 0xe4) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futex(&(0x7f00000002c0)=0x1, 0x7, 0x1, &(0x7f0000000340)={r3, r4+60000000}, &(0x7f0000000380)=0x2, 0x0) write$P9_RRENAME(r2, &(0x7f00000003c0)={0x7, 0x15, 0x1}, 0x7) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000400)) write$P9_RSETATTR(r0, &(0x7f0000000440)={0x7, 0x1b, 0x2}, 0x7) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) ioctl$CDROM_LOCKDOOR(r5, 0x5329, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000000540)={0x3, 0x9, 0x6, 0x2, 0x40, 0x7, @msf={0x3, 0x1, 0x9}, @lba=0x1000}) write$P9_RRENAME(r2, &(0x7f0000000580)={0x7, 0x15, 0x1}, 0x7) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r7, &(0x7f0000000600)={0x8, 0x35, 0x1, 0x2}, 0x8) modify_ldt$write(0x1, &(0x7f0000000640)={0x9, 0x20101000, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 10:37:35 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x20, 0xa, 0xe3, {0xe3, 0x5, "10483458b8479ee3fa1d034f6fd1eaad272a688869f51f609104bdcf5a15b59fb00a90c50dcc39647bd78aa8ab36973f47551a2e0e221daaf345ceb5fc62c77e1a00c66446b9acc780c7f8afeae7c0e337e163e61d1f2e86536ab3aaf3f9763258cee9f9506b42e42f7d109428312db7d03bfa24ee5e5fc5f0ddbe67fbc0c7a1197265190ada1ed174fa964bb22b8dd2177183670d6794ed7c7944ef84699f0c65fe40bccf8769b51ec2a476eee3e867005a840c76cdd5db48dcbe1072fc988d8e8ed0b1b2c30c96a149386b86aee33896e019e6d169b9f2560418b61cafd7c5df"}}, &(0x7f0000000140)={0x0, 0x3, 0x97, @string={0x97, 0x3, "0fadcfae78cf6ba3002f1f54b163cff958069fc4a27a84c2d4483ca348b25bb7775b9371c932f4e9307e212a5870f4f1a72d9c6dc685799679a6e1aa2332d2baa8852316b02948b41681062354e8b611bbd998a63987cb9294971e29d71715390f8b9eb68abeb5d410f6f9cdc28596137517fe1fe5b63bc892b729ce4dce17835ffb0c625fd975e1594861c1f2c744a815527397c1"}}, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x2, "1f8e01b9"}, @local=@item_4={0x3, 0x2, 0x7, "d96ad7a3"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xc7d}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x3, "f1ffc4"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0xc2, "da37ebfe086168e31c3e296b935229115a14a86d8273b1e70ce54fecf5ebbe51aabd2d502a0fef50c629fdefb036026d0f1cf62acd02240550eb29ceea9df9f65b4aba084bc60ae56139939ff71ba9f7d2fcfe772b6db1c8db448ddbc86328f3733d029f031fb4d63aafe4fc27610e95486595eca1e17b99f938f7389515eaec3ef157e7b5be790aa39de437df56951fe50b84c5dc9ec5213f2d257acc35f77034016e54882575b9e29257b6c337e4f100c931baef2a810952f28700937d0c902afd"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xff}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x1c0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x340480d0}, 0x24000890) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000811) getsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r1) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000dc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a00)={0x368, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6e0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ca6626847038cb0b53201a4fee3fa804aa0df2db8e140f7b6046000d9d9b11"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6dbecca5a121f8f507484ed67ee3522470919ba2ca57cff98711"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff2c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c0375f5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xc0000000, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @empty, 0x400}}}}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8902}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6b2b}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x13, @private2, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x8084}, 0x48010) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x84005}, 0x20000000) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000f40)={0x5, 0xcd, 0x3, 0x5, 0x9, 0x5}) write$P9_RAUTH(r2, &(0x7f00000019c0)={0x14, 0x67, 0x2, {0x1, 0x4, 0x1}}, 0x14) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r4) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x44, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffe00}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xcaa97dffd819cd1e) epoll_create1(0x0) write$P9_RUNLINKAT(r2, &(0x7f0000001c80)={0x7, 0x4d, 0x2}, 0x7) 10:37:35 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x2}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000240)={"c13e55a8feccf340f78ceae7", &(0x7f00000000c0)="da6a7813f31f1a0158afb945408f80aabc4093e4aa21b2e835735f9569ca2b4af1006b6088b29bf4b749bd98999b59c5ddfbc5bd705f247b28d35e487dc69c1a4d9e8a9f60c324b80849520a10bfe02d35bf15f7bfc876cf52daecbc9686a06ae761969a9506745418be5bbe5e26f9dc268f832727e58006809e79331784d445881715802de7e2af816099d4fa6d6ddf53767aae244ce4cc7f64b9b4484a03575c11f4a71ec227c82769be76c256b3ba437dcbcbe42b9a05cd3671a97405c252bf2888e477ba6b837b7380e56279097329ebe0ad254ba9091c8950c5b930efa2772a", 0xe2, 0xc3a, &(0x7f00000001c0)={0x78, 0x1, 0xf7, 0x6, 0x0, 0x0, 0x0, 'n)?)', 0x3, "76b7c9ca", 0x5, 0x1, 0x8, "03db0e", "140b24e8879dd240e86d5ebc3648b1cc1c15aa9df694be79f8dfc900708d8bba8f92a79f2302d71640a213b60199"}, 0x1, 0x0, 0x40, &(0x7f0000000200)}) ioctl$CDROMPAUSE(r0, 0x5301) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000280)) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f00000002c0)={0x1, 0x6, 0xe, 0x2, @msf={0x0, 0x7, 0x9}, 0x6}) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000300)={0x3, 0x8, 0x54, 0xfe, 0x77}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0) ioctl$CDROM_SELECT_DISK(r2, 0x5322, 0x10001) r3 = syz_io_uring_complete(0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f0000000dc0)={0x1}) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000e00), 0x10080, 0x0) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000e40)={0x0, 0xc654}) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000e80)={0x2, 0xff, 0x0, 0x8, 0x3, 0xfe, @msf={0x8, 0x9, 0x4}, @lba=0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000ec0)=0xf11b, 0x0, 0x4) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000f00), 0x20000, 0x0) ioctl$CDROM_DISC_STATUS(r5, 0x5327) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000f40)={0x80, 0x0, 0x0, 0x3, @msf={0x81, 0x5, 0x9}}) [ 120.768241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.772999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.775655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.780946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.787990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.803312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.818208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.843674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.845046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.859908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.863295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.865599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.869629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.884844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.891983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.895541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.900891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.905918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.914737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.928866] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.934245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.947887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.954342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.956961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.965196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.967143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.973901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.976621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.993139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.995474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 121.000342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.006329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.010664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.016925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.018815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 121.021982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.031876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.033152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.039122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.042777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.852066] Bluetooth: hci0: command tx timeout [ 122.979450] Bluetooth: hci1: command tx timeout [ 123.043681] Bluetooth: hci2: command tx timeout [ 123.107526] Bluetooth: hci5: command tx timeout [ 123.108157] Bluetooth: hci3: command tx timeout [ 123.108775] Bluetooth: hci7: command tx timeout [ 123.171661] Bluetooth: hci4: command tx timeout [ 123.172257] Bluetooth: hci6: command tx timeout [ 124.899598] Bluetooth: hci0: command tx timeout [ 125.027617] Bluetooth: hci1: command tx timeout [ 125.091457] Bluetooth: hci2: command tx timeout [ 125.157671] Bluetooth: hci5: command tx timeout [ 125.158109] Bluetooth: hci7: command tx timeout [ 125.159567] Bluetooth: hci3: command tx timeout [ 125.219568] Bluetooth: hci4: command tx timeout [ 125.220000] Bluetooth: hci6: command tx timeout [ 126.959507] Bluetooth: hci0: command tx timeout [ 127.079076] Bluetooth: hci1: command tx timeout [ 127.139921] Bluetooth: hci2: command tx timeout [ 127.203536] Bluetooth: hci5: command tx timeout [ 127.203974] Bluetooth: hci7: command tx timeout [ 127.204442] Bluetooth: hci3: command tx timeout [ 127.267913] Bluetooth: hci6: command tx timeout [ 127.268346] Bluetooth: hci4: command tx timeout [ 128.995530] Bluetooth: hci0: command tx timeout [ 129.123621] Bluetooth: hci1: command tx timeout [ 129.188088] Bluetooth: hci2: command tx timeout [ 129.251698] Bluetooth: hci3: command tx timeout [ 129.252584] Bluetooth: hci7: command tx timeout [ 129.252602] Bluetooth: hci5: command tx timeout [ 129.315683] Bluetooth: hci4: command tx timeout [ 129.316128] Bluetooth: hci6: command tx timeout [ 180.615693] syz-executor.6 (281) used greatest stack depth: 24008 bytes left [ 182.597722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.602542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.605023] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.610767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.614777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.615233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.618189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.625415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.627802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.648659] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.676099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.679275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.687315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.695687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.701736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.784945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.796607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.802855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.846531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.861825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.862771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.871287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.896169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.898135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.929578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.930318] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.935401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.937257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.941877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.942487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.949677] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.953396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.955132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.958274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.965670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.983190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.004605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.048765] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.112207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.147297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.675815] Bluetooth: hci1: command tx timeout [ 184.676109] Bluetooth: hci0: command tx timeout [ 184.739556] Bluetooth: hci2: command tx timeout [ 185.059591] Bluetooth: hci5: command tx timeout [ 185.059932] Bluetooth: hci6: command tx timeout [ 185.061227] Bluetooth: hci4: command tx timeout [ 185.062213] Bluetooth: hci3: command tx timeout [ 185.252495] Bluetooth: hci7: command tx timeout [ 186.723488] Bluetooth: hci1: command tx timeout [ 186.726407] Bluetooth: hci0: command tx timeout [ 186.788425] Bluetooth: hci2: command tx timeout [ 187.108462] Bluetooth: hci4: command tx timeout [ 187.108922] Bluetooth: hci5: command tx timeout [ 187.109345] Bluetooth: hci6: command tx timeout [ 187.110477] Bluetooth: hci3: command tx timeout [ 187.299426] Bluetooth: hci7: command tx timeout [ 188.771466] Bluetooth: hci0: command tx timeout [ 188.771488] Bluetooth: hci1: command tx timeout [ 188.837192] Bluetooth: hci2: command tx timeout [ 189.155502] Bluetooth: hci4: command tx timeout [ 189.155654] Bluetooth: hci6: command tx timeout [ 189.156299] Bluetooth: hci3: command tx timeout [ 189.156904] Bluetooth: hci5: command tx timeout [ 189.347983] Bluetooth: hci7: command tx timeout [ 190.819473] Bluetooth: hci0: command tx timeout [ 190.819513] Bluetooth: hci1: command tx timeout [ 190.884626] Bluetooth: hci2: command tx timeout [ 191.203529] Bluetooth: hci6: command tx timeout [ 191.203560] Bluetooth: hci3: command tx timeout [ 191.203994] Bluetooth: hci5: command tx timeout [ 191.204445] Bluetooth: hci4: command tx timeout [ 191.396530] Bluetooth: hci7: command tx timeout [ 245.427020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.432993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.435737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.443947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.448539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.621240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.623895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.628938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.639043] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.645713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.748335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.751151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.754832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.759922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.763082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.823879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.825312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.832989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.841879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.850297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.951903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.962675] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.975067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.991658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.018494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.022711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.024722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.031086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.044046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.077961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.215699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.217617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.236540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.288557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.315244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.318831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.320714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.335712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.423776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.469574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.523513] Bluetooth: hci0: command tx timeout [ 247.715468] Bluetooth: hci1: command tx timeout [ 247.847556] Bluetooth: hci2: command tx timeout [ 247.907716] Bluetooth: hci3: command tx timeout [ 248.099462] Bluetooth: hci5: command tx timeout [ 248.229034] Bluetooth: hci4: command tx timeout [ 248.419459] Bluetooth: hci6: command tx timeout [ 248.547468] Bluetooth: hci7: command tx timeout [ 249.571514] Bluetooth: hci0: command tx timeout [ 249.763611] Bluetooth: hci1: command tx timeout [ 249.891697] Bluetooth: hci2: command tx timeout [ 249.956416] Bluetooth: hci3: command tx timeout [ 250.147539] Bluetooth: hci5: command tx timeout [ 250.275678] Bluetooth: hci4: command tx timeout [ 250.467437] Bluetooth: hci6: command tx timeout [ 250.595814] Bluetooth: hci7: command tx timeout [ 251.619496] Bluetooth: hci0: command tx timeout [ 251.811509] Bluetooth: hci1: command tx timeout [ 251.940315] Bluetooth: hci2: command tx timeout [ 252.004355] Bluetooth: hci3: command tx timeout [ 252.195848] Bluetooth: hci5: command tx timeout [ 252.325489] Bluetooth: hci4: command tx timeout [ 252.515672] Bluetooth: hci6: command tx timeout [ 252.643509] Bluetooth: hci7: command tx timeout [ 253.667817] Bluetooth: hci0: command tx timeout [ 253.859483] Bluetooth: hci1: command tx timeout [ 253.988025] Bluetooth: hci2: command tx timeout [ 254.051485] Bluetooth: hci3: command tx timeout [ 254.243563] Bluetooth: hci5: command tx timeout [ 254.371544] Bluetooth: hci4: command tx timeout [ 254.564446] Bluetooth: hci6: command tx timeout [ 254.691788] Bluetooth: hci7: command tx timeout [ 308.297575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.301565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.304694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.308462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.311720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.320094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.329956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.334028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.343101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.344959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.390044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.393247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.400416] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.405723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.410889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.654418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.664602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.684062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.718818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.726351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.762801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.767178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.770144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.780600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.784872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.960622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.972172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.990133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.994970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.009159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.011035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.016879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.024932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.059289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.062272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.072940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.091277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.102923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.120128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.134060] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.435508] Bluetooth: hci0: command tx timeout [ 310.436238] Bluetooth: hci1: command tx timeout [ 310.499453] Bluetooth: hci2: command tx timeout [ 310.948747] Bluetooth: hci3: command tx timeout [ 310.950533] Bluetooth: hci5: command tx timeout [ 311.203436] Bluetooth: hci6: command tx timeout [ 311.267730] Bluetooth: hci4: command tx timeout [ 311.331628] Bluetooth: hci7: command tx timeout [ 312.483516] Bluetooth: hci0: command tx timeout [ 312.484007] Bluetooth: hci1: command tx timeout [ 312.548433] Bluetooth: hci2: command tx timeout [ 312.996714] Bluetooth: hci3: command tx timeout [ 312.997175] Bluetooth: hci5: command tx timeout [ 313.252470] Bluetooth: hci6: command tx timeout [ 313.316561] Bluetooth: hci4: command tx timeout [ 313.379583] Bluetooth: hci7: command tx timeout [ 314.531723] Bluetooth: hci0: command tx timeout [ 314.532191] Bluetooth: hci1: command tx timeout [ 314.596397] Bluetooth: hci2: command tx timeout [ 315.043724] Bluetooth: hci5: command tx timeout [ 315.044182] Bluetooth: hci3: command tx timeout [ 315.299653] Bluetooth: hci6: command tx timeout [ 315.364933] Bluetooth: hci4: command tx timeout [ 315.427423] Bluetooth: hci7: command tx timeout [ 316.579671] Bluetooth: hci1: command tx timeout [ 316.580132] Bluetooth: hci0: command tx timeout [ 316.643469] Bluetooth: hci2: command tx timeout [ 317.091487] Bluetooth: hci3: command tx timeout [ 317.091961] Bluetooth: hci5: command tx timeout [ 317.347430] Bluetooth: hci6: command tx timeout [ 317.412523] Bluetooth: hci4: command tx timeout [ 317.475476] Bluetooth: hci7: command tx timeout [ 370.748987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.753723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.761126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.775984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.782833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.837966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.843585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.849481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.880230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.894196] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.907583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.916927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.921694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.938784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.946278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.005981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.012856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.020896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.029916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.041780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.083716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.093969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.098729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.115962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.127680] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.166189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.170900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.174074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.179728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.184275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.255278] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.262944] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.265312] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.275099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.317078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.319292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.324010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.331798] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.348948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.370182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.836428] Bluetooth: hci0: command tx timeout [ 372.964628] Bluetooth: hci1: command tx timeout [ 373.027688] Bluetooth: hci2: command tx timeout [ 373.093733] Bluetooth: hci3: command tx timeout [ 373.219482] Bluetooth: hci5: command tx timeout [ 373.220312] Bluetooth: hci4: command tx timeout [ 373.412639] Bluetooth: hci6: command tx timeout [ 373.414378] Bluetooth: hci7: command tx timeout [ 374.883643] Bluetooth: hci0: command tx timeout [ 375.011665] Bluetooth: hci1: command tx timeout [ 375.075425] Bluetooth: hci2: command tx timeout [ 375.139519] Bluetooth: hci3: command tx timeout [ 375.267521] Bluetooth: hci4: command tx timeout [ 375.268008] Bluetooth: hci5: command tx timeout [ 375.460265] Bluetooth: hci6: command tx timeout [ 375.460879] Bluetooth: hci7: command tx timeout [ 376.931624] Bluetooth: hci0: command tx timeout [ 377.059576] Bluetooth: hci1: command tx timeout [ 377.124506] Bluetooth: hci2: command tx timeout [ 377.187434] Bluetooth: hci3: command tx timeout [ 377.315514] Bluetooth: hci4: command tx timeout [ 377.315988] Bluetooth: hci5: command tx timeout [ 377.507840] Bluetooth: hci7: command tx timeout [ 377.508323] Bluetooth: hci6: command tx timeout [ 378.980482] Bluetooth: hci0: command tx timeout [ 379.107633] Bluetooth: hci1: command tx timeout [ 379.172632] Bluetooth: hci2: command tx timeout [ 379.236558] Bluetooth: hci3: command tx timeout [ 379.363825] Bluetooth: hci5: command tx timeout [ 379.364298] Bluetooth: hci4: command tx timeout [ 379.556475] Bluetooth: hci6: command tx timeout [ 379.556961] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:42:45 Registers: info registers vcpu 0 RAX=ffff88806ce09001 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce08d01 RSI=ffff88806ce08de0 RDI=ffff88806ce08a88 RBP=ffff88806ce08ad0 RSP=ffff88806ce08a08 R8 =ffffffff8685f31e R9 =ffff88806ce08ab8 R10=000000000003b0c2 R11=000000000002498b R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88806ce08de8 R15=ffff88806ce08a78 RIP=ffffffff813513b8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8a4b62f8e0 CR3=000000002ff4a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=00ff0000000001002e6f732e6362696c XMM02=312e312e6f732e6f747079726362696c XMM03=00000000000000000000000000000000 XMM04=000000000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf08a78 RCX=ffff88806cf089cc RDX=1ffff1100d9e115a RSI=ffffffff85c1bac0 RDI=ffffffff84ae0240 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a60 R8 =ffffffff867b605e R9 =ffff88806cf08ab8 R10=000000000003b0c2 R11=0000000000008673 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888015a59bc0 R15=ffff88800e648378 RIP=ffffffff813505d9 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a2d8674080 CR3=00000000301ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000