Warning: Permanently added '[localhost]:15225' (ECDSA) to the list of known hosts. 2025/06/04 12:48:13 fuzzer started 2025/06/04 12:48:14 dialing manager at localhost:39055 syzkaller login: [ 104.690233] cgroup: Unknown subsys name 'net' [ 104.905323] cgroup: Unknown subsys name 'cpuset' [ 104.953534] cgroup: Unknown subsys name 'rlimit' 2025/06/04 12:48:36 syscalls: 200 2025/06/04 12:48:36 code coverage: enabled 2025/06/04 12:48:36 comparison tracing: enabled 2025/06/04 12:48:36 extra coverage: enabled 2025/06/04 12:48:36 setuid sandbox: enabled 2025/06/04 12:48:36 namespace sandbox: enabled 2025/06/04 12:48:36 Android sandbox: enabled 2025/06/04 12:48:36 fault injection: enabled 2025/06/04 12:48:36 leak checking: enabled 2025/06/04 12:48:36 net packet injection: enabled 2025/06/04 12:48:36 net device setup: enabled 2025/06/04 12:48:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 12:48:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 12:48:36 USB emulation: enabled 2025/06/04 12:48:36 hci packet injection: enabled 2025/06/04 12:48:36 wifi device emulation: enabled 2025/06/04 12:48:36 802.15.4 emulation: enabled 2025/06/04 12:48:36 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 12:48:37 starting 8 fuzzer processes 12:48:37 executing program 0: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x2f, 0x1, 0xc4, 0xb2e, 0x5b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x7800, 0x1, 0x5}}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x28100, 0x42) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', r0, 0x29, 0x4, 0x2, 0x3, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0xf840, 0x7, 0xffff}}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x80, 0xe89, 0xfffffff6]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5dd, 0x9, 0x40, 0x4, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}]}, 0x90}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2240, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r0, 0x4, 0x9, 0x6, 0x40, 0x10, @mcast2, @mcast1, 0x7800, 0x7, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', r2, 0x29, 0xcf, 0xc9, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x700, 0x7800, 0x1, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', r0, 0x2f, 0x20, 0x1, 0x7, 0x5b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x4a, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', r0, 0x2f, 0x1f, 0x3f, 0x9, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x40, 0x40, 0x74, 0x1f}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', r0, 0x8000, 0x700, 0x5, 0x3, {{0xc, 0x4, 0x2, 0x3, 0x30, 0x66, 0x0, 0x7f, 0x4, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x17, 0xeb, [@loopback, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x82, 0x4, '0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf0}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x69}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c015) timer_create(0x5, &(0x7f0000000580)={0x0, 0x3f, 0x1}, &(0x7f00000005c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000700)={0xfffffe00}, 0x4) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x410, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x450d0}, 0x4085) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r4, 0x100, 0x6, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000980), r0) getrusage(0xffffffffffffffff, &(0x7f00000009c0)) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x5050c6cced3e9eec) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r5, 0x408, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040840}, 0x800) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x70}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) timer_gettime(0x0, &(0x7f0000000e80)) 12:48:37 executing program 2: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/72) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'netdevsim0\x00'}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/snd_seq', 0x0, 0x10a) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) set_mempolicy(0x1, &(0x7f0000000200)=0x9c4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xa6, 0xa1b, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7800, 0x4, 0xffffb0ce}}) r2 = openat$incfs(r1, &(0x7f0000000300)='.pending_reads\x00', 0x200, 0xe2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x104) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) r3 = openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x2000, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x5) openat$incfs(r3, &(0x7f0000000380)='.log\x00', 0x500, 0x101) 12:48:37 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xff, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xfffffffffffffff9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0xa, &(0x7f0000000140)=[{0x0, 0x6, 0x0, 0x80010}, {0x4, 0x6, 0x5, 0x1ad}, {0x0, 0x0, 0x1f, 0x8}, {0x7f, 0x4, 0x4, 0xc1}, {0x6, 0x8c, 0x8}, {0x1, 0x1, 0x5, 0xfffffff9}, {0xe10f, 0x35, 0xff, 0x6}, {0x3, 0x20, 0x4, 0x7}, {0x9, 0x9, 0x2, 0x4}, {0x4, 0x0, 0x4, 0x1}]}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000240)={0x80000000}, 0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x721001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth0_macvtap\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000300)) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) sched_getparam(0xffffffffffffffff, &(0x7f0000000340)) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) [ 128.094969] audit: type=1400 audit(1749041317.947:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:48:37 executing program 5: syz_usb_connect$uac1(0x3, 0xf1, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x4, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe8d, 0x7}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x3, 0x3, [0xa, 0x0, 0x1], 0x81}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x0, 0x3f, "57428a2b"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x2, 'S0'}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x0, 0xbd, "9296e30e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x51, 0x5, '4', "6dd31d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe1, 0x5, 0x3f, {0x7, 0x25, 0x1, 0x2, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x18, "c6", "d8013b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1, 0x2, "", "8cb2"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0xde, 0xd4, "059373bcc81076c0"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x9b, 0x2, '\n'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xffff, 0xffff, 0x80, "5abc7ea7bb55"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0xe4d, 0x1f, 'bc'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x0, 0xff, {0x7, 0x25, 0x1, 0x0, 0xff, 0x9}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x3, 0xe4, 0x20, 0x5}, 0x11a, &(0x7f0000000140)={0x5, 0xf, 0x11a, 0x3, [@generic={0x2d, 0x10, 0x0, "bca266c8c7648b5e8635603fd3b68c45de8552a7034c4d53cee2865cfa7b86d6c24f8cd36123381b2c9d"}, @generic={0xde, 0x10, 0x2, "06fca4e9eb7c7abd1a5dd4402c1edff9eab40f8cd51aedc81759ebdec323aeba67850745c5cbf0abea6bc6ccf51c5c27be54dc057383627658aa91d3726f311a1fda902abe7a603dae111fbed28dd0a15d74dd63fd988ac23ed012f5ea1b6564e8303ed51a345c803f772108ba8c2bdcdbdfed3cc26caba3a5b1f77fbe285833d51a65c630e4453b6d9155b3db357de5dda8707a9b2a9d281893e21d98e579992725af80af880949bcd496904949a76a52ced9a152681c8b43b8714c690a51fcb068ca77cc1374d6ee9287df4ec2bb25dc499e64859718ac033dba"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x4, 0x400}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) sysinfo(&(0x7f0000000300)=""/146) sysinfo(&(0x7f00000003c0)=""/131) r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000480)=""/243) r1 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x2, r2, '\x00', @auto=[0x2e, 0x31]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', r5, 0x4, 0xad, 0x4, 0x6, 0x0, @private2, @mcast1, 0x10, 0x8000, 0xb17f}}) shmctl$IPC_RMID(r0, 0x0) sysinfo(&(0x7f0000000800)=""/230) add_key$fscrypt_provisioning(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffff9) shmctl$IPC_INFO(r1, 0x3, &(0x7f00000009c0)=""/171) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a80)) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000ac0)=""/180) 12:48:37 executing program 6: shmctl$IPC_RMID(0x0, 0x0) r0 = shmget(0x3, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/192) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/165) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/5) r1 = getegid() fchownat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xee00, r1, 0x100) shmctl$IPC_RMID(r0, 0x0) r2 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000200)=""/4096) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000001200)=""/178) statx(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x2000, 0x8, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fork() r5 = fork() shmctl$IPC_SET(r2, 0x1, &(0x7f0000001400)={{0x0, 0xee00, r1, r3, r1, 0x0, 0x4}, 0xc5, 0xc829, 0x0, 0x0, r4, r5, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'sit0\x00', 0x0, 0x2f, 0x7, 0x6, 0x5, 0x70, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x13a, 0x20}}) 12:48:37 executing program 4: socketpair(0x9, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x2, 0x1f, 0x4, @local, @rand_addr=' \x01\x00', 0x40, 0x1, 0x2, 0x7e}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0xc0, 0xff, 0x14f, 0x33, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0xfffffffc, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x4, 0x9, 0x3f, 0x4, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x20, 0x1, 0xfffff98e, 0x400}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x0, 0xc, @local, @private0, 0x20, 0x7, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x2, 0x5, 0x13, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x700, 0x3, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x8001, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x10, 0x80000001, 0x34a1bd9}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x1f, 0xff, 0x7, 0x2, @mcast2, @local, 0x80, 0x20, 0x9, 0x6d9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x81, 0x12e, 0x25, @mcast1, @rand_addr=' \x01\x00', 0x1, 0x80, 0x0, 0x401}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000880)={0x56c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbaa1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x5, 0x3, 0x1}, {0x4, 0xe8, 0x9a, 0x7ff}]}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6a9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0xdb, 0x9, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x6c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7b}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x9, 0x101, 0x7, 0x5]}]}, 0x6c}}, 0x800) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/module/hid_microsoft', 0x90040, 0x2) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r0) sendmsg$IPVS_CMD_GET_DAEMON(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r13, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r14, 0x89fa, &(0x7f00000011c0)={'syztnl0\x00', &(0x7f0000001140)={'ip6tnl0\x00', r9, 0x2f, 0xd0, 0x7, 0x7f, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x1, 0x8, 0x10}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001880)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f0000001400)={0x43c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdd}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x468c}}, {0x8}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x14040000}, 0x8003) 12:48:38 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x29000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000240)=0x179400, 0x4) r4 = socket(0x2a, 0x1, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x70, 0x400, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x8, 0x1, 0x4}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000340)={'batadv0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x3000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', r5, 0x700, 0x20, 0x0, 0x2, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@end, @noop, @end, @ssrr={0x89, 0x13, 0x26, [@multicast2, @multicast1, @loopback, @private=0xa010102]}, @ssrr={0x89, 0x1b, 0xfb, [@private=0xa010101, @rand_addr=0x64010100, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}]}, @rr={0x7, 0x17, 0x92, [@multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101]}]}}}}}) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000440)={0x1000, [0xffff, 0x40000000], 0x6}, 0x10) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000480), 0x1f5032a7857e6099, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 129.489035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.493820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.496872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.503515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.508344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.555800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.563061] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.568719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.575734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.578063] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.581385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.583858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.590161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.598867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.600239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.602793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.609926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.612247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.612763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.616687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.621383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.626936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.630431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.632912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.642439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.687523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.696809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.701064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.713767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.716279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.721010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.726710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.729199] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.734776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.739951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.742876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.746422] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.752830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.764678] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.768798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.580112] Bluetooth: hci0: command tx timeout [ 131.641580] Bluetooth: hci1: command tx timeout [ 131.706096] Bluetooth: hci4: command tx timeout [ 131.707555] Bluetooth: hci2: command tx timeout [ 131.707686] Bluetooth: hci3: command tx timeout [ 131.833892] Bluetooth: hci6: command tx timeout [ 131.833945] Bluetooth: hci5: command tx timeout [ 131.834283] Bluetooth: hci7: command tx timeout [ 133.626818] Bluetooth: hci0: command tx timeout [ 133.691637] Bluetooth: hci1: command tx timeout [ 133.754636] Bluetooth: hci3: command tx timeout [ 133.754688] Bluetooth: hci4: command tx timeout [ 133.755121] Bluetooth: hci2: command tx timeout [ 133.882515] Bluetooth: hci6: command tx timeout [ 133.882539] Bluetooth: hci7: command tx timeout [ 133.883009] Bluetooth: hci5: command tx timeout [ 135.673548] Bluetooth: hci0: command tx timeout [ 135.739510] Bluetooth: hci1: command tx timeout [ 135.801913] Bluetooth: hci4: command tx timeout [ 135.802004] Bluetooth: hci3: command tx timeout [ 135.803576] Bluetooth: hci2: command tx timeout [ 135.931508] Bluetooth: hci7: command tx timeout [ 135.931575] Bluetooth: hci6: command tx timeout [ 135.932838] Bluetooth: hci5: command tx timeout [ 137.721621] Bluetooth: hci0: command tx timeout [ 137.785584] Bluetooth: hci1: command tx timeout [ 137.849781] Bluetooth: hci3: command tx timeout [ 137.849912] Bluetooth: hci4: command tx timeout [ 137.851593] Bluetooth: hci2: command tx timeout [ 137.977596] Bluetooth: hci6: command tx timeout [ 137.979091] Bluetooth: hci7: command tx timeout [ 137.979521] Bluetooth: hci5: command tx timeout [ 190.001458] syz-executor.1 (285) used greatest stack depth: 24544 bytes left [ 192.461912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.463880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.467819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.475232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.504918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.598028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.605916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.608988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.618181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.623776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.627199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.628090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.640696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.647741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.650006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.651059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.652558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.655145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.658396] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.670961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.730577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.734803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.736135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.742240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.743791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.745895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.758590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.759979] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.761357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.761496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.765865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.774036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.777830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.780974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.784861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.792972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.807266] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.814274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.822365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.836190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.553809] Bluetooth: hci0: command tx timeout [ 194.681682] Bluetooth: hci2: command tx timeout [ 194.746022] Bluetooth: hci1: command tx timeout [ 194.746710] Bluetooth: hci3: command tx timeout [ 194.873759] Bluetooth: hci6: command tx timeout [ 194.941884] Bluetooth: hci7: command tx timeout [ 194.941926] Bluetooth: hci4: command tx timeout [ 195.066384] Bluetooth: hci5: command tx timeout [ 196.602620] Bluetooth: hci0: command tx timeout [ 196.729793] Bluetooth: hci2: command tx timeout [ 196.793569] Bluetooth: hci3: command tx timeout [ 196.793729] Bluetooth: hci1: command tx timeout [ 196.921689] Bluetooth: hci6: command tx timeout [ 196.985688] Bluetooth: hci7: command tx timeout [ 196.988507] Bluetooth: hci4: command tx timeout [ 197.114636] Bluetooth: hci5: command tx timeout [ 198.649848] Bluetooth: hci0: command tx timeout [ 198.779056] Bluetooth: hci2: command tx timeout [ 198.841643] Bluetooth: hci3: command tx timeout [ 198.842252] Bluetooth: hci1: command tx timeout [ 198.969632] Bluetooth: hci6: command tx timeout [ 199.033840] Bluetooth: hci4: command tx timeout [ 199.033923] Bluetooth: hci7: command tx timeout [ 199.161641] Bluetooth: hci5: command tx timeout [ 200.697676] Bluetooth: hci0: command tx timeout [ 200.825737] Bluetooth: hci2: command tx timeout [ 200.889565] Bluetooth: hci3: command tx timeout [ 200.889603] Bluetooth: hci1: command tx timeout [ 201.018091] Bluetooth: hci6: command tx timeout [ 201.081606] Bluetooth: hci4: command tx timeout [ 201.082967] Bluetooth: hci7: command tx timeout [ 201.210827] Bluetooth: hci5: command tx timeout [ 254.862253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.867117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.872013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.887299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.899076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.044705] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.048140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.049662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.054176] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.057534] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.123287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.126883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.135067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.142636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.144921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.181435] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.191226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.193119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.207805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.213145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.266120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.273856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.278875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.284368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.290315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.299879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.301041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.302367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.304883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.305041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.312036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.326832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.333900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.342146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.343732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.405401] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.426871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.429530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.435811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.438445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.953871] Bluetooth: hci0: command tx timeout [ 257.147529] Bluetooth: hci1: command tx timeout [ 257.209574] Bluetooth: hci2: command tx timeout [ 257.273933] Bluetooth: hci3: command tx timeout [ 257.337562] Bluetooth: hci6: command tx timeout [ 257.401636] Bluetooth: hci5: command tx timeout [ 257.402158] Bluetooth: hci4: command tx timeout [ 257.465771] Bluetooth: hci7: command tx timeout [ 259.001554] Bluetooth: hci0: command tx timeout [ 259.193573] Bluetooth: hci1: command tx timeout [ 259.257703] Bluetooth: hci2: command tx timeout [ 259.321663] Bluetooth: hci3: command tx timeout [ 259.385740] Bluetooth: hci6: command tx timeout [ 259.449643] Bluetooth: hci5: command tx timeout [ 259.452519] Bluetooth: hci4: command tx timeout [ 259.514533] Bluetooth: hci7: command tx timeout [ 261.051833] Bluetooth: hci0: command tx timeout [ 261.241876] Bluetooth: hci1: command tx timeout [ 261.306742] Bluetooth: hci2: command tx timeout [ 261.369927] Bluetooth: hci3: command tx timeout [ 261.433699] Bluetooth: hci6: command tx timeout [ 261.497602] Bluetooth: hci4: command tx timeout [ 261.498103] Bluetooth: hci5: command tx timeout [ 261.562937] Bluetooth: hci7: command tx timeout [ 263.099722] Bluetooth: hci0: command tx timeout [ 263.290550] Bluetooth: hci1: command tx timeout [ 263.354804] Bluetooth: hci2: command tx timeout [ 263.418757] Bluetooth: hci3: command tx timeout [ 263.484733] Bluetooth: hci6: command tx timeout [ 263.546733] Bluetooth: hci5: command tx timeout [ 263.547274] Bluetooth: hci4: command tx timeout [ 263.611677] Bluetooth: hci7: command tx timeout [ 317.521952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.526928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.529705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.533863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.544710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.858542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.860597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.863414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.865049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.868522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.872763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.878634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.883780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.887332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.889138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.003176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.022895] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.040139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.042352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.044837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.055634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.061651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.067721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.069870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.076704] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.080995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.084284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.094180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.099123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.102803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.104566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.108068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.110930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.113726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.126787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.158154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.169964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.208984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.229139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.235031] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.610803] Bluetooth: hci0: command tx timeout [ 319.930778] Bluetooth: hci2: command tx timeout [ 319.932582] Bluetooth: hci1: command tx timeout [ 320.185647] Bluetooth: hci6: command tx timeout [ 320.185683] Bluetooth: hci4: command tx timeout [ 320.186602] Bluetooth: hci3: command tx timeout [ 320.250582] Bluetooth: hci5: command tx timeout [ 320.314605] Bluetooth: hci7: command tx timeout [ 321.657592] Bluetooth: hci0: command tx timeout [ 321.977764] Bluetooth: hci1: command tx timeout [ 321.978313] Bluetooth: hci2: command tx timeout [ 322.234100] Bluetooth: hci3: command tx timeout [ 322.235337] Bluetooth: hci4: command tx timeout [ 322.235922] Bluetooth: hci6: command tx timeout [ 322.297897] Bluetooth: hci5: command tx timeout [ 322.361754] Bluetooth: hci7: command tx timeout [ 323.705863] Bluetooth: hci0: command tx timeout [ 324.025583] Bluetooth: hci2: command tx timeout [ 324.026157] Bluetooth: hci1: command tx timeout [ 324.282509] Bluetooth: hci4: command tx timeout [ 324.283941] Bluetooth: hci3: command tx timeout [ 324.285230] Bluetooth: hci6: command tx timeout [ 324.345550] Bluetooth: hci5: command tx timeout [ 324.410283] Bluetooth: hci7: command tx timeout [ 325.754916] Bluetooth: hci0: command tx timeout [ 326.073797] Bluetooth: hci2: command tx timeout [ 326.074391] Bluetooth: hci1: command tx timeout [ 326.329800] Bluetooth: hci4: command tx timeout [ 326.330791] Bluetooth: hci3: command tx timeout [ 326.331812] Bluetooth: hci6: command tx timeout [ 326.395584] Bluetooth: hci5: command tx timeout [ 326.457687] Bluetooth: hci7: command tx timeout [ 380.502335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.504079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.506236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.510312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.520335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.626268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.633359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.635090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.637233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.642667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.645138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.646940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.651336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.663231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.666804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.683305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.688631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.696996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.704041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.718609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.816007] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.819872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.821225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.823193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.826144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.830490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.832203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.834563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.838337] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.845945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.847962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.886741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.887673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.890904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.891980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.892989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.899485] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.941018] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.973910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.988620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.585566] Bluetooth: hci0: command tx timeout [ 382.713646] Bluetooth: hci2: command tx timeout [ 382.714319] Bluetooth: hci1: command tx timeout [ 382.777908] Bluetooth: hci3: command tx timeout [ 382.905622] Bluetooth: hci6: command tx timeout [ 382.972110] Bluetooth: hci5: command tx timeout [ 383.035971] Bluetooth: hci4: command tx timeout [ 383.097910] Bluetooth: hci7: command tx timeout [ 384.634025] Bluetooth: hci0: command tx timeout [ 384.762496] Bluetooth: hci1: command tx timeout [ 384.763011] Bluetooth: hci2: command tx timeout [ 384.825576] Bluetooth: hci3: command tx timeout [ 384.953693] Bluetooth: hci6: command tx timeout [ 385.017952] Bluetooth: hci5: command tx timeout [ 385.081816] Bluetooth: hci4: command tx timeout [ 385.146006] Bluetooth: hci7: command tx timeout [ 386.682421] Bluetooth: hci0: command tx timeout [ 386.809833] Bluetooth: hci1: command tx timeout [ 386.811365] Bluetooth: hci2: command tx timeout [ 386.874588] Bluetooth: hci3: command tx timeout [ 387.002510] Bluetooth: hci6: command tx timeout [ 387.065781] Bluetooth: hci5: command tx timeout [ 387.129727] Bluetooth: hci4: command tx timeout [ 387.193665] Bluetooth: hci7: command tx timeout [ 388.731533] Bluetooth: hci0: command tx timeout [ 388.857840] Bluetooth: hci1: command tx timeout [ 388.859632] Bluetooth: hci2: command tx timeout [ 388.921792] Bluetooth: hci3: command tx timeout [ 389.049554] Bluetooth: hci6: command tx timeout [ 389.113556] Bluetooth: hci5: command tx timeout [ 389.177702] Bluetooth: hci4: command tx timeout [ 389.241576] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:53:43 Registers: info registers vcpu 0 RAX=0000000080010001 RBX=1ffff1100d9c11a5 RCX=ffffffff8164794c RDX=ffff88802eba9b80 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88802eba9b80 RSP=ffff88806ce08d18 R8 =0000000000000000 R9 =fffffbfff0f0a529 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88806ce289c0 R15=0000000000000000 RIP=ffffffff81738bc0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6265e00540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a11e929a0 CR3=0000000033f86000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e571b000 RCX=ffffffff8161ed53 RDX=0000000000000000 RSI=ffffffff8161fae7 RDI=ffff88806cf31850 RBP=ffffffff88309f08 RSP=ffff88806cf08c88 R8 =0000000000000000 R9 =0000000000000008 R10=0000000000000008 R11=0000000000000000 R12=ffffffff8161fae7 R13=003b9aca00000000 R14=0000000000242c90 R15=00000000004ed18e RIP=ffffffff815aba10 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f13b06f2368 CR3=000000002cea7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000