syzkaller login: [ 69.045812] hrtimer: interrupt took 2409074 ns Warning: Permanently added '[localhost]:50495' (ECDSA) to the list of known hosts. 2024/10/31 04:37:48 fuzzer started 2024/10/31 04:37:48 dialing manager at localhost:45639 [ 72.932508] cgroup: Unknown subsys name 'net' [ 73.093094] cgroup: Unknown subsys name 'cpuset' [ 73.110318] cgroup: Unknown subsys name 'rlimit' 2024/10/31 04:38:06 syscalls: 204 2024/10/31 04:38:06 code coverage: enabled 2024/10/31 04:38:06 comparison tracing: enabled 2024/10/31 04:38:06 extra coverage: enabled 2024/10/31 04:38:06 setuid sandbox: enabled 2024/10/31 04:38:06 namespace sandbox: enabled 2024/10/31 04:38:06 Android sandbox: enabled 2024/10/31 04:38:06 fault injection: enabled 2024/10/31 04:38:06 leak checking: enabled 2024/10/31 04:38:06 net packet injection: enabled 2024/10/31 04:38:06 net device setup: enabled 2024/10/31 04:38:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 04:38:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 04:38:06 USB emulation: enabled 2024/10/31 04:38:06 hci packet injection: enabled 2024/10/31 04:38:06 wifi device emulation: enabled 2024/10/31 04:38:06 802.15.4 emulation: enabled 2024/10/31 04:38:06 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 04:38:08 starting 8 fuzzer processes 04:38:08 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rw\x00'}, 0x9) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000240)=""/184, 0xb8}], 0x3}, 0x401}, {{&(0x7f0000000340)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/17, 0x11}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001480)=""/126, 0x7e}], 0x1, &(0x7f0000001540)=""/141, 0x8d}, 0x1}], 0x3, 0xb714bd40cd764c08, &(0x7f00000016c0)={0x77359400}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001700)={0x0, 0x1, r0, 0x6}) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000001740)={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x80000000}, {0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00', 0x80}, 0x3, [0x9, 0xfffffffd, 0x8000, 0x5b5, 0x18e6, 0x2, 0x7, 0x6]}, 0x5c) r3 = socket$inet6(0xa, 0x800, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000017c0)=0x1, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x9, &(0x7f0000001800)={@empty, 0x0}, &(0x7f0000001840)=0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001880), r5) getpeername(r3, &(0x7f00000018c0)=@ax25={{0x3, @null}, [@null, @remote, @remote, @bcast, @rose, @netrom, @bcast, @default]}, &(0x7f0000001940)=0x80) recvmmsg(r2, &(0x7f0000003940)=[{{&(0x7f0000001980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/137, 0x89}], 0x2}, 0x7}, {{&(0x7f0000001b40)=@un=@abs, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/107, 0x6b}], 0x1, &(0x7f0000001c80)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002c80)=""/84, 0x54}, {&(0x7f0000002d00)=""/239, 0xef}, {&(0x7f0000002e00)=""/197, 0xc5}, {&(0x7f0000002f00)=""/85, 0x55}, {&(0x7f0000002f80)=""/133, 0x85}, {&(0x7f0000003040)=""/68, 0x44}, {&(0x7f00000030c0)=""/199, 0xc7}], 0x7, &(0x7f0000003240)=""/109, 0x6d}, 0x24}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/243, 0xf3}, {&(0x7f00000034c0)=""/137, 0x89}, {&(0x7f0000003580)=""/54, 0x36}], 0x4, &(0x7f0000003600)=""/3, 0x3}}, {{&(0x7f0000003640)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003840)=[{&(0x7f00000036c0)=""/85, 0x55}, {&(0x7f0000003740)=""/49, 0x31}, {&(0x7f0000003780)=""/173, 0xad}], 0x3, &(0x7f0000003880)=""/156, 0x9c}, 0x81}], 0x5, 0x40, &(0x7f0000003a80)={0x0, 0x989680}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003b40)={'ip6gre0\x00', &(0x7f0000003ac0)={'ip6_vti0\x00', r4, 0x29, 0x9, 0x40, 0x2, 0x69, @private2, @local, 0x0, 0x40, 0x80000000, 0x200}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000003b80)={@local, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x400, 0x400, 0x8, 0x40, r6}) 04:38:08 executing program 1: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) wait4(r2, 0x0, 0x4, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000200), 0x4) wait4(r2, &(0x7f0000000240), 0xa, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={r1, 0x1, r3, 0x5}) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x2, {{0xa, 0x4e23, 0x80000001, @rand_addr=' \x01\x00', 0x2}}}, 0x88) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x24}}, 0x4040) wait4(r2, 0x0, 0x2, 0x0) getuid() r4 = accept4(r3, &(0x7f00000005c0)=@phonet, &(0x7f0000000640)=0x80, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r4) ioprio_get$uid(0x3, r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) getuid() setsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000700)="5c46fda957d04135009caa2872f710b4f68a3563390d59a15859f23a767d018054a742d95fa61a4232495e6b58edc9b54a0814b4be0c83e7", 0x38) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0xc, 0x0, &(0x7f0000000740)=[@dead_binder_done], 0xe8, 0x0, &(0x7f0000000780)="67ec322b7bc91623509a9d8ef8e7df9ebfd54d223a6e40f613982cae7256e3d695e64d8a0ab0d79f9c0c6b999e0c3984d13d683278df529dadfd426c8e481f632e205eeacb4f573bfc8d345e5a657036f1406caa587fa0fd4941ac62e19f7f30177b790cfe9d7a12fae6eeaa4aa5e985b949566ba025d70efb0e747c2a38907396e7d3e0d7353053b55efd01a80eabe3a9dd4d32555360f2a64bce58c809a0aa38d4094d44be5b53d2ef92761762612e7724eb6de3e0ecbcfdf2e6a4e5c4cb8fb47109e4a06df57951bcf677a76133719eb293d4b7f7ef77d93def430ae828dd3038e6bf8ea5685c"}) 04:38:08 executing program 2: ptrace$setregset(0x4205, 0xffffffffffffffff, 0x3, &(0x7f0000000100)={&(0x7f0000000000)="00830d8e506c505e3848235bdbbc42ba9820802148c0b5069f1e877f56049e95e23b6f8d45db856cb0140a13d5c57a0adbb30d547a83edbe39e8ec56a213e94be4b7e687b4ea7d9b7b73c941b246e7153e41763cb8ae6346b0a92a87b8278b361448ea10ad5ee8bd802151bdbb0e4bdd32caf1c25394f4fdeee4c798471ebd687c927e2ee67f228a622557c949a236d79bd9ba1f2764cb666f1862bea14b102fba6dae167ffc201ba42344644252853af374a4bf51e6b2944829e46ae609ae2667805f53fb70da0b6fdd62b2f49042f747a828367e6198d9fe79ad9d98230eaab7569184", 0xe4}) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x8, 0x400000) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="56282e4671d633225f710bc58a302582f7649cf0df94956b899bded3907dee1143071a19077586c04bbc7bed7d0267d49cb38d8b10a90a0a75051364082b6a65c35cb227d4c6ef930870eb9e6adbdd650d2ea9dfaaf5adc0d422778c62c2cac27e42497d898c6bc3005abfb2e0a37b55f6b60de5096d83ea53024c869b6ffcd8d57e8156ef0e41beccf553c0c67e797b8f756235c3e2dd98be752d5357ce4534cd6bd2cc", 0xa4}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="029385d56b58baf0905c043183a0413c67070276ae2c6822e5a22d931ebc32601b4f5b1489b91d951e4a53b4076c5dcf1f289f272cc0598b902fcda6ac26ffbd8a245e74424a3b15f73bbd75afb6a65b085169485d3b35873b7c4da411fc64a11b7d3b96a101e17dc17795f743c09a9b57e879cf1d3b358c44e67ba3090908b90a39fb0b4a0fa82caf0a079932b292f07e7b402a923af2552742141b501720930c9582d2884e654769407840174ecc5193467a261e98fd2daeca286baab460f2aaf6e2666160a5b9b2d7c36511d8731464d288a61d8630a9c362608c5a41243cefa229af5947bd8d65080bda8cdc3a40be", 0xf1}], 0x3}, 0x800) getitimer(0x1, &(0x7f0000000440)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r0, 0x10000000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000500)={'security\x00', 0x0, [0xea5e, 0x0, 0xfff, 0x710a, 0x7fffffff]}, &(0x7f0000000580)=0x54) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x5932af0c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) r3 = epoll_create(0x6) r4 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {r4, r6}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000006c0)=0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000700)={0x0, 0x9, 0x1}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0xc) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000007c0)) 04:38:08 executing program 3: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x10000, 0x181083) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) getgroups(0x5, &(0x7f0000000380)=[0x0, 0xee00, 0x0, 0xee00, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x0, r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000480)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd=r0, 0x1, &(0x7f00000004c0)="f866c553f22f698a473ce3635722fd25e86fbc554a4489f55f24e096fe6a5c6f9d8d59906c441e58b41723bf4aa0c1576450463129a7fb306f76b2b1752a1cb07f7c448b555e92c23cbe97cdf7a1876c3c2a3f7000d6126c697065dbc7179f4f07981e23086de78b85c69210d81513a27e7319e49a2b91cd21e221b8318ce2d71b02b98baf8a22b2ab7492a5a53324c0cf240289a6539ec7073c49405f856eb571d8087d9c259f0257714b67633fb1", 0xaf, 0x3, 0x1}, 0x5) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) openat$cgroup_subtree(r1, &(0x7f0000000640), 0x2, 0x0) accept4(r5, &(0x7f0000000680)=@nfc, &(0x7f0000000700)=0x80, 0x100800) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xef, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9a, 0xa0, 0x9e, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x0, 0xa4, {0x9, 0x21, 0x7, 0xd, 0x1, {0x22, 0xf}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x28, 0x1f}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x9, 0x9, 0xc4, 0x10, 0xff}, 0xa8, &(0x7f00000007c0)={0x5, 0xf, 0xa8, 0x5, [@generic={0x12, 0x10, 0x0, "6896ae117b620b5d0c380297d79fa7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x40, 0x78}, @generic={0x4f, 0x10, 0xb, "b538b4cea5c319197111540eb1dbb400e13e67defbee6d207cb0c894772335d9b6d6b8d0977685d47bc9ba944c4f23e4eab33546e9adc3b0c61b0a7f5b1325eafd43a9c676bec2538843415d"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "620a10579515a64e545f611a0c5112dc"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x459, 0x0, 0x81, [0xff0000, 0xc0, 0x3f0f, 0x30, 0xc000, 0xff0000]}]}, 0x4, [{0x2d, &(0x7f0000000880)=@string={0x2d, 0x3, "8f30b22e3d35677b096cf11c7595d328c13f97806ef86a78000514ebfd4e7d5b98fbbe56308cad03369ce2"}}, {0x9, &(0x7f00000008c0)=@string={0x9, 0x3, "1ab112f62b5b0a"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x820}}]}) 04:38:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000000), 0x0, 0x40, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x800}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x5, 0x0, 0x1f, 0x1, 0xf87}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, {0xa, 0x4e23, 0x8000, @local, 0x3}, 0x7, [0x1, 0x2e, 0x8f, 0xee, 0x3, 0x69, 0x3]}, 0x5c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x4, 0x8000, 0x1000, 0x3, 0x200]}, &(0x7f0000000240)=0x54) mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x0, 0x11, r2, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000280)='%,*!@})#{\x00', &(0x7f00000002c0)='./file0\x00', r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xa4, 0xfffff081, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7800, 0x10, 0x5e1b1654, 0x40}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@loopback, 0x2, r4}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000004c0)={@private1}, &(0x7f0000000500)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000580), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000005c0)={0x7fff, 0x0, 0x7f, 0x0, 0xffffffe0}, 0xc) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x40, 0x0) openat$cgroup_devices(r6, &(0x7f0000000640)='devices.allow\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) [ 91.702596] audit: type=1400 audit(1730349488.381:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:38:08 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r1) r2 = socket$inet(0x2, 0xa, 0x400) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'ip_vti0\x00', r3, 0x1, 0x8000, 0x66ff, 0x1, {{0x8, 0x4, 0x0, 0x28, 0x20, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @broadcast, {[@generic={0x86, 0xc, "a3f791cf79b30a601779"}]}}}}}) syz_io_uring_setup(0xdd5, &(0x7f0000000300)={0x0, 0x6fe, 0x2, 0x3, 0x25a}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0xfffff035) getuid() sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x1) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={0x0, @isdn={0x22, 0x5, 0x1, 0x80, 0xff}, @tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x1}}, @ethernet={0x6}, 0xffe0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)='xfrm0\x00', 0x100000000, 0x8, 0x25}) r6 = syz_open_dev$vcsn(&(0x7f0000000600), 0x2, 0x208283) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) getuid() r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', r4, 0x4, 0x4c, 0x99, 0x200, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x40, 0x5, 0x170}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000880)={@dev={0xfe, 0x80, '\x00', 0x12}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x86a, 0x9, 0x1, 0x100, 0x2, 0x20098, r9}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, r7, {r8}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000940)={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8, 0x81, 0x9, 0x100, 0x7, 0x400040, r0}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, &(0x7f00000009c0)) write$snapshot(0xffffffffffffffff, &(0x7f0000000a40)="c30c35a82c5a311cb31c0c7db59620d0485c63f21beb91d1d1656c1523a13f5f02d7cefb99af892bb3c2f27a8d2280a2d867a621d3a63d98", 0x38) 04:38:08 executing program 6: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f0000000180)={0x1c, &(0x7f0000000000)={0x0, 0x14, 0xed, "0b675ffbbf499debaf2bfa6ef4d03eccc084129e99fdefdef61c21bedac6063266e73b7705f1ff58eec2c454bc7066f15a471936b05509d8aa7596d0723355c8f1ce25aaedde7ac5bf9a01cbab5efaf48b5839eb4eb1b7abadc9f7fc4f041e85658fa2c460bbab9f65e786df33539366f8d527f56d374412b623a459dace1247de8a6cb2c4cabad437db82b2befc66ef5d23134e4e863f09b41d78b86233be198b0938e4b3fc9fc3c977ca01ecab3507f8ad59ed352681261931dd3e6d5cbd6e57737752e26869be173d8458828f323f2b57fc0d2ed780517a2a368e0bd7b60f95747c872d614ee9863ff6290f"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xe9}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x0, 0x24, 0xb1, {0xb1, 0x24, "b694d9633c101e95e7b79c43b353fe9519b86f5ae7a4ef702b59ec5ba0214cb274181aa76aa02dc46bd0f3c7313c5df69cc93d377f4301e95966efb358a60ec052f2f538255ae7e7a9183f59852f2cee0792d5a8bcaa0fb2e1b5bf8b618567d42095c272f57d712104b69b227b9c39ed2028e1a502dc006adb4d3d1537e591eb0581b494986d2ea0edb39ba8b6f56a79f4e68bbb95f345e7a856ee61d631d17152f88a29e49a1e26352e97d3b886f3"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000300)={0x0, 0x13, 0x79, "52c071bce2b9716a109a3c8cd3d389076c8af37a5c9fbb693b0bd6309f97424ed146dc99eff92b1341088ccf939cf112747186b9c6570a2df63b22311f2f1bc984679d0f8d1b660b5727dfb7afd4c62c4a71ac5e63e51e96dfd5151025f9edf39ae8ddffa1b2ca60dda64c4552c8a10d57f350dabc7eceaa26"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}}) getgroups(0x2, &(0x7f0000000440)=[0x0, 0x0]) getgroups(0x2, &(0x7f0000000480)=[r1, r1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x71, 0x100, 0x1cc4, 0x4200002}) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540), 0x4) r4 = socket(0x38b2bbe6573265bc, 0xa, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r4) syz_io_uring_setup(0x5f1, &(0x7f00000005c0)={0x0, 0xe498, 0x25, 0x3, 0x2d}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_io_uring_setup(0x5cba, &(0x7f00000006c0)={0x0, 0x7364, 0x1, 0x1, 0x33}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000740), &(0x7f0000000780)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000800)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x9, 0x80, &(0x7f00000007c0)="f7f5b9ffbb8d7cad96d23b4fc8dbb9513adaadb1fd5060cc37ccc3fbac15c65e2fcd1c21d53b1918128ba532bf60fc36e99e4e5be279", 0x36, 0xb, 0x0, {0x0, r7}}, 0x0) getitimer(0x2, &(0x7f0000000840)) getitimer(0x2, &(0x7f0000000880)) getgroups(0x2, &(0x7f00000008c0)=[r2, 0xee01]) getgroups(0x2, &(0x7f0000000900)=[r0, r1]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r4, {0xee00, r1}}, './file0\x00'}) getgroups(0x5, &(0x7f00000009c0)=[r8, r10, 0x0, r1, r11]) getgroups(0x7, &(0x7f0000000a40)=[r9, 0x0, r12, r1, r11, r11, 0xee01]) 04:38:08 executing program 7: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0xffffffffffffffff, 0x3, 0x0, 0x1, {0x0, r1}}, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x128, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/197, 0xc5, 0x2, 0x30}, @fda={0x66646185, 0x4, 0x1, 0x20}, @fda={0x66646185, 0x5, 0x2, 0x17}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x8, 0x1, 0x1a}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x400}, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, 0x1}, @clear_death, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/141, 0x8d, 0x2, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/191, 0xbf, 0x2}}, &(0x7f0000000580)={0x0, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x1}, @free_buffer], 0x2e, 0x0, &(0x7f0000000700)="ada852f71b5075b852192fdf4d01cc79d3e004c4b0c2041d3ace1ccbabaf2c9d5c7873d9061c79ffe745bf3821cd"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000840)={0x18, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, 0x1}, @register_looper], 0x75, 0x0, &(0x7f00000007c0)="2a5d1e31e8c0dc01dd1b0bcb722afe8d1747324423abdbd38d77d42588cadb9d3cb0825ec1dab2573d39659b815e3fb09698ce0c99713a262122d0f2c1c7a1036419160d0b8c0c968fed9b0c55bd1d8ecc71fec68cceaf31a6679996a1cc53a024e8a746f878488dfa90d2a7649ea627457d0a29a9"}) r5 = syz_io_uring_setup(0x3940, &(0x7f0000000880)={0x0, 0xbe5d, 0x0, 0x1, 0x298}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x1010, r5, 0x10000000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000b00)={0x8, 0x0, &(0x7f00000009c0)=[@decrefs={0x40046307, 0x1}], 0xdc, 0x0, &(0x7f0000000a00)="ea35f4c2086d8ea75c56fda577b8797669484fe21f312dbe42d7233bb97c017ebf9a10f1d1bf2ada7608b4d9dcb3909372e522ec280009ad0810070a0f5bec35afdcbe5faf8df7240b4297c42178793257ea8b015b04f0e5a516b95126af3892d285935aba94b3fde91d3cb1cbb70ffde0e68c74e98221122d8a8f750dfe8cfffb63b90cdfdc94003e85c37c9625df4472d5a02e4925fb9b57d6a1fd044ecd1f6aaddb28c63c2f58f431603949992c21e1ca6a0bb13be22bed28a082aa33b1481b6372a63b433f5ad9e64c78205ca42a0c186aabd7546af4e75ab2a4"}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000b40), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x1, 0x709300) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x88, 0x0, 0x400, 0x70bd28, 0x3f, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0xc0c0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x8c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x407}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x24008050) io_uring_setup(0x1b94, &(0x7f0000000f00)={0x0, 0x811, 0x2, 0x1, 0x16f}) [ 93.198981] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.202080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.205296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.217361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.221632] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.223417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.272283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.274324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.276021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.284104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.285004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.291196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.293713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.299660] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.308059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.309265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.319501] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.322332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.338497] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.340409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.341983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.345108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.348018] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.352186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.353282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.357970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.371325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.371343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.372852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.378163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.378992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.383018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.398129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.404070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.405993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.406121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.408159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.409304] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.409333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.410071] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.411033] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.416046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.417044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.428024] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.429193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.438331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.440715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.444136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.293252] Bluetooth: hci0: command tx timeout [ 95.357047] Bluetooth: hci1: command tx timeout [ 95.421425] Bluetooth: hci2: command tx timeout [ 95.485997] Bluetooth: hci6: command tx timeout [ 95.487093] Bluetooth: hci5: command tx timeout [ 95.548915] Bluetooth: hci4: command tx timeout [ 95.551107] Bluetooth: hci7: command tx timeout [ 95.740976] Bluetooth: hci3: command tx timeout [ 97.341011] Bluetooth: hci0: command tx timeout [ 97.404957] Bluetooth: hci1: command tx timeout [ 97.469022] Bluetooth: hci2: command tx timeout [ 97.533037] Bluetooth: hci5: command tx timeout [ 97.534953] Bluetooth: hci6: command tx timeout [ 97.596947] Bluetooth: hci4: command tx timeout [ 97.598686] Bluetooth: hci7: command tx timeout [ 97.788873] Bluetooth: hci3: command tx timeout [ 99.388903] Bluetooth: hci0: command tx timeout [ 99.453051] Bluetooth: hci1: command tx timeout [ 99.517281] Bluetooth: hci2: command tx timeout [ 99.581967] Bluetooth: hci5: command tx timeout [ 99.583706] Bluetooth: hci6: command tx timeout [ 99.644905] Bluetooth: hci4: command tx timeout [ 99.646611] Bluetooth: hci7: command tx timeout [ 99.837103] Bluetooth: hci3: command tx timeout [ 101.437563] Bluetooth: hci0: command tx timeout [ 101.501030] Bluetooth: hci1: command tx timeout [ 101.565037] Bluetooth: hci2: command tx timeout [ 101.628941] Bluetooth: hci6: command tx timeout [ 101.630233] Bluetooth: hci5: command tx timeout [ 101.694289] Bluetooth: hci4: command tx timeout [ 101.695903] Bluetooth: hci7: command tx timeout [ 101.885905] Bluetooth: hci3: command tx timeout [ 153.142140] syz-executor.0 (280) used greatest stack depth: 23616 bytes left [ 155.927051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.928713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.932316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.937107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.944313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.946647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.947997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.951216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.952472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.953190] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.964073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.969415] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.972950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.977635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.979688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.981840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.990909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.992537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.995667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.998407] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.999506] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.001128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.007217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.008321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.009637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.010919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.013062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.017424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.023211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.033715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.056035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.060276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.062125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.063143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.065106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.066883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.067709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.069487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.079312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.081201] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.082270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.089730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.095548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.100063] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.107004] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.113062] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.120528] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.123303] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.013361] Bluetooth: hci0: command tx timeout [ 158.076880] Bluetooth: hci3: command tx timeout [ 158.077617] Bluetooth: hci2: command tx timeout [ 158.078661] Bluetooth: hci1: command tx timeout [ 158.141915] Bluetooth: hci6: command tx timeout [ 158.205138] Bluetooth: hci4: command tx timeout [ 158.270873] Bluetooth: hci7: command tx timeout [ 158.525900] Bluetooth: hci5: command tx timeout [ 160.061414] Bluetooth: hci0: command tx timeout [ 160.125895] Bluetooth: hci1: command tx timeout [ 160.126355] Bluetooth: hci3: command tx timeout [ 160.126878] Bluetooth: hci2: command tx timeout [ 160.189867] Bluetooth: hci6: command tx timeout [ 160.253957] Bluetooth: hci4: command tx timeout [ 160.317825] Bluetooth: hci7: command tx timeout [ 160.573022] Bluetooth: hci5: command tx timeout [ 162.110946] Bluetooth: hci0: command tx timeout [ 162.172983] Bluetooth: hci2: command tx timeout [ 162.174435] Bluetooth: hci3: command tx timeout [ 162.175625] Bluetooth: hci1: command tx timeout [ 162.237965] Bluetooth: hci6: command tx timeout [ 162.301908] Bluetooth: hci4: command tx timeout [ 162.364855] Bluetooth: hci7: command tx timeout [ 162.621820] Bluetooth: hci5: command tx timeout [ 164.157891] Bluetooth: hci0: command tx timeout [ 164.220934] Bluetooth: hci3: command tx timeout [ 164.221436] Bluetooth: hci1: command tx timeout [ 164.222159] Bluetooth: hci2: command tx timeout [ 164.285837] Bluetooth: hci6: command tx timeout [ 164.348832] Bluetooth: hci4: command tx timeout [ 164.413859] Bluetooth: hci7: command tx timeout [ 164.669877] Bluetooth: hci5: command tx timeout [ 218.197351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.197366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.199125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.200902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.203083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.204521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.213255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.215652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.216918] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.218081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.218213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.220040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.287058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.288382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.289680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.294165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.298109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.302993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.315109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.318184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.324179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.332333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.340366] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.341580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.384335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.417228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.456891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.471168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.472410] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.474545] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.476015] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.476907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.478110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.479022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.482844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.486641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.488464] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.503433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.505266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.537563] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.546307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.560864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.571329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.573270] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.584189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.624016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.659144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.686504] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.285156] Bluetooth: hci1: command tx timeout [ 220.285245] Bluetooth: hci0: command tx timeout [ 220.349865] Bluetooth: hci2: command tx timeout [ 220.413828] Bluetooth: hci3: command tx timeout [ 220.540906] Bluetooth: hci4: command tx timeout [ 220.541052] Bluetooth: hci6: command tx timeout [ 220.668876] Bluetooth: hci5: command tx timeout [ 220.796835] Bluetooth: hci7: command tx timeout [ 222.332905] Bluetooth: hci0: command tx timeout [ 222.332921] Bluetooth: hci1: command tx timeout [ 222.396794] Bluetooth: hci2: command tx timeout [ 222.473790] Bluetooth: hci3: command tx timeout [ 222.588850] Bluetooth: hci6: command tx timeout [ 222.589351] Bluetooth: hci4: command tx timeout [ 222.716884] Bluetooth: hci5: command tx timeout [ 222.844842] Bluetooth: hci7: command tx timeout [ 224.381911] Bluetooth: hci0: command tx timeout [ 224.381941] Bluetooth: hci1: command tx timeout [ 224.444983] Bluetooth: hci2: command tx timeout [ 224.509893] Bluetooth: hci3: command tx timeout [ 224.636963] Bluetooth: hci4: command tx timeout [ 224.637020] Bluetooth: hci6: command tx timeout [ 224.764848] Bluetooth: hci5: command tx timeout [ 224.892957] Bluetooth: hci7: command tx timeout [ 226.428861] Bluetooth: hci1: command tx timeout [ 226.429426] Bluetooth: hci0: command tx timeout [ 226.493811] Bluetooth: hci2: command tx timeout [ 226.557859] Bluetooth: hci3: command tx timeout [ 226.685012] Bluetooth: hci6: command tx timeout [ 226.687165] Bluetooth: hci4: command tx timeout [ 226.817850] Bluetooth: hci5: command tx timeout [ 226.941991] Bluetooth: hci7: command tx timeout [ 280.464801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.466036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.467972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.469530] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.471415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.473478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.476061] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.478912] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.485113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.485528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.490483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.498545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.581234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.586014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.589170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.593872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.598440] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.599484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.655591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.669163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.672951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.677377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.691618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.694951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.761399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.762940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.767142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.775076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.777444] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.783386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.785190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.786972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.794827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.799959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.815118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.817074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.828706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.833841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.837030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.846128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.847656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.861164] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.863041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.900068] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.906925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.928056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.997018] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.006089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.556840] Bluetooth: hci1: command tx timeout [ 282.557845] Bluetooth: hci0: command tx timeout [ 282.622800] Bluetooth: hci2: command tx timeout [ 282.749821] Bluetooth: hci3: command tx timeout [ 282.876875] Bluetooth: hci4: command tx timeout [ 282.940833] Bluetooth: hci5: command tx timeout [ 283.006868] Bluetooth: hci6: command tx timeout [ 283.069798] Bluetooth: hci7: command tx timeout [ 284.604877] Bluetooth: hci0: command tx timeout [ 284.604905] Bluetooth: hci1: command tx timeout [ 284.670799] Bluetooth: hci2: command tx timeout [ 284.797154] Bluetooth: hci3: command tx timeout [ 284.927795] Bluetooth: hci4: command tx timeout [ 284.988931] Bluetooth: hci5: command tx timeout [ 285.052802] Bluetooth: hci6: command tx timeout [ 285.117869] Bluetooth: hci7: command tx timeout [ 286.652923] Bluetooth: hci1: command tx timeout [ 286.652971] Bluetooth: hci0: command tx timeout [ 286.716874] Bluetooth: hci2: command tx timeout [ 286.844816] Bluetooth: hci3: command tx timeout [ 286.973188] Bluetooth: hci4: command tx timeout [ 287.036925] Bluetooth: hci5: command tx timeout [ 287.100904] Bluetooth: hci6: command tx timeout [ 287.164872] Bluetooth: hci7: command tx timeout [ 288.700927] Bluetooth: hci0: command tx timeout [ 288.701265] Bluetooth: hci1: command tx timeout [ 288.765017] Bluetooth: hci2: command tx timeout [ 288.893942] Bluetooth: hci3: command tx timeout [ 289.020828] Bluetooth: hci4: command tx timeout [ 289.085854] Bluetooth: hci5: command tx timeout [ 289.149860] Bluetooth: hci6: command tx timeout [ 289.213807] Bluetooth: hci7: command tx timeout [ 343.026785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.030550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.032974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.033901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.035110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.040977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.041464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.044177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.045044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.047336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.049120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.050338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.052374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.053995] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.055559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.056992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.057748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.060972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.062927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.064030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.069443] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.071072] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.072055] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.073631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.131243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.141274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.142337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.145299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.147127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.149598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.150935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.156911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.159937] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.171332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.191263] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.213039] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.214221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.219939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.222360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.223497] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.225993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.227423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.228400] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.234887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.239820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.261213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.266898] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.270228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.084826] Bluetooth: hci0: command tx timeout [ 345.149055] Bluetooth: hci1: command tx timeout [ 345.150152] Bluetooth: hci2: command tx timeout [ 345.150992] Bluetooth: hci3: command tx timeout [ 345.212808] Bluetooth: hci5: command tx timeout [ 345.276921] Bluetooth: hci4: command tx timeout [ 345.340829] Bluetooth: hci7: command tx timeout [ 345.340966] Bluetooth: hci6: command tx timeout [ 347.134053] Bluetooth: hci0: command tx timeout [ 347.196963] Bluetooth: hci1: command tx timeout [ 347.197222] Bluetooth: hci3: command tx timeout [ 347.197655] Bluetooth: hci2: command tx timeout [ 347.260828] Bluetooth: hci5: command tx timeout [ 347.324792] Bluetooth: hci4: command tx timeout [ 347.388842] Bluetooth: hci6: command tx timeout [ 347.390126] Bluetooth: hci7: command tx timeout [ 349.180816] Bluetooth: hci0: command tx timeout [ 349.244786] Bluetooth: hci3: command tx timeout [ 349.247758] Bluetooth: hci2: command tx timeout [ 349.248220] Bluetooth: hci1: command tx timeout [ 349.309795] Bluetooth: hci5: command tx timeout [ 349.373908] Bluetooth: hci4: command tx timeout [ 349.438881] Bluetooth: hci7: command tx timeout [ 349.439400] Bluetooth: hci6: command tx timeout [ 351.228788] Bluetooth: hci0: command tx timeout [ 351.293859] Bluetooth: hci1: command tx timeout [ 351.294390] Bluetooth: hci2: command tx timeout [ 351.295322] Bluetooth: hci3: command tx timeout [ 351.357237] Bluetooth: hci5: command tx timeout [ 351.420843] Bluetooth: hci4: command tx timeout [ 351.484803] Bluetooth: hci6: command tx timeout [ 351.484938] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:43:18 Registers: info registers vcpu 0 RAX=ffffea0001b78280 RBX=ffff888034527c58 RCX=ffffffff8169b0e8 RDX=ffff888029328000 RSI=ffffffff8169b0f3 RDI=0000000000000007 RBP=ffff88800907c000 RSP=ffff888034527b08 R8 =0000000000000001 R9 =ffff888029328a38 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001b78280 R13=0000000000000000 R14=0000000000000001 R15=ffff888034527d98 RIP=ffffffff8169b0f6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f032d8df540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f032da13570 CR3=0000000031b18000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000002 RCX=ffffffff811a87f3 RDX=0000000000001a87 RSI=0000000000001a87 RDI=ffffffff86c25208 RBP=ffff88806cf09ad0 RSP=ffff88806cf09a08 R8 =0000000000000000 R9 =ffff88806cf09ab8 R10=000000000003c001 R11=0000000000007fa2 R12=ffff88806cf09ad8 R13=ffff88806cf09ac0 R14=ffff88806cf09ab9 R15=ffff88806cf09a78 RIP=ffffffff81149040 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8ce1371008 CR3=00000000242ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000