Warning: Permanently added '[localhost]:41677' (ECDSA) to the list of known hosts. 2025/06/21 22:13:37 fuzzer started 2025/06/21 22:13:37 dialing manager at localhost:33119 syzkaller login: [ 90.845039] cgroup: Unknown subsys name 'net' [ 90.991044] cgroup: Unknown subsys name 'cpuset' [ 91.038610] cgroup: Unknown subsys name 'rlimit' 2025/06/21 22:13:54 syscalls: 226 2025/06/21 22:13:54 code coverage: enabled 2025/06/21 22:13:54 comparison tracing: enabled 2025/06/21 22:13:54 extra coverage: enabled 2025/06/21 22:13:54 setuid sandbox: enabled 2025/06/21 22:13:54 namespace sandbox: enabled 2025/06/21 22:13:54 Android sandbox: enabled 2025/06/21 22:13:54 fault injection: enabled 2025/06/21 22:13:54 leak checking: enabled 2025/06/21 22:13:54 net packet injection: enabled 2025/06/21 22:13:54 net device setup: enabled 2025/06/21 22:13:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 22:13:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 22:13:54 USB emulation: enabled 2025/06/21 22:13:54 hci packet injection: enabled 2025/06/21 22:13:54 wifi device emulation: enabled 2025/06/21 22:13:54 802.15.4 emulation: enabled 2025/06/21 22:13:54 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 22:13:56 starting 8 fuzzer processes 22:13:56 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0xc2600) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0xfffffffffffffffc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x995ca0978c2800ce}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000440), &(0x7f0000000480)=0x4) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x4, 0x80, 0x40, 0x9, 0x0, 0x3, 0x0, 0x14, 0x10010, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, @perf_config_ext={0x5944, 0x7f}, 0x72041, 0x7, 0x0, 0x1, 0x4, 0x1ff, 0x1, 0x0, 0x7fff, 0x0, 0xfff}, r3, 0x9, r5, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r7 = syz_open_dev$vcsu(&(0x7f0000000740), 0x4, 0x400) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0xf3b}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044001}, 0x8811) 22:13:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) getdents(r0, &(0x7f0000000080)=""/151, 0x97) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) read$snapshot(r1, &(0x7f0000000180)=""/96, 0x60) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x80142, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000280)=""/39, 0x27}) r3 = memfd_secret(0x0) mknodat(r3, &(0x7f0000000300)='./file1\x00', 0x8000, 0xf108) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) name_to_handle_at(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@raw={0xf8, 0x0, {"c9896c56ce84f50080f8b77379887026d5eaffa05ad9aefb8c091a1e75cda0158c247cfe21f5d7051baf4fee3d953a8db57e273cbf21798990227d2b9853246547820602a0ee21eff69385e02bdce46b1fcb8bd48218334f80303358ab9aed25eaad04c43b74f2a4075419b6edcbde0299e60401c5758f3dfd303218e61ef38df7eea9bb653e4ef80d2f169ca0640349061ccf78323bb58e679718c26c2514d440b1086f09ee43eed1aaf565d1fe08632cbb2e75ffb65d1f48fbabed9451d3c5013207a2f6a93bb0b0de69e9936e3c5533f8353bf7c5815889c6dfafc275bb034a3a93ad9fd89f86ebc1e9a57ed7e35fc8a3aad6917ff1"}}, &(0x7f0000000500), 0x400) pipe(&(0x7f0000000540)={0xffffffffffffffff}) read$snapshot(r5, &(0x7f0000000580)=""/4096, 0x1000) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001580)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000015c0)=0x8b55) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x6100, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000016c0)={'ip6_vti0\x00', &(0x7f0000001640)={'sit0\x00', r4, 0x2f, 0x5, 0x20, 0x400, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, 0x8, 0x10, 0x80000001, 0x7}}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000001700)=r7) mknodat$loop(r5, &(0x7f0000001740)='./file0\x00', 0x6000, 0x0) 22:13:56 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffb, 0x410001) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/241, 0xf1}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x1c0, 0x0) faccessat(r3, &(0x7f0000000240)='./file0\x00', 0x14) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "746950fdddde62fd", "e8bac45ecff6353a19aae7449e3594001a76018b1f5b930543d3791b75f69971", "deddba0a", "ff26de091a7c5c6a"}, 0x38) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x49c20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0xdf, 0x7, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x10, 0x40, 0x3e6, 0x474}}) r5 = socket(0x2b, 0x5, 0x2) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f00000003c0)=""/59, &(0x7f0000000400)=0x3b) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000440)={0x67, 0x1c, '\x00', [@generic={0x0, 0xaa, "cbdd1f613f683c78fd539ac40f2a126c13f75c2ddf5d50bb05f900e35f75290b2904573f3edc18021c3ac26c7c9ed849243a63eae5443a85120733043935416ee4d7f0d9fb20f44d614d4da54b414745d505820ae767f19e8ee4446ade3a0ca698af1cce69070a531057dfd0295c50397eadaf0f2b700f87ca82b03f09e0baeff6d1db78d9eea81634a0ee172862a51fe34753e94e43fb170d582e08ae12ded40ea4c039b02ebde3fbfc"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x4}]}, 0xf0) readlinkat(r4, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/38, 0x26) utimensat(r1, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) futimesat(r4, &(0x7f0000000640)='./file0\x00', &(0x7f00000006c0)={{}, {r6, r7/1000+10000}}) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000700)="fe76ce2b54d7166e54d83bc0e94a5ffa4528799d02988641cc16753bc159b94ae73b8b2df13276d9966865637ac6dc829ef6264bca98f66c33c062318795956179ee3d1caa6ce47466b797d5b9bcdde6824914be8e99b6cdf05f365119e208fed94798b66e8b7d86737cf07fdcdfd4f5f3dc7dc66985", 0x76) accept$packet(r5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) 22:13:56 executing program 3: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044810}, 0x4000000) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r2 = syz_open_dev$vcsu(&(0x7f0000000400), 0x3, 0x144000) statx(r2, &(0x7f0000000440)='./file0\x00', 0x6000, 0x100, &(0x7f0000000480)) r3 = io_uring_setup(0xf09, &(0x7f0000000580)={0x0, 0x37f0, 0x20, 0x0, 0x293}) r4 = dup(r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040081}, 0x800) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000740), &(0x7f0000000780)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r0) accept$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800408c0}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) [ 109.572091] audit: type=1400 audit(1750544036.892:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:13:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x800, 0x2, 0x4}) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x1ff, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) read$snapshot(r4, &(0x7f0000000340)=""/64, 0x40) renameat2(r1, &(0x7f0000000380)='./file0\x00', r4, &(0x7f00000003c0)='./file0\x00', 0x1) unlinkat(r1, &(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0x280) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x200201, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1000, 0x40, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f00000004c0)='./file0\x00', r2, r6, 0x1000) faccessat(r0, &(0x7f0000000640)='./file0\x00', 0x100) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x311140, 0x0) mknodat(r7, &(0x7f00000006c0)='./file0\x00', 0x800, 0xff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000700)={0x73622a85, 0x10b}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000740)={@id, 0x21, 0x0, '\x00', @c}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000007c0)=""/10) fchownat(r5, &(0x7f0000000800)='./file0\x00', r3, 0x0, 0x1000) 22:13:56 executing program 5: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="9aa80c7655ef53cdd0828bd9c9a3ab2a", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="bf4b1897a277055943de864c79b94abcea70201d547d2ca2dd06259020b0d19258759b7b1645841bf0765d6852b6aa2a7f1c10fc687deaeb02be9b960796b51b3672bd5f64ad25d51d4b1511d968ea98bee9dba34a54bf3ed5df7197a27174cbdeeabad65788c95ca38099fd42d5013370fb476168ca43ca45c1848e9598bd621a3368aac49cf248c7ea4538013eb3052e3581f51434f2aa7a98a0fc91d79367dc14f90aea98624782a446527209d749b4d71b6c1539df5ff356eed81000dc4b238f25550147983f2ad56307b724ca35e19a9b62cb27b59b60b19e7e94", 0xdd, 0x20000040, &(0x7f0000000140)={0xa, 0x4e21, 0xffffff7d, @mcast1, 0xfe}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)={'caif0', 0x32, 0x30}, 0x8) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x40000c1) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x40) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xde07}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1ff}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000580)="a4876a427ed6184ac982a7980c64aaee", 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x65, 0x1f, 0x2, @private2, @mcast2, 0x7800, 0x700, 0x1000, 0x3}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000800)=r2) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000900)={r1, 0x7, 0x401, 0x571c}) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000a80)={&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000980)=""/233, 0xe9}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000c80)={'ah\x00'}, &(0x7f0000000cc0)=0x1e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000f00)={0x5c, 0x0, &(0x7f0000000dc0)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d00)={@fda={0x66646185, 0x7, 0x2, 0x19}, @fd, @fda={0x66646185, 0x2, 0x0, 0x18}}, &(0x7f0000000d80)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x1}, @exit_looper], 0xb5, 0x0, &(0x7f0000000e40)="4a5a3440adbffb87ce0737a7a59a7b011600e1ed60e967d0e6cdf6bf48764bee252c0191b7f8e611ff2d3720af21f3bbd7fbfd709b07e8db9a93b14cf22689dd455a1fac0b2a5b253fc4dd6f98c453b608d8ca5d353c7210a894d617965858b49864973485ec3ffca8e8a8deadf141202334b8f3a8322339d6c8a0ca348b6377930a024a9cdc9a47caacdeb62fb843e5f4a04716ea523044440d3319a2ad4c956a8304005444142c0084bafa28306c1a3214392260"}) 22:13:56 executing program 6: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+10000}, {0x0, 0x2710}}, 0x0) getdents(r0, &(0x7f0000000100)=""/159, 0x9f) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) execveat(r4, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000300)='/dev/zero\x00', &(0x7f0000000340)='/dev/zero\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='/dev/zero\x00', &(0x7f0000000400)='/dev/zero\x00'], 0x1d00) r5 = memfd_secret(0x0) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x800, 0x80, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000480)='./file0\x00', r6, 0xee01, 0x1000) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000600)={0x394, 0xfe, "80715bfc77bddef46acfcf704ff8edd53261aea6d16c48d3128343fb7903b54cc208dee5877178db7c729587c9fa50132bc587118e0ef64646c54c6a3b56a1a07ca0d6112946b1cdb222c4f0265a5b1ccda50c922e1e3f0aabdc7025b35bc02142000ced959dd59850fd182992361062f12d5604ca2c99e2039610f71696393bfa42a32fec242a5213244259a140a6d1c9f3bc25a28fba3153ee97cf0ca5cecfd1e1450c94520c507e515e0d046e976bbafc7e11ae0a0d99a5cfdb7c51e93b073e64c1e153d663eb84e160db228cca2ea34123de845eeba82f24960c177471098bc978f72765cf176dd3ab98d10bb2e1331730daa4f9051f30f9996c70a2"}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x140, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000780)) read$snapshot(r0, &(0x7f00000007c0)=""/136, 0x88) r8 = syz_mount_image$nfs4(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x9, 0x4, &(0x7f0000000b00)=[{&(0x7f0000000900)="6c1643a6b50e2b061dfa9a14ad93c573d5264057481c9975b980636662698d26e5babe663a", 0x25, 0x3}, {&(0x7f0000000940)="acb666a89ece513dfce52749faa9cd4333360b8d1819396144da7c736278379b1732f5887042fe0f57ed614821e5bf888468bad96a598cf47214cf3c51e5949dbc1dc290e878368b8504a271fe2697589349613ce9ab3f81d1f4d763f8a64876aa98cd230cff502b683a8e2422234a456877ad5a7263a41e2e20dc965213267fbc0bc0959eadeed3d8baf660029c70b89fb4dc052488bee1cde4408eb2860df76e0b2e4ef9724be187039747194af7ca5bb201ea641a4526fd2e19935f5ab9d4f0ccf4a312267609ce564152ad589e2f2c44d7fef821c5d4bab756bb880ce9c01f3e1b568c6b02", 0xe7, 0x1}, {&(0x7f0000000a40)="e646203c9fc22e10e7632adec9cc1bb3af61e7d4c4899ea299b2d1097e3df163af181a0d650c790b16244f7f2822c2fd5e1a063b14f114899215deb670033c5dc84bc6dcb907167f3845551d3acc837786", 0x51, 0x2}, {&(0x7f0000000ac0), 0x0, 0x1000}], 0x2010000, &(0x7f0000000b80)={[{'/dev/zero\x00'}, {'%!'}, {'/dev/zero\x00'}, {':*!,:%+-{'}, {'(!'}, {'/dev/zero\x00'}, {',{'}], [{@pcr={'pcr', 0x3d, 0x6}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snapshot\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!'}}, {@smackfshat}, {@hash}, {@subj_role={'subj_role', 0x3d, '/dev/snapshot\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+],!%'}}]}) faccessat(r8, &(0x7f0000000c80)='./file0\x00', 0x1a1) inotify_add_watch(r0, &(0x7f0000000cc0)='./file0\x00', 0x92af92b8b50fe495) 22:13:57 executing program 7: read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/82, 0x52) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x14, 0x100, 0x70bd29, 0x25dfdbfd, {0x1e, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "a3e127ad9cb8ef39"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "53834bc1c237f86336edda0b407cdb58c539019caaace11a7083c8066ed156966ff0bd6921368611e2481b4fc564edad213d62e9be6bb0f844a48b4ae653c8"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "d4b86ff46aac0c928cba9fe0eb55dfb23aee1ee410fae02685996c0ac584db20d3eb2ab120953125f81a351170ec14856c60b006c05d72f0fe10e399abef298fdaa4f686a64abedafc7af25516105fee7488deee32b75f51e9f336eeb13437a06c37fd6b9c263c"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000) r1 = memfd_secret(0x80000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, 0x0, 0x108, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6869}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9ee0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x370}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x28000}, 0x4000840) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000003c0)) r2 = socket(0xa, 0x2, 0x200) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe3, 0xa9, @random="e459e8d7d7e76ea7d7c26bdaeb04aabde9151cc141155415659e321a8ab7977bb37edb55a63d92b86438e15d221c52bd49e8a36d581e9e99dbf21d5bfa6078803bdce18f3779b801dee92e7e2547acdc337f8a20a40bb1091122f0f8ff60916ad193bb7d00c2f367b3167ba072fba96cfc419da6fafe13940c031d6f7f2d295ee65cc82a38245216f538ed7bcf71fd4d0f7eae5128f0960db0b8d5ed96f433addf2ca1ad522e557e4aa947cb881facbfb4398480d6733f3fb9606e9e8472c46b00b082323a62557f4c5792ef7bbd68863640b084211d69045251dec75bb485"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40d0}, 0x20008000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "ef71700b6defd57a", "65f9ff4a22441a913c713a252614813a0cabb94ff1bc1091db9c371b5bccaa08", "a351939b", "a67907cba9fc890b"}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000680)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9fb}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10) write$char_usb(0xffffffffffffffff, &(0x7f0000000880)="590b2b04e371c8cd8f6fdb86107ba3b46ab0dde9f8add07dccb02b5648247b438c4ecfce577368d1831ea1102a425a2872c433e02f8b297f683453a394ddddbd4ed7759b6c91380d8634bf150da7009360c7354954eadf6945d9306773a53c2def987bb109667d51ee3a51d34c7646e5dc741101768e354347adf65b35625f597ed7a88286a1fa4c4556c898b0b32838e87bf1eccb", 0x95) read$char_usb(r4, &(0x7f0000000940)=""/63, 0x3f) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000980), &(0x7f00000009c0)=0x4) read$usbmon(r3, &(0x7f0000000a00)=""/158, 0x9e) [ 110.845451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.847949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.850408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.859646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.863996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.109707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.114409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.119849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.136408] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.139992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.144409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.149840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.151492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.161474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.181519] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.189100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.203763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.206692] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.224431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.236042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.240896] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.255446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.274406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.279062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.280979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.281852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.284528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.285274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.286405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.293022] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.299271] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.300004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.300879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.307470] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.313910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.317275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.323287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.323987] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.330375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.332244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.928748] Bluetooth: hci0: command tx timeout [ 113.248645] Bluetooth: hci1: command tx timeout [ 113.249270] Bluetooth: hci2: command tx timeout [ 113.313024] Bluetooth: hci3: command tx timeout [ 113.376284] Bluetooth: hci7: command tx timeout [ 113.377036] Bluetooth: hci6: command tx timeout [ 113.377575] Bluetooth: hci5: command tx timeout [ 113.378055] Bluetooth: hci4: command tx timeout [ 114.977320] Bluetooth: hci0: command tx timeout [ 115.296280] Bluetooth: hci1: command tx timeout [ 115.296773] Bluetooth: hci2: command tx timeout [ 115.361910] Bluetooth: hci3: command tx timeout [ 115.425631] Bluetooth: hci4: command tx timeout [ 115.426167] Bluetooth: hci5: command tx timeout [ 115.427747] Bluetooth: hci6: command tx timeout [ 115.428487] Bluetooth: hci7: command tx timeout [ 117.025160] Bluetooth: hci0: command tx timeout [ 117.344497] Bluetooth: hci1: command tx timeout [ 117.345682] Bluetooth: hci2: command tx timeout [ 117.408772] Bluetooth: hci3: command tx timeout [ 117.472536] Bluetooth: hci5: command tx timeout [ 117.473028] Bluetooth: hci7: command tx timeout [ 117.474566] Bluetooth: hci6: command tx timeout [ 117.474979] Bluetooth: hci4: command tx timeout [ 119.074168] Bluetooth: hci0: command tx timeout [ 119.392387] Bluetooth: hci1: command tx timeout [ 119.393339] Bluetooth: hci2: command tx timeout [ 119.456411] Bluetooth: hci3: command tx timeout [ 119.520707] Bluetooth: hci4: command tx timeout [ 119.521636] Bluetooth: hci5: command tx timeout [ 119.522776] Bluetooth: hci7: command tx timeout [ 119.522832] Bluetooth: hci6: command tx timeout [ 170.977640] syz-executor.0 (280) used greatest stack depth: 25072 bytes left [ 171.127480] syz-executor.1 (284) used greatest stack depth: 24544 bytes left [ 173.499215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.502622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.507852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.522727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.533219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.575290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.578431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.580965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.585667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.587493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.591320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.596630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.601316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.604422] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.616515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.758405] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.761530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.765566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.770367] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.777635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.881086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.883474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.884912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.888153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.892285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.077344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.083507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.089481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.093069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.112626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.115728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.119536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.123569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.126617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.135446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.158012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.162757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.163573] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.172455] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.177767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.648309] Bluetooth: hci1: command tx timeout [ 175.648321] Bluetooth: hci0: command tx timeout [ 175.713440] Bluetooth: hci2: command tx timeout [ 176.032246] Bluetooth: hci5: command tx timeout [ 176.032275] Bluetooth: hci3: command tx timeout [ 176.288361] Bluetooth: hci4: command tx timeout [ 176.288470] Bluetooth: hci7: command tx timeout [ 176.288945] Bluetooth: hci6: command tx timeout [ 177.696467] Bluetooth: hci0: command tx timeout [ 177.696481] Bluetooth: hci1: command tx timeout [ 177.760362] Bluetooth: hci2: command tx timeout [ 178.080541] Bluetooth: hci5: command tx timeout [ 178.081754] Bluetooth: hci3: command tx timeout [ 178.338238] Bluetooth: hci7: command tx timeout [ 178.338399] Bluetooth: hci4: command tx timeout [ 178.339099] Bluetooth: hci6: command tx timeout [ 179.744286] Bluetooth: hci1: command tx timeout [ 179.744747] Bluetooth: hci0: command tx timeout [ 179.808476] Bluetooth: hci2: command tx timeout [ 180.129545] Bluetooth: hci5: command tx timeout [ 180.129731] Bluetooth: hci3: command tx timeout [ 180.384642] Bluetooth: hci4: command tx timeout [ 180.384677] Bluetooth: hci7: command tx timeout [ 180.384721] Bluetooth: hci6: command tx timeout [ 181.792261] Bluetooth: hci0: command tx timeout [ 181.792712] Bluetooth: hci1: command tx timeout [ 181.857079] Bluetooth: hci2: command tx timeout [ 182.176293] Bluetooth: hci5: command tx timeout [ 182.176736] Bluetooth: hci3: command tx timeout [ 182.432226] Bluetooth: hci4: command tx timeout [ 182.432668] Bluetooth: hci6: command tx timeout [ 182.433079] Bluetooth: hci7: command tx timeout [ 235.635154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.642970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.646007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.655278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.663904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.712103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.716348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.720833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.728417] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.734365] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.769634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.773718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.780696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.798575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.802396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.888925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.894673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.908608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.914724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.927638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.009037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.014779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.025962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.032020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.039482] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.047918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.051701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.054096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.082806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.085628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.087946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.105436] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.110369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.127975] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.130598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.134381] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.167776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.173434] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.173471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.225305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.729361] Bluetooth: hci0: command tx timeout [ 237.793231] Bluetooth: hci1: command tx timeout [ 237.857440] Bluetooth: hci2: command tx timeout [ 237.984317] Bluetooth: hci3: command tx timeout [ 238.176419] Bluetooth: hci5: command tx timeout [ 238.177183] Bluetooth: hci4: command tx timeout [ 238.305391] Bluetooth: hci6: command tx timeout [ 238.368617] Bluetooth: hci7: command tx timeout [ 239.776249] Bluetooth: hci0: command tx timeout [ 239.841149] Bluetooth: hci1: command tx timeout [ 239.904340] Bluetooth: hci2: command tx timeout [ 240.032311] Bluetooth: hci3: command tx timeout [ 240.224226] Bluetooth: hci4: command tx timeout [ 240.224243] Bluetooth: hci5: command tx timeout [ 240.352220] Bluetooth: hci6: command tx timeout [ 240.418205] Bluetooth: hci7: command tx timeout [ 241.824513] Bluetooth: hci0: command tx timeout [ 241.888448] Bluetooth: hci1: command tx timeout [ 241.952305] Bluetooth: hci2: command tx timeout [ 242.081185] Bluetooth: hci3: command tx timeout [ 242.272222] Bluetooth: hci4: command tx timeout [ 242.272259] Bluetooth: hci5: command tx timeout [ 242.402151] Bluetooth: hci6: command tx timeout [ 242.465252] Bluetooth: hci7: command tx timeout [ 243.872186] Bluetooth: hci0: command tx timeout [ 243.936221] Bluetooth: hci1: command tx timeout [ 244.001189] Bluetooth: hci2: command tx timeout [ 244.128234] Bluetooth: hci3: command tx timeout [ 244.320444] Bluetooth: hci4: command tx timeout [ 244.320475] Bluetooth: hci5: command tx timeout [ 244.448341] Bluetooth: hci6: command tx timeout [ 244.512499] Bluetooth: hci7: command tx timeout [ 298.168291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.174084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.178091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.189817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.200417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.308764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.311294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.314296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.316392] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.317278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.327870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.334050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.338398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.341077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.371746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.456400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.461519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.463803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.472880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.480190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.511453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.523710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.561458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.633470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.642143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.645944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.666314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.675184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.678291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.683492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.688366] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.730634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.737449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.750615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.752698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.756864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.764256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.770685] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.781680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.788599] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.257199] Bluetooth: hci0: command tx timeout [ 300.384412] Bluetooth: hci2: command tx timeout [ 300.512362] Bluetooth: hci1: command tx timeout [ 300.576332] Bluetooth: hci3: command tx timeout [ 300.768250] Bluetooth: hci4: command tx timeout [ 300.768285] Bluetooth: hci5: command tx timeout [ 300.896205] Bluetooth: hci7: command tx timeout [ 300.896438] Bluetooth: hci6: command tx timeout [ 302.304886] Bluetooth: hci0: command tx timeout [ 302.432236] Bluetooth: hci2: command tx timeout [ 302.560411] Bluetooth: hci1: command tx timeout [ 302.624493] Bluetooth: hci3: command tx timeout [ 302.816723] Bluetooth: hci4: command tx timeout [ 302.818764] Bluetooth: hci5: command tx timeout [ 302.944888] Bluetooth: hci7: command tx timeout [ 302.944913] Bluetooth: hci6: command tx timeout [ 304.352259] Bluetooth: hci0: command tx timeout [ 304.480326] Bluetooth: hci2: command tx timeout [ 304.608288] Bluetooth: hci1: command tx timeout [ 304.673193] Bluetooth: hci3: command tx timeout [ 304.864218] Bluetooth: hci5: command tx timeout [ 304.865209] Bluetooth: hci4: command tx timeout [ 304.992439] Bluetooth: hci7: command tx timeout [ 304.992601] Bluetooth: hci6: command tx timeout [ 306.401797] Bluetooth: hci0: command tx timeout [ 306.528438] Bluetooth: hci2: command tx timeout [ 306.656210] Bluetooth: hci1: command tx timeout [ 306.720499] Bluetooth: hci3: command tx timeout [ 306.912237] Bluetooth: hci4: command tx timeout [ 306.915130] Bluetooth: hci5: command tx timeout [ 307.040199] Bluetooth: hci7: command tx timeout [ 307.041401] Bluetooth: hci6: command tx timeout [ 360.440297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.445297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.451034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.460463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.469416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.754686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.758086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.765227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.770844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.774934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.782015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.792433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.813212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.814849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.829443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.831477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.835072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.837507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.839238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.848633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.852724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.855190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.870404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.904458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.913424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.940851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.949204] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.993890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.026758] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.051942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.138442] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.144794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.147744] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.163808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.215719] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.270858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.301325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.369349] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.428720] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.445923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.528458] Bluetooth: hci0: command tx timeout [ 362.848843] Bluetooth: hci1: command tx timeout [ 362.912234] Bluetooth: hci3: command tx timeout [ 363.040473] Bluetooth: hci4: command tx timeout [ 363.040659] Bluetooth: hci2: command tx timeout [ 363.424861] Bluetooth: hci5: command tx timeout [ 363.552362] Bluetooth: hci7: command tx timeout [ 363.616437] Bluetooth: hci6: command tx timeout [ 364.576206] Bluetooth: hci0: command tx timeout [ 364.898210] Bluetooth: hci1: command tx timeout [ 364.960349] Bluetooth: hci3: command tx timeout [ 365.088503] Bluetooth: hci4: command tx timeout [ 365.088624] Bluetooth: hci2: command tx timeout [ 365.472284] Bluetooth: hci5: command tx timeout [ 365.600764] Bluetooth: hci7: command tx timeout [ 365.665349] Bluetooth: hci6: command tx timeout [ 366.624439] Bluetooth: hci0: command tx timeout [ 366.945230] Bluetooth: hci1: command tx timeout [ 367.008411] Bluetooth: hci3: command tx timeout [ 367.137026] Bluetooth: hci2: command tx timeout [ 367.137072] Bluetooth: hci4: command tx timeout [ 367.522175] Bluetooth: hci5: command tx timeout [ 367.648507] Bluetooth: hci7: command tx timeout [ 367.712207] Bluetooth: hci6: command tx timeout [ 368.672501] Bluetooth: hci0: command tx timeout [ 368.992366] Bluetooth: hci1: command tx timeout [ 369.056184] Bluetooth: hci3: command tx timeout [ 369.184537] Bluetooth: hci4: command tx timeout [ 369.184689] Bluetooth: hci2: command tx timeout [ 369.570169] Bluetooth: hci5: command tx timeout [ 369.696256] Bluetooth: hci7: command tx timeout [ 369.760482] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 22:19:06 Registers: info registers vcpu 0 RAX=0000000000000014 RBX=ffff888015aba678 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff8880143e17c8 RDI=ffff888015aba678 RBP=ffff8880143e17c8 RSP=ffff88802b017a98 R8 =00000000ffffffff R9 =fffff9400035cf68 R10=0000000000000001 R11=0000000000000001 R12=ffff888015ab9b80 R13=ffff888015aba5d8 R14=00000000ffffffff R15=ffff888015aba678 RIP=ffffffff84b2879c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f15752fd540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563498c027f0 CR3=000000002ded8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=534e4f4954504f5f45424f5250444f4d XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff815c10f0 RBX=ffffffff816049e0 RCX=ffff88802d747744 RDX=1ffff11005ae8f09 RSI=ffffffff815c10f0 RDI=ffff88802d7478b8 RBP=ffff88802d747888 RSP=ffff88802d7477e8 R8 =0000000000000001 R9 =ffff88802d747830 R10=000000000003b53d R11=0000000000024a7e R12=ffff88802d7478b8 R13=0000000000000000 R14=ffff8880161c0000 R15=ffff88801c6b4c80 RIP=ffffffff816049e4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feafcc714a1 CR3=00000000263f9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000