Warning: Permanently added '[localhost]:4114' (ECDSA) to the list of known hosts. 2025/01/22 13:55:21 fuzzer started 2025/01/22 13:55:21 dialing manager at localhost:44689 syzkaller login: [ 87.556935] cgroup: Unknown subsys name 'net' [ 87.647140] cgroup: Unknown subsys name 'cpuset' [ 87.659545] cgroup: Unknown subsys name 'rlimit' [ 93.319324] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 13:55:47 syscalls: 216 2025/01/22 13:55:47 code coverage: enabled 2025/01/22 13:55:47 comparison tracing: enabled 2025/01/22 13:55:47 extra coverage: enabled 2025/01/22 13:55:47 setuid sandbox: enabled 2025/01/22 13:55:47 namespace sandbox: enabled 2025/01/22 13:55:47 Android sandbox: enabled 2025/01/22 13:55:47 fault injection: enabled 2025/01/22 13:55:47 leak checking: enabled 2025/01/22 13:55:47 net packet injection: enabled 2025/01/22 13:55:47 net device setup: enabled 2025/01/22 13:55:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 13:55:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 13:55:47 USB emulation: enabled 2025/01/22 13:55:47 hci packet injection: enabled 2025/01/22 13:55:47 wifi device emulation: enabled 2025/01/22 13:55:47 802.15.4 emulation: enabled 2025/01/22 13:55:47 fetching corpus: 0, signal 0/0 (executing program) [ 114.744280] audit: type=1400 audit(1737554149.354:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:55:49 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'veth0_vlan', 0x32, 0x30}, 0xd) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000080)) ioctl$CDROMCLOSETRAY(r0, 0x5319) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000b00), 0x2, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000b80)={0x18, 0xc, 0x8, 0xd, 0x2, 0x4, 0x5, 0xff, 0xffffffffffffffff}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40, 0x0) ioctl$CDROM_GET_CAPABILITY(r2, 0x5331) socketpair(0xf, 0x0, 0x5, &(0x7f0000001040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r5, 0x610, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40040) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x100) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000012c0)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001440)={0x0, {{0xa, 0x4e23, 0x8, @local, 0x8001}}, {{0xa, 0x4e21, 0x3f, @mcast1}}}, 0x108) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000001580)=""/154, &(0x7f0000001640)=0x9a) ioctl$CDROM_DISC_STATUS(r0, 0x5327) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000001680)={0x1, 0x5, 0x7, 0x20, 0x4, 0x3f}) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000002100)={0x94, 0x5, 0x81, 0x4, 0x80, 0xc5}) 2025/01/22 13:55:49 starting 8 fuzzer processes 13:55:49 executing program 1: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x12, 0x14, "a899a6a40879ff3d609bb0fc5aed5b7bc10acf13a5e0f0394d841d9cac60ecf0723327bdbcd7ee2a5d1fc3094e4677d7092f63a64703a6b2b052b541a50dd34a", "f135e79c59ec0a51aa193d3cfd7c412cb809819e6bd6c5bdfcc67a9f8037d973", [0x80000000, 0x4]}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x1, 0xb, 0x0, "a9ed4720428ad386f603e57e3d970cb0b24b92e4d36b78d7d8f2b5e5c5ecdcd1af88b4a22acb64473ef3b0da22c7086ee41ff24c13a96dc0991a8e8f52bbd02d", "123c278973f7da8efcfa9629fb9c81236bcfd7028c7708d74200630f5a2054a4", [0x8, 0xf8a]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x40000012}) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x10001, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000200)={0x2, 0x6, 0x2, 0xf, 0x42, 0x7f, @msf={0xf7, 0xd7, 0xe0}, @msf={0x3, 0x0, 0x80}}) pipe(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x2, 0x8, "45c6d7c76ceda596d5e8fe46ceafc18358dc3c5e2f4355b8006ed45bb8fa92fb5c31796c2a2cd577f20118b19f95bdfa2c7568351fddf6456ad3a642a3ecaf5a", "a0c7a1acf9f8ffe4ae934c00128dd423470e4ea31d64f8a89b131592fabe07ea", [0x400, 0x100]}) ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f0000000340)={0x7, 0x81, 0x7, 0x1, 0x9, 0xf7}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101180, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x5) ioctl$DVD_WRITE_STRUCT(r2, 0x5390, &(0x7f0000000e00)=@copyright={0x1, 0x2, 0x2, 0x4}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r4, &(0x7f0000003bc0)={&(0x7f0000001640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000016c0)=""/91, 0x5b}, {&(0x7f0000001740)=""/16, 0x10}, {&(0x7f0000001780)=""/73, 0x49}, {&(0x7f0000001800)=""/23, 0x17}, {&(0x7f0000001840)=""/38, 0x26}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/91, 0x5b}, {&(0x7f0000002900)=""/167, 0xa7}, {&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000002ac0)}], 0xa, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x42) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000003c00), 0x12000, 0x0) ioctl$CDROMREADRAW(r5, 0x5314, &(0x7f0000003c40)={0x6, 0x3f, 0x8b, 0x4, 0x6, 0x1}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000004700), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000004800)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004740)={0x68, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x851) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000004900)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004081) ioctl$LOOP_SET_FD(r1, 0x4c00, r7) 13:55:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r2=>0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x104, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbcc355740540ad0d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', <r3=>0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x4000) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xfc}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40008081) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r5=>0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x400c045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan3\x00', <r6=>0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan3\x00', <r7=>0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x44010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r9, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040801}, 0xc004) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x8000) 13:55:49 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) getsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f00000000c0)=""/228, &(0x7f00000001c0)=0xe4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10) getpeername$inet6(r0, &(0x7f0000000540), &(0x7f0000000580)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048084}, 0x400c4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) r4 = accept(r3, &(0x7f0000000700)=@can, &(0x7f0000000780)=0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4004080}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048191}, 0x15) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3f}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x63c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0), 0x8000, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000a40)={0x6, &(0x7f0000000a00)=[{0x0, 0x44, 0x7, 0x4}, {0x81, 0x20, 0x82, 0x1}, {0x8, 0x1, 0x2, 0x7f}, {0x9, 0xff, 0x9, 0x1}, {0xa2, 0x51, 0x3f, 0x4}, {0x927, 0x1, 0x2, 0x2}]}) epoll_wait(r5, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x8) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000b00)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, @l2={0x1f, 0xcf, @any, 0x8, 0x2}, 0xe6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x8cc3, 0x8}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x80802, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x40000000, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13:55:49 executing program 4: ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x40, 0x1, 0x1, 0x68, 0xf9, 0x1}) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000a80)={0x80, 0x8, 0x7, 0x4e, 0x2, 0x2}) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000001500)={0x9, 0x46, 0x40, 0x2}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000001540)={0xd8, 0x2, 0x7, 0x80, 0x89, 0x3}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2240, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000002000)={0x2, 0x1, 0x0, 0x1, @lba=0x9, 0x7}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002040), 0x400000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000002080)={0x2}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000020c0), 0xd0004, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000002100)={@lba=0xffffff01, 0x0, 0x1}) socketpair(0x29, 0x2, 0x48b8, &(0x7f0000002140)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) getpeername$inet6(r3, &(0x7f0000002180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000021c0)=0x1c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002240), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40804}, 0x4080) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002380), 0x80000, 0x0) ioctl$CDROMSETSPINDOWN(r5, 0x531e, &(0x7f00000023c0)=0x2) r6 = io_uring_setup(0x1345, &(0x7f0000002400)={0x0, 0xdce1, 0x2, 0x0, 0x102}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 13:55:49 executing program 6: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000040)="00be8d1102f52efef2cfb5958d81a571d9d6cde47338f9d39fddf1490d6c3a4b73e93dedd8143b75f1d665dc8fa94f272fc93fee47f25ee4a4deb1a0e941d104f9e062f7433d560823a7d71974535a52fe751444bd4c970d492b9f0a3e24942354537c7fcca62cd6429b3b224f08b19db10fb5", 0x73) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x40, 0xc0, 0x9, 0x3f, 0x0, 0x2, 0x1004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0xa0a, 0x7, 0x6, 0x1, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5dc}, 0x0, 0x9, 0xffffffffffffffff, 0x3) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x1c, 0x80800) pipe(&(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000600)) name_to_handle_at(r1, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@ocfs2_parent={0x18, 0x2, {{0xfffffffe, 0x10000, 0x401}, {0x2, 0x1000, 0x57}}}, &(0x7f00000006c0), 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000700)=0x8) r3 = accept4$inet6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000780)=0x1c, 0x80000) getpeername$inet6(r3, &(0x7f00000007c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000800)=0x1c) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000840)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x3, 0x0, 0x1, 0x0, 0x8, 0xff}, &(0x7f00000008c0)=0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0xa601, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r6 = syz_open_dev$sg(&(0x7f0000000a80), 0x6, 0x8000) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000ac0)=0x8000) 13:55:49 executing program 5: ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000040)={0xf9, 0x5, 0x1, 0x3, @lba=0x6}) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000080)={@lba=0xffffada2, 0x0, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x2}) ioctl$CDROMSTOP(r0, 0x5307) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x100) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000200)=""/225, &(0x7f0000000300)=0xe1) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000003c0)=""/44, &(0x7f0000000400)=0x2c) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@bca={0x3, 0xbc, "c9a780302f1bd6db7ac9e97c3b2589685ececaeeaf8fce3fd9897b5ec60fc1df8f9de7bbde6883b256df1fc50268e37e3f88782a28d888ca0dce75adec82b6086cf969c29f0635ee6695e0b54188f4d9d9e3d38015c7f7986202e1155f40527b0f26f844406ed926f326377fad121031fb3441e47195a5420c104e710ca71bf0e8659a48e4811b3981ec131651495d81756b73fca605335b8ecf0fd123cbd43726f1e5169b3c622a44e7f616dd7794e531c23afaf5e86935ff25255b"}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c80), 0x30040, 0x0) ioctl$CDROMCLOSETRAY(r2, 0x5319) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000cc0)={0x5, 0x1}) epoll_pwait(r1, &(0x7f0000000d00)=[{}], 0x1, 0x7fffffff, &(0x7f0000000d40)={[0x1]}, 0x8) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d80), 0x36640, 0x0) ioctl$CDROM_GET_MCN(r3, 0x5311, &(0x7f0000000dc0)) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000e00)=""/141, &(0x7f0000000ec0)=0x8d) 13:55:49 executing program 7: socketpair(0x21, 0x80000, 0xffff, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) socketpair(0x2b, 0x80000, 0x19f, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) socket(0x0, 0x4, 0x0) pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x10, 0x3, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x8001) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @phonet={0x23, 0x1, 0x0, 0x2}, @xdp={0x2c, 0x2, <r4=>0x0, 0x29}, @qipcrtr={0x2a, 0x4, 0x4001}, 0x1aa, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0xc841, 0x2000}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000540)=0x80) r6 = accept(r2, &(0x7f0000000580)=@x25, &(0x7f0000000600)=0x80) setsockopt$inet6_group_source_req(r6, 0x29, 0x2, &(0x7f0000000640)={0x6, {{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}, {{0xa, 0x4e21, 0xfff, @remote, 0x9c}}}, 0x108) getpeername(r0, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000800)=0x80) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x1c5080, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x38}}, 0x44000) accept(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000a00)=0x80) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) [ 116.200765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.203705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.205585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.209239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.217496] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.218930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.401987] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.403006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.404262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.405697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.406001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.407802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.411599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.411799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.413984] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 116.415285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.417541] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.426218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.473882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.481059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.482319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.489881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.491660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.492126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.494263] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.496013] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.496748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.498585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.502490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.503596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.506784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.508019] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.515745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.515942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.516217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.523619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.523827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.524192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.526794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.531093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.532205] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 116.542225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.542778] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 116.542965] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.546788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.557947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.560875] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 116.564786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.273605] Bluetooth: hci0: command tx timeout [ 118.437659] Bluetooth: hci1: command tx timeout [ 118.501686] Bluetooth: hci2: command tx timeout [ 118.629616] Bluetooth: hci5: command tx timeout [ 118.630055] Bluetooth: hci3: command tx timeout [ 118.630430] Bluetooth: hci6: command tx timeout [ 118.700454] Bluetooth: hci7: command tx timeout [ 118.700880] Bluetooth: hci4: command tx timeout [ 120.296443] Bluetooth: hci0: command tx timeout [ 120.489657] Bluetooth: hci1: command tx timeout [ 120.549568] Bluetooth: hci2: command tx timeout [ 120.690319] Bluetooth: hci6: command tx timeout [ 120.690944] Bluetooth: hci3: command tx timeout [ 120.691547] Bluetooth: hci5: command tx timeout [ 120.741466] Bluetooth: hci7: command tx timeout [ 120.741626] Bluetooth: hci4: command tx timeout [ 122.342700] Bluetooth: hci0: command tx timeout [ 122.533480] Bluetooth: hci1: command tx timeout [ 122.609527] Bluetooth: hci2: command tx timeout [ 122.725603] Bluetooth: hci5: command tx timeout [ 122.725749] Bluetooth: hci3: command tx timeout [ 122.726224] Bluetooth: hci6: command tx timeout [ 122.789467] Bluetooth: hci4: command tx timeout [ 122.789559] Bluetooth: hci7: command tx timeout [ 124.390463] Bluetooth: hci0: command tx timeout [ 124.583417] Bluetooth: hci1: command tx timeout [ 124.646630] Bluetooth: hci2: command tx timeout [ 124.773716] Bluetooth: hci6: command tx timeout [ 124.776539] Bluetooth: hci3: command tx timeout [ 124.777098] Bluetooth: hci5: command tx timeout [ 124.838490] Bluetooth: hci7: command tx timeout [ 124.838603] Bluetooth: hci4: command tx timeout [ 176.121146] syz-executor.1 (287) used greatest stack depth: 23712 bytes left [ 178.809267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.810023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.811579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.813512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.814451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.815077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.892969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.911654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.913860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.928215] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.939689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.994989] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.006465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.010764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.012573] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.035077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.038980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.050857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.063956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.065050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.066170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.068106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.068793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.070648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.071525] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 179.072060] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.095109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.096033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.098000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.099079] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 179.104228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.120177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.134670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.135841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.136823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.143685] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 179.144039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.145476] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.146681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.147921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.162089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.171887] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 179.175617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.178117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.179055] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.185128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.187043] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 179.187851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.843571] Bluetooth: hci0: command tx timeout [ 181.093822] Bluetooth: hci4: command tx timeout [ 181.094120] Bluetooth: hci1: command tx timeout [ 181.157426] Bluetooth: hci6: command tx timeout [ 181.223627] Bluetooth: hci2: command tx timeout [ 181.224097] Bluetooth: hci5: command tx timeout [ 181.224285] Bluetooth: hci7: command tx timeout [ 181.288442] Bluetooth: hci3: command tx timeout [ 182.890457] Bluetooth: hci0: command tx timeout [ 183.142420] Bluetooth: hci4: command tx timeout [ 183.142454] Bluetooth: hci1: command tx timeout [ 183.205462] Bluetooth: hci6: command tx timeout [ 183.269656] Bluetooth: hci2: command tx timeout [ 183.269748] Bluetooth: hci7: command tx timeout [ 183.269805] Bluetooth: hci5: command tx timeout [ 183.333569] Bluetooth: hci3: command tx timeout [ 184.935387] Bluetooth: hci0: command tx timeout [ 185.192104] Bluetooth: hci1: command tx timeout [ 185.192963] Bluetooth: hci4: command tx timeout [ 185.258388] Bluetooth: hci6: command tx timeout [ 185.319840] Bluetooth: hci5: command tx timeout [ 185.319947] Bluetooth: hci7: command tx timeout [ 185.320054] Bluetooth: hci2: command tx timeout [ 185.382435] Bluetooth: hci3: command tx timeout [ 186.982444] Bluetooth: hci0: command tx timeout [ 187.237539] Bluetooth: hci4: command tx timeout [ 187.238207] Bluetooth: hci1: command tx timeout [ 187.301496] Bluetooth: hci6: command tx timeout [ 187.367403] Bluetooth: hci2: command tx timeout [ 187.367499] Bluetooth: hci7: command tx timeout [ 187.367602] Bluetooth: hci5: command tx timeout [ 187.430878] Bluetooth: hci3: command tx timeout [ 240.867288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.868964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.870569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.872629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.873984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.874466] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.147828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.149389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.150790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.151612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.151830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.160863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.161964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.164050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.169019] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.169218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.171043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.172405] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.175888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.205453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.209841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.211964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.213096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.214174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.216223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.222816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.223279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.225153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.230720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.239631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.249871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.264625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.266510] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.267691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.274437] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.290966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.308047] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.309856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.310628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.338985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.343601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.344132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.346663] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 241.349771] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.351151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.364589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.373556] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 241.375833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.920411] Bluetooth: hci0: command tx timeout [ 243.237548] Bluetooth: hci3: command tx timeout [ 243.237575] Bluetooth: hci1: command tx timeout [ 243.365445] Bluetooth: hci2: command tx timeout [ 243.366424] Bluetooth: hci5: command tx timeout [ 243.429467] Bluetooth: hci6: command tx timeout [ 243.429703] Bluetooth: hci4: command tx timeout [ 243.431215] Bluetooth: hci7: command tx timeout [ 244.967385] Bluetooth: hci0: command tx timeout [ 245.289447] Bluetooth: hci3: command tx timeout [ 245.289561] Bluetooth: hci1: command tx timeout [ 245.413568] Bluetooth: hci2: command tx timeout [ 245.423107] Bluetooth: hci5: command tx timeout [ 245.477517] Bluetooth: hci7: command tx timeout [ 245.478181] Bluetooth: hci4: command tx timeout [ 245.478781] Bluetooth: hci6: command tx timeout [ 247.017988] Bluetooth: hci0: command tx timeout [ 247.334241] Bluetooth: hci1: command tx timeout [ 247.334421] Bluetooth: hci3: command tx timeout [ 247.461551] Bluetooth: hci5: command tx timeout [ 247.461567] Bluetooth: hci2: command tx timeout [ 247.525410] Bluetooth: hci6: command tx timeout [ 247.525503] Bluetooth: hci4: command tx timeout [ 247.525587] Bluetooth: hci7: command tx timeout [ 249.065399] Bluetooth: hci0: command tx timeout [ 249.382946] Bluetooth: hci3: command tx timeout [ 249.382967] Bluetooth: hci1: command tx timeout [ 249.529383] Bluetooth: hci2: command tx timeout [ 249.529498] Bluetooth: hci5: command tx timeout [ 249.587421] Bluetooth: hci7: command tx timeout [ 249.587537] Bluetooth: hci4: command tx timeout [ 249.587640] Bluetooth: hci6: command tx timeout [ 303.567923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.574147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.588160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.592234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.595869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.597511] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.597626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.599912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.601095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.616515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.617772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.618624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.677913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.679845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.683555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.684066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.687464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.688091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.696026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.704594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.710605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.713408] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.720082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.720098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.720343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.722993] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.725999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.729588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.752574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.755911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.797268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.801487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.803636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.807268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.811712] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.814740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.843963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.860593] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.861422] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.871718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.872893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.874945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.898074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.936017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.943591] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.947594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.966585] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 303.996740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.638451] Bluetooth: hci0: command tx timeout [ 305.701732] Bluetooth: hci1: command tx timeout [ 305.775687] Bluetooth: hci3: command tx timeout [ 305.775724] Bluetooth: hci4: command tx timeout [ 305.829407] Bluetooth: hci5: command tx timeout [ 305.895817] Bluetooth: hci2: command tx timeout [ 306.023838] Bluetooth: hci6: command tx timeout [ 306.085539] Bluetooth: hci7: command tx timeout [ 307.685405] Bluetooth: hci0: command tx timeout [ 307.749647] Bluetooth: hci1: command tx timeout [ 307.816165] Bluetooth: hci3: command tx timeout [ 307.816336] Bluetooth: hci4: command tx timeout [ 307.877464] Bluetooth: hci5: command tx timeout [ 307.942566] Bluetooth: hci2: command tx timeout [ 308.070940] Bluetooth: hci6: command tx timeout [ 308.136376] Bluetooth: hci7: command tx timeout [ 309.733410] Bluetooth: hci0: command tx timeout [ 309.797411] Bluetooth: hci1: command tx timeout [ 309.861468] Bluetooth: hci4: command tx timeout [ 309.862529] Bluetooth: hci3: command tx timeout [ 309.928393] Bluetooth: hci5: command tx timeout [ 310.000187] Bluetooth: hci2: command tx timeout [ 310.118483] Bluetooth: hci6: command tx timeout [ 310.181393] Bluetooth: hci7: command tx timeout [ 311.783637] Bluetooth: hci0: command tx timeout [ 311.846550] Bluetooth: hci1: command tx timeout [ 311.920088] Bluetooth: hci3: command tx timeout [ 311.920122] Bluetooth: hci4: command tx timeout [ 311.973906] Bluetooth: hci5: command tx timeout [ 312.037514] Bluetooth: hci2: command tx timeout [ 312.165547] Bluetooth: hci6: command tx timeout [ 312.229642] Bluetooth: hci7: command tx timeout [ 366.341504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.343163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.345851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.366323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.372023] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.373677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.395837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.397429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.405568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.414573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.416391] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.417786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.514901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.523147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.525008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.557504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.582081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 366.583455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.584865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.587604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.591185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.607014] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.612398] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 366.614009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.824879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.855946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.885454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.886426] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.887110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.888117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.894074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.894326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.903238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.905859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.907385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.912851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.913647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.915000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.915840] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 366.916453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.946491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.948809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 366.949126] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 366.951171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.951438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.955273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.956402] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 366.956844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.421407] Bluetooth: hci0: command tx timeout [ 368.487712] Bluetooth: hci1: command tx timeout [ 368.613447] Bluetooth: hci2: command tx timeout [ 368.805414] Bluetooth: hci3: command tx timeout [ 368.934575] Bluetooth: hci6: command tx timeout [ 368.998620] Bluetooth: hci7: command tx timeout [ 369.062640] Bluetooth: hci5: command tx timeout [ 369.126432] Bluetooth: hci4: command tx timeout [ 370.469679] Bluetooth: hci0: command tx timeout [ 370.534373] Bluetooth: hci1: command tx timeout [ 370.663343] Bluetooth: hci2: command tx timeout [ 370.854431] Bluetooth: hci3: command tx timeout [ 371.004362] Bluetooth: hci6: command tx timeout [ 371.045642] Bluetooth: hci7: command tx timeout [ 371.109381] Bluetooth: hci5: command tx timeout [ 371.190393] Bluetooth: hci4: command tx timeout [ 372.517390] Bluetooth: hci0: command tx timeout [ 372.582490] Bluetooth: hci1: command tx timeout [ 372.711378] Bluetooth: hci2: command tx timeout [ 372.901395] Bluetooth: hci3: command tx timeout [ 373.030379] Bluetooth: hci6: command tx timeout [ 373.093611] Bluetooth: hci7: command tx timeout [ 373.158381] Bluetooth: hci5: command tx timeout [ 373.221366] Bluetooth: hci4: command tx timeout [ 374.566128] Bluetooth: hci0: command tx timeout [ 374.629387] Bluetooth: hci1: command tx timeout [ 374.771680] Bluetooth: hci2: command tx timeout [ 374.968739] Bluetooth: hci3: command tx timeout [ 375.077417] Bluetooth: hci6: command tx timeout [ 375.142686] Bluetooth: hci7: command tx timeout [ 375.205740] Bluetooth: hci5: command tx timeout [ 375.269450] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 14:00:51 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888033733780 RCX=1ffffffff0c80391 RDX=0000000000000003 RSI=ffff8880337341d0 RDI=ffff8880337341f2 RBP=ffff888033733780 RSP=ffff88806ce09d68 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff864057d7 R11=0000000000000001 R12=ffff888008c41780 R13=0000000000000000 R14=ffffea0000356b80 R15=ffff88800d5aedc0 RIP=ffffffff814fcf4d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555569945400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561e354af4c8 CR3=000000002e45e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00 XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff XMM04=0000ff00000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000043 RCX=ffffffff818a908c RDX=ffff888013ba3780 RSI=0000000000000008 RDI=0000000000000001 RBP=ffffea0001b3e5e0 RSP=ffff88802c31fb88 R8 =0000000000000000 R9 =fffff94000367cb8 R10=0000000000000000 R11=0000000000000000 R12=0000000000000043 R13=0000000000000000 R14=ffffea0001b3e5c0 R15=ffff88802c31fd98 RIP=ffffffff818a8d97 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc46f5e48e0 CR3=000000002c700000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=00ff0000000001002e6f732e6362696c XMM02=312e312e6f732e6f747079726362696c XMM03=00000000000000000000000000000000 XMM04=000000000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000