Warning: Permanently added '[localhost]:11292' (ECDSA) to the list of known hosts. 2025/05/25 10:36:33 fuzzer started 2025/05/25 10:36:34 dialing manager at localhost:46087 syzkaller login: [ 98.166958] cgroup: Unknown subsys name 'net' [ 98.329009] cgroup: Unknown subsys name 'cpuset' [ 98.364901] cgroup: Unknown subsys name 'rlimit' 2025/05/25 10:36:48 syscalls: 202 2025/05/25 10:36:48 code coverage: enabled 2025/05/25 10:36:48 comparison tracing: enabled 2025/05/25 10:36:48 extra coverage: enabled 2025/05/25 10:36:48 setuid sandbox: enabled 2025/05/25 10:36:48 namespace sandbox: enabled 2025/05/25 10:36:48 Android sandbox: enabled 2025/05/25 10:36:48 fault injection: enabled 2025/05/25 10:36:48 leak checking: enabled 2025/05/25 10:36:48 net packet injection: enabled 2025/05/25 10:36:48 net device setup: enabled 2025/05/25 10:36:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 10:36:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 10:36:48 USB emulation: enabled 2025/05/25 10:36:48 hci packet injection: enabled 2025/05/25 10:36:48 wifi device emulation: enabled 2025/05/25 10:36:48 802.15.4 emulation: enabled 2025/05/25 10:36:48 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 10:36:49 starting 8 fuzzer processes 10:36:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202082, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x6, 0x2, 0xfff, 0x200, 0x6, 0x4}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="1fae96aff505fa846fbb6332bf9fa64104283a7f11e0e216ed1193e4d937") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000140)={0x2, 0xff, 0xc03}) r2 = syz_open_pts(r1, 0x3c000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x2, 0x1, 0xfff, 0x6, 0x6, "b63168e35cff9a6683c505dbea323df12cff28", 0x8000, 0x8}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) syz_open_pts(r1, 0x104840) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x42000, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000280)={0x6, 0x1, 0xffffffff, 0x1ff, 0xc2, 0x8}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000002c0)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000340)) 10:36:49 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x2, 0x5, 0x2, 0x3f, 0xffff, 0x4, 0x80000001, 0xfffffffffffffffd}, &(0x7f0000000040)={0x9, 0xffffffffffffff75, 0x7, 0x9ba0, 0x10001, 0x0, 0x100000001, 0x6}, &(0x7f0000000080)={0x7fffffff, 0xfffffffffffff800, 0x80, 0x80, 0x8001, 0x10001, 0x8, 0x80}, &(0x7f0000000100)={r0, r1/1000+60000}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) clock_gettime(0x3, &(0x7f0000000180)) sched_rr_get_interval(0x0, &(0x7f00000001c0)) clock_gettime(0x6, &(0x7f0000000200)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x800) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000006c0)={0x1, 0x0, 0x13, 0x1b, 0x122, &(0x7f00000002c0)}) ioctl$TIOCNXCL(r2, 0x540d) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000700)) clock_gettime(0x6, &(0x7f0000000740)) clock_gettime(0x5, &(0x7f0000000780)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000007c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000800)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000840)=0x0) sched_rr_get_interval(r5, &(0x7f0000000880)) sched_rr_get_interval(r5, &(0x7f00000008c0)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000d00)={0x2, 0x1, 0x10, 0xb, 0x131, &(0x7f0000000900)="d7629ac555f99fd274998146b2977d55589085b18da22e5f97a65fed6b22337f468c094b634da038ce0e9b072a492107c22368abb5f2e09b2d293083c4a10176e9eb530bbd5057e3fa0805ba3a125d6ddfab261c734d0188b52bf44fcaca0922a7814e164251495624cadaa1c615e5c2f823dc408e74fc891060b5e0077067717329100bfdfee12bbb5203f09fb116f304d68aa61c6f90dbb9ecb720f44f0331068ac19e60bbc0e61363b0787c6d7e3af820c3057f17b4f40d122f4b62216eb7f12656c7e4644ac4cdc839f79c9836f249c4df99ec97d3e02d122e671a51d2e722114008d307302eb00e333b06da3e58b33272355b4a636c6262e4435c34d14cfa909de6ca5d2b6fcb80482036317cbf9a4c1f3be2e71683d2cf3df9b0d2d9bef0b5adebe0db3f0a326460444592cf08a3196e3326c8594f0194c18a5644727833e5a105cd632c9a9045367e402376a73aa0fc4d09e23e5a3be0769604dafa359bb772ef533b3b29dba5fc0e4ec19ec8c185e47d44bf7eefea862823f195dcf144df629202f245a9e4283fb872d9b6b499e70f373f153c7ad6804750d3b1874a92cc14bcdf008373abd1fad64e3641e91084b73dd59ae1c1fe2b1e0b2c4920e92de4d1718d3376b12031117d76bdfd648c6d65060a3a7eeab92d2504193d21b66095d6234c8c0a2108259f36eb6108e1adcb848eed1a39e152ef422381117ce37e604e8571f19d4f83f83db6d3b55e2263595e75d23b25c096db641d7f63e0f457463110b32d2fd6371e26dc29ab5b0113fe24761ce5b475d53300c87d319ca615656ae61cba261653b383c2456e874ec93e095ab2ef6efefa6eff1662f9e14d09d4655147a8b5b2f4bc26292e822f53c52169ff91819ad3d03b9267308141e455cbd048cbe5f84dfe868e526d129d9f15ac8b1785e38e73d214ab0359744fa09fecf3cd8897f93782db3a8262301e67f5b8e88709e189389ea020c5a05858e86a5e9afa8e1ff0058cd9cde420120b190c092560e68abc8712d51218eede2e718d9c796204eb66393dbc1ec4b63031268ceb3bf392dc67c40ebf459485ef920f6b6e6ae449ad004d450367bf90004c75044265cd9c26e5ab62b3439fd8426c4f49b92043d91cfff389cfd201b5b6562ab836df1ea7860d5ce96686402efc927e125406f77e4c146484096f06a2bc894fd9879ac6307f26897838f7e0f616bb82df6624d4b8de5f3a7f428f3647deb87b9a291047395e2b878232b5d7fc07412008730d4adad08bcc38307fd8fa008ae5fdc3fef7112434fae1c010e497e08bd085b6b2587ab17e1eb80993ec27cf1b8a409b3afcafc6f23417f9723f5c5d66ba1f67a73bc2450a64de9aae6e873f201a6d4fdcdfb90d0eda8cb4fcbe7afd044ff86e9c28532b33a1af518e85f2a492c7589cd4b87841653cba840df1763d7ac3"}) 10:36:49 executing program 2: sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/232, 0xe8, 0x1, &(0x7f00000001c0)=""/248, 0xf8}, &(0x7f0000000300)=0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd_index=0x8, 0x6, 0x4, 0x2, 0x8, 0x1}, 0xffffffff) r0 = syz_io_uring_setup(0x3c8c, &(0x7f0000000380)={0x0, 0x9bf9, 0x10, 0x0, 0x326}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x80010, r0, 0x0) r1 = syz_io_uring_setup(0x7099, &(0x7f0000000480)={0x0, 0xfd6f, 0x20, 0x1, 0x2f0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x32fd, &(0x7f0000000580)={0x0, 0x638a, 0x20, 0x3, 0x360, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x2710}, 0x2, 0x800}, {{0x77359400}, 0x5, 0x5}, {{r2, r3/1000+10000}, 0x2, 0x8000, 0x200}, {{}, 0x12, 0x80, 0x8}, {{}, 0x15, 0x7fff}, {{}, 0x0, 0x7fff, 0x3ff}, {{}, 0x5, 0x7ff, 0xec6b}], 0xa8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001880)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/227, 0xe3, 0x1, &(0x7f0000000880)=""/4096, 0x1000}, &(0x7f00000018c0)=0x40) move_pages(0x0, 0x2, &(0x7f0000001900)=[&(0x7f0000000000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000001940)=[0x9, 0x8, 0x7f], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000e, 0x80010, r1, 0x10000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001a40)={'ip6_vti0\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0xe6, 0x3, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8000, 0x6, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001b00)={'ip6tnl0\x00', &(0x7f0000001a80)={'ip6gre0\x00', r4, 0x0, 0x1, 0x20, 0x78, 0x6, @empty, @private2, 0x7, 0x20, 0x1, 0xfffff147}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001b80)) 10:36:49 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x62080, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x8) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000140)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000240)=0x7fff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x94300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'ip6gretap0\x00'}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30e) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x4c2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x800000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0xfe69, 0x40, 0x20, 0x6}, {0x0, 0xb4, 0x6, 0x2}, {0x0, 0xaf, 0xa, 0x9}, {0xbeca, 0x0, 0x6, 0x4}, {0x1, 0x9, 0x7f, 0x4}, {0x2, 0x44, 0x20, 0xf0b}, {0x8, 0x1, 0xd5, 0xffff}, {0x5, 0x1, 0x4, 0x1f1a}]}) 10:36:49 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xeef, 0x200) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x7, 0xfffc, 0x5, 0x20, 0x9, 0x5}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x2) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/142) ioctl$KDMKTONE(r0, 0x4b30, 0x4) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000001c0)) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000200)) ioctl$KDMKTONE(r0, 0x4b30, 0xf7be) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000240)="008572c3a2958278ffc25e4107f3d451cc726c6f19761e210f685cf08f41994810ec74ff15ea4f6ca3fc08bfa5474cd001613a9315601a7f1bb3e0") r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000280)=0x4) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/119) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000740)={0x3, 0x0, 0x12, 0xe, 0x1c4, &(0x7f0000000340)}) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000780)=""/79) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 113.600222] audit: type=1400 audit(1748169409.697:7): avc: denied { execmem } for pid=276 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:36:49 executing program 5: r0 = epoll_create1(0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800, 0xd8658f5e86457f93, 0x1}, 0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x2001}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x29, 0xf8, 0x8, 0x6, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7800, 0x4, 0x110}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r2, 0x4, 0x2, 0x9, 0x0, 0x5c, @empty, @mcast2, 0x80, 0x40, 0x9, 0x1}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x4, 0x5, 0x3, 0x1, 0x24, @local, @local, 0x700, 0x8000, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r5, 0x7b, 0x7, 0x0, 0x10001, 0x40, @remote, @private0, 0x700, 0x8, 0x0, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', r3, 0x29, 0x6, 0x59, 0x7, 0x4a, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0xfffffff9, 0x1000}}) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000005c0)) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x7, 0x41) ioctl$TIOCNXCL(r6, 0x540d) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000640)=0x5) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000680)=""/35) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x810, r4, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000780)={0x20000004}) 10:36:49 executing program 6: socketpair(0x26, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0xe9, 0x40, 0xedb1, 0x63, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7800, 0xff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0xff, 0x1, 0x1, 0x5a, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x1, 0x700, 0x6, 0x71}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x1, &(0x7f0000000240)=""/236, 0xec}, &(0x7f0000000380)=0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r3, 0x2f, 0x8, 0x9, 0xffff, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x1, 0x3, 0x151e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}], 0x1, 0x7fff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', r4, 0x4, 0x81, 0xff, 0x1ff, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x8000, 0x80, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', r5, 0x2f, 0x2, 0x0, 0x1, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x40, 0x10, 0x5, 0x45}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x22008000}, 0x20044840) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f00000007c0)={0xffffffffffffffff, r1, 0x80000000}) r7 = syz_open_dev$vcsu(&(0x7f0000000800), 0x4, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl0\x00', r6, 0x29, 0x81, 0x9, 0x2, 0x44, @rand_addr=' \x01\x00', @private1, 0x700, 0x8000, 0xfffff29b, 0x7a4}}) sendmsg$nl_xfrm(r7, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)=@newpolicy={0xcc, 0x13, 0x800, 0x70bd28, 0x25dfdbfb, {{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4e20, 0x9, 0x4e24, 0x6, 0xa, 0x20, 0x20, 0x3b, r8, 0xee00}, {0x1, 0x6, 0x6, 0x7ff, 0x1, 0x8, 0x8000, 0x2}, {0x0, 0x1, 0x100000001, 0x7}, 0x1, 0x6e6bb5, 0x0, 0x1, 0x1, 0x2}, [@mark={0xc, 0x15, {0x35075b, 0x9}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20046050) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0x5, 0x0, 0x6, 0x7, 0x1}, 0x2) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6gre0\x00', r10, 0x4, 0x4, 0x5, 0x10001, 0x28, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3f}, 0xd722ef0e423c83a6, 0x40, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'sit0\x00', r10, 0x4, 0x6, 0x20, 0x1, 0x10, @private0, @local, 0x1, 0x700, 0x7, 0x1f}}) 10:36:49 executing program 7: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20040110) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x68c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000094) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x8001) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4030800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8040) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x15, 0x1}, 0x7) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x901}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c16230027058"}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x80) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x40884) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000a00)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x3012}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x734}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x14) [ 114.917515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.922474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.926953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.933096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.940001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.979689] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.985961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.991950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.996075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.998616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.003874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.005931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.015617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.019632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.021673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.065206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.073435] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.086711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.087048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.097747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.098438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.122668] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.124564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.127057] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.129835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.130493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.132013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.138814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.143673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.151523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.154892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.156884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.157041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.162412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.162446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.174494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.176032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.176059] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.179641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.194826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.996625] Bluetooth: hci0: command tx timeout [ 117.061636] Bluetooth: hci2: command tx timeout [ 117.125408] Bluetooth: hci1: command tx timeout [ 117.253526] Bluetooth: hci6: command tx timeout [ 117.254212] Bluetooth: hci5: command tx timeout [ 117.254713] Bluetooth: hci3: command tx timeout [ 117.316279] Bluetooth: hci4: command tx timeout [ 117.316858] Bluetooth: hci7: command tx timeout [ 119.044509] Bluetooth: hci0: command tx timeout [ 119.109345] Bluetooth: hci2: command tx timeout [ 119.173865] Bluetooth: hci1: command tx timeout [ 119.300508] Bluetooth: hci5: command tx timeout [ 119.300983] Bluetooth: hci3: command tx timeout [ 119.301012] Bluetooth: hci6: command tx timeout [ 119.364247] Bluetooth: hci4: command tx timeout [ 119.364275] Bluetooth: hci7: command tx timeout [ 121.092444] Bluetooth: hci0: command tx timeout [ 121.156892] Bluetooth: hci2: command tx timeout [ 121.220657] Bluetooth: hci1: command tx timeout [ 121.348681] Bluetooth: hci6: command tx timeout [ 121.348710] Bluetooth: hci3: command tx timeout [ 121.349211] Bluetooth: hci5: command tx timeout [ 121.412458] Bluetooth: hci4: command tx timeout [ 121.412865] Bluetooth: hci7: command tx timeout [ 123.141295] Bluetooth: hci0: command tx timeout [ 123.204892] Bluetooth: hci2: command tx timeout [ 123.268338] Bluetooth: hci1: command tx timeout [ 123.398205] Bluetooth: hci6: command tx timeout [ 123.398253] Bluetooth: hci5: command tx timeout [ 123.398630] Bluetooth: hci3: command tx timeout [ 123.460290] Bluetooth: hci7: command tx timeout [ 123.461123] Bluetooth: hci4: command tx timeout [ 177.379897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.383082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.387884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.406014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.418892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.666720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.673617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.677511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.683817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.687132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.694385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.699941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.708123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.712642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.719333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.743905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.746662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.763457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.763457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.780573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.797013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.799840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.802439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.817001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.820641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.913346] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.915819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.918876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.924527] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.927733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.997079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.000096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.006024] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.021242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.043780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.123132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.135434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.142845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.148425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.151062] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.525254] Bluetooth: hci0: command tx timeout [ 179.780611] Bluetooth: hci1: command tx timeout [ 179.846202] Bluetooth: hci2: command tx timeout [ 179.972265] Bluetooth: hci4: command tx timeout [ 180.036340] Bluetooth: hci3: command tx timeout [ 180.037293] Bluetooth: hci5: command tx timeout [ 180.164286] Bluetooth: hci6: command tx timeout [ 180.229242] Bluetooth: hci7: command tx timeout [ 181.572596] Bluetooth: hci0: command tx timeout [ 181.828582] Bluetooth: hci1: command tx timeout [ 181.892340] Bluetooth: hci2: command tx timeout [ 182.021426] Bluetooth: hci4: command tx timeout [ 182.084448] Bluetooth: hci5: command tx timeout [ 182.085626] Bluetooth: hci3: command tx timeout [ 182.213957] Bluetooth: hci6: command tx timeout [ 182.276281] Bluetooth: hci7: command tx timeout [ 183.621270] Bluetooth: hci0: command tx timeout [ 183.876540] Bluetooth: hci1: command tx timeout [ 183.940262] Bluetooth: hci2: command tx timeout [ 184.068354] Bluetooth: hci4: command tx timeout [ 184.132261] Bluetooth: hci3: command tx timeout [ 184.132285] Bluetooth: hci5: command tx timeout [ 184.260517] Bluetooth: hci6: command tx timeout [ 184.324249] Bluetooth: hci7: command tx timeout [ 185.668254] Bluetooth: hci0: command tx timeout [ 185.926202] Bluetooth: hci1: command tx timeout [ 185.989729] Bluetooth: hci2: command tx timeout [ 186.116436] Bluetooth: hci4: command tx timeout [ 186.180286] Bluetooth: hci3: command tx timeout [ 186.180390] Bluetooth: hci5: command tx timeout [ 186.308248] Bluetooth: hci6: command tx timeout [ 186.372226] Bluetooth: hci7: command tx timeout [ 240.112346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.115461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.118099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.123598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.129606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.228663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.232971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.239758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.251112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.261557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.419375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.422006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.429434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.432545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.442521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.456613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.456827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.480887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.490682] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.490717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.504980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.507101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.542497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.598868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.645841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.667565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.670620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.672713] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.679526] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.682877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.692467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.700043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.703537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.764662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.770709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.844998] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.848290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.850847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.953313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.026629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.180422] Bluetooth: hci0: command tx timeout [ 242.309229] Bluetooth: hci1: command tx timeout [ 242.565089] Bluetooth: hci2: command tx timeout [ 242.628332] Bluetooth: hci3: command tx timeout [ 242.757490] Bluetooth: hci4: command tx timeout [ 242.758512] Bluetooth: hci7: command tx timeout [ 242.884260] Bluetooth: hci5: command tx timeout [ 243.140391] Bluetooth: hci6: command tx timeout [ 244.228295] Bluetooth: hci0: command tx timeout [ 244.357552] Bluetooth: hci1: command tx timeout [ 244.613625] Bluetooth: hci2: command tx timeout [ 244.677298] Bluetooth: hci3: command tx timeout [ 244.804576] Bluetooth: hci4: command tx timeout [ 244.805007] Bluetooth: hci7: command tx timeout [ 244.932367] Bluetooth: hci5: command tx timeout [ 245.188236] Bluetooth: hci6: command tx timeout [ 246.277417] Bluetooth: hci0: command tx timeout [ 246.405211] Bluetooth: hci1: command tx timeout [ 246.661224] Bluetooth: hci2: command tx timeout [ 246.726430] Bluetooth: hci3: command tx timeout [ 246.852274] Bluetooth: hci7: command tx timeout [ 246.852724] Bluetooth: hci4: command tx timeout [ 246.981505] Bluetooth: hci5: command tx timeout [ 247.237695] Bluetooth: hci6: command tx timeout [ 248.325274] Bluetooth: hci0: command tx timeout [ 248.452404] Bluetooth: hci1: command tx timeout [ 248.709473] Bluetooth: hci2: command tx timeout [ 248.772384] Bluetooth: hci3: command tx timeout [ 248.901324] Bluetooth: hci4: command tx timeout [ 248.901772] Bluetooth: hci7: command tx timeout [ 249.028209] Bluetooth: hci5: command tx timeout [ 249.284215] Bluetooth: hci6: command tx timeout [ 302.487486] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.493838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.499070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.507607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.513030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.676136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.678917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.683494] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.689276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.695458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.716835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.735047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.749348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.751465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.756661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.759964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.763524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.775645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.779371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.791291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.856138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.871713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.878508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.880749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.891065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.894026] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.903422] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.906762] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.915666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.923247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.930200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.959767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.963686] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.980628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.983658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.001660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.016687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.039364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.093734] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.104360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.580292] Bluetooth: hci0: command tx timeout [ 304.773244] Bluetooth: hci2: command tx timeout [ 304.836472] Bluetooth: hci1: command tx timeout [ 304.837545] Bluetooth: hci3: command tx timeout [ 304.965270] Bluetooth: hci6: command tx timeout [ 305.028636] Bluetooth: hci4: command tx timeout [ 305.157314] Bluetooth: hci5: command tx timeout [ 305.220335] Bluetooth: hci7: command tx timeout [ 306.628841] Bluetooth: hci0: command tx timeout [ 306.820219] Bluetooth: hci2: command tx timeout [ 306.884332] Bluetooth: hci1: command tx timeout [ 306.884747] Bluetooth: hci3: command tx timeout [ 307.012447] Bluetooth: hci6: command tx timeout [ 307.076758] Bluetooth: hci4: command tx timeout [ 307.204349] Bluetooth: hci5: command tx timeout [ 307.268414] Bluetooth: hci7: command tx timeout [ 308.676539] Bluetooth: hci0: command tx timeout [ 308.868237] Bluetooth: hci2: command tx timeout [ 308.932396] Bluetooth: hci1: command tx timeout [ 308.932813] Bluetooth: hci3: command tx timeout [ 309.060427] Bluetooth: hci6: command tx timeout [ 309.125190] Bluetooth: hci4: command tx timeout [ 309.252402] Bluetooth: hci5: command tx timeout [ 309.316372] Bluetooth: hci7: command tx timeout [ 310.725177] Bluetooth: hci0: command tx timeout [ 310.916451] Bluetooth: hci2: command tx timeout [ 310.980527] Bluetooth: hci1: command tx timeout [ 310.980920] Bluetooth: hci3: command tx timeout [ 311.108540] Bluetooth: hci6: command tx timeout [ 311.172409] Bluetooth: hci4: command tx timeout [ 311.302196] Bluetooth: hci5: command tx timeout [ 311.364236] Bluetooth: hci7: command tx timeout [ 365.269974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.282469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.287446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.295870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.302658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.471225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.478085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.480969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.492733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.500224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.592382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.595396] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.619083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.621093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.631950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.640805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.650664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.655867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.669906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.671988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.683884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.687688] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.706781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.718092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.721071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.724720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.726979] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.729788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.730502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.731596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.735291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.754914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.764900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.778638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.780552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.784190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.786797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.827964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.861636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.877991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.364466] Bluetooth: hci0: command tx timeout [ 367.557572] Bluetooth: hci1: command tx timeout [ 367.748837] Bluetooth: hci3: command tx timeout [ 367.813701] Bluetooth: hci2: command tx timeout [ 367.878749] Bluetooth: hci6: command tx timeout [ 367.940728] Bluetooth: hci4: command tx timeout [ 368.004810] Bluetooth: hci5: command tx timeout [ 368.006005] Bluetooth: hci7: command tx timeout [ 369.412310] Bluetooth: hci0: command tx timeout [ 369.604465] Bluetooth: hci1: command tx timeout [ 369.796222] Bluetooth: hci3: command tx timeout [ 369.860254] Bluetooth: hci2: command tx timeout [ 369.926246] Bluetooth: hci6: command tx timeout [ 369.988594] Bluetooth: hci4: command tx timeout [ 370.052476] Bluetooth: hci5: command tx timeout [ 370.052957] Bluetooth: hci7: command tx timeout [ 371.461197] Bluetooth: hci0: command tx timeout [ 371.652248] Bluetooth: hci1: command tx timeout [ 371.844209] Bluetooth: hci3: command tx timeout [ 371.908245] Bluetooth: hci2: command tx timeout [ 371.974206] Bluetooth: hci6: command tx timeout [ 372.036471] Bluetooth: hci4: command tx timeout [ 372.100384] Bluetooth: hci5: command tx timeout [ 372.100898] Bluetooth: hci7: command tx timeout [ 373.508295] Bluetooth: hci0: command tx timeout [ 373.700276] Bluetooth: hci1: command tx timeout [ 373.893737] Bluetooth: hci3: command tx timeout [ 373.956235] Bluetooth: hci2: command tx timeout [ 374.020217] Bluetooth: hci6: command tx timeout [ 374.084265] Bluetooth: hci4: command tx timeout [ 374.148274] Bluetooth: hci7: command tx timeout [ 374.148762] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 10:41:52 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=ffff888009601b80 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888009602600 RDI=ffff888009601b80 RBP=ffff8880096025d8 RSP=ffff8880096176d0 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff888009602600 R13=b503ba001073dead R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81519198 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2daae7b2f0 CR3=000000000a138000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000010 RCX=ffffffff819c5b68 RDX=ffff88802f27b700 RSI=ffffffff819c5b79 RDI=0000000000000005 RBP=ffffea00001b8570 RSP=ffff888026def870 R8 =0000000000000000 R9 =fffff940000370ae R10=0000000000000010 R11=0000000000000001 R12=0000000000000000 R13=00007f8a378b2000 R14=ffff888026defce0 R15=ffff888026def9e0 RIP=ffffffff81738248 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ccbe0ad080 CR3=0000000028bf1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000