Warning: Permanently added '[localhost]:17417' (ECDSA) to the list of known hosts. 2025/05/31 04:33:32 fuzzer started 2025/05/31 04:33:33 dialing manager at localhost:34361 syzkaller login: [ 94.788149] cgroup: Unknown subsys name 'net' [ 94.933662] cgroup: Unknown subsys name 'cpuset' [ 94.988412] cgroup: Unknown subsys name 'rlimit' 2025/05/31 04:33:50 syscalls: 201 2025/05/31 04:33:50 code coverage: enabled 2025/05/31 04:33:50 comparison tracing: enabled 2025/05/31 04:33:50 extra coverage: enabled 2025/05/31 04:33:50 setuid sandbox: enabled 2025/05/31 04:33:50 namespace sandbox: enabled 2025/05/31 04:33:50 Android sandbox: enabled 2025/05/31 04:33:50 fault injection: enabled 2025/05/31 04:33:50 leak checking: enabled 2025/05/31 04:33:50 net packet injection: enabled 2025/05/31 04:33:50 net device setup: enabled 2025/05/31 04:33:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 04:33:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 04:33:50 USB emulation: enabled 2025/05/31 04:33:50 hci packet injection: enabled 2025/05/31 04:33:50 wifi device emulation: enabled 2025/05/31 04:33:50 802.15.4 emulation: enabled 2025/05/31 04:33:50 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 04:33:51 starting 8 fuzzer processes 04:33:51 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/4096) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x11, 0xffffffffffffffff, 0x8000000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000001000)=""/94) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) getresuid(&(0x7f0000001080)=0x0, &(0x7f00000010c0), &(0x7f0000001100)=0x0) r3 = getuid() getresgid(&(0x7f0000001140)=0x0, &(0x7f0000001180), &(0x7f00000011c0)) r5 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001200)={{0x2, r2, 0x0, r3, r4, 0x10, 0x1ef}, 0x80000000, 0xbd1, 0x40, 0x1, 0xffffffffffffffff, r5}) shmctl$SHM_LOCK(r0, 0xb) getuid() write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001280)={0xa0, 0x19, 0x2, {0x1080, {0x1, 0x0, 0x8}, 0x102, r1, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xff, 0xfffffffffffffffd, 0x5, 0x1b5, 0x5, 0x8000, 0x9, 0x0, 0x8000, 0x6, 0x200, 0x4}}, 0xa0) waitid(0x0, r5, &(0x7f0000001340), 0xc1000001, 0x0) shmget$private(0x0, 0xd000, 0x0, &(0x7f0000ff2000/0xd000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000013c0)={0x0, 0x1, 0x5}) shmat(0x0, &(0x7f0000ff4000/0x3000)=nil, 0xa000) 04:33:51 executing program 1: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x2, 0x0, 0x9, 0xfffffffc, 0x40, 0x8}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x8, 0x7f, 0x4, 0x6, 0x7fff, 0x7}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000180)=0x9) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0), 0x4) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000200)=""/79) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000280)={0x8, @multicast1, 0x4e21, 0x2, 'dh\x00', 0x8, 0xffff, 0x65}, 0x2c) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = socket$inet(0x2, 0x1, 0xff) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e24, 0x2, 0x4e21, 0xcde, 0xa, 0x20, 0x0, 0x1, 0x0, 0xee00}, {0x400, 0x40, 0xcc4, 0x9a, 0xffff, 0x100, 0x5, 0x7}, {0x6c7, 0x2, 0x2, 0x9}, 0x2, 0x6e6bb9, 0x2, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0x6c}, 0xa, @in=@private=0xa010101, 0x3500, 0x1, 0x2, 0xff, 0x8001, 0x6, 0x61f4}}, 0xe8) write$tun(r4, &(0x7f0000000400)={@val={0x0, 0x8100}, @void, @llc={@snap={0x0, 0xa8, '/', "e42f43", 0x0, "a20553193e2e296030061209c6a41b76f4bdf75583ad301ae1b2a410032f044ebcffd156f36f2c11fcc002acdbf8cfbf81c8f7cfa315f9eaf33082b4826d9388f29b5f8c75c4107ed6c830d56f40c6a9914cb892880470e009d427c7f5511e86b8a5264341b51d8bac1334054229aa7d5e9d243325e3ce89ddd4d95f650b3d3f85da7cc1f7751d0aede658d29d3a01c6fd2d179ad97ed1bd59377e7ccebe7e473f44d8d4a009e33c59cf46efeac87f8d4621ef83fdce83cb19f5feeeb5c994bfe07d5f981d1ee4211367"}}}, 0xd6) getsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000500), &(0x7f0000000540)) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x4e20, 0x9, 0x4e21, 0xea0, 0xa, 0x80, 0x20, 0x3a, 0x0, 0xee01}, {0x4, 0xffffffffffffff08, 0xffffffffffffe70a, 0x0, 0x7fff, 0x3ff, 0xe4c5, 0x3ff}, {0x4, 0x8, 0x7f, 0x1}, 0x20, 0x6e6bbd, 0x0, 0x0, 0x2, 0x2}, {{@in=@remote, 0x4d2, 0x6c}, 0x2, @in=@empty, 0x3500, 0x1, 0x2, 0x40, 0xbe, 0x9, 0x1}}, 0xe8) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 04:33:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfa, 0x80, 0x3, 0x1, 0x0, 0x3, 0x4d40, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x40000, 0x60b}, 0x8, 0x5, 0x9ff, 0x4, 0x0, 0x9, 0x9, 0x0, 0x3f, 0x0, 0xfff}, 0xffffffffffffffff, 0x8, r1, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x10000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000140)=0x400) r4 = getpgrp(0x0) sched_setscheduler(r4, 0x0, &(0x7f0000000180)=0xcbb4) write$P9_RCREATE(r3, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x20, 0x2, 0x4}}}, 0x18) capget(&(0x7f0000000200)={0x19980330, r4}, &(0x7f0000000240)={0x1c5, 0xa8, 0x1, 0xff, 0x50c, 0xe30}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000280)={0x1d, @loopback, 0x4e24, 0x0, 'lc\x00', 0x11, 0x4, 0x2f}, 0x2c) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000002c0)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000300)=0xf6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffffffffffc0) 04:33:51 executing program 3: setgid(0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0xb0, 0x1d}, {0x1ff, 0x5, 0xffffffffffffff42, 0x81, 0x6ce5, 0x8, 0xffffffffffff8001, 0x9}, {0x5, 0x9, 0x4, 0x4}, 0x7, 0x6e6bbf, 0x2, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x2, 0x2, 0x6, 0x1, 0x31e}}, 0xe8) r1 = accept4$inet(r0, 0x0, &(0x7f0000000180), 0x81000) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x94, {0x18, 0x0, 0x8}, 0x100, 0xee00, r2, 0x5, 0x3ff, 0x4, 0x7, 0x500000000000, 0x5, 0x3, 0x9, 0x664e, 0x10001, 0x100, 0x101, 0x5, 0x8001, 0x1}}, 0xa0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000340)={'icmp\x00'}, &(0x7f0000000380)=0x1e) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r3 = socket(0x27, 0xa, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000003c0)={0x87, @local, 0x4e24, 0x4, 'sh\x00', 0x6, 0xfffffe00, 0x58}, 0x2c) socketpair(0x14, 0xa, 0x205, &(0x7f0000000400)={0xffffffffffffffff}) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x4e22, 0xd5d, 0x4e22, 0x9a2, 0x2, 0x20, 0x20, 0x32, 0x0, r5}, {0x4, 0x1, 0xb49, 0x0, 0x1, 0x0, 0x1ff, 0x5}, {0xfffffffffffffffa, 0x9, 0x1, 0x3}, 0xe000, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d4, 0xe6}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x4, 0x0, 0x37, 0x7, 0x7, 0x7ff}}, 0xe8) bind$inet(r3, &(0x7f0000000540)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000580)=""/133) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000640)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8d) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f00000006c0)={0x2}) [ 112.869698] audit: type=1400 audit(1748666031.425:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:33:51 executing program 4: r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/175) r1 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/79) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r3 = shmget(0x3, 0x4000, 0x4439d4638fefb8a6, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget(0x2, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/4096) r5 = syz_usb_connect$cdc_ecm(0x6, 0x75, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x1f, {{0xa, 0x24, 0x6, 0x0, 0x0, "763ab90f84"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x5, 0x27}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @obex={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfb, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x80, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x250, 0x6, 0x9, 0x1f, 0x10}, 0x32, &(0x7f0000001200)={0x5, 0xf, 0x32, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x6, 0x91}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x7fffe00, 0xf08, 0xffff, [0x3f30, 0xffff00, 0xffc0c0, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3f, 0xff, 0xffe1}]}, 0x4, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x3c01}}, {0x43, &(0x7f00000012c0)=@string={0x43, 0x3, "df4958e1d6829de6050adeadc5d6279353bef28f439e90e4a460a09cb2fe84a103d73fa8b786fcc71a3eb5c8ef8c7c3a72a2acee07af18e28c8ed6ea98e42cd73a"}}, {0xce, &(0x7f0000001340)=@string={0xce, 0x3, "ff76e53b6d81e6eb576c85b6bd5b7d361dfa46258fd51f88abe6482d18b2058a4fe6d9e8a3479c8a13bd9855fbf701362742104a46b1ce8dc513c24b24eddb15898ddf9216dc1d2eb8fa1ace6774aea17125c65dd513491c711f012572ccfd8fcb26002a33e74b5e8ee385006d7c34625ba87b74966650c930cbd55fb9c05b821f17961b5af1f52312803b5958c6b2856e9db773d6e51b50f8007dab667ee808f3afcd643273758e9cc7644b61e3f1e6fdeb0fd42782f21765e0dd20ee3d2bb662217e34f152f63e1eaeb6ea"}}]}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000014c0)=""/224) prctl$PR_SET_KEEPCAPS(0x8, 0x1) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f00000015c0)=""/199) r6 = shmget(0x0, 0x1000, 0x8, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000016c0)=""/46) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000017c0)={0x14, &(0x7f0000001700)={0x40, 0xb, 0x4e, {0x4e, 0x8, "569ad9e53270eaad503eeb74d707cc17dba185dce66f17cc8adc2ce7727faee46965883956486bc50008085eca56bd704ce5a3f0617572db106594151aca5f7935463a8dbada791fb78c675f"}}, &(0x7f0000001780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001980)={0x1c, &(0x7f0000001800)={0x0, 0xc, 0xe0, "ec329943bb2a38322ff7a2c847be2d0d344b3f5c8668486bc57d47246f14b4e951dd5cee9dc7c5928b80940679de5a103c85441a41f0044bfef4b7e332906e63e83ba4dfe5ba18c6e0fb3bf377806d47059f75b3393db77755c3d18ac20547ad3d8a90079da4edc32de58ff93ec4649dc2159bbae9064a7296215c4baba63b3e9d69590dd3710f993a1028e5e22215abad72c24a447e4bd46f73c12b243ca3ff9421c356e4496925fad1b13b6c80ebad33cfe04a6be0e9148c6929d101cf52b1de8827d68b6e1bb3e12d936c6bdfe6c892f5d6fffbe9560c11774106614d518e"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x9}}) shmctl$IPC_RMID(r2, 0x0) r7 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) 04:33:51 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x0, {0x40, 0x0, 0x1}, 0x28, 0xee01, 0xee00, 0x6, 0x6, 0x80, 0x8f24, 0x7f, 0x7, 0x1ff, 0x4, 0x81, 0x0, 0x7, 0x6, 0x7f, 0x1}}, 0xa0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x2d0180) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/37) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000180)=""/97) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0xfffffffffffffffd) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000200)=""/103) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000280)=""/31) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) pipe2$9p(&(0x7f00000002c0), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffe, 0x40040) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000340)=""/140) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000400)=""/184) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETATTR(r4, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0xa02, {0x40, 0x4, 0x2}, 0x49, 0xffffffffffffffff, 0xee00, 0x10001, 0x200, 0x0, 0x0, 0x4, 0x2, 0x1, 0x7, 0xfffffffc00000000, 0x4, 0x9, 0x1f, 0xfffffffffffffffe, 0x5, 0x5}}, 0xa0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x7, &(0x7f00000005c0)=[{0xffff, 0x2, 0x3, 0x800}, {0x8, 0xc2, 0x2b, 0x5}, {0x9, 0x0, 0x0, 0x1ff}, {0x400, 0x9, 0x0, 0x7}, {0x3, 0x3, 0x1, 0x6}, {0x1, 0x1, 0x2, 0xdd}, {0x1000, 0x3, 0x1, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000640)) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000006c0)={0x2da, 0x3, 0x4, 0x1, 0x3, 0x4}) 04:33:51 executing program 6: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/36) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000000c0)=0x83) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000001c0)=""/215) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000002c0)=""/93) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x4e24, 0x1, 0x4e23, 0x20, 0xa, 0x80, 0x80, 0x6, 0x0, 0xffffffffffffffff}, {0x2, 0x80, 0x8, 0x7fff, 0x2, 0x6, 0x38, 0x734}, {0x5, 0x4, 0x6, 0x800}, 0x9, 0x2, 0x2, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x9, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x68, 0x0, 0x2, 0x1}}, 0xe8) shmget(0x3, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000005c0)=""/183, &(0x7f0000000680)=0xb7) r3 = fsmount(r1, 0x0, 0x6) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000006c0)) socketpair(0x1a, 0x4, 0x1, &(0x7f0000000780)) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000007c0)={0x39b2}) 04:33:51 executing program 7: syz_extract_tcp_res(&(0x7f0000000000), 0x14, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, 0xffffffffffffffff, 0x5}) socketpair(0xa, 0x800, 0x3, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@remote, @local, @val={@val={0x9100, 0x6, 0x1, 0x2}, {0x8100, 0x7, 0x1, 0x1}}, {@canfd={0xd, {{0x0, 0x1}, 0x2a, 0x1, 0x0, 0x0, "a3d391b9d8b17f0238e7a9d7bff044162f1e04309377583b54d03cf29ae52a38a40745bfe2e1fb7856f183505ebf2f7039b147e34108026d01670a4929794a59"}}}}, &(0x7f0000000240)={0x1, 0x1, [0x4db, 0x962, 0x186, 0x43d]}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x80, 0x1f, 0xb000, 0x7ff}, @x25={0x1, 0x9, 0xb, "05e1ae0512c063899e753fc694f711f4eff1ffabfc4ad3be3c78cbc4a1e299b83921d2806c74ee8a561afb6b50b9b8e0e31c2d60ed72c6aa1d5ef4ca5748409e427f70114a25a7161a06fb9bdc9c6e6fb53160bd89c2311a962df980494d68cc8205ff2d475fb06733184cbddf13c6cb1124a2b5587b16278ea3f4e99d593a524366f09351138209939a40eca1791f064e69ae6755fb6215be8d1e97876df81a951636a9620f92c6b55cc47a38ac8de133e47ffbfebb37c70cd21ecc0495d8acad433dd709"}}, 0xd2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000003c0)={0x0, 0x1, "62e9fc", 0x2c, 0x8}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x2, 0x4, 0x15, 0x10, "87bb1d05b27a18049064abd2aab2f1a4d1d257f5f5fbea1ae12feb41566451ac2cdb458ebf3f1f698296d4a3dd7e496fa55a171e54441ce3835e6760864e6258", "f8d7af526ad34523a78781b74c3760fe229cf5f73d2c12fa2de989971733b1d4", [0x1ff, 0x70d2]}) r3 = fsmount(r1, 0x0, 0x8) io_uring_setup(0xbd, &(0x7f00000004c0)={0x0, 0xf930, 0x10, 0x3, 0x39c, 0x0, r3}) write$bt_hci(r1, &(0x7f0000000540)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000580)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff) r4 = fspick(r0, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000640)='sync\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x40040, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) [ 114.253197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.257798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.263851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.269727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.274798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.316594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.322299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.324786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.326962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.328782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.333767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.340521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.343791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.345758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.354508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.523629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.538432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.538736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.547919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.555465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.557033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.558492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.561656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.571012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.576736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.577963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.594101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.596105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.599092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.601887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.603837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.609062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.611390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.611722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.616619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.618728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.619130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.630544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.640591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.652774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.323038] Bluetooth: hci0: command tx timeout [ 116.386340] Bluetooth: hci2: command tx timeout [ 116.386958] Bluetooth: hci1: command tx timeout [ 116.706389] Bluetooth: hci4: command tx timeout [ 116.707057] Bluetooth: hci3: command tx timeout [ 116.707977] Bluetooth: hci5: command tx timeout [ 116.770307] Bluetooth: hci7: command tx timeout [ 116.770893] Bluetooth: hci6: command tx timeout [ 118.370343] Bluetooth: hci0: command tx timeout [ 118.435298] Bluetooth: hci1: command tx timeout [ 118.437097] Bluetooth: hci2: command tx timeout [ 118.755804] Bluetooth: hci5: command tx timeout [ 118.757699] Bluetooth: hci3: command tx timeout [ 118.759750] Bluetooth: hci4: command tx timeout [ 118.818371] Bluetooth: hci6: command tx timeout [ 118.819531] Bluetooth: hci7: command tx timeout [ 120.418324] Bluetooth: hci0: command tx timeout [ 120.484367] Bluetooth: hci2: command tx timeout [ 120.484909] Bluetooth: hci1: command tx timeout [ 120.804247] Bluetooth: hci5: command tx timeout [ 120.804803] Bluetooth: hci3: command tx timeout [ 120.805323] Bluetooth: hci4: command tx timeout [ 120.867619] Bluetooth: hci7: command tx timeout [ 120.868143] Bluetooth: hci6: command tx timeout [ 122.466646] Bluetooth: hci0: command tx timeout [ 122.530408] Bluetooth: hci2: command tx timeout [ 122.531812] Bluetooth: hci1: command tx timeout [ 122.850747] Bluetooth: hci4: command tx timeout [ 122.851677] Bluetooth: hci3: command tx timeout [ 122.852607] Bluetooth: hci5: command tx timeout [ 122.915596] Bluetooth: hci6: command tx timeout [ 122.916636] Bluetooth: hci7: command tx timeout [ 177.071438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.077313] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.080846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.089037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.094901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.330995] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.335762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.337931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.345767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.352148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.425689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.433825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.439712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.448530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.451249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.462749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.465893] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.475951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.476342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.482969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.485164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.489997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.507582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.512004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.513457] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.516119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.517557] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.520559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.521542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.527642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.531727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.563101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.565007] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.574508] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.599553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.602002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.604540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.626752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.652477] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.666561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.171577] Bluetooth: hci0: command tx timeout [ 179.426359] Bluetooth: hci1: command tx timeout [ 179.619433] Bluetooth: hci3: command tx timeout [ 179.619496] Bluetooth: hci5: command tx timeout [ 179.682758] Bluetooth: hci2: command tx timeout [ 179.683488] Bluetooth: hci4: command tx timeout [ 179.683497] Bluetooth: hci7: command tx timeout [ 179.746662] Bluetooth: hci6: command tx timeout [ 181.218319] Bluetooth: hci0: command tx timeout [ 181.474759] Bluetooth: hci1: command tx timeout [ 181.666652] Bluetooth: hci3: command tx timeout [ 181.667732] Bluetooth: hci5: command tx timeout [ 181.730393] Bluetooth: hci4: command tx timeout [ 181.731673] Bluetooth: hci7: command tx timeout [ 181.731719] Bluetooth: hci2: command tx timeout [ 181.794335] Bluetooth: hci6: command tx timeout [ 183.268280] Bluetooth: hci0: command tx timeout [ 183.524608] Bluetooth: hci1: command tx timeout [ 183.714307] Bluetooth: hci5: command tx timeout [ 183.715358] Bluetooth: hci3: command tx timeout [ 183.778525] Bluetooth: hci4: command tx timeout [ 183.778941] Bluetooth: hci2: command tx timeout [ 183.778985] Bluetooth: hci7: command tx timeout [ 183.842452] Bluetooth: hci6: command tx timeout [ 185.315855] Bluetooth: hci0: command tx timeout [ 185.570551] Bluetooth: hci1: command tx timeout [ 185.764257] Bluetooth: hci3: command tx timeout [ 185.764800] Bluetooth: hci5: command tx timeout [ 185.826603] Bluetooth: hci2: command tx timeout [ 185.826766] Bluetooth: hci7: command tx timeout [ 185.827040] Bluetooth: hci4: command tx timeout [ 185.890516] Bluetooth: hci6: command tx timeout [ 237.202792] syz-executor.7 (2797) used greatest stack depth: 23888 bytes left [ 239.485674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.487126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.488954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.492101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.494236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.504440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.511535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.515031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.530734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.533955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.621623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.624445] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.625678] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.628377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.630009] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.701476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.704486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.705721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.708304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.709915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.803567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.806501] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.815988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.822077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.837766] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.839144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.847284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.848147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.852449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.854402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.857718] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.859457] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.861127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.861897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.864514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.868291] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.871505] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.885813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.922865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.929326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.570314] Bluetooth: hci1: command tx timeout [ 241.571138] Bluetooth: hci0: command tx timeout [ 241.698479] Bluetooth: hci2: command tx timeout [ 241.762478] Bluetooth: hci3: command tx timeout [ 241.954593] Bluetooth: hci4: command tx timeout [ 241.955576] Bluetooth: hci7: command tx timeout [ 241.955606] Bluetooth: hci6: command tx timeout [ 242.146441] Bluetooth: hci5: command tx timeout [ 243.618428] Bluetooth: hci0: command tx timeout [ 243.618458] Bluetooth: hci1: command tx timeout [ 243.746287] Bluetooth: hci2: command tx timeout [ 243.810445] Bluetooth: hci3: command tx timeout [ 244.003238] Bluetooth: hci6: command tx timeout [ 244.003277] Bluetooth: hci4: command tx timeout [ 244.003682] Bluetooth: hci7: command tx timeout [ 244.196256] Bluetooth: hci5: command tx timeout [ 245.666704] Bluetooth: hci0: command tx timeout [ 245.667852] Bluetooth: hci1: command tx timeout [ 245.795870] Bluetooth: hci2: command tx timeout [ 245.859292] Bluetooth: hci3: command tx timeout [ 246.050448] Bluetooth: hci7: command tx timeout [ 246.050596] Bluetooth: hci4: command tx timeout [ 246.051713] Bluetooth: hci6: command tx timeout [ 246.244329] Bluetooth: hci5: command tx timeout [ 247.714351] Bluetooth: hci0: command tx timeout [ 247.714854] Bluetooth: hci1: command tx timeout [ 247.842449] Bluetooth: hci2: command tx timeout [ 247.906287] Bluetooth: hci3: command tx timeout [ 248.098297] Bluetooth: hci4: command tx timeout [ 248.098348] Bluetooth: hci7: command tx timeout [ 248.098705] Bluetooth: hci6: command tx timeout [ 248.290275] Bluetooth: hci5: command tx timeout [ 301.881901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.884937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.890705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.900492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.910151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.194686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.200887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.203437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.209895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.220987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.286647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.295838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.298557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.317777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.325692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.354148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.362665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.378026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.381628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.387565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.392160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.401739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.405934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.418937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.447689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.685081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.688148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.697524] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.699448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.703723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.720849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.803798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.824643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.828058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.832968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.861708] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.889873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.899829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.014835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.051849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.970297] Bluetooth: hci0: command tx timeout [ 304.290774] Bluetooth: hci1: command tx timeout [ 304.354283] Bluetooth: hci2: command tx timeout [ 304.482867] Bluetooth: hci4: command tx timeout [ 304.483701] Bluetooth: hci3: command tx timeout [ 304.931282] Bluetooth: hci6: command tx timeout [ 304.994750] Bluetooth: hci5: command tx timeout [ 305.250315] Bluetooth: hci7: command tx timeout [ 306.019305] Bluetooth: hci0: command tx timeout [ 306.339316] Bluetooth: hci1: command tx timeout [ 306.404293] Bluetooth: hci2: command tx timeout [ 306.530437] Bluetooth: hci3: command tx timeout [ 306.530902] Bluetooth: hci4: command tx timeout [ 306.979244] Bluetooth: hci6: command tx timeout [ 307.042389] Bluetooth: hci5: command tx timeout [ 307.299556] Bluetooth: hci7: command tx timeout [ 308.066477] Bluetooth: hci0: command tx timeout [ 308.387269] Bluetooth: hci1: command tx timeout [ 308.450468] Bluetooth: hci2: command tx timeout [ 308.580234] Bluetooth: hci4: command tx timeout [ 308.580744] Bluetooth: hci3: command tx timeout [ 309.026475] Bluetooth: hci6: command tx timeout [ 309.090247] Bluetooth: hci5: command tx timeout [ 309.347570] Bluetooth: hci7: command tx timeout [ 310.114590] Bluetooth: hci0: command tx timeout [ 310.434376] Bluetooth: hci1: command tx timeout [ 310.499890] Bluetooth: hci2: command tx timeout [ 310.627615] Bluetooth: hci3: command tx timeout [ 310.628111] Bluetooth: hci4: command tx timeout [ 311.074396] Bluetooth: hci6: command tx timeout [ 311.138368] Bluetooth: hci5: command tx timeout [ 311.395319] Bluetooth: hci7: command tx timeout [ 364.219311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.223568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.227735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.237108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.244931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.478548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.487822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.490496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.498483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.505351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.507534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.513847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.517750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.527404] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.539746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.552772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.558805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.562707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.580049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.586516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.646848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.662981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.689759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.707345] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.721698] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.726962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.741916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.744126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.748900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.756026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.761761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.778146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.779648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.781088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.788587] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.790030] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.803692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.821161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.826730] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.829701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.306539] Bluetooth: hci0: command tx timeout [ 366.627251] Bluetooth: hci1: command tx timeout [ 366.628024] Bluetooth: hci2: command tx timeout [ 366.692249] Bluetooth: hci3: command tx timeout [ 366.818556] Bluetooth: hci4: command tx timeout [ 366.882303] Bluetooth: hci7: command tx timeout [ 366.883037] Bluetooth: hci5: command tx timeout [ 366.947211] Bluetooth: hci6: command tx timeout [ 368.354333] Bluetooth: hci0: command tx timeout [ 368.674338] Bluetooth: hci2: command tx timeout [ 368.675146] Bluetooth: hci1: command tx timeout [ 368.738415] Bluetooth: hci3: command tx timeout [ 368.866699] Bluetooth: hci4: command tx timeout [ 368.930875] Bluetooth: hci7: command tx timeout [ 368.931830] Bluetooth: hci5: command tx timeout [ 368.995962] Bluetooth: hci6: command tx timeout [ 370.402669] Bluetooth: hci0: command tx timeout [ 370.722330] Bluetooth: hci1: command tx timeout [ 370.722826] Bluetooth: hci2: command tx timeout [ 370.786258] Bluetooth: hci3: command tx timeout [ 370.914574] Bluetooth: hci4: command tx timeout [ 370.979253] Bluetooth: hci5: command tx timeout [ 370.979756] Bluetooth: hci7: command tx timeout [ 371.042498] Bluetooth: hci6: command tx timeout [ 372.450270] Bluetooth: hci0: command tx timeout [ 372.771705] Bluetooth: hci2: command tx timeout [ 372.772566] Bluetooth: hci1: command tx timeout [ 372.834303] Bluetooth: hci3: command tx timeout [ 372.962273] Bluetooth: hci4: command tx timeout [ 373.028253] Bluetooth: hci7: command tx timeout [ 373.028712] Bluetooth: hci5: command tx timeout [ 373.090247] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:39:01 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81616b2b RDX=ffff888016023700 RSI=ffffffff81616b40 RDI=0000000000000006 RBP=ffff88806ce289d8 RSP=ffff88806ce08dd8 R8 =0000000000000000 R9 =fffffbfff0f0a529 R10=000000625fcc0080 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffff88806ce289c0 R15=0000000000000000 RIP=ffffffff81738bc4 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa4cc1d9540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa4cc2aa710 CR3=000000000e5bc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf08a78 RCX=ffff88806cf089cc RDX=1ffff1100d9e115a RSI=ffffffff85c1d1c0 RDI=ffffffff813b6639 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a60 R8 =ffffffff867cc83a R9 =ffff88806cf08ab8 R10=000000000003b6bd R11=0000000000008666 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888029819b80 R15=ffff888035bf9600 RIP=ffffffff81353b1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b5212d2080 CR3=0000000013b0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000 XMM02=0000000000ff00000000000000000000 XMM03=00ff0000000000000000ff0000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000