syzkaller login: [ 62.730664] systemd-udevd (120) used greatest stack depth: 24608 bytes left Warning: Permanently added '[localhost]:37327' (ECDSA) to the list of known hosts. 2024/11/01 03:44:15 fuzzer started 2024/11/01 03:44:15 dialing manager at localhost:45639 [ 78.795879] cgroup: Unknown subsys name 'net' [ 78.894669] cgroup: Unknown subsys name 'cpuset' [ 78.917472] cgroup: Unknown subsys name 'rlimit' [ 89.316843] hrtimer: interrupt took 2855812 ns 2024/11/01 03:44:38 syscalls: 200 2024/11/01 03:44:38 code coverage: enabled 2024/11/01 03:44:38 comparison tracing: enabled 2024/11/01 03:44:38 extra coverage: enabled 2024/11/01 03:44:38 setuid sandbox: enabled 2024/11/01 03:44:38 namespace sandbox: enabled 2024/11/01 03:44:38 Android sandbox: enabled 2024/11/01 03:44:38 fault injection: enabled 2024/11/01 03:44:38 leak checking: enabled 2024/11/01 03:44:38 net packet injection: enabled 2024/11/01 03:44:38 net device setup: enabled 2024/11/01 03:44:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/01 03:44:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/01 03:44:38 USB emulation: enabled 2024/11/01 03:44:38 hci packet injection: enabled 2024/11/01 03:44:38 wifi device emulation: enabled 2024/11/01 03:44:38 802.15.4 emulation: enabled 2024/11/01 03:44:39 fetching corpus: 0, signal 0/0 (executing program) 2024/11/01 03:44:40 starting 8 fuzzer processes 03:44:40 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x1, 0x0, 0x800000, 0x2, 0x9}, 0x2, 0xa, 0x2}) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r0}}, 0x723) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/33) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000180)=""/41) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x50200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000200)={{0x0, 0x3, 0x4, 0x2, 0x11}, 0x6, 0x400}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa5e8}]}, 0x1c}}, 0xc0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x520, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000480)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x414280) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000500)={0x5, 0x82fd, 0x5, 0x0, 0xe}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x84, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xb76}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000001}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4d4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x8044047) 03:44:40 executing program 2: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/168) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x280000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x14, 0x6, 0x805}, {{}, 0x0, 0x1, 0x3}, {{0x0, 0x2710}, 0x1f, 0x7, 0x9}, {{r1, r2/1000+10000}, 0x0, 0x5a, 0x8000}, {{}, 0x0, 0x8001}], 0x78) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/221) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x149100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000300)={{0x2, 0x1, 0x1, 0x1, 0x2}, 0x0, 0x5, 0x8}) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x6, @any, 0x20, 0x926932330d5b8901}, 0xe) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000003c0)={0x7ff, 0x6, 0x3, 0x7, 0x7fff, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000400)=""/92) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000480)={{0x2, 0x3, 0x0, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000004c0)=""/23) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000500)=""/223) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x8c2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000680)={{0x0, 0x3, 0x3, 0x1, 0x6}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 03:44:40 executing program 1: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/203) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x1, 0x0, 0x9}}) getgid() ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000140)=""/206) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x22000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0x900) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a80), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000ac0)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b40), 0x1110c0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000405}, 0x4810) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000cc0)=0x488) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d00), 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000d40)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x101000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) 03:44:40 executing program 3: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x28}}, 0x14) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x416200, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000014}, 0x20000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r5) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20020000) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x86a9}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffe}]}, 0x64}}, 0x24000040) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000e00), r4) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r7, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x80, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000014) syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), r6) 03:44:40 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x240) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket$inet6(0xa, 0x1, 0x3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2, 0x0, 0x1, 0x200}}) socketpair(0x11, 0x2, 0x20, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x3, @any, 0xf1, 0x2}, 0xe) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x1cd, 0x2, 0x3}, 0x2, 0x6349}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000240)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x82400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000300)={0x4, 0x5a0, 0x7, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x30) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x220000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000500)={0x4, 0x2, 0x40, 0x0, 0x5}) [ 103.074394] audit: type=1400 audit(1730432680.682:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:44:40 executing program 5: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x56}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8890}, 0x44041) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4044040}, 0x50) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x81) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000809) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2b}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x12}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60c7fb97}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4bc3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb031}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff13}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8050) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xff, 0x29}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4c005) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000880)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) socketpair(0x18, 0x3, 0x4, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b80)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x80000001) gettid() 03:44:40 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x5c, 0x8000, 0x12345, {0x0, r1}}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/142, 0x8e}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0x1ff, @local}, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xff}, 0x100, [0xffff, 0x2, 0x8, 0x2, 0x1, 0x4, 0x1, 0x101]}, 0x5c) socketpair(0x1e, 0x4, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000340), r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x240500, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e22, 0xac, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd93}, {0xa, 0x4e20, 0xe000, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, 0x5, [0x80, 0x0, 0x8001, 0x6, 0x4, 0x6, 0x1, 0x7f]}, 0x5c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @xdp={0x2c, 0x2, 0x0, 0x2e}, @llc={0x1a, 0x6, 0x2, 0x40, 0x9, 0x81}, 0x101, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)='veth1_to_hsr\x00', 0x6, 0x8000, 0x400}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40001}, 0x20040840) socketpair(0x11, 0x1, 0x151f, &(0x7f0000000840)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x48800) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r2) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000b00)={&(0x7f0000000980), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x84, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) 03:44:40 executing program 7: ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000000)=""/196) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x800, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000140)={0x56, 0x8c7, 0x5, {0x7, 0x5}, {0xff, 0x1}, @cond=[{0x1ff, 0x2, 0x1f, 0xfff7, 0x7ff, 0x1}, {0x81, 0x0, 0x20, 0x7fff, 0x5, 0x8}]}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/94) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x5, 0x20, 0x80, 0xfd, 0x0, 0x10000, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x10000, 0x800, 0x0, 0x4, 0x8, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x800, 0x40) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000300)=""/7) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000340)=[0x8000, 0x2]) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x9, 0x100) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000400)=0x3) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000440)=0x3) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000480)=""/116) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000500)=""/4096) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001500)=""/144) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f00000015c0)=""/208) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) [ 104.458626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.461365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.464380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.469194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.477194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.480104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.482709] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.484611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.486528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.491286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.502580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.505316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.529870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.533134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.535266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.538971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.543252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.545610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.548933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.551381] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.554993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.564321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.569733] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.571986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.578842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.581017] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.584469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.591526] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.593719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.595110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.596615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.600004] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.602723] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.604086] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 104.606416] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.606447] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.618756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.621424] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.624831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.629639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.636020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.649427] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.653320] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.657160] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.660748] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.675888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.681987] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.684285] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.544677] Bluetooth: hci0: command tx timeout [ 106.544685] Bluetooth: hci1: command tx timeout [ 106.607787] Bluetooth: hci2: command tx timeout [ 106.672285] Bluetooth: hci3: command tx timeout [ 106.673014] Bluetooth: hci6: command tx timeout [ 106.736152] Bluetooth: hci7: command tx timeout [ 106.736234] Bluetooth: hci5: command tx timeout [ 106.737304] Bluetooth: hci4: command tx timeout [ 108.591553] Bluetooth: hci1: command tx timeout [ 108.593256] Bluetooth: hci0: command tx timeout [ 108.655115] Bluetooth: hci2: command tx timeout [ 108.721419] Bluetooth: hci3: command tx timeout [ 108.723161] Bluetooth: hci6: command tx timeout [ 108.783274] Bluetooth: hci4: command tx timeout [ 108.784747] Bluetooth: hci7: command tx timeout [ 108.785404] Bluetooth: hci5: command tx timeout [ 110.639474] Bluetooth: hci1: command tx timeout [ 110.640688] Bluetooth: hci0: command tx timeout [ 110.703162] Bluetooth: hci2: command tx timeout [ 110.767178] Bluetooth: hci6: command tx timeout [ 110.767717] Bluetooth: hci3: command tx timeout [ 110.831188] Bluetooth: hci4: command tx timeout [ 110.831731] Bluetooth: hci7: command tx timeout [ 110.832908] Bluetooth: hci5: command tx timeout [ 112.689081] Bluetooth: hci1: command tx timeout [ 112.690562] Bluetooth: hci0: command tx timeout [ 112.751181] Bluetooth: hci2: command tx timeout [ 112.815191] Bluetooth: hci3: command tx timeout [ 112.816516] Bluetooth: hci6: command tx timeout [ 112.880297] Bluetooth: hci5: command tx timeout [ 112.881837] Bluetooth: hci7: command tx timeout [ 112.881930] Bluetooth: hci4: command tx timeout [ 164.683057] syz-executor.3 (285) used greatest stack depth: 24544 bytes left [ 166.976148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.982554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.984735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.989522] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.993196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.995694] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.998373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.008083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.010080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.016737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.018685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.023139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.114862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.146895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.169173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.176357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.183128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.185442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.199378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.201568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.206715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.215878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.222622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.233304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.259618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.266158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.270342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.273249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.282282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.294336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.306124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.309680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.311740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.314442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.321284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.331919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.334454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.337388] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.341522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.344442] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.346728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.355255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 167.358224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.373310] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.375260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.377832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.379538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.385414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.072112] Bluetooth: hci1: command tx timeout [ 169.074198] Bluetooth: hci0: command tx timeout [ 169.263315] Bluetooth: hci2: command tx timeout [ 169.327155] Bluetooth: hci3: command tx timeout [ 169.391240] Bluetooth: hci5: command tx timeout [ 169.455183] Bluetooth: hci4: command tx timeout [ 169.456948] Bluetooth: hci7: command tx timeout [ 169.457655] Bluetooth: hci6: command tx timeout [ 171.120197] Bluetooth: hci1: command tx timeout [ 171.120744] Bluetooth: hci0: command tx timeout [ 171.314155] Bluetooth: hci2: command tx timeout [ 171.375127] Bluetooth: hci3: command tx timeout [ 171.440206] Bluetooth: hci5: command tx timeout [ 171.503166] Bluetooth: hci4: command tx timeout [ 171.504530] Bluetooth: hci6: command tx timeout [ 171.506161] Bluetooth: hci7: command tx timeout [ 173.167781] Bluetooth: hci1: command tx timeout [ 173.169204] Bluetooth: hci0: command tx timeout [ 173.359732] Bluetooth: hci2: command tx timeout [ 173.424848] Bluetooth: hci3: command tx timeout [ 173.488083] Bluetooth: hci5: command tx timeout [ 173.552202] Bluetooth: hci4: command tx timeout [ 173.553537] Bluetooth: hci6: command tx timeout [ 173.554916] Bluetooth: hci7: command tx timeout [ 175.216293] Bluetooth: hci0: command tx timeout [ 175.218125] Bluetooth: hci1: command tx timeout [ 175.408106] Bluetooth: hci2: command tx timeout [ 175.472083] Bluetooth: hci3: command tx timeout [ 175.537383] Bluetooth: hci5: command tx timeout [ 175.600116] Bluetooth: hci6: command tx timeout [ 175.601460] Bluetooth: hci7: command tx timeout [ 175.602786] Bluetooth: hci4: command tx timeout [ 229.368541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.376459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.384481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.408606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.416952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.431449] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.432403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.435858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.437372] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.442059] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.446859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.450584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.498808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.500600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.504438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.508037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.509768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.511321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.630221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.640458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.647574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.654402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.658525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.661628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.663125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.674275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.676222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.685510] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.687639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.698714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.760392] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.764368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.766663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.769450] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.774606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.777547] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.779665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.781882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.789182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.792880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.801328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.826256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.831432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.836573] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.840449] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.859480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.889508] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.921330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.472206] Bluetooth: hci1: command tx timeout [ 231.473358] Bluetooth: hci0: command tx timeout [ 231.599236] Bluetooth: hci2: command tx timeout [ 231.727144] Bluetooth: hci4: command tx timeout [ 231.792093] Bluetooth: hci3: command tx timeout [ 231.856150] Bluetooth: hci6: command tx timeout [ 231.919165] Bluetooth: hci5: command tx timeout [ 232.047966] Bluetooth: hci7: command tx timeout [ 233.519149] Bluetooth: hci1: command tx timeout [ 233.519724] Bluetooth: hci0: command tx timeout [ 233.648362] Bluetooth: hci2: command tx timeout [ 233.775132] Bluetooth: hci4: command tx timeout [ 233.839121] Bluetooth: hci3: command tx timeout [ 233.903215] Bluetooth: hci6: command tx timeout [ 233.968108] Bluetooth: hci5: command tx timeout [ 234.097126] Bluetooth: hci7: command tx timeout [ 235.567145] Bluetooth: hci1: command tx timeout [ 235.567673] Bluetooth: hci0: command tx timeout [ 235.695244] Bluetooth: hci2: command tx timeout [ 235.823180] Bluetooth: hci4: command tx timeout [ 235.889221] Bluetooth: hci3: command tx timeout [ 235.952866] Bluetooth: hci6: command tx timeout [ 236.016110] Bluetooth: hci5: command tx timeout [ 236.143131] Bluetooth: hci7: command tx timeout [ 237.615212] Bluetooth: hci0: command tx timeout [ 237.615760] Bluetooth: hci1: command tx timeout [ 237.743231] Bluetooth: hci2: command tx timeout [ 237.871150] Bluetooth: hci4: command tx timeout [ 237.935196] Bluetooth: hci3: command tx timeout [ 238.000088] Bluetooth: hci6: command tx timeout [ 238.064086] Bluetooth: hci5: command tx timeout [ 238.191101] Bluetooth: hci7: command tx timeout [ 291.836545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.838205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.844858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.893031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.902429] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.903587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.905624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.907700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.910695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.922291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.927770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.929163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.032810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.034866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.036476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.038775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.044478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 292.045958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.063667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.072858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.075449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.079717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.082886] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 292.085326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.101712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.104859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.108255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.119714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.137348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.147193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.179333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.185304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.189368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.191386] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.197009] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 292.208325] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.210783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.214696] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 292.217772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.222308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.226417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.229152] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.232847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.235222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.237430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.243454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.260531] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 292.263220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 293.935202] Bluetooth: hci0: command tx timeout [ 293.999277] Bluetooth: hci1: command tx timeout [ 294.127129] Bluetooth: hci2: command tx timeout [ 294.128740] Bluetooth: hci3: command tx timeout [ 294.255237] Bluetooth: hci5: command tx timeout [ 294.256195] Bluetooth: hci4: command tx timeout [ 294.319145] Bluetooth: hci6: command tx timeout [ 294.320226] Bluetooth: hci7: command tx timeout [ 295.983092] Bluetooth: hci0: command tx timeout [ 296.048171] Bluetooth: hci1: command tx timeout [ 296.175136] Bluetooth: hci2: command tx timeout [ 296.175175] Bluetooth: hci3: command tx timeout [ 296.304353] Bluetooth: hci4: command tx timeout [ 296.304584] Bluetooth: hci5: command tx timeout [ 296.367106] Bluetooth: hci7: command tx timeout [ 296.367152] Bluetooth: hci6: command tx timeout [ 298.032206] Bluetooth: hci0: command tx timeout [ 298.095138] Bluetooth: hci1: command tx timeout [ 298.224074] Bluetooth: hci2: command tx timeout [ 298.224578] Bluetooth: hci3: command tx timeout [ 298.351123] Bluetooth: hci4: command tx timeout [ 298.351157] Bluetooth: hci5: command tx timeout [ 298.415080] Bluetooth: hci7: command tx timeout [ 298.416205] Bluetooth: hci6: command tx timeout [ 300.080074] Bluetooth: hci0: command tx timeout [ 300.144345] Bluetooth: hci1: command tx timeout [ 300.271179] Bluetooth: hci3: command tx timeout [ 300.271250] Bluetooth: hci2: command tx timeout [ 300.399232] Bluetooth: hci5: command tx timeout [ 300.399403] Bluetooth: hci4: command tx timeout [ 300.463090] Bluetooth: hci6: command tx timeout [ 300.463128] Bluetooth: hci7: command tx timeout [ 354.115248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.119219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.123828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.133080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.134733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.145051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.177904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.189483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.198436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.204202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.206225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.207625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.241563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.243545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.244763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.250729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.255718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.265040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.366087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.383276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.384331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.390244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.412351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.412565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.417524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.426763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.428703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.430070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.431270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 354.439926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.443735] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 354.445120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.447624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.467847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.469601] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 354.473187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.567217] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.584368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.592750] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.607437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.620264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.637303] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.675606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.710247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.721224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 354.723182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.732074] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 354.791525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.207095] Bluetooth: hci0: command tx timeout [ 356.273022] Bluetooth: hci1: command tx timeout [ 356.335273] Bluetooth: hci2: command tx timeout [ 356.527098] Bluetooth: hci5: command tx timeout [ 356.528157] Bluetooth: hci3: command tx timeout [ 356.592036] Bluetooth: hci4: command tx timeout [ 356.847133] Bluetooth: hci6: command tx timeout [ 356.848370] Bluetooth: hci7: command tx timeout [ 358.255565] Bluetooth: hci0: command tx timeout [ 358.319134] Bluetooth: hci1: command tx timeout [ 358.383068] Bluetooth: hci2: command tx timeout [ 358.576121] Bluetooth: hci5: command tx timeout [ 358.577583] Bluetooth: hci3: command tx timeout [ 358.639266] Bluetooth: hci4: command tx timeout [ 358.895189] Bluetooth: hci6: command tx timeout [ 358.895725] Bluetooth: hci7: command tx timeout [ 360.303116] Bluetooth: hci0: command tx timeout [ 360.367316] Bluetooth: hci1: command tx timeout [ 360.431061] Bluetooth: hci2: command tx timeout [ 360.623078] Bluetooth: hci3: command tx timeout [ 360.623648] Bluetooth: hci5: command tx timeout [ 360.687097] Bluetooth: hci4: command tx timeout [ 360.943137] Bluetooth: hci6: command tx timeout [ 360.943693] Bluetooth: hci7: command tx timeout [ 362.351039] Bluetooth: hci0: command tx timeout [ 362.416452] Bluetooth: hci1: command tx timeout [ 362.479122] Bluetooth: hci2: command tx timeout [ 362.671726] Bluetooth: hci3: command tx timeout [ 362.673121] Bluetooth: hci5: command tx timeout [ 362.735047] Bluetooth: hci4: command tx timeout [ 362.991083] Bluetooth: hci6: command tx timeout [ 362.991620] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:49:44 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=00007f19754189c7 RCX=1ffffffff0c7dda0 RDX=0000000000000000 RSI=ffffffff81009920 RDI=0000000000000007 RBP=00007f19754189c7 RSP=ffff8880236bf650 R8 =ffffffff86bee0fa R9 =ffff8880236bf6e8 R10=00007f1975418000 R11=00000000000c2f81 R12=0000000000000000 R13=0000000000000000 R14=ffff888015703700 R15=ffffffff81bb2276 RIP=ffffffff8121e8dd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1975329540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c30775a4c8 CR3=000000002547a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000020000 RCX=ffffffff812fadc5 RDX=fffffbfff0fda9d5 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff8880192a8000 RSP=ffff8880356df8d8 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=0000000000000001 R12=ffff8880192a8b08 R13=ffffffff85c14f00 R14=0000000000000016 R15=0000000000000002 RIP=ffffffff812fadcd RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4109d74540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4109e91710 CR3=0000000035b10000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000