Warning: Permanently added '[localhost]:33247' (ECDSA) to the list of known hosts. 2025/06/19 16:05:09 fuzzer started 2025/06/19 16:05:10 dialing manager at localhost:36157 syzkaller login: [ 116.273116] cgroup: Unknown subsys name 'net' [ 116.390008] cgroup: Unknown subsys name 'cpuset' [ 116.580857] cgroup: Unknown subsys name 'rlimit' 2025/06/19 16:05:32 syscalls: 200 2025/06/19 16:05:32 code coverage: enabled 2025/06/19 16:05:32 comparison tracing: enabled 2025/06/19 16:05:32 extra coverage: enabled 2025/06/19 16:05:32 setuid sandbox: enabled 2025/06/19 16:05:32 namespace sandbox: enabled 2025/06/19 16:05:32 Android sandbox: enabled 2025/06/19 16:05:32 fault injection: enabled 2025/06/19 16:05:32 leak checking: enabled 2025/06/19 16:05:32 net packet injection: enabled 2025/06/19 16:05:32 net device setup: enabled 2025/06/19 16:05:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/19 16:05:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/19 16:05:32 USB emulation: enabled 2025/06/19 16:05:32 hci packet injection: enabled 2025/06/19 16:05:32 wifi device emulation: enabled 2025/06/19 16:05:32 802.15.4 emulation: enabled 2025/06/19 16:05:32 fetching corpus: 0, signal 0/0 (executing program) 2025/06/19 16:05:34 starting 8 fuzzer processes 16:05:34 executing program 0: r0 = epoll_create(0x1000) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}], 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x800]}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0xc0000010}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0xf5bc}) r2 = socket(0xa, 0xf, 0xec6) getsockname(r2, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80) r3 = epoll_create(0x200) epoll_pwait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x7f, &(0x7f0000000300)={[0xfffffffffffffff7]}, 0x8) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0xc0520, 0x0) accept4$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000500)={0xfff, 0x9, 0x2a, &(0x7f00000004c0)="14f5d3fa8dbe4713a06021bf812bbd08ee722a7be8040481d49149722048072c3b1aca868140a1bd5164"}) epoll_pwait(r4, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x2, &(0x7f00000005c0)={[0x5]}, 0x8) syz_io_uring_setup(0x35d8, &(0x7f0000000600)={0x0, 0xaa2, 0x2, 0x3, 0xdc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_io_uring_setup(0x3b01, &(0x7f0000000700)={0x0, 0x279, 0x10, 0x2, 0xf6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000800)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) getsockopt$sock_timeval(r4, 0x1, 0x7d, &(0x7f0000000840), &(0x7f0000000880)=0x10) epoll_pwait2(r0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000940), &(0x7f0000000980)={[0x9]}, 0x8) 16:05:34 executing program 1: r0 = io_uring_setup(0x6228, &(0x7f0000000000)={0x0, 0x37b3, 0x20, 0x1, 0xe1}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x3, 0xc7a, 0x40, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7, 0x700, 0x3ff, 0x3}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x8000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_getres(0x2, &(0x7f0000000140)) clock_gettime(0x2, &(0x7f0000000180)) clock_getres(0x5, &(0x7f00000001c0)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10, r2}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000240)={0x62, @broadcast, 0x4e20, 0x0, 'lblc\x00', 0x22, 0x3, 0x4b}, 0x2c) clock_gettime(0x6, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x26}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20048002) r5 = syz_open_dev$mouse(&(0x7f0000000440), 0x9, 0x4dc002) syz_io_uring_setup(0x658b, &(0x7f0000000480)={0x0, 0xe75b, 0x0, 0x3, 0xab, 0x0, r5}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) clock_getres(0x4, &(0x7f0000000580)) r6 = syz_open_dev$mouse(&(0x7f00000005c0), 0xe115, 0x400000) accept4$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14, 0x80800) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r7, 0x29, 0x0, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @local}, r2}, 0x14) 16:05:34 executing program 2: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x9, 0x3, 0xfffffffa, 0x1ff}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x1, 0x1, 0x7fff, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3ff, 0x410000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0x3) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000180)={'\x00', 0x1, 0x0, 0x20}) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0xfb, 0x68800) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x3, 0x3}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000280)) accept4$packet(r2, &(0x7f00000002c0), &(0x7f0000000300)=0x14, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x6, 0x0, 0x8}) r3 = syz_open_dev$mouse(&(0x7f00000003c0), 0x1f, 0xa280) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000440)={0x5, 0xd28, 0x9, 0xfffffffc}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000821) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000600)={0x101}) [ 140.097234] audit: type=1400 audit(1750349134.446:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:05:34 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x3f, 0x0, 0x3, 0x3}, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x9, 0x3, 0x8}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0xa01) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000180)) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x3f, 0x200000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000200)=0xaf6) sendmsg$802154_raw(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000380)={&(0x7f0000000280)="41d90c190f73d101b74391b1d0cd766f776827b71fd81326fe14ceb0c41b122f3e4be51c2f996edba81750a694470ec776977e98706010fb1d9df2821bd6fcfcb892711a65fae4e0d39936bf94b56aaca7898a2672cb206ee131fadf0ba7b7f359c746da4dc7f4b5fd47aa1f8ee1c618999e207fc973219b0eca545654287b63be533623c6ea4b2843b08ea66df843953e1edddef8429ffad01d344d1fdd181880e5e6bc59c3fb8595d83ab1821ad940053ef5cb1b60b7a766134fc784f4f5b3cdef5e8e2d93551b2997", 0xca}, 0x1, 0x0, 0x0, 0x10}, 0x24004885) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000400)) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000440)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x343041, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f00000004c0)={'\x00', 0x10000, 0x3, 0x3}) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000540)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x2c040, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f00000005c0)) socketpair(0x28, 0x5, 0x5, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r6) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000680)={'\x00', 0x9, 0x1, 0x1000}) syz_io_uring_setup(0x2b9f, &(0x7f0000000700)={0x0, 0xe9fe, 0x2, 0x2, 0x1aa, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 16:05:34 executing program 4: syz_usb_connect$uac1(0x0, 0xc3, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x8, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x4, 0x40, 'W', "d44d6a"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x2, 0x3f, "96080199b79b70957e"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6, 0x8, "d2ae321404fee9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x368, 0x1, 0x0, 0x5d, {0x7, 0x25, 0x1, 0x83, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7e, 0x4, 0x1, 0x0, "ac76db", "f6"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfc, 0x2, 0x7, 0x7f, "9d654ee298ab"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x101, 0x200, 0x12, "dbbd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3e7, 0x8, 0x4, 0x7, {0x7, 0x25, 0x1, 0x3, 0x2, 0xbd9}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0x3, 0x1, 0x20, 0x9}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "ed2c552307942d5af65dc7ed3bc96965"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x3, 0xfffa}]}, 0x3, [{0x33, &(0x7f0000000180)=@string={0x33, 0x3, "eaa5c7a704d24492a2b27a087275d49e2bae3e5e07c0c495fd9c34fca844e197a766c911e0949a73567e22813d8b947041"}}, {0xdd, &(0x7f00000001c0)=@string={0xdd, 0x3, "b8605ed009a76a741e60068c51192b25ea6f323216c36d9dae8b725fd83c6c2fd1c1c4eca56228c42c70b6593b0fae20a99264bcb9e6b35c73e74ed250397217f4c652d089411f0e34b66103308d267385daf4016eb87c6b22d19f12c0ac14d1a170891f16f3c7f4a11d875b2cb8f11be4efd51c885b3cffb771e4c14f0fbc363affaab897dda34f9eb2700fa430e4b67b87026a6be2170c629f5c7c1cfeb99331cee35ae594c1fbe8ab69c7f0965dc302d06ca1db15e0f959b972df80ea6ecbaff89041efcb0ad65ab228f9dc0c3e14cd93e619017a7dc494a020"}}, {0x57, &(0x7f00000002c0)=@string={0x57, 0x3, "64b0b3a4388dfdb6ad2b033a30716d1d7cc90d345079e21880b445d97bcd10c926ee00afe6aaf3fe13b9a389ad735d14e09c7f94496acd3750ccd0f67d78283828bc2d4daf579fdb1968df0c09c69a302f6a188ff8"}}]}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000380)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x3202c1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x27}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x100000c0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000680)={@remote, @local}, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x4040, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000700)={@multicast1, @multicast2, @private}, &(0x7f0000000740)=0xc) getsockname(r1, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000800)=0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0x493a190e, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0xfffffffc, 0x4e}}) accept4$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f0000000a80)=0x14, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl0\x00', 0x0, 0x79, 0x9c, 0x4, 0x80000000, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x700, 0x1, 0x2, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000e80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x194, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x110, r1, 0xd25d4000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000f80)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e23, 0x4, 0x4e20, 0x0, 0x2, 0x80, 0xa0, 0x3b, r7, r9}, {0x401, 0x5, 0x0, 0x7, 0x8, 0x412, 0xfe8, 0x9}, {0x7, 0x2, 0x7, 0x2}, 0xffffffff, 0x0, 0x2, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0x62df99ccb46df31c, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0xc248252f760f9e5a, 0x2, 0x9, 0x4, 0xe0000000, 0x2}}, 0xe8) 16:05:34 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/180) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000000c0)=""/236) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x10000000) r1 = shmget(0x2, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f00000001c0)=""/30) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000200)=""/251) shmctl$SHM_LOCK(r0, 0xb) r2 = shmget$private(0x0, 0x1000, 0x547674d3bbc69ddd, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000300)=""/66) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x7000) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x100000001, 0x8000) r3 = shmget(0x3, 0x2000, 0x20, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000380)=""/206) 16:05:34 executing program 6: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget(0x1, 0xe000, 0x200, &(0x7f0000ff0000/0xe000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/168) mmap$binder(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xb15f) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x1, 0x2000, 0x20, &(0x7f0000ff7000/0x2000)=nil) shmat(r1, &(0x7f0000ff6000/0x2000)=nil, 0x3800) r2 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ff8000/0x1000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r3 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000000c0)=""/4096) prctl$PR_SVE_SET_VL(0x32, 0x2ed05) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/243, 0xf3, 0x0, &(0x7f00000011c0)=""/147, 0x93}, &(0x7f00000012c0)=0x40) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ff3000/0x2000)=nil) getresuid(&(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)) get_mempolicy(&(0x7f00000013c0), &(0x7f0000001400), 0x8000, &(0x7f0000ff0000/0x3000)=nil, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001540)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001440)=""/121, 0x79, 0x0, &(0x7f00000014c0)=""/113, 0x71}, &(0x7f0000001580)=0x40) r4 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r4, 0x0) 16:05:34 executing program 7: mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x0, 0x30, 0xffffffffffffffff, 0xd846a000) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x2, 0x14, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x200000) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0xff, 0x2, 0x12, 0x4, "27c73ec2d17bfb00de3f4484ab20c16b873fe5c9f3dc28e53e3cf850425ad3e1696013c6e3d1a0a4f723c4f3424ac3be9a590d102afe7168e1558928198aad64", "5d09eeae5aa84e22143a8fb2aad545b57610fc3c9df9b6e2e12036c57a513c9a", [0x8, 0x1]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x404000, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000001c0)=0x29) epoll_wait(r1, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, 0xffffffc1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0xc4000, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000280)={0xc49, 0x54, 0xfc, 0x9f0}) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000002c0)=0x200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)={0x16e6afed4e545731}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r4 = syz_open_dev$loop(&(0x7f00000003c0), 0x6, 0x20200) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000400)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) bind$packet(r5, &(0x7f0000000480)={0x11, 0x9, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000580)={0xaee, 0x800, 0x95, &(0x7f00000004c0)="3de491e42109205ce7986c7615f4f751cfb0b128902a00024a8d85586e70b470867f9e62a74336e2cca169423c17d66ed618b738c10708fc8c5c254f7e4006fcc0d020a3b17721fd767cc08477a8b2ea068fd24e99bdef914e29c5d72608dc99e8869b7093c1dd2585a52fe3bb62fc70f7a322bb38b5ea43727b01132fce323afce7dca489de419f0d1255c9716d88a7f041fcb45a"}) [ 141.449088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.451749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.453133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.458975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.462215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.552053] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.561431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.562397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.570869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.576951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.578482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.581021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.585936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.603475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.605259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.607334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.608800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.610262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.637254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.641154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.644211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.645977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.653973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.665690] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.675658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.698966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.702439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.708305] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.715129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.724470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.725371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 141.728707] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.779139] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 141.780417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.790075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.814996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 141.817238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.824069] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.837908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.857912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.513176] Bluetooth: hci0: command tx timeout [ 143.639811] Bluetooth: hci2: command tx timeout [ 143.641601] Bluetooth: hci1: command tx timeout [ 143.703861] Bluetooth: hci4: command tx timeout [ 143.767665] Bluetooth: hci3: command tx timeout [ 143.961037] Bluetooth: hci6: command tx timeout [ 143.961114] Bluetooth: hci7: command tx timeout [ 143.962179] Bluetooth: hci5: command tx timeout [ 145.560231] Bluetooth: hci0: command tx timeout [ 145.687818] Bluetooth: hci1: command tx timeout [ 145.688317] Bluetooth: hci2: command tx timeout [ 145.752212] Bluetooth: hci4: command tx timeout [ 145.816801] Bluetooth: hci3: command tx timeout [ 146.007922] Bluetooth: hci5: command tx timeout [ 146.008474] Bluetooth: hci7: command tx timeout [ 146.008559] Bluetooth: hci6: command tx timeout [ 147.608638] Bluetooth: hci0: command tx timeout [ 147.738059] Bluetooth: hci1: command tx timeout [ 147.739682] Bluetooth: hci2: command tx timeout [ 147.800569] Bluetooth: hci4: command tx timeout [ 147.863575] Bluetooth: hci3: command tx timeout [ 148.055662] Bluetooth: hci7: command tx timeout [ 148.056175] Bluetooth: hci6: command tx timeout [ 148.057119] Bluetooth: hci5: command tx timeout [ 149.655982] Bluetooth: hci0: command tx timeout [ 149.784819] Bluetooth: hci1: command tx timeout [ 149.785059] Bluetooth: hci2: command tx timeout [ 149.847630] Bluetooth: hci4: command tx timeout [ 149.911616] Bluetooth: hci3: command tx timeout [ 150.104942] Bluetooth: hci5: command tx timeout [ 150.105433] Bluetooth: hci6: command tx timeout [ 150.105915] Bluetooth: hci7: command tx timeout [ 201.893878] syz-executor.4 (295) used greatest stack depth: 24704 bytes left [ 204.278334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.285841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.295863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.327740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.336863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.471340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.478826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.481930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.489883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.500292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.625776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.631896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.642912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.647814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.652496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 204.655042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.658592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.658860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.666925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.667221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 204.677655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 204.685473] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 204.690091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.697826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 204.706113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.707336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 204.708372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.712177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.724013] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.728890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 204.732084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.735865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 204.737944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.779143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.800310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.803316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.806746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.815676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.820301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.870995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.423971] Bluetooth: hci0: command tx timeout [ 206.552164] Bluetooth: hci1: command tx timeout [ 206.807663] Bluetooth: hci7: command tx timeout [ 206.807683] Bluetooth: hci2: command tx timeout [ 206.871661] Bluetooth: hci4: command tx timeout [ 206.871683] Bluetooth: hci6: command tx timeout [ 206.871906] Bluetooth: hci3: command tx timeout [ 206.936866] Bluetooth: hci5: command tx timeout [ 208.474832] Bluetooth: hci0: command tx timeout [ 208.600130] Bluetooth: hci1: command tx timeout [ 208.856564] Bluetooth: hci7: command tx timeout [ 208.857090] Bluetooth: hci2: command tx timeout [ 208.919976] Bluetooth: hci4: command tx timeout [ 208.921208] Bluetooth: hci3: command tx timeout [ 208.921724] Bluetooth: hci6: command tx timeout [ 208.983739] Bluetooth: hci5: command tx timeout [ 210.519876] Bluetooth: hci0: command tx timeout [ 210.647627] Bluetooth: hci1: command tx timeout [ 210.904687] Bluetooth: hci2: command tx timeout [ 210.905214] Bluetooth: hci7: command tx timeout [ 210.968421] Bluetooth: hci3: command tx timeout [ 210.969088] Bluetooth: hci6: command tx timeout [ 210.969601] Bluetooth: hci4: command tx timeout [ 211.031677] Bluetooth: hci5: command tx timeout [ 212.567635] Bluetooth: hci0: command tx timeout [ 212.695790] Bluetooth: hci1: command tx timeout [ 212.952838] Bluetooth: hci7: command tx timeout [ 212.953415] Bluetooth: hci2: command tx timeout [ 213.015933] Bluetooth: hci4: command tx timeout [ 213.016471] Bluetooth: hci6: command tx timeout [ 213.017698] Bluetooth: hci3: command tx timeout [ 213.080552] Bluetooth: hci5: command tx timeout [ 267.063037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.064625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.069888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.073972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.078570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.180664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.182639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.185351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.189830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.196839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.317770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.324807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.332191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.344039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.349373] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.351676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.353531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.354313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.387558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.407922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.479041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.484962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.487702] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.491862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.495200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.497311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.500852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.502426] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.506842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.508366] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 267.509802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.511310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 267.515270] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 267.518814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.526625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.528746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.536048] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.543189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 267.552295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 267.553890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.149342] Bluetooth: hci0: command tx timeout [ 269.272868] Bluetooth: hci1: command tx timeout [ 269.399878] Bluetooth: hci2: command tx timeout [ 269.463807] Bluetooth: hci3: command tx timeout [ 269.591644] Bluetooth: hci6: command tx timeout [ 269.655726] Bluetooth: hci7: command tx timeout [ 269.656424] Bluetooth: hci5: command tx timeout [ 269.657188] Bluetooth: hci4: command tx timeout [ 271.191623] Bluetooth: hci0: command tx timeout [ 271.319617] Bluetooth: hci1: command tx timeout [ 271.448999] Bluetooth: hci2: command tx timeout [ 271.511596] Bluetooth: hci3: command tx timeout [ 271.639705] Bluetooth: hci6: command tx timeout [ 271.703640] Bluetooth: hci4: command tx timeout [ 271.704198] Bluetooth: hci7: command tx timeout [ 271.704929] Bluetooth: hci5: command tx timeout [ 273.240627] Bluetooth: hci0: command tx timeout [ 273.367885] Bluetooth: hci1: command tx timeout [ 273.497161] Bluetooth: hci2: command tx timeout [ 273.559933] Bluetooth: hci3: command tx timeout [ 273.688956] Bluetooth: hci6: command tx timeout [ 273.751914] Bluetooth: hci7: command tx timeout [ 273.752417] Bluetooth: hci5: command tx timeout [ 273.753118] Bluetooth: hci4: command tx timeout [ 275.287755] Bluetooth: hci0: command tx timeout [ 275.417546] Bluetooth: hci1: command tx timeout [ 275.543600] Bluetooth: hci2: command tx timeout [ 275.607608] Bluetooth: hci3: command tx timeout [ 275.735951] Bluetooth: hci6: command tx timeout [ 275.799628] Bluetooth: hci4: command tx timeout [ 275.800119] Bluetooth: hci5: command tx timeout [ 275.800779] Bluetooth: hci7: command tx timeout [ 329.899965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.901476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.904887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.913208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.922834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.094124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.098763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.102856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.110823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.113249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.155445] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.162542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.169969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.185179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.187257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.189150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.191248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.193829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.203463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.210219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.373281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.378973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.383939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.396144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.398128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.495124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.503334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.505847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.506845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.511428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.519476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.528744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.531091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.539308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.554412] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.557121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.585689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.589842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.695089] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.727820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.992668] Bluetooth: hci0: command tx timeout [ 332.184682] Bluetooth: hci1: command tx timeout [ 332.247680] Bluetooth: hci2: command tx timeout [ 332.439945] Bluetooth: hci3: command tx timeout [ 332.440991] Bluetooth: hci6: command tx timeout [ 332.631999] Bluetooth: hci4: command tx timeout [ 332.632101] Bluetooth: hci5: command tx timeout [ 332.887678] Bluetooth: hci7: command tx timeout [ 334.040025] Bluetooth: hci0: command tx timeout [ 334.234044] Bluetooth: hci1: command tx timeout [ 334.296616] Bluetooth: hci2: command tx timeout [ 334.489578] Bluetooth: hci6: command tx timeout [ 334.489600] Bluetooth: hci3: command tx timeout [ 334.680804] Bluetooth: hci4: command tx timeout [ 334.681025] Bluetooth: hci5: command tx timeout [ 334.935636] Bluetooth: hci7: command tx timeout [ 336.087796] Bluetooth: hci0: command tx timeout [ 336.279952] Bluetooth: hci1: command tx timeout [ 336.344152] Bluetooth: hci2: command tx timeout [ 336.536083] Bluetooth: hci6: command tx timeout [ 336.536895] Bluetooth: hci3: command tx timeout [ 336.727626] Bluetooth: hci5: command tx timeout [ 336.730540] Bluetooth: hci4: command tx timeout [ 336.983616] Bluetooth: hci7: command tx timeout [ 338.137565] Bluetooth: hci0: command tx timeout [ 338.327964] Bluetooth: hci1: command tx timeout [ 338.391694] Bluetooth: hci2: command tx timeout [ 338.583790] Bluetooth: hci3: command tx timeout [ 338.583887] Bluetooth: hci6: command tx timeout [ 338.776675] Bluetooth: hci4: command tx timeout [ 338.776876] Bluetooth: hci5: command tx timeout [ 339.031611] Bluetooth: hci7: command tx timeout [ 392.522934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.524543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.527856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.530937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.533923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.685367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.691477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.697653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.704477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.710119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.764120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.775902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.788859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.794268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.803806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.868794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.873255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.876065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.898051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.910815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.967102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.969888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.972992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.981031] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.984038] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.992143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.027866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.040908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.045216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.045238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.058230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.060532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.062975] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 393.076892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.097945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 393.105832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 393.117049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.133332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 393.150986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 393.153950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.584686] Bluetooth: hci0: command tx timeout [ 394.775611] Bluetooth: hci1: command tx timeout [ 394.839638] Bluetooth: hci2: command tx timeout [ 394.967649] Bluetooth: hci3: command tx timeout [ 395.160098] Bluetooth: hci4: command tx timeout [ 395.160104] Bluetooth: hci5: command tx timeout [ 395.224643] Bluetooth: hci7: command tx timeout [ 395.224651] Bluetooth: hci6: command tx timeout [ 396.631917] Bluetooth: hci0: command tx timeout [ 396.823629] Bluetooth: hci1: command tx timeout [ 396.889085] Bluetooth: hci2: command tx timeout [ 397.016626] Bluetooth: hci3: command tx timeout [ 397.207608] Bluetooth: hci4: command tx timeout [ 397.207771] Bluetooth: hci5: command tx timeout [ 397.271647] Bluetooth: hci6: command tx timeout [ 397.271677] Bluetooth: hci7: command tx timeout [ 398.680707] Bluetooth: hci0: command tx timeout [ 398.873682] Bluetooth: hci1: command tx timeout [ 398.935668] Bluetooth: hci2: command tx timeout [ 399.063847] Bluetooth: hci3: command tx timeout [ 399.255950] Bluetooth: hci4: command tx timeout [ 399.257528] Bluetooth: hci5: command tx timeout [ 399.319646] Bluetooth: hci7: command tx timeout [ 399.321675] Bluetooth: hci6: command tx timeout [ 400.727617] Bluetooth: hci0: command tx timeout [ 400.919943] Bluetooth: hci1: command tx timeout [ 400.983599] Bluetooth: hci2: command tx timeout [ 401.111758] Bluetooth: hci3: command tx timeout [ 401.303661] Bluetooth: hci5: command tx timeout [ 401.303685] Bluetooth: hci4: command tx timeout [ 401.367735] Bluetooth: hci6: command tx timeout [ 401.367768] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:10:39 Registers: info registers vcpu 0 RAX=000000008fbe2361 RBX=00000000510f8804 RCX=00000000b7bced61 RDX=000000000000000d RSI=0000000042114d2b RDI=0000000000000002 RBP=0000000000000000 RSP=ffff88802750f490 R8 =000000006a4cbd2c R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88802750f4f8 R15=000000000000000d RIP=ffffffff825b3634 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff28e3ce028 CR3=000000003162f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86474974 RBX=ffffffff86474968 RCX=ffffffff813b03bd RDX=0000000000000000 RSI=ffffffff867bdeaa RDI=ffffffff8647495c RBP=ffffffff8647496c RSP=ffff8880095df680 R8 =ffffffff867bdeaa R9 =0000000000000000 R10=000000000003b53d R11=00000000000083f9 R12=ffffffff86474974 R13=ffffffff8647495c R14=ffffffff86474968 R15=dffffc0000000000 RIP=ffffffff813532fa RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb076ab859e CR3=000000000d419000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000