Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:19246' (ECDSA) to the list of known hosts. 2023/08/26 05:52:49 fuzzer started 2023/08/26 05:52:49 dialing manager at localhost:42391 syzkaller login: [ 108.332761] cgroup: Unknown subsys name 'net' [ 108.531241] cgroup: Unknown subsys name 'rlimit' [ 119.829169] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/26 05:53:02 syscalls: 220 2023/08/26 05:53:02 code coverage: enabled 2023/08/26 05:53:02 comparison tracing: enabled 2023/08/26 05:53:02 extra coverage: enabled 2023/08/26 05:53:02 setuid sandbox: enabled 2023/08/26 05:53:02 namespace sandbox: enabled 2023/08/26 05:53:02 Android sandbox: enabled 2023/08/26 05:53:02 fault injection: enabled 2023/08/26 05:53:02 leak checking: enabled 2023/08/26 05:53:02 net packet injection: enabled 2023/08/26 05:53:02 net device setup: enabled 2023/08/26 05:53:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/26 05:53:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/26 05:53:02 USB emulation: enabled 2023/08/26 05:53:02 hci packet injection: enabled 2023/08/26 05:53:02 wifi device emulation: enabled 2023/08/26 05:53:02 802.15.4 emulation: enabled 2023/08/26 05:53:02 fetching corpus: 0, signal 0/0 (executing program) 2023/08/26 05:53:03 starting 8 fuzzer processes 05:53:03 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x30000) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$usbmon(r1, &(0x7f0000000080)=""/190, 0xbe) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x81, 0x42000) r3 = timerfd_create(0x7, 0x80000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000180)={0x6, 0x4}) timerfd_create(0x5, 0x800) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x808, 0x7, 0x5, 0x8, 0x1, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) r6 = syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x301ac0) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x8a) inotify_rm_watch(r1, 0x0) r7 = shmget$private(0x0, 0x2000, 0x119, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) read$usbmon(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3) 05:53:03 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x4040c0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x81, 0x40) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x204002) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000180)=""/56) r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x100000001, 0x70080) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f5, 0x200, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000015) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000400)={&(0x7f0000000300), &(0x7f0000000340)=""/129, 0x81}) r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x0, 0x301200) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000480)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) getpeername$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xc6, 0x10000, 0xf, @empty, @remote, 0x80, 0x7, 0x7, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x10, 0x7, 0x5, 0x800, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x66, 0x0, 0x3, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xa3, [@multicast1, @empty, @rand_addr=0x64010102, @private=0xa010101, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x1f, 0x20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x20, 0x5, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000f80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f00000008c0)={0x650, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffe0, 0xbc, 0x58, 0x2b7}]}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9841}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 05:53:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7f, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000080)={"3345ad84d370ce039ffd25b5e3a7823e", 0x0, 0x0, {0x81, 0xf87}, {0x5}, 0x100, [0x2, 0x4, 0x8, 0xffffffff, 0xfffffffffffffffa, 0x1, 0x7, 0x400, 0x7, 0x800, 0x6c9e, 0x1, 0x0, 0x5, 0x1, 0x4]}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0xea3f, 0x0, 0xeb, &(0x7f0000000180)="f47fae7265a5e83924c3d170a19956a277ae43c5bcf76aa0a487ac87cc66f803fa6ab0f21c2baf0f075a2b372b7aa16f2be904c2ff8bebb1517803df6800733e31c9c3c7fe65ed245ad6c7fea5fffa796dff17050b9a76fd5daa15a9a19fa2156a862c8ebecbbfafaacb5025785e454fea236af3f3ca203ae324179b65304a875c46420aa762966816ea614d7dc10f77049bec2275496fcc55dde047a6b9ec25383c1a223a9aa2f6995ac2eaea883748bd88bb39381a68a02e5ff17fb92c45137f2e631de1f443a773087a3992d977df8b534c3b0ee84a42be46ed14c57e417dfe02047e030e96dbebd0b4"}) r2 = syz_open_dev$mouse(&(0x7f00000002c0), 0x80, 0x800) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000300)=""/223) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000400)) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x1) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000440)=0x7fffffff80) r3 = syz_open_dev$mouse(&(0x7f0000000480), 0x1, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000600)={&(0x7f00000004c0), &(0x7f0000000500)=""/237, 0xed}) wait4(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x3, &(0x7f0000000700)=""/219) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000800)=""/101) waitid$P_PIDFD(0x3, r1, &(0x7f0000000880), 0x20000000, &(0x7f0000000900)) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000a40)={&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000a00)}) [ 120.972717] audit: type=1400 audit(1693029183.324:6): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:53:03 executing program 5: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/173) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000000c0)=""/157) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x789940) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/142) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x7, 0x80000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000002c0)=""/106) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000340)=""/87) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000003c0)=0x2) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000400)=0x6) socketpair(0x8, 0xa, 0x6, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x11081800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x800, 0x70bd29, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x200) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000005c0)=""/199) syz_open_dev$evdev(&(0x7f00000006c0), 0x6, 0x840) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000700)=""/199) syz_80211_inject_frame(&(0x7f0000000800), &(0x7f0000000840)=@ctrl_frame=@cts={{}, {0x8}, @device_b}, 0xa) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000880)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000008c0)={"8a43105af57fafa7a0dd87b779af135c", r5, 0x0, {0xffff, 0x9}, {0x3}, 0x5, [0xff, 0x40, 0x49cc, 0x6, 0x4, 0x5, 0x9, 0xf3c0, 0x6d30, 0x1000, 0x2, 0x4, 0x4f09, 0xc2ee, 0x3f, 0x2a]}) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3f2, 0x710, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000ac0)=""/77) 05:53:03 executing program 4: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x7}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x7ff, 0xc00, 0x1f, &(0x7f0000000080)="6b65fc9a0b53c5a6c69b611f09af77399ea144d40d4590d7d95feccd5d0753"}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000100)) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000140)) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000180)) r0 = gettid() ioprio_set$pid(0x3, r0, 0x2000) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000001c0)) socketpair(0x15, 0x5, 0x200, &(0x7f0000000200)) r1 = gettid() ioprio_set$pid(0x3, r1, 0x6000) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000240)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) r2 = gettid() pidfd_open(r2, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000002c0)=0x5) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000300)=""/39) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000380)={0x40, 0x9}) 05:53:03 executing program 3: mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000091) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/4096) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9) sendmsg$nl_xfrm(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfd, 0x1000, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x480d5) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000001280)=[0x8000, 0x2]) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x70, 0x453, 0x600, 0x70bd2d, 0x25dfdbfe, "c037cff0e2dbcba4ad349c3ee11173a66b892e774cf2a14a9b5cbcb19b70e215a411ec71b117be8902adb47fc30e5c70724c9b6ac3020dfd8b9df815a5cc4311077b34328ce2eca662c21c78de6b17cbcc754fe69542de5ac58cbc3a78fe", [""]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x20008050) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001900)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001440)={0x44c, 0x3f4, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x13, [0x101, 0x40, 0x42a2, 0x62, 0x7, 0x0, 0x8000, 0x8000, 0x1, 0x4, 0xffffffff, 0x4, 0xf01, 0x8000, 0xffffffff, 0xffffffff, 0x9, 0x29, 0xff, 0xb72, 0x101, 0x3, 0x10000, 0x7, 0xb1e, 0x9, 0x7ff, 0xffff8000, 0x503, 0x200, 0x9, 0x5, 0x4, 0x8a4, 0x2, 0xa7, 0xffff, 0x46b, 0x200, 0x9ec, 0xfffffff7, 0x9, 0x9, 0x0, 0x5, 0x200, 0x2, 0x7, 0x65, 0xfffffffe, 0x5, 0x6, 0x1, 0x81, 0xfffffff9, 0x8000, 0x8, 0x34a2, 0x3, 0x10001, 0x7, 0xfffffff9, 0x40, 0x80], [0x200, 0x7f, 0x0, 0x6, 0x4, 0xe4f, 0xb31, 0x20, 0x3, 0x3, 0xfffffffb, 0x64, 0x9, 0x4, 0x9, 0x5, 0x7675, 0x2, 0x4, 0x5b0, 0x7, 0x0, 0x7, 0x0, 0x9a, 0x766, 0x20, 0x5, 0x5, 0x1, 0x4, 0x2, 0x6, 0x7, 0x5, 0x2, 0xffff, 0x0, 0x80, 0x4, 0x8, 0x4, 0x4, 0x2, 0x58ed, 0x20, 0x7, 0x9, 0x3, 0x9, 0x8, 0x9, 0x7, 0xfffffffc, 0x80, 0x10001, 0x40, 0x20, 0x5, 0x200, 0x400, 0x3, 0x0, 0x3ff], [0x1, 0x3, 0x20, 0x1, 0x3, 0x8000, 0x1, 0x100, 0x1, 0x8000, 0x6, 0x9555, 0x3a7, 0x9, 0x8, 0x8, 0x8, 0x400, 0x3, 0x5, 0xfffffffc, 0x8, 0x0, 0x1f0, 0x0, 0xffffffc1, 0x4, 0x5, 0x0, 0x8ed, 0x1, 0x4, 0x6, 0x0, 0x8001, 0xfffffffa, 0x1, 0xffffffff, 0xcb7, 0x400, 0x5997, 0x7f, 0x7, 0x200, 0x8, 0x6356, 0xb9, 0x2, 0x7, 0x0, 0x52ca, 0x101, 0x4, 0x8c0a, 0x5, 0x4000, 0x7, 0x3ff, 0x2, 0x0, 0x1f, 0xc699, 0x4, 0x53876390], [0x9, 0xffff, 0x7, 0x1ff, 0x9, 0x5, 0xffffffff, 0x3, 0x7, 0x2392, 0x3, 0x42c1, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0xfffffffe, 0x9, 0x4, 0xffff, 0x8, 0x5, 0x8, 0x4d1f, 0x800, 0xffff, 0x4, 0x3, 0x9, 0x5, 0x100, 0x0, 0x81, 0x7fffffff, 0x401, 0x4, 0xba, 0x8, 0xff, 0x3bc, 0x2, 0x3, 0x246, 0x7ee, 0x401, 0x8f, 0xffffffff, 0x2, 0xf275, 0x40, 0xff, 0x200, 0x1, 0x5, 0xe02, 0x64, 0x8001, 0xffffffff, 0x7, 0xfffffffd, 0x1ff], 0x2a, ['^!%\x00', '/dev/input/mouse#\x00', '/dev/input/mouse#\x00', '!\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x845}, 0x20008801) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0xac, 0x453, 0x400, 0x70bd29, 0x25dfdbfd, "472608efd8b7814aed6c36959a749645225679787bea0fd55f454d5370776aa9a6f2890470582b2f41d5f6e94cb2716883e74824f8d8a96e89212ca9a08a71471190c46872e1439cd46c0ad509f21e76abaad540927daae13636c917a2920eedca0efc055e6e4e914cea856f9c1a11c6641adcf77952bdf64355f0f87ae2eb238a2ea438cf0f995947ef797eedddbae5f206e5231aebf9f5a182", ["", "", "", "", ""]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) r3 = pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001ac0)) r4 = getuid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001c00)={'syztnl2\x00', &(0x7f0000001b40)={'tunl0\x00', 0x0, 0x7, 0x40, 0x6, 0x9, {{0x22, 0x4, 0x1, 0x8, 0x88, 0x64, 0x0, 0x8, 0x24d7381fb4a1a624, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x2, 0x2}, {0x6, 0x7, "ef083d7bd5"}, {0x5, 0xb, "2bc76133ad2d128154"}, {0x2, 0x7, "7093e13fe8"}, {0x0, 0x12, "08a6c931040782c87c9713825e41e079"}, {0x0, 0x7, "40f080be68"}, {0x2, 0x11, "37dc9581c443a43213305d4ffe2e4e"}]}, @lsrr={0x83, 0x27, 0x2d, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @multicast1, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_xfrm(r1, &(0x7f00000022c0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002280)={&(0x7f0000001c40)=@expire={0x62c, 0x18, 0x400, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@broadcast, 0x4e20, 0x4, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x11, 0x0, r4}, {@in6=@mcast2, 0x4d6, 0x2b}, @in6=@mcast1, {0x5, 0x6, 0x3, 0x5, 0x5, 0x8, 0x2}, {0x3, 0x5, 0x2, 0x5}, {0xbe, 0x795d, 0x7f}, 0x70bd2b, 0x3505, 0xa, 0x4, 0x8, 0x10}}, [@extra_flags={0x8, 0x18, 0x2}, @algo_auth_trunc={0x103, 0x14, {{'sha1-neon\x00'}, 0x5b8, 0xa0, "c767f7aea47418f8470b605cffcb1508908448eeb463034517f46bffe20b04904b32567d9574df5e7f7e2389a9759c7aa611bee4e9661208c4475955ec5ea30f69f79cdf23b3d55b7c6f6bb84d9aa8cc7231907510a24e6f9f664e0245539a08c179c486bb1e79f91244979ac138cc660c54a7770b6f3291bbc3c6b35454b6e2230cddcacf80f63a4b293a0d93ab7ff81625288401526fc01a5d485f5d13a256cf96568f61761bf716d9879e74318aac344ce25f31dd87"}}, @policy_type={0xa, 0x10, {0x1}}, @algo_auth={0x134, 0x1, {{'blake2s-128-generic\x00'}, 0x760, "ad04cb0f39a4d059505708bcb1f2099520245a09634301df465ad1ebc634e50523191fdaa4c59e8d58ea769f16c9b2e7e8e170f6a770e15bef3910dd877a0ba201a63efb5877ba98afcee66ca0c7bd3dce5fe7c1894e39b9b0070e76a863daad59a4c77c15631f3c027984427daf6eda0cb3f9e083f5d4828f30fb127b0df0e5d18e9e1d1249dd38b39485afb334c082bc0f379fbc07552b77b658a8dbbf12ea99168de7b76f8863d86e82410c41468345d465a71fa0eef4a39d96a6115b7cda5f6468ea0c5fa3e88e46966fc32b197c218aa24eeac5dfc6598fa6cd366998421c1801944f9217ce7ea6b950"}}, @algo_auth_trunc={0x52, 0x14, {{'sha256-neon\x00'}, 0x30, 0x60, "de690fa003d6"}}, @sec_ctx={0xfc, 0x8, {0xf8, 0x8, 0x1, 0xff, 0xf0, "4cd637e37d5adb8893cb8981486d90b5058217dc4347d620f2e09f35596338e5622d797dd7b04d4dd76ca6a3d01ac76578c7220a1baf36f306a49e0c58b6601ac4cab9864ce33542414081000fa7166694f24b0d2bcded21d04a1ee8e0c68eb0de03a5bd976932eb8794cd3fa5a58af086160602617debcda6cd1ea97890c1fccb601952cddcee9cf5bfd521ef7bfc7c5d57a8d87a041b97fbbbd36a33073aa0969022152fb00af9e79a7a8df423a0d9bea2b525e1c4538830c8158a6f49af558bfac28fe224acc240f9bd47f7f83d334fe7dfefd79ef90e07385f8793cbc03642460be7b2bb7e4f9695e5b2d73f207d"}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x3, 0x4e24, 0x6, 0x0, 0x0, 0x20, 0x2e, 0x0, 0xee01}, {@in6=@empty, 0x4d3, 0x33}, @in=@loopback, {0x5, 0x7, 0x3, 0x7f, 0x4, 0x1, 0xf0, 0xdf}, {0x9, 0x1a, 0x6, 0x9}, {0x9, 0x6c24ff9a, 0x7}, 0x70bd28, 0x3500, 0x0, 0x4, 0x20, 0x295216bae1a12e47}}, @extra_flags={0x8, 0x18, 0xfff}, @policy={0xac, 0x7, {{@in6=@loopback, @in=@loopback, 0x4e24, 0xc7, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x2e, r5, 0xee01}, {0x3f, 0x8, 0x9, 0xfff, 0x9, 0x5, 0x7, 0x7}, {0x529, 0x400, 0x5c, 0x1000}, 0x7fff, 0x3ff, 0x2, 0x0, 0x3, 0x2}}]}, 0x62c}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000002300)=""/168) prctl$PR_GET_THP_DISABLE(0x2a) 05:53:03 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8001, 0x101a00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x100000001, 0x40000) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/7, 0x7}) socketpair(0xa, 0x800, 0x3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x42c, 0x3f4, 0x300, 0x70bd2d, 0x25dfdbfd, {0x91abd938070688cc, 0x2, 0x17, [0x0, 0x6, 0x2, 0x8, 0x1, 0x7, 0x6, 0x400, 0x9, 0x9, 0x0, 0x2, 0x0, 0x80000000, 0x7, 0x5b, 0x4, 0x9, 0x81, 0x19, 0x8, 0x0, 0xffffffff, 0x1, 0x79c05ca6, 0x2, 0x3, 0x0, 0x3ff, 0x3, 0xf800000, 0xc0a, 0xd4c, 0x6, 0x5, 0x3ff, 0x7000000, 0x2b4, 0x0, 0xfffffff8, 0x7ff, 0x20, 0x965a, 0xba6e, 0x8, 0x8, 0x7b, 0x11, 0x7fff, 0x9, 0xffffffff, 0x9, 0x80000, 0x800, 0x3f, 0x2, 0x6, 0x35, 0xff, 0x100, 0x0, 0x9, 0x2, 0x8], [0xd6, 0x948, 0xaf27, 0x7fffffff, 0x3, 0x1, 0x0, 0x3, 0x0, 0x101, 0x3, 0x4, 0x9, 0x5, 0x6, 0xe6, 0x209a, 0x6, 0x7, 0x401, 0x9, 0x0, 0x2980, 0x3, 0x81, 0x4, 0x1, 0x7f, 0x9, 0x10000, 0x6, 0x10001, 0x0, 0x3ff, 0x9, 0x6, 0x7ff, 0x3, 0x6, 0x2, 0x80, 0xffffffff, 0x7901, 0x99, 0x997, 0x0, 0x10000, 0x80000000, 0x5, 0x3, 0x1, 0x400, 0xff, 0x7, 0x10001, 0x8, 0x6, 0xc47a, 0x5517d125, 0x8, 0x1, 0x215, 0x2, 0x4], [0x4, 0x8dd9, 0x4, 0x400, 0x3, 0xe7, 0x2, 0xfffffffc, 0x7, 0x0, 0x200, 0x401, 0x9, 0xc6, 0x6, 0x7, 0x4a, 0x3, 0xffffffff, 0x0, 0x7ff, 0x0, 0x7fffffff, 0x20, 0x9646b8, 0x5, 0x7, 0x6, 0x6, 0x2, 0x100, 0xffffffa2, 0x0, 0x81, 0x3ff, 0x9, 0x401, 0x8000, 0x6, 0x9, 0x2, 0xd3, 0xd9, 0xc60, 0x1, 0x3, 0x81, 0x1f, 0x5, 0x2000, 0x7ff, 0x6, 0x1, 0x100, 0xeb5d, 0x80, 0x9ebd, 0x0, 0x1ff, 0x800, 0x7ae, 0xa243, 0x6, 0x5], [0x8001, 0x6, 0x7fff, 0xffffffff, 0xfffffffd, 0x5, 0x10e, 0xc2dfce3, 0x784, 0x1f, 0x10001, 0xffffffff, 0x3, 0x3a4f, 0x1ff, 0x1000, 0x4, 0x4, 0x7, 0xffff0000, 0x488, 0x7, 0xfffffffb, 0x800, 0x3, 0xfffffff9, 0x80000001, 0x1, 0x44bf, 0x4, 0x1, 0x6, 0x7f, 0x7fffffff, 0xfffffe01, 0x0, 0x3, 0x39dc, 0x0, 0x4, 0x7ff, 0x5, 0x2, 0x6, 0x800, 0x80000000, 0x0, 0x7f1, 0x6, 0x9, 0x40, 0x9, 0x3f, 0x1, 0xfffffbff, 0x22, 0x9, 0x6, 0xffffffff, 0x1f, 0xcdde, 0xfffeffff, 0x7fff, 0x100], 0xc, ['\\\'+&\'[-`\\!#\x00']}, ["", "", ""]}, 0x42c}}, 0x44000) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f8, 0x300, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x24004001) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0, 0x0], 0x2, 0x8}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000800)={0x2}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000008c0)={&(0x7f0000000840), &(0x7f0000000880)=""/49, 0x31}) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000980)={&(0x7f0000000900), &(0x7f0000000940)=""/40, 0x28}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xffffffffffffff81) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, 0x3ed, 0x1, 0x70bd2d, 0x25dfdbfc, "2fd04e44153a7611bb6caf2b5d247d157312be4fbb8a7845f291896c7674ea58db9d112d79b77a063b9b94deb8fe466f6990be30a10be1905d89a3f236bd1ef8b95f15741931e5fc5fbadc5b4169e88d7b8c80e6688fc569e3e4ea6cf8300bd7b60154a0a5c7060e1fe0f022f0b40169ba8fb4ee0f850657ad", ["", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x814) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd0, 0x453, 0x10, 0x70bd2a, 0x25dfdbff, "298e3b6ec91a9ef826403356c7e0e8de197ad46f2610d6e52b2ad423f9456790be4ea09cbcd6e5fb0cfd6225c2f921efaf2ef621b37d7dd395e9b6941b65b0b7272d9fe62ad7cc5b600d54188d2abd7627a1867841212f78193d07a3179953047d508376b9d4ce8b99d5eeb9ffe944371b7efa1c6a0d4d5095546c2aa6a912edcda5351745177a3bc4c80d0f2f3311095e92d2fd66c09a37efde5e565abc177493bfa13223a11a9e876a6d2f51be4cae1c85ce0e4fe86a60701234eaba", ["", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x4048001}, 0x20008000) r5 = syz_open_dev$vcsn(&(0x7f0000000d00), 0x2, 0x202000) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000001d80)={&(0x7f0000000d40), &(0x7f0000000d80)=""/4096, 0x1000}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001dc0), 0x4802, 0x0) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000001e00)=""/45) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001f00)={&(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001e80)=""/92, 0x5c}) sendmsg$AUDIT_TRIM(r3, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x10, 0x3f6, 0x8, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}}, 0x4050) 05:53:03 executing program 7: ioprio_get$uid(0x0, 0xee00) r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) setfsuid(r1) r4 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) r5 = getgid() r6 = getuid() r7 = getgid() r8 = gettid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0x2, r2, r5, r6, r7, 0x1, 0x5}, 0x8, 0x4, 0x1, 0xffff, r8, 0xffffffffffffffff, 0x7f}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, r3, r7, r3, r7, 0x80, 0x800}, 0x0, 0xbd8f, 0x100, 0xedd, r8, r8, 0xff}) r9 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, r0) r10 = gettid() ptrace$getregset(0x4204, r10, 0x201, &(0x7f00000002c0)={&(0x7f0000000200)=""/172, 0xac}) shmctl$IPC_RMID(r9, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000300)) shmat(r9, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmctl$IPC_STAT(r9, 0x2, &(0x7f0000000340)=""/24) [ 122.296271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.299199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.301209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.307769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.315046] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.317505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.359906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.362060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.363931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.370221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.373642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.377250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.445446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.451946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.453469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.458022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.473409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.474595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.478305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.480406] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.483086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.484094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.486104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.489503] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.493984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.499377] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.501932] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.504105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.505631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.506127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.513199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.516502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.529868] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 122.537523] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.539396] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.552442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.377421] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 124.377529] Bluetooth: hci0: command 0x0409 tx timeout [ 124.439956] Bluetooth: hci1: command 0x0409 tx timeout [ 124.440552] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 124.567744] Bluetooth: hci7: command 0x0409 tx timeout [ 124.631966] Bluetooth: hci5: command 0x0409 tx timeout [ 124.632466] Bluetooth: hci6: command 0x0409 tx timeout [ 124.633384] Bluetooth: hci4: command 0x0409 tx timeout [ 126.424465] Bluetooth: hci0: command 0x041b tx timeout [ 126.487763] Bluetooth: hci1: command 0x041b tx timeout [ 126.615892] Bluetooth: hci7: command 0x041b tx timeout [ 126.681390] Bluetooth: hci5: command 0x041b tx timeout [ 126.681421] Bluetooth: hci4: command 0x041b tx timeout [ 126.682116] Bluetooth: hci6: command 0x041b tx timeout [ 128.472999] Bluetooth: hci0: command 0x040f tx timeout [ 128.536874] Bluetooth: hci1: command 0x040f tx timeout [ 128.664728] Bluetooth: hci7: command 0x040f tx timeout [ 128.727729] Bluetooth: hci4: command 0x040f tx timeout [ 128.728107] Bluetooth: hci5: command 0x040f tx timeout [ 128.728725] Bluetooth: hci6: command 0x040f tx timeout [ 129.816093] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 129.943740] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 130.520228] Bluetooth: hci0: command 0x0419 tx timeout [ 130.585682] Bluetooth: hci1: command 0x0419 tx timeout [ 130.711850] Bluetooth: hci7: command 0x0419 tx timeout [ 130.776050] Bluetooth: hci6: command 0x0419 tx timeout [ 130.776085] Bluetooth: hci5: command 0x0419 tx timeout [ 130.776464] Bluetooth: hci4: command 0x0419 tx timeout [ 134.808724] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 135.000117] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 137.810091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.820799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.829532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.855463] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.886555] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.907892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.991765] Bluetooth: hci2: command 0x0409 tx timeout [ 139.992378] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 142.039702] Bluetooth: hci2: command 0x041b tx timeout [ 144.089172] Bluetooth: hci2: command 0x040f tx timeout [ 144.792716] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 146.136692] Bluetooth: hci2: command 0x0419 tx timeout [ 149.655723] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 152.374328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.380752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.389981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.421695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.437252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.439909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.583746] Bluetooth: hci3: command 0x0409 tx timeout [ 156.631923] Bluetooth: hci3: command 0x041b tx timeout [ 158.679976] Bluetooth: hci3: command 0x040f tx timeout [ 160.727975] Bluetooth: hci3: command 0x0419 tx timeout [ 181.902584] syz-executor.0 (287) used greatest stack depth: 24152 bytes left [ 184.480378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.482414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.485753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.507009] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.509223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.512972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.756354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.779261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.788143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.790558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.792388] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.793592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.809607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.812362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.814409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.852140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.857127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 184.890919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.072039] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 186.583923] Bluetooth: hci1: command 0x0409 tx timeout [ 186.839942] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 186.840000] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 186.904892] Bluetooth: hci4: command 0x0409 tx timeout [ 186.969724] Bluetooth: hci5: command 0x0409 tx timeout [ 188.631739] Bluetooth: hci1: command 0x041b tx timeout [ 188.678464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.684172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.690536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.727034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.752691] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.764022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.951714] Bluetooth: hci4: command 0x041b tx timeout [ 189.015906] Bluetooth: hci5: command 0x041b tx timeout [ 189.845151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.847685] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.849350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.878357] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.904296] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 189.915289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.065741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.071389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.089300] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.186404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.193405] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 190.196121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.680714] Bluetooth: hci1: command 0x040f tx timeout [ 190.872099] Bluetooth: hci0: command 0x0409 tx timeout [ 191.001697] Bluetooth: hci4: command 0x040f tx timeout [ 191.064448] Bluetooth: hci5: command 0x040f tx timeout [ 191.960001] Bluetooth: hci6: command 0x0409 tx timeout [ 192.344252] Bluetooth: hci7: command 0x0409 tx timeout [ 192.728907] Bluetooth: hci1: command 0x0419 tx timeout [ 192.920863] Bluetooth: hci0: command 0x041b tx timeout [ 193.047835] Bluetooth: hci4: command 0x0419 tx timeout [ 193.112710] Bluetooth: hci5: command 0x0419 tx timeout [ 194.010849] Bluetooth: hci6: command 0x041b tx timeout [ 194.391898] Bluetooth: hci7: command 0x041b tx timeout [ 194.968709] Bluetooth: hci0: command 0x040f tx timeout [ 196.056703] Bluetooth: hci6: command 0x040f tx timeout [ 196.442711] Bluetooth: hci7: command 0x040f tx timeout [ 197.015706] Bluetooth: hci0: command 0x0419 tx timeout [ 198.103738] Bluetooth: hci6: command 0x0419 tx timeout [ 198.488568] Bluetooth: hci7: command 0x0419 tx timeout [ 199.387052] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.400963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.417855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.452142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.468446] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 199.488165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.559741] Bluetooth: hci2: command 0x0409 tx timeout [ 203.609770] Bluetooth: hci2: command 0x041b tx timeout [ 205.656435] Bluetooth: hci2: command 0x040f tx timeout [ 207.703912] Bluetooth: hci2: command 0x0419 tx timeout [ 216.345060] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 219.197154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.235220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.236433] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.249254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.281237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.312911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.399741] Bluetooth: hci3: command 0x0409 tx timeout [ 223.447775] Bluetooth: hci3: command 0x041b tx timeout [ 225.496709] Bluetooth: hci3: command 0x040f tx timeout [ 227.545701] Bluetooth: hci3: command 0x0419 tx timeout [ 246.788887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.799280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.804987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.814497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.838203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.841245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.884257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.893285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.901113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.918203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.923489] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 246.932932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.279745] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 248.919856] Bluetooth: hci4: command 0x0409 tx timeout [ 249.047764] Bluetooth: hci5: command 0x0409 tx timeout [ 250.967910] Bluetooth: hci4: command 0x041b tx timeout [ 251.095728] Bluetooth: hci5: command 0x041b tx timeout [ 251.327923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.337913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.340951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.375019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.390700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.396757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.376828] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 253.016707] Bluetooth: hci4: command 0x040f tx timeout [ 253.144769] Bluetooth: hci5: command 0x040f tx timeout [ 253.399899] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 253.463757] Bluetooth: hci1: command 0x0409 tx timeout [ 253.659937] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 255.065983] Bluetooth: hci4: command 0x0419 tx timeout [ 255.203735] Bluetooth: hci5: command 0x0419 tx timeout [ 255.512612] Bluetooth: hci1: command 0x041b tx timeout [ 256.453998] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.457928] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.459210] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.474157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.485885] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 256.487184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.705940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.727854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.741240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.801208] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.806100] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 256.810171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.176074] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 257.561714] Bluetooth: hci1: command 0x040f tx timeout [ 258.584114] Bluetooth: hci6: command 0x0409 tx timeout [ 258.903744] Bluetooth: hci7: command 0x0409 tx timeout [ 259.607782] Bluetooth: hci1: command 0x0419 tx timeout [ 260.299894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.306377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.326364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.364432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.390817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.395184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.631927] Bluetooth: hci6: command 0x041b tx timeout [ 260.952001] Bluetooth: hci7: command 0x041b tx timeout [ 262.487834] Bluetooth: hci0: command 0x0409 tx timeout [ 262.679860] Bluetooth: hci6: command 0x040f tx timeout [ 263.005722] Bluetooth: hci7: command 0x040f tx timeout [ 263.191715] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 264.536908] Bluetooth: hci0: command 0x041b tx timeout [ 264.727703] Bluetooth: hci6: command 0x0419 tx timeout [ 265.049709] Bluetooth: hci7: command 0x0419 tx timeout [ 266.072417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.095536] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.102011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.140638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.145717] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.148274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.583712] Bluetooth: hci0: command 0x040f tx timeout [ 268.248598] Bluetooth: hci2: command 0x0409 tx timeout [ 268.632217] Bluetooth: hci0: command 0x0419 tx timeout [ 270.295823] Bluetooth: hci2: command 0x041b tx timeout [ 272.343722] Bluetooth: hci2: command 0x040f tx timeout [ 274.391890] Bluetooth: hci2: command 0x0419 tx timeout [ 283.032721] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 285.882298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.883910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.888116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.905476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.912577] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.915036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.959746] Bluetooth: hci3: command 0x0409 tx timeout [ 290.008355] Bluetooth: hci3: command 0x041b tx timeout [ 292.058687] Bluetooth: hci3: command 0x040f tx timeout [ 294.103735] Bluetooth: hci3: command 0x0419 tx timeout [ 308.599206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.607901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.614101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.631215] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.636555] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.638217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.679812] Bluetooth: hci4: command 0x0409 tx timeout [ 310.871752] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 312.727713] Bluetooth: hci4: command 0x041b tx timeout [ 312.827439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.829542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.837801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.874480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.886587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.889919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.608585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.618084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.620006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.632907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.634645] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 313.637714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.775893] Bluetooth: hci4: command 0x040f tx timeout [ 314.967863] Bluetooth: hci1: command 0x0409 tx timeout [ 315.737004] Bluetooth: hci5: command 0x0409 tx timeout [ 316.823725] Bluetooth: hci4: command 0x0419 tx timeout [ 317.016918] Bluetooth: hci1: command 0x041b tx timeout [ 317.783898] Bluetooth: hci5: command 0x041b tx timeout [ 319.063731] Bluetooth: hci1: command 0x040f tx timeout [ 319.831777] Bluetooth: hci5: command 0x040f tx timeout [ 319.960731] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 320.217076] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 321.112084] Bluetooth: hci1: command 0x0419 tx timeout [ 321.713093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.719928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.721919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.729855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.747344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.751047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.880526] Bluetooth: hci5: command 0x0419 tx timeout [ 323.800153] Bluetooth: hci0: command 0x0409 tx timeout [ 324.569906] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 324.888094] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 325.848726] Bluetooth: hci0: command 0x041b tx timeout [ 327.735509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.753922] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.759057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.798918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.809300] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 327.816624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.865546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.870391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.871978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.882378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.891630] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.896569] Bluetooth: hci0: command 0x040f tx timeout [ 327.897426] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.111895] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 329.879755] Bluetooth: hci6: command 0x0409 tx timeout [ 329.943691] Bluetooth: hci0: command 0x0419 tx timeout [ 330.007780] Bluetooth: hci7: command 0x0409 tx timeout [ 331.927872] Bluetooth: hci6: command 0x041b tx timeout [ 332.057759] Bluetooth: hci7: command 0x041b tx timeout [ 333.976074] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 333.976356] Bluetooth: hci6: command 0x040f tx timeout [ 334.105681] Bluetooth: hci7: command 0x040f tx timeout [ 336.024726] Bluetooth: hci6: command 0x0419 tx timeout [ 336.151696] Bluetooth: hci7: command 0x0419 tx timeout [ 336.758225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.764318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.770170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.773322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.774650] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.777630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.840312] Bluetooth: hci2: command 0x0409 tx timeout [ 340.887728] Bluetooth: hci2: command 0x041b tx timeout [ 342.937883] Bluetooth: hci2: command 0x040f tx timeout [ 344.984907] Bluetooth: hci2: command 0x0419 tx timeout [ 349.783874] Bluetooth: hci3: Opcode 0x c03 failed: -110 2023/08/26 05:56:52 executor 5 failed 11 times: executor 5: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 05:56:52 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000004 RCX=ffffffff8113bcda RDX=ffff888017df3680 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff84854540 RSP=ffff88802c277750 R8 =0000000000000001 R9 =0000000000000005 R10=0000000000000005 R11=0000000000000001 R12=0000000000000005 R13=0000000000000001 R14=0000000000000008 R15=ffffffff8614f9dc RIP=ffffffff814d8ac1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc19fa9f80 CR3=00000000308d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff00ff000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802630f7e8 RCX=ffffffff8113bcda RDX=ffff888027e2b680 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff8614de0c RSP=ffff88802630f760 R8 =0000000000000001 R9 =0000000000000009 R10=0000000000000005 R11=0000000000000001 R12=0000000000000001 R13=0000000000000005 R14=ffff88802630f829 R15=ffffffff8614de10 RIP=ffffffff814d90c0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5630cab8e0 CR3=000000002b444000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000