Warning: Permanently added '[localhost]:22606' (ECDSA) to the list of known hosts. 2025/01/19 11:22:36 fuzzer started 2025/01/19 11:22:37 dialing manager at localhost:44245 syzkaller login: [ 62.590555] cgroup: Unknown subsys name 'net' [ 62.710267] cgroup: Unknown subsys name 'cpuset' [ 62.752079] cgroup: Unknown subsys name 'rlimit' [ 68.959209] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.227421] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 11:22:54 syscalls: 205 2025/01/19 11:22:54 code coverage: enabled 2025/01/19 11:22:54 comparison tracing: enabled 2025/01/19 11:22:54 extra coverage: enabled 2025/01/19 11:22:54 setuid sandbox: enabled 2025/01/19 11:22:54 namespace sandbox: enabled 2025/01/19 11:22:54 Android sandbox: enabled 2025/01/19 11:22:54 fault injection: enabled 2025/01/19 11:22:54 leak checking: enabled 2025/01/19 11:22:54 net packet injection: enabled 2025/01/19 11:22:54 net device setup: enabled 2025/01/19 11:22:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 11:22:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 11:22:54 USB emulation: enabled 2025/01/19 11:22:54 hci packet injection: enabled 2025/01/19 11:22:54 wifi device emulation: enabled 2025/01/19 11:22:54 802.15.4 emulation: enabled 2025/01/19 11:22:54 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 11:22:57 starting 8 fuzzer processes 11:22:57 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x13, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={r2, r3+60000000}, 0x1, 0x0, 0x1}, 0xfffffffc) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x24004000) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x37c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x35c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "af0ecc627b559184e858fb9c0efb39499c259dbf6d2592acc79efdbb20b0dee53522a4a8ec150340faa87b39e7997088c1e2ce9af9bc43f912f7f6aa858aafb7e201f0f8233e9ad50b5813b45be9dd471ab4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "c3a583fbd80f296f67013239adca355a2d1031cfa6995d592d051afb05de1a8720a9449885b8b58d60caa1527a880e1b690f7ce916c796b4b4480d56c0e6855d0cbf8a0c263854fd831579938cf1eeadbdd1fb2d063ad8e096bedb4eb1036e9e40351a631edb96d69d0d12d0b2090502ec2f98b3582b2cc7428546b2c43dc761f43925cb4acd4802a7d471c69eb57c2086ee021cfb"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.cpu/syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%:*\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.cpu/syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "afe4fc4eb72797b6eb4608911121c3f8d628e915330d79c5bfc84ab4b517e81b49af40061f4e025f5d20e4e32ef0a8bce5dbfb404a34cf320a4087a0a0194f4d47f04729212e6c859c63a7310b9fb671e26182b8a78cf020521da56194a2f73b300123c121e6210c7e9c76f1859934585dced9d2f4d4540f89b59818"}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "3d9af00321c1148be7fa822d83b381db9a447d5364a51458f08c44581df91e5f42e6e72de7864a05bb1f477d909666e243ac17a8158386dcc44be66a08a2a353c0ea4352a86f2235bcb7d87a35a081585fb98fc7a7a44662a533520c55d01a95bb482aa9f3f9981490134e4af50b55a13e64c45e626e827cb2875e5a70283ff3e2d906e0c22c5a215172a074231fce2a6c0a69213713a0010d9f46c56ad14f970f6f7340cc03d2e6019eb1382d61aed5a02eb3dd1ffe8d645abcc3c5af840b97de69de8b6aea95291c1d773e27611df9f94d2b0e5e0538f48ed3f84e24fd23a79e49199cc515ec9ceaed643b776802"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r6 = syz_io_uring_setup(0xbea, &(0x7f0000000700)={0x0, 0xd798, 0x0, 0x3, 0x48}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) io_uring_setup(0x264f, &(0x7f0000000800)={0x0, 0xc5a5, 0xc, 0x3, 0x225, 0x0, r6}) r7 = accept4(r0, &(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x80, 0x800) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r8, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000000}]}, 0x24}}, 0x4000010) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048001}, 0x48080) 11:22:57 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1, &(0x7f0000000080)=""/18, 0x12}, 0x10060) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x58) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x48004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000002c0), &(0x7f0000000300)=0x10) r3 = pidfd_getfd(r0, r1, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}}, 0x20000050) r5 = socket(0x25, 0x800, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/module/uhci_hcd', 0x12800, 0xb8) write$P9_RSTAT(r6, &(0x7f0000000900)={0x4d, 0x7d, 0x2, {0x0, 0x46, 0xb9, 0x7, {0x0, 0x0, 0x2}, 0xc010000, 0x93, 0x9398, 0x7, 0xa, ',-\x95+#\xdb}}!*', 0x5, '[^[.[', 0x4, 'gtp\x00'}}, 0x4d) write$P9_RVERSION(r3, &(0x7f0000000980)={0x13, 0x65, 0xffff, 0xed, 0x6, '9P2000'}, 0x13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) getsockopt$sock_timeval(r7, 0x1, 0x56, &(0x7f0000000a00), &(0x7f0000000a40)=0x10) syz_io_uring_setup(0x1f5, &(0x7f0000000a80)={0x0, 0x5d69, 0x20, 0x1, 0x39f, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b00), &(0x7f0000000b40)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000c40)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x2, &(0x7f0000000b80)="767ce897c029cab1a12b769e8657119bcf2626a5f165085b1b36019fba597bcaef38b7790a802c19759a990d04ca07d49b2c1dddb237a1f639b02310aa028a271ffd47378464dc20431d3301fd2c4c242cd446c84494bb67d11b79652b3440630c7ad410d400982c0ba0c39291384782164964285ddedd7b8fdb27d3182852e106b2e9588a0ca8f3ac341c50f028e191a1176d8f2f0f420ad8ea46f6a34051448b80504b8ae15a29805107f67513b374709a77", 0x9, 0x0, 0x1, {0x2}}, 0x80000001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)) 11:22:57 executing program 2: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0xc8) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xeb) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0xaf, 0x101400) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x81, 0x444080) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x8000000) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x1}, @void, @ipv4=@igmp={{0x6, 0x4, 0x1, 0x0, 0x1020, 0x68, 0x0, 0x80, 0x2, 0x0, @rand_addr=0x64010101, @remote, {[@end]}}, {0x15, 0x0, 0x0, @private=0xa010101, "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"}}}, 0x1024) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001340)) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001380)=""/80, 0x50}, {&(0x7f0000001400)=""/209, 0xd1}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/21, 0x15}, {&(0x7f0000001640)=""/185, 0xb9}], 0x5, &(0x7f0000001780)=""/110, 0x6e}, 0x100) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001840), 0x1930c0, 0x0) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000001880)=0x5) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/power/pm_wakeup_irq', 0x40, 0x80) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000001900)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/97, 0x61, 0x0, &(0x7f00000019c0)=""/90, 0x5a}, &(0x7f0000001a80)=0x40) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001ac0), 0x10000, 0x0) write$P9_RREMOVE(r6, &(0x7f0000001b00)={0x7, 0x7b, 0x2}, 0x7) [ 82.068678] audit: type=1400 audit(1737285777.261:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:22:57 executing program 3: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x0, 0x4, 0x4}}, 0x14) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x400002) syz_open_dev$usbmon(&(0x7f0000000080), 0x3ff, 0x200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r2, 0x2, r0, 0x4}) syz_io_uring_setup(0x696e, &(0x7f00000001c0)={0x0, 0x331c, 0x2, 0x0, 0x7, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$P9_RATTACH(r1, &(0x7f0000000340)={0x14, 0x69, 0x1, {0x20, 0x4, 0x7}}, 0x14) write$P9_RCLUNK(r1, &(0x7f0000000380)={0x7, 0x79, 0x1}, 0x7) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) openat$cgroup_procs(r5, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000480)) write$P9_RVERSION(r1, &(0x7f00000004c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r1, 0x0, &(0x7f0000000500)="8c92842a62ae9fe3df4bf43b5580e28792878706ff5089", 0x17, 0x40044}, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x600902, 0x0) openat$cgroup_procs(r7, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) 11:22:57 executing program 4: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/slab_common', 0x8040, 0x2) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0xfffffff7) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x9) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101180, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000180)={0x7, 0x7f, 0x1}, 0x7) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000001c0)) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0xc40b) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) write$P9_RATTACH(r2, &(0x7f0000000280)={0x14, 0x69, 0x2, {0x2, 0x4, 0x4}}, 0x14) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RATTACH(r3, &(0x7f0000000340)={0x14, 0x69, 0x1, {0x80, 0x0, 0x2}}, 0x14) write$P9_RLOPEN(r1, &(0x7f0000000380)={0x18, 0xd, 0x2, {{0x80, 0x3, 0x7}, 0x4}}, 0x18) write$P9_RREAD(r2, &(0x7f00000003c0)={0x17, 0x75, 0x1, {0xc, "f039fdb45e864db02fcd3d03"}}, 0x17) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000400)) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000440)=0xeb) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000480)) write$P9_RLOPEN(r3, &(0x7f00000004c0)={0x18, 0xd, 0x1, {{0x4, 0x2, 0x5}, 0x81}}, 0x18) 11:22:57 executing program 5: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x920, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048010}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r4 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@can={0x1d, 0x0}, &(0x7f0000000340)=0x80, 0x2bced75450780ea1) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x30000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x10008052) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ca0}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x18000) syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r4) socketpair(0x1a, 0x6, 0x4, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x1000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x44f3}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r7}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r10}, {0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/bus/nvmem', 0x1000, 0x240) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000980)={0x0, 0x2, r8, 0x8001, 0x80000}) r12 = pidfd_getfd(r6, r7, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000005080)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005040)={&(0x7f0000004f40)={0xdc, r13, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 11:22:57 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000016c0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/151, 0x97}, {&(0x7f0000001240)=""/154, 0x9a}, {&(0x7f0000001300)=""/55, 0x37}], 0x5, &(0x7f00000013c0)=""/46, 0x2e}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001400)=""/36, 0x24}, {&(0x7f0000001440)=""/134, 0x86}, {&(0x7f0000001500)=""/79, 0x4f}], 0x3, &(0x7f00000015c0)=""/234, 0xea}, 0x2}], 0x2, 0x40000001, 0x0) clock_gettime(0x0, &(0x7f0000003540)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000034c0)=[{{&(0x7f0000001740)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000017c0)=""/115, 0x73}, {&(0x7f0000001840)=""/207, 0xcf}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/26, 0x1a}, {&(0x7f0000002980)=""/29, 0x1d}, {&(0x7f00000029c0)=""/157, 0x9d}, {&(0x7f0000002a80)=""/52, 0x34}, {&(0x7f0000002ac0)}, {&(0x7f0000002b00)=""/124, 0x7c}], 0x9, &(0x7f0000002c40)=""/113, 0x71}, 0x2}, {{&(0x7f0000002cc0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002d40)=""/145, 0x91}, {&(0x7f0000002e00)=""/113, 0x71}, {&(0x7f0000002e80)=""/190, 0xbe}, {&(0x7f0000002f40)=""/127, 0x7f}, {&(0x7f0000002fc0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/220, 0xdc}, {&(0x7f00000031c0)=""/184, 0xb8}, {&(0x7f0000003280)=""/178, 0xb2}], 0x8, &(0x7f00000033c0)=""/243, 0xf3}, 0x3}], 0x2, 0x40010003, &(0x7f0000003580)={r3, r4+10000000}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = accept4(r5, &(0x7f00000035c0)=@isdn, &(0x7f0000003640)=0x80, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000003680)={0x0, 'sit0\x00', {}, 0xbb81}) accept(r6, 0x0, &(0x7f00000036c0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000003700)) accept(0xffffffffffffffff, &(0x7f0000003740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000037c0)=0x80) r7 = socket$packet(0x11, 0x2, 0x300) getsockname(r7, &(0x7f0000003800)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000003880)=0x80) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f00000038c0)=@buf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003900)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000003a00)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040050) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000003a40)=""/104) 11:22:57 executing program 7: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x9d, 0x75, 0x1, {0x92, "3bbfa75b3d9a8b1db9879adf92ecfc8da39d8fb620dfff28a0c891b334ab290f6bdd0f084ac20b7b124fe2a78482a7c192d22c5cfa9aed5ac94e5409471c37a22f398986f340c605b670162b69bde5112795743f148aefe477211de9f2357e0fccb62adb8878918d0ebd9eb6b1b9cb498259f9623a8480f74db39502a8d8bbfb29d248d07a4fae27e06e9c75faa9aa768585"}}, 0x9d) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x40, 0x0, 0x3}}, 0x14) shmget$private(0x0, 0x13000, 0x8, &(0x7f0000fea000/0x13000)=nil) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x0, 0x1, 0x1}}, 0x14) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x4, 0x4, 0x7}}, 0x14) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/pcmcia_socket', 0x200000, 0xd0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000200)={0x8, 0x78, 0x100000, {r0}}, 0x20) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0x67fe, &(0x7f0000ff8000/0x3000)=nil, 0x2) write$P9_RREMOVE(r0, &(0x7f00000002c0)={0x7, 0x7b, 0x1}, 0x7) accept4(r0, 0x0, &(0x7f0000000300), 0x80000) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fed000/0x1000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r0, 0x9}) r1 = getuid() write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x60, {0x4, 0x1, 0x3}, 0x80, r1, 0x0, 0xef28, 0x8, 0x4, 0x2, 0x101, 0x8, 0x6, 0x58, 0x2, 0x100000001, 0x7, 0xf48, 0x6, 0x1, 0x1}}, 0xa0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x54}}, 0x20004000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000005c0)={0x0, 0x3, r2, 0x36}) socketpair(0x1d, 0x801, 0xfffffb6c, &(0x7f0000000600)) pkey_mprotect(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x2000001, 0xffffffffffffffff) [ 83.320146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.323534] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.326223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.332071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.338540] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.341055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.384965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.391320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.395476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.403212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.410228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.412077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.646094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.654374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.661162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.666507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.672548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.693897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.703241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.713483] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.719418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.722539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.724445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.737999] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.739909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.752169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.756505] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.798600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.821031] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.822994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.865120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.875996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.895170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.899502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.919280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.922953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.932181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.950164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.955176] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.964332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.967590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.986122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.989250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.991942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.994136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.997424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.002517] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.028206] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.406004] Bluetooth: hci0: command tx timeout [ 85.467926] Bluetooth: hci1: command tx timeout [ 85.787998] Bluetooth: hci2: command tx timeout [ 85.853053] Bluetooth: hci3: command tx timeout [ 85.915904] Bluetooth: hci4: command tx timeout [ 86.110854] Bluetooth: hci7: command tx timeout [ 86.110961] Bluetooth: hci6: command tx timeout [ 86.111061] Bluetooth: hci5: command tx timeout [ 87.451924] Bluetooth: hci0: command tx timeout [ 87.515944] Bluetooth: hci1: command tx timeout [ 87.836176] Bluetooth: hci2: command tx timeout [ 87.899872] Bluetooth: hci3: command tx timeout [ 87.964861] Bluetooth: hci4: command tx timeout [ 88.155967] Bluetooth: hci5: command tx timeout [ 88.156104] Bluetooth: hci6: command tx timeout [ 88.156205] Bluetooth: hci7: command tx timeout [ 89.499885] Bluetooth: hci0: command tx timeout [ 89.563879] Bluetooth: hci1: command tx timeout [ 89.883863] Bluetooth: hci2: command tx timeout [ 89.948110] Bluetooth: hci3: command tx timeout [ 90.012930] Bluetooth: hci4: command tx timeout [ 90.204884] Bluetooth: hci7: command tx timeout [ 90.205463] Bluetooth: hci6: command tx timeout [ 90.206068] Bluetooth: hci5: command tx timeout [ 91.548820] Bluetooth: hci0: command tx timeout [ 91.612834] Bluetooth: hci1: command tx timeout [ 91.933798] Bluetooth: hci2: command tx timeout [ 91.997815] Bluetooth: hci3: command tx timeout [ 92.060842] Bluetooth: hci4: command tx timeout [ 92.252975] Bluetooth: hci5: command tx timeout [ 92.253574] Bluetooth: hci6: command tx timeout [ 92.253663] Bluetooth: hci7: command tx timeout [ 143.454956] syz-executor.6 (283) used greatest stack depth: 23392 bytes left [ 145.683206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.685900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.689483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.697193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.702662] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.705370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.773368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.776911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.779371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.787227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.790832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.793084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.800841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.809535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.811695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.817530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.820545] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.824253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.897325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.929462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.933422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.935739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.943434] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.951001] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.954417] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.985470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.005490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.018185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.060136] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.062920] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.074469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.089076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.113454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.122957] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.127955] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.130044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.132709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.157909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.178227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.179348] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.193297] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.196559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.203189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.207523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.212432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.214526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.216945] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.218647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.740888] Bluetooth: hci0: command tx timeout [ 147.867863] Bluetooth: hci2: command tx timeout [ 147.867902] Bluetooth: hci1: command tx timeout [ 148.061826] Bluetooth: hci4: command tx timeout [ 148.123846] Bluetooth: hci3: command tx timeout [ 148.188986] Bluetooth: hci5: command tx timeout [ 148.252850] Bluetooth: hci6: command tx timeout [ 148.316104] Bluetooth: hci7: command tx timeout [ 149.789803] Bluetooth: hci0: command tx timeout [ 149.915957] Bluetooth: hci1: command tx timeout [ 149.917517] Bluetooth: hci2: command tx timeout [ 150.107898] Bluetooth: hci4: command tx timeout [ 150.172614] Bluetooth: hci3: command tx timeout [ 150.237889] Bluetooth: hci5: command tx timeout [ 150.302969] Bluetooth: hci6: command tx timeout [ 150.366249] Bluetooth: hci7: command tx timeout [ 151.837015] Bluetooth: hci0: command tx timeout [ 151.963874] Bluetooth: hci2: command tx timeout [ 151.963902] Bluetooth: hci1: command tx timeout [ 152.155847] Bluetooth: hci4: command tx timeout [ 152.220969] Bluetooth: hci3: command tx timeout [ 152.284929] Bluetooth: hci5: command tx timeout [ 152.349082] Bluetooth: hci6: command tx timeout [ 152.411803] Bluetooth: hci7: command tx timeout [ 153.883809] Bluetooth: hci0: command tx timeout [ 154.011844] Bluetooth: hci1: command tx timeout [ 154.012923] Bluetooth: hci2: command tx timeout [ 154.203853] Bluetooth: hci4: command tx timeout [ 154.269144] Bluetooth: hci3: command tx timeout [ 154.331872] Bluetooth: hci5: command tx timeout [ 154.397778] Bluetooth: hci6: command tx timeout [ 154.460827] Bluetooth: hci7: command tx timeout [ 207.787091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.789885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.790181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.792187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.796258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.798979] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.800151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.811608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.823659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.838140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.840198] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.841419] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.910961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.920017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.922074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.943082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.946539] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.952178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.047666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.049248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.050393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.056548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.060495] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.063916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.175310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.183578] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.189574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.193097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.194219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.198214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.203134] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.203668] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.207983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.234091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.242505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.253142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.257598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.260969] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.261338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.261629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.265182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.266715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.268396] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.269325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.283244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.306131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.322037] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.325638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.821004] Bluetooth: hci0: command tx timeout [ 209.885085] Bluetooth: hci1: command tx timeout [ 210.011927] Bluetooth: hci2: command tx timeout [ 210.142169] Bluetooth: hci3: command tx timeout [ 210.460272] Bluetooth: hci5: command tx timeout [ 210.461254] Bluetooth: hci4: command tx timeout [ 210.524822] Bluetooth: hci6: command tx timeout [ 210.716910] Bluetooth: hci7: command tx timeout [ 211.868226] Bluetooth: hci0: command tx timeout [ 211.932045] Bluetooth: hci1: command tx timeout [ 212.059944] Bluetooth: hci2: command tx timeout [ 212.187998] Bluetooth: hci3: command tx timeout [ 212.507918] Bluetooth: hci5: command tx timeout [ 212.508063] Bluetooth: hci4: command tx timeout [ 212.571943] Bluetooth: hci6: command tx timeout [ 212.763858] Bluetooth: hci7: command tx timeout [ 213.915878] Bluetooth: hci0: command tx timeout [ 213.980091] Bluetooth: hci1: command tx timeout [ 214.108018] Bluetooth: hci2: command tx timeout [ 214.236031] Bluetooth: hci3: command tx timeout [ 214.555865] Bluetooth: hci5: command tx timeout [ 214.555978] Bluetooth: hci4: command tx timeout [ 214.620369] Bluetooth: hci6: command tx timeout [ 214.812833] Bluetooth: hci7: command tx timeout [ 215.963837] Bluetooth: hci0: command tx timeout [ 216.028865] Bluetooth: hci1: command tx timeout [ 216.156012] Bluetooth: hci2: command tx timeout [ 216.283846] Bluetooth: hci3: command tx timeout [ 216.603894] Bluetooth: hci4: command tx timeout [ 216.604020] Bluetooth: hci5: command tx timeout [ 216.667880] Bluetooth: hci6: command tx timeout [ 216.859829] Bluetooth: hci7: command tx timeout [ 270.447277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.452524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.458393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.468031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.476947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.481187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.518177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.521961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.529434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.536134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.538269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.539410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.728565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.729342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.735940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.736478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.738394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.739011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.740788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.744801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.747673] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.754207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.761051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.762606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.763798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.771385] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.773641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.776325] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.786045] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.797059] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.797135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.802426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.853200] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.856835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.875569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.880234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.888179] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.900591] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.909154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.912698] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.923330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.929116] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.929972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.939911] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.956126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.964177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.978187] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.021168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.540818] Bluetooth: hci0: command tx timeout [ 272.603925] Bluetooth: hci1: command tx timeout [ 272.796113] Bluetooth: hci3: command tx timeout [ 272.859970] Bluetooth: hci5: command tx timeout [ 272.860071] Bluetooth: hci4: command tx timeout [ 273.051967] Bluetooth: hci2: command tx timeout [ 273.052046] Bluetooth: hci7: command tx timeout [ 273.180922] Bluetooth: hci6: command tx timeout [ 274.588929] Bluetooth: hci0: command tx timeout [ 274.652226] Bluetooth: hci1: command tx timeout [ 274.844802] Bluetooth: hci3: command tx timeout [ 274.908561] Bluetooth: hci4: command tx timeout [ 274.909286] Bluetooth: hci5: command tx timeout [ 275.102791] Bluetooth: hci2: command tx timeout [ 275.102814] Bluetooth: hci7: command tx timeout [ 275.227818] Bluetooth: hci6: command tx timeout [ 276.637095] Bluetooth: hci0: command tx timeout [ 276.699843] Bluetooth: hci1: command tx timeout [ 276.892906] Bluetooth: hci3: command tx timeout [ 276.956324] Bluetooth: hci4: command tx timeout [ 276.956519] Bluetooth: hci5: command tx timeout [ 277.148068] Bluetooth: hci7: command tx timeout [ 277.148130] Bluetooth: hci2: command tx timeout [ 277.277783] Bluetooth: hci6: command tx timeout [ 278.684801] Bluetooth: hci0: command tx timeout [ 278.748815] Bluetooth: hci1: command tx timeout [ 278.939872] Bluetooth: hci3: command tx timeout [ 279.004880] Bluetooth: hci5: command tx timeout [ 279.005032] Bluetooth: hci4: command tx timeout [ 279.197828] Bluetooth: hci7: command tx timeout [ 279.197877] Bluetooth: hci2: command tx timeout [ 279.324031] Bluetooth: hci6: command tx timeout [ 332.969964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.976100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.982852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.991460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.997206] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.001919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.041785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.044067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.049143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.051497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.055547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.057583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.063524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.065557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.067261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.073549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.088997] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.102293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.106188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.108291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.110261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.112734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.117322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.120091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.133233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.136183] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.165226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.174646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.175683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.186000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.188633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.189618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.190191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.194123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.197098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.197577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.206113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.226390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.227119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.231280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.257145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.264623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.290302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.295114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.300102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.302020] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.316175] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.318620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.067798] Bluetooth: hci0: command tx timeout [ 335.131796] Bluetooth: hci2: command tx timeout [ 335.195807] Bluetooth: hci1: command tx timeout [ 335.260751] Bluetooth: hci5: command tx timeout [ 335.260948] Bluetooth: hci3: command tx timeout [ 335.323782] Bluetooth: hci6: command tx timeout [ 335.323968] Bluetooth: hci4: command tx timeout [ 335.388526] Bluetooth: hci7: command tx timeout [ 337.116199] Bluetooth: hci0: command tx timeout [ 337.180877] Bluetooth: hci2: command tx timeout [ 337.243925] Bluetooth: hci1: command tx timeout [ 337.307857] Bluetooth: hci5: command tx timeout [ 337.308019] Bluetooth: hci3: command tx timeout [ 337.371841] Bluetooth: hci6: command tx timeout [ 337.371881] Bluetooth: hci4: command tx timeout [ 337.437158] Bluetooth: hci7: command tx timeout [ 339.164117] Bluetooth: hci0: command tx timeout [ 339.228765] Bluetooth: hci2: command tx timeout [ 339.291819] Bluetooth: hci1: command tx timeout [ 339.355892] Bluetooth: hci3: command tx timeout [ 339.356067] Bluetooth: hci5: command tx timeout [ 339.419858] Bluetooth: hci6: command tx timeout [ 339.420507] Bluetooth: hci4: command tx timeout [ 339.483811] Bluetooth: hci7: command tx timeout [ 341.211880] Bluetooth: hci0: command tx timeout [ 341.275905] Bluetooth: hci2: command tx timeout [ 341.340988] Bluetooth: hci1: command tx timeout [ 341.404196] Bluetooth: hci5: command tx timeout [ 341.404302] Bluetooth: hci3: command tx timeout [ 341.468291] Bluetooth: hci4: command tx timeout [ 341.468687] Bluetooth: hci6: command tx timeout [ 341.531812] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:28:05 Registers: info registers vcpu 0 RAX=1ffffffff0c9b3ef RBX=ffffffff864d9f7c RCX=ffffffff81b3f01b RDX=0000000000000002 RSI=ffffffff868589e6 RDI=ffffffff864d9f78 RBP=ffffffff864d9f78 RSP=ffff888023897718 R8 =ffffffff868589e6 R9 =ffff888023897810 R10=000000000003ab4d R11=0000000000026a95 R12=ffffffff864d9f80 R13=ffffffff864d9f78 R14=ffffffff864d9f78 R15=dffffc0000000000 RIP=ffffffff813484fa RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffebe52fc8 CR3=0000000028aa4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8189f2ce RDX=ffff88800dde5340 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff8880239afc58 RSP=ffff8880239afad8 R8 =0000000000000001 R9 =fffff94000025e96 R10=0000000000000001 R11=0000000000000000 R12=ffffea000012f440 R13=0000000000000020 R14=ffff8880092f5080 R15=dffffc0000000000 RIP=ffffffff8189f2d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f050b1b45d0 CR3=0000000024f46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000