Warning: Permanently added '[localhost]:43059' (ECDSA) to the list of known hosts. 2025/06/09 16:23:27 fuzzer started 2025/06/09 16:23:27 dialing manager at localhost:40003 syzkaller login: [ 99.068377] cgroup: Unknown subsys name 'net' [ 99.196421] cgroup: Unknown subsys name 'cpuset' [ 99.251263] cgroup: Unknown subsys name 'rlimit' 2025/06/09 16:23:41 syscalls: 204 2025/06/09 16:23:41 code coverage: enabled 2025/06/09 16:23:41 comparison tracing: enabled 2025/06/09 16:23:41 extra coverage: enabled 2025/06/09 16:23:41 setuid sandbox: enabled 2025/06/09 16:23:41 namespace sandbox: enabled 2025/06/09 16:23:41 Android sandbox: enabled 2025/06/09 16:23:41 fault injection: enabled 2025/06/09 16:23:41 leak checking: enabled 2025/06/09 16:23:41 net packet injection: enabled 2025/06/09 16:23:41 net device setup: enabled 2025/06/09 16:23:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/09 16:23:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/09 16:23:41 USB emulation: enabled 2025/06/09 16:23:41 hci packet injection: enabled 2025/06/09 16:23:41 wifi device emulation: enabled 2025/06/09 16:23:41 802.15.4 emulation: enabled 2025/06/09 16:23:41 fetching corpus: 0, signal 0/0 (executing program) 2025/06/09 16:23:42 starting 8 fuzzer processes 16:23:42 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) r2 = getgid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, r1, r2, 0x0, 0x0, 0x8, 0x7fff}, 0x7, 0x8000, 0xfd, 0x1f, 0xffffffffffffffff, 0x0, 0x9}) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xf7, &(0x7f0000000200)=@generic={0x0, 0x0, 0xef, "c28183c2", "2491044363873620ce9d04b2d7b36531fb5d72169418c071a92d95eca1505466571b2a9a94046e072f56d879d634f51f010745e292d6665999e295d60c90c2a28afea6ea9e5136b08862cad9210c6d0ed1edc8d825a55f0792b00276ce4ed0c7e285c684a68fdeed3331ce964574ef226e28603a8bbf2b30b90c51b7811084a910c8dd3d10226b915bcb57223f1a22ab07c8fe8cf9a07c6e4e9589bb5a3aaa22c8c220dfc1d4fc26e76cdda0b0442194937e3304a3cda93a02f826407478fd710a8d3ea17c3ef518ad5be40ba787baab4638eebe53e10bea9df052dd88fa0e51ccba0cb80bc7d26e0fe9afd580dad9"}) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/4, 0x4, 0x10020, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x81, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='@$-/[,\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = fsmount(0xffffffffffffffff, 0x0, 0x9) r6 = fspick(r5, &(0x7f0000000400)='./file0\x00', 0x1) r7 = fsopen(&(0x7f0000000440)='esdfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000480)='/dev/hwrng\x00', &(0x7f00000004c0)='./file0\x00', r4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000500)='/\xb0+/^\x00', &(0x7f0000000540)='./file0\x00', r8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x4, &(0x7f00000005c0)=[{0x4, 0x7, 0x9f, 0x4}, {0xf801, 0x4, 0x9, 0x5}, {0x1000, 0x1, 0x5, 0x1}, {0x26, 0x4}]}) r9 = fsopen(&(0x7f0000000640)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r9, 0x4, &(0x7f0000000680)='[#^&,{{\x00', &(0x7f00000006c0)='./file0\x00', r8) 16:23:42 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/215) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) shmctl$SHM_LOCK(0x0, 0xb) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000140)=""/52) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4ea6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x45890) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, @nl=@kern={0x10, 0x0, 0x0, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xf000, &(0x7f0000000300)='veth1_to_team\x00', 0x3, 0xffffffffffffffb1, 0xfc00}) setsockopt(r0, 0x20004000, 0x1, &(0x7f00000003c0)="af639798e37d89c7378995f7dd5832ce7596ed443ce8b987ee85ab65818b195ea5c4f64bf1281064ba6c647b4ea6c5d29c2b269afb169a735686cc3fd67f51f9ac516bc4bb7f2770559c90493964078e3cd912ac04ccf05bf318df28e79fd63bfdca6d846c1f4f6daf4975ca1ee9532e0c5d9c586c089201717ffe7fe63979355ff3c5a90209bf023934bb43f03646e6da31c885ce7d03354fc0a1a49eae4b5e018010ac00e65c114696261834d42ded2292fa0dde968a7f46f9aa987e95ce6514f4eccd30ca5eb5cd4e7e80da8adf450ac9b5662d50f58d14d0f8b2e598e71c3e60cdffcbce6711a2cc23739e427573e54e2accddb04c868391813314", 0xfd) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket(0x2, 0x80000, 0x85) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}]}, 0x2c}}, 0x4000) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000600), &(0x7f0000000640)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[{0x1f, 0x3e, 0x0, 0x80}, {0x1bd, 0x91, 0x1f, 0x8}, {0x0, 0x1, 0x3, 0x20}]}) 16:23:42 executing program 2: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0xfec00000, 0x0, 0x8}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x9, 0x1, 0x101}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000820) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000240)={'\x00', 0x4, 0x0, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000002bc0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000002c00)=0x28) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7e) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000002c40)={0x1f, 0x81, 0x1, 'queue0\x00', 0x40}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000002d00)={0x9226}) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002d80), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003340)={'tunl0\x00', &(0x7f00000032c0)={'erspan0\x00', 0x0, 0x700, 0x8000, 0x5, 0x3, {{0xa, 0x4, 0x2, 0x2e, 0x28, 0x67, 0x0, 0x71, 0x2f, 0x0, @private=0xa010100, @remote, {[@lsrr={0x83, 0x7, 0x19, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0x6b, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000003440)={&(0x7f0000002d40), 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x5c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c0d0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000003580)={'\x00', 0x895, 0x3, 0x8e}) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000003600), &(0x7f0000003640)=0x4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003680), 0x40602, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f00000036c0)={'\x00', 0x2ea, 0x0, 0x6}) 16:23:42 executing program 3: getrusage(0x0, &(0x7f0000000000)) r0 = fork() wait4(r0, &(0x7f00000000c0), 0x2, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "155146e9f94ef858", "44cf82e99019d2607f7db955e1e512b9", "3a55d5ad", "ddd2c47e0a77d295"}, 0x28) getrusage(0x1, &(0x7f0000000200)) wait4(r0, 0x0, 0x1000000, 0x0) r1 = getpgid(r0) wait4(r1, &(0x7f00000002c0), 0x2, &(0x7f0000000300)) getrusage(0x0, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000004c0)={'team_slave_1\x00'}) r2 = getpgid(0x0) ptrace$setregset(0x4205, r2, 0x6, &(0x7f00000005c0)={&(0x7f0000000500)="4e0504ab7dc61bcd2905978405d43e4c48e95aa5f097fe74e778b236308f4ee012fa3e54ee01b2284a80647d41d41f49b14addb96e6f85da731bcac89c6fa64af3c03d084aaca938d26042bca58261ae673dbab9ce3f9c80688b40063714654aa721ad578775af54fcf25cf4777f96383edb12277bd3a863532d48d23ec9a4c1adfe5745a4a27c833e61a0f0ebbdbd0743ef2c054c1cb2aedb5a821506fb35df5957f142f0d2a17405", 0xa9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000600)={0x562, 0x0, {0x2, 0x3, 0x40, 0x1, 0x1f}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x101800, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x400}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20004) wait4(r1, &(0x7f0000000800), 0x8, &(0x7f0000000840)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000900)) socketpair(0x8, 0x4, 0x3, &(0x7f0000000940)) wait4(r1, 0x0, 0x40000000, &(0x7f0000000980)) 16:23:42 executing program 4: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = socket(0x10, 0x5, 0x8) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) recvmmsg(r1, &(0x7f0000001780)=[{{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/77, 0x4d}], 0x9, &(0x7f0000001680)=""/224, 0xe0}, 0x5}], 0x1, 0x2122, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000001800), &(0x7f0000001840)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001880)="097e56688e41917ed05a0a3085ad2d5f", 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000018c0), &(0x7f0000001900)=0x14) socketpair(0xf, 0x5, 0x6, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000001980), &(0x7f00000019c0)=0x4) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffd000/0x3000)=nil, 0x7000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001a00)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a40)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001a80)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000001b40)=@generic={0x1, 0x1, 0x7fffffff}) [ 113.537438] audit: type=1400 audit(1749486222.341:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:23:42 executing program 5: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xfe5c, 0x8, 0xf7, 0x9}, {0x6, 0xe0, 0x4, 0x8}, {0x0, 0x40, 0xb8, 0x8}, {0x6, 0x0, 0x2, 0x3ff}, {0x0, 0x7, 0x3f, 0xdce}, {0x6, 0x3, 0x8, 0x3}, {0x7, 0x5, 0x0, 0x9}]}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001100)=@get={0x1, &(0x7f0000000100)=""/4096, 0x400}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000404}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4048091) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001240)) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001540)={&(0x7f0000001300)={0x23c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf25}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b76b186}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffa15a}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x728}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000141) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x144}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c041}, 0x800) r3 = fsmount(r0, 0x1, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8000) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000001800)={0x1088, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff7cb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c000000}]}]}, 0x1088}, 0x1, 0x0, 0x0, 0xc050}, 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002940), 0x226402, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d1}, 0x4000800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002a80)={{0x0, 0xc1f, 0x0, 0x2, 0xe53, 0x2, 0x3, 0xffffff01, 0x4, 0x4, 0x1, 0x6, 0xa1b8, 0x9, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000002c40)=r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002c80), &(0x7f0000002cc0)=0x14) 16:23:42 executing program 6: r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) getpgid(0x0) r1 = fork() r2 = fork() r3 = getpgid(r1) r4 = getpgid(r3) r5 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) r6 = getgid() getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x0, 0x0, r6, r7, 0xee01, 0x67, 0xfff}, 0x4, 0xbb, 0xed2, 0x75, r2, r4, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000180)) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000001c0)='team0\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) getgid() getgid() r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000280)=r2) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000300)=0x28) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)="2007e9dda48001bc91b9371bd79b7195c9334a2bb739388a55a763c6f73bb520b9b701a7eeb8025668652e12fefb39000c9556f78b901a8c90796d5342df5da9579b3a6700f01e96e7cf79b42b34c8fd957215bbd83bf843208c15ce55f149232505548869fa855a8c2259394179460dd2520c808446a11627b6d174247f42f6e9aac2c84ba07a85aaf1cdfcd5be2cb59ff8a703a591145fd4734f02708dfc30a4030757323833580ce1ee70449955922a268de4c1681e70ae97d59a130aa5cf0a164e3eb4919d619fdc84becb2b8c95d8a9bb01036639471244b4", 0xdb) 16:23:42 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x401, 0x0, {0x0, 0x3, 0x6, 0x2, 0x81}, 0x20}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x5) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3bee00c2a1c82b24}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) r0 = socket(0x1d, 0x0, 0x7fffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = accept(r0, 0x0, &(0x7f0000000480)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40) add_key(&(0x7f00000005c0)='syzkaller\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000740)=@gcm_256={{0x303}, "8c9c80b94f8901f6", "172bd1401110c2ea0c6427590095a51df34049cc7fdabb444eadf2e3035b2bb3", "651ebe77", "6f59a211759b8384"}, 0x38) r3 = accept(r0, &(0x7f0000000780)=@x25={0x9, @remote}, &(0x7f0000000800)=0x80) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000840), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00'}) getsockname(0xffffffffffffffff, &(0x7f00000008c0)=@hci, &(0x7f0000000940)=0x80) r4 = fsmount(0xffffffffffffffff, 0x1, 0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="19c9e023e2ab"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 115.012118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.016435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.018911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.029203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.033821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.075926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.084965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.093913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.095262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.099092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.102361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.107443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.114302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.119813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.129237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.132054] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.139409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.141430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.150001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.152369] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.153829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.156774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.159509] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.165658] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.169975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.176744] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.179765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.190958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.197047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.210780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.211892] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.233961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.236985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.240247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.243610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.248503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.262963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.278028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.280048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.299487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.096462] Bluetooth: hci0: command tx timeout [ 117.225588] Bluetooth: hci2: command tx timeout [ 117.288069] Bluetooth: hci1: command tx timeout [ 117.289070] Bluetooth: hci6: command tx timeout [ 117.289610] Bluetooth: hci5: command tx timeout [ 117.352822] Bluetooth: hci3: command tx timeout [ 117.353140] Bluetooth: hci4: command tx timeout [ 117.415774] Bluetooth: hci7: command tx timeout [ 119.143898] Bluetooth: hci0: command tx timeout [ 119.271821] Bluetooth: hci2: command tx timeout [ 119.335765] Bluetooth: hci6: command tx timeout [ 119.335793] Bluetooth: hci1: command tx timeout [ 119.336622] Bluetooth: hci5: command tx timeout [ 119.399924] Bluetooth: hci3: command tx timeout [ 119.400822] Bluetooth: hci4: command tx timeout [ 119.463773] Bluetooth: hci7: command tx timeout [ 121.192028] Bluetooth: hci0: command tx timeout [ 121.319640] Bluetooth: hci2: command tx timeout [ 121.384660] Bluetooth: hci6: command tx timeout [ 121.385459] Bluetooth: hci5: command tx timeout [ 121.386469] Bluetooth: hci1: command tx timeout [ 121.447827] Bluetooth: hci4: command tx timeout [ 121.447858] Bluetooth: hci3: command tx timeout [ 121.511654] Bluetooth: hci7: command tx timeout [ 123.241342] Bluetooth: hci0: command tx timeout [ 123.368275] Bluetooth: hci2: command tx timeout [ 123.431693] Bluetooth: hci5: command tx timeout [ 123.431714] Bluetooth: hci6: command tx timeout [ 123.432852] Bluetooth: hci1: command tx timeout [ 123.495651] Bluetooth: hci3: command tx timeout [ 123.496898] Bluetooth: hci4: command tx timeout [ 123.559814] Bluetooth: hci7: command tx timeout [ 177.404383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.406420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.411282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.419638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.424759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.555502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.562472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.571677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.582973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.585842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.698123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.705385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.710240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.715060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.717182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.719692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.722680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.726956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.747327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.753166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.753820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.759907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.763934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.764954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.770415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.772444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.777248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.784947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.804825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.809217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.812362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.818299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.822279] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.836053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.845095] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.850942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.853840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.855394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.882115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.884073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.497762] Bluetooth: hci0: command tx timeout [ 179.623823] Bluetooth: hci1: command tx timeout [ 179.815643] Bluetooth: hci3: command tx timeout [ 179.879646] Bluetooth: hci2: command tx timeout [ 179.880702] Bluetooth: hci5: command tx timeout [ 179.881223] Bluetooth: hci4: command tx timeout [ 179.943648] Bluetooth: hci6: command tx timeout [ 179.944214] Bluetooth: hci7: command tx timeout [ 181.543841] Bluetooth: hci0: command tx timeout [ 181.671622] Bluetooth: hci1: command tx timeout [ 181.863614] Bluetooth: hci3: command tx timeout [ 181.927826] Bluetooth: hci4: command tx timeout [ 181.928342] Bluetooth: hci5: command tx timeout [ 181.929666] Bluetooth: hci2: command tx timeout [ 181.991766] Bluetooth: hci7: command tx timeout [ 181.992274] Bluetooth: hci6: command tx timeout [ 183.591803] Bluetooth: hci0: command tx timeout [ 183.719823] Bluetooth: hci1: command tx timeout [ 183.911605] Bluetooth: hci3: command tx timeout [ 183.976833] Bluetooth: hci5: command tx timeout [ 183.977342] Bluetooth: hci2: command tx timeout [ 183.978331] Bluetooth: hci4: command tx timeout [ 184.040564] Bluetooth: hci6: command tx timeout [ 184.041015] Bluetooth: hci7: command tx timeout [ 185.639629] Bluetooth: hci0: command tx timeout [ 185.767823] Bluetooth: hci1: command tx timeout [ 185.959610] Bluetooth: hci3: command tx timeout [ 186.023689] Bluetooth: hci4: command tx timeout [ 186.024285] Bluetooth: hci2: command tx timeout [ 186.025821] Bluetooth: hci5: command tx timeout [ 186.087722] Bluetooth: hci7: command tx timeout [ 186.088210] Bluetooth: hci6: command tx timeout [ 239.606429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.613478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.616440] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.623776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.629698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.734165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.740020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.742954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.754175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.757395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.830634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.836334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.841813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.844859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.862724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.867414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.874366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.888142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.896057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.904137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.960342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.984045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.991099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.004271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.019297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.029922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.044829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.051742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.076937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.099779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.250329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.258034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.260971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.282896] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.290028] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.296121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.315122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.322091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.329540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.344852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.704684] Bluetooth: hci0: command tx timeout [ 241.831630] Bluetooth: hci1: command tx timeout [ 241.960642] Bluetooth: hci2: command tx timeout [ 242.023881] Bluetooth: hci3: command tx timeout [ 242.216236] Bluetooth: hci5: command tx timeout [ 242.216742] Bluetooth: hci4: command tx timeout [ 242.407769] Bluetooth: hci6: command tx timeout [ 242.471601] Bluetooth: hci7: command tx timeout [ 243.752136] Bluetooth: hci0: command tx timeout [ 243.879807] Bluetooth: hci1: command tx timeout [ 244.007744] Bluetooth: hci2: command tx timeout [ 244.071735] Bluetooth: hci3: command tx timeout [ 244.263599] Bluetooth: hci4: command tx timeout [ 244.264648] Bluetooth: hci5: command tx timeout [ 244.455585] Bluetooth: hci6: command tx timeout [ 244.519596] Bluetooth: hci7: command tx timeout [ 245.800832] Bluetooth: hci0: command tx timeout [ 245.927612] Bluetooth: hci1: command tx timeout [ 246.055612] Bluetooth: hci2: command tx timeout [ 246.121837] Bluetooth: hci3: command tx timeout [ 246.311696] Bluetooth: hci5: command tx timeout [ 246.311739] Bluetooth: hci4: command tx timeout [ 246.504565] Bluetooth: hci6: command tx timeout [ 246.569572] Bluetooth: hci7: command tx timeout [ 247.847609] Bluetooth: hci0: command tx timeout [ 247.975858] Bluetooth: hci1: command tx timeout [ 248.103772] Bluetooth: hci2: command tx timeout [ 248.167835] Bluetooth: hci3: command tx timeout [ 248.359596] Bluetooth: hci4: command tx timeout [ 248.359636] Bluetooth: hci5: command tx timeout [ 248.553586] Bluetooth: hci6: command tx timeout [ 248.616623] Bluetooth: hci7: command tx timeout [ 302.141808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.145305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.151093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.162567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.170847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.293245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.299953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.304161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.311608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.325648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.371607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.375975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.393139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.395253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.399944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.404092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.429012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.436026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.471914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.484693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.508016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.524111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.543797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.579454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.588029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.589222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.593026] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.600179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.605764] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.614040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.714333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.734080] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.736614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.746188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.749759] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.007769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.014034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.018499] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.030416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.064480] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.232586] Bluetooth: hci0: command tx timeout [ 304.360619] Bluetooth: hci1: command tx timeout [ 304.552016] Bluetooth: hci2: command tx timeout [ 304.615634] Bluetooth: hci3: command tx timeout [ 304.679617] Bluetooth: hci4: command tx timeout [ 304.809363] Bluetooth: hci6: command tx timeout [ 304.935595] Bluetooth: hci5: command tx timeout [ 305.319592] Bluetooth: hci7: command tx timeout [ 306.281882] Bluetooth: hci0: command tx timeout [ 306.407656] Bluetooth: hci1: command tx timeout [ 306.600775] Bluetooth: hci2: command tx timeout [ 306.666591] Bluetooth: hci3: command tx timeout [ 306.728603] Bluetooth: hci4: command tx timeout [ 306.855636] Bluetooth: hci6: command tx timeout [ 306.985651] Bluetooth: hci5: command tx timeout [ 307.368583] Bluetooth: hci7: command tx timeout [ 308.328622] Bluetooth: hci0: command tx timeout [ 308.456837] Bluetooth: hci1: command tx timeout [ 308.648859] Bluetooth: hci2: command tx timeout [ 308.711911] Bluetooth: hci3: command tx timeout [ 308.776037] Bluetooth: hci4: command tx timeout [ 308.904636] Bluetooth: hci6: command tx timeout [ 309.031582] Bluetooth: hci5: command tx timeout [ 309.416780] Bluetooth: hci7: command tx timeout [ 310.377619] Bluetooth: hci0: command tx timeout [ 310.504593] Bluetooth: hci1: command tx timeout [ 310.695831] Bluetooth: hci2: command tx timeout [ 310.759813] Bluetooth: hci3: command tx timeout [ 310.824685] Bluetooth: hci4: command tx timeout [ 310.952596] Bluetooth: hci6: command tx timeout [ 311.079568] Bluetooth: hci5: command tx timeout [ 311.463752] Bluetooth: hci7: command tx timeout [ 362.781329] syz-executor.2 (8069) used greatest stack depth: 24288 bytes left [ 364.794174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.798958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.803749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.816124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.824386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.979336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.983659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.987619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.995148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.998973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.074443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.077342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.091178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.095045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.096840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.102168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.125411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.127476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.132139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.135094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.137809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.142227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.150072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.154989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.157727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.272116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.274462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.296228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.300150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.319354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.320834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.358471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.360991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.368225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.370826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.391882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.404885] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.443885] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.539216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.552899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.888062] Bluetooth: hci0: command tx timeout [ 367.079894] Bluetooth: hci1: command tx timeout [ 367.208630] Bluetooth: hci2: command tx timeout [ 367.208744] Bluetooth: hci4: command tx timeout [ 367.335615] Bluetooth: hci3: command tx timeout [ 367.463612] Bluetooth: hci5: command tx timeout [ 367.528639] Bluetooth: hci6: command tx timeout [ 367.655692] Bluetooth: hci7: command tx timeout [ 368.935580] Bluetooth: hci0: command tx timeout [ 369.127597] Bluetooth: hci1: command tx timeout [ 369.255652] Bluetooth: hci4: command tx timeout [ 369.255693] Bluetooth: hci2: command tx timeout [ 369.384628] Bluetooth: hci3: command tx timeout [ 369.511771] Bluetooth: hci5: command tx timeout [ 369.577550] Bluetooth: hci6: command tx timeout [ 369.703752] Bluetooth: hci7: command tx timeout [ 370.984943] Bluetooth: hci0: command tx timeout [ 371.175783] Bluetooth: hci1: command tx timeout [ 371.303616] Bluetooth: hci2: command tx timeout [ 371.303629] Bluetooth: hci4: command tx timeout [ 371.432667] Bluetooth: hci3: command tx timeout [ 371.560628] Bluetooth: hci5: command tx timeout [ 371.623608] Bluetooth: hci6: command tx timeout [ 371.751612] Bluetooth: hci7: command tx timeout [ 373.032965] Bluetooth: hci0: command tx timeout [ 373.224478] Bluetooth: hci1: command tx timeout [ 373.351818] Bluetooth: hci4: command tx timeout [ 373.352911] Bluetooth: hci2: command tx timeout [ 373.479586] Bluetooth: hci3: command tx timeout [ 373.608620] Bluetooth: hci5: command tx timeout [ 373.671715] Bluetooth: hci6: command tx timeout [ 373.800798] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:28:45 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81a925dc RDX=ffff888019171b80 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea0001b79a00 RSP=ffff88802f34f8d0 R8 =0000000000000000 R9 =fffff9400036f340 R10=0000000000000000 R11=ffff88806ce3c500 R12=ffff88802cacd020 R13=ffffea0001b79a00 R14=0000000000000000 R15=00000000000000e7 RIP=ffffffff81a925e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0ea5a40000 CR3=00000000356ec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf08a78 RCX=ffff88806cf089cc RDX=1ffff1100d9e115a RSI=ffffffff85c1cbc0 RDI=ffffffff81aeb814 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a60 R8 =ffffffff868098e8 R9 =ffff88806cf08ab8 R10=000000000003b6cd R11=0000000000012b35 R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff8880152b8000 R15=ffff88800e238250 RIP=ffffffff81353b1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056391f4d82b0 CR3=000000002fe13000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000