Warning: Permanently added '[localhost]:63587' (ECDSA) to the list of known hosts. 2025/01/23 02:10:40 fuzzer started 2025/01/23 02:10:40 dialing manager at localhost:38529 syzkaller login: [ 70.554067] cgroup: Unknown subsys name 'net' [ 70.632384] cgroup: Unknown subsys name 'cpuset' [ 70.652144] cgroup: Unknown subsys name 'rlimit' [ 75.300081] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 02:10:56 syscalls: 210 2025/01/23 02:10:56 code coverage: enabled 2025/01/23 02:10:56 comparison tracing: enabled 2025/01/23 02:10:56 extra coverage: enabled 2025/01/23 02:10:56 setuid sandbox: enabled 2025/01/23 02:10:56 namespace sandbox: enabled 2025/01/23 02:10:56 Android sandbox: enabled 2025/01/23 02:10:56 fault injection: enabled 2025/01/23 02:10:56 leak checking: enabled 2025/01/23 02:10:56 net packet injection: enabled 2025/01/23 02:10:56 net device setup: enabled 2025/01/23 02:10:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 02:10:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 02:10:56 USB emulation: enabled 2025/01/23 02:10:56 hci packet injection: enabled 2025/01/23 02:10:56 wifi device emulation: enabled 2025/01/23 02:10:56 802.15.4 emulation: enabled 2025/01/23 02:10:56 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 02:10:57 starting 8 fuzzer processes 02:10:57 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x90d02, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x101900, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x412, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20008080) getpeername(r1, &(0x7f0000000300)=@phonet, &(0x7f0000000380)=0x80) write$binfmt_elf32(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x4, 0x81, 0x9, 0x7, 0x2, 0x3, 0x66b, 0x19d, 0x38, 0x21d, 0x8, 0x8, 0x20, 0x2, 0x2, 0x0, 0xfffa}, [{0x2, 0x7ff, 0xfffffffb, 0x3, 0x3, 0x1000, 0x2, 0xfffffa66}, {0x3, 0x4, 0x7, 0xfffffff7, 0x5d8c, 0x47, 0x1000, 0x6}], "b2be69dc41056b1604397e25e5ab52c15c4c708041791220149cbdf3e3d59e1fcacd492a2376cc744c7898b1a3d2353ef41375a3248a5694c47166eece3a667898b363d38af4ae623631bde4eed4e6c5b450c0d2d2601c7d85cb376260be43133acb7e710e19f1175c72844ae1f189e16ced532c", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5ec) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000009c0)=0x27e8d1612ecf6e2b) r6 = perf_event_open$cgroup(&(0x7f0000000a40)={0x0, 0x80, 0x5, 0x82, 0x1f, 0xb9, 0x0, 0xfd5, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000a00), 0x2}, 0x802, 0x3, 0x10000, 0x7, 0x5, 0x9, 0x101, 0x0, 0x9, 0x0, 0xffff}, r3, 0x9, 0xffffffffffffffff, 0x8) r7 = dup2(r0, r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0xed840fc03552fecb, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1b, 0x1, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400080, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r4) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x1, 0x6, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x80010, r1, 0x3ff) mount_setattr(r8, &(0x7f0000000e40)='./file0/file0\x00', 0x9000, &(0x7f0000000e80)={0x100004, 0x4, 0x0, {r8}}, 0x20) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x20000090) 02:10:57 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xff}}, './file0\x00'}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa4d60bdb7376cf52}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004081}, 0x20000040) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x80010, 0xffffffffffffffff, 0x10000000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1000, [0x7, 0x7, 0xffffffffffffcfb0, 0xfffffffffffffff7, 0x8, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000380)=0x7) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x2) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x141480, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)) 02:10:57 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048044}, 0x50) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa01, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x20000890) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c0) socketpair(0x26, 0x1, 0x11, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x10) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000780)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) perf_event_open(&(0x7f00000008c0)={0x5, 0x80, 0x8, 0x3, 0x3, 0x6, 0x0, 0x100, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x9}, 0x40000, 0xfffffffffffffffb, 0xa2, 0x7, 0x80, 0x3, 0x1, 0x0, 0x10000, 0x0, 0x2}, 0xffffffffffffffff, 0x7, r1, 0x2) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r1, 0x8000000) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x6) 02:10:57 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x141082, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x20040080) setns(r1, 0x4000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/software', 0x100, 0x22) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x404c800) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x7, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048850}, 0x80) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4001) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000740)={{0x101, 0x9}, 0x100, './file0\x00'}) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x208240, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000009c0)) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 87.557303] audit: type=1400 audit(1737598257.922:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:10:57 executing program 4: r0 = socket$inet6(0xa, 0xa, 0xfff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6}, {0xa, 0x4e20, 0x17e, @local, 0x1ed2}, 0xc931, [0x0, 0x0, 0x8, 0x13c1, 0x5, 0x400, 0xfff, 0x6]}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x1, 0x4e21, 0x5a32, 0xa, 0x80, 0x20, 0x2f, r1, 0xee01}, {0x8, 0xb8, 0x2, 0x2, 0x9, 0x338, 0x1, 0x9000000000000}, {0x8, 0x80000000, 0x6b, 0x5}, 0x5, 0x6e6bbe, 0x2, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d4, 0x6c}, 0x2, @in=@multicast2, 0x3505, 0x0, 0x0, 0x9, 0x8, 0x1}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3fffc}}, './file0\x00'}) getsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000240)=""/6, &(0x7f0000000280)=0x6) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, 0x4e20, 0x0, 0x4e22, 0x200, 0x8, 0xa0, 0x0, 0x1d, r5, 0xee01}, {0x101, 0x1ff, 0x81, 0x1000, 0xfe000000, 0x5, 0x119f, 0x7}, {0x3, 0x1, 0x7, 0x9}, 0x7ff, 0x6e6bba, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x33}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x3, 0xa1f50a7ac197a5c9, 0x2, 0x80000001, 0x58ba1108, 0x8}}, 0xe8) ptrace$poke(0x4, 0x0, &(0x7f0000000440), 0xfff) r6 = perf_event_open(&(0x7f00000004c0)={0xa9dbdf68b3f0514, 0x80, 0x7f, 0x7, 0x80, 0x27, 0x0, 0x2, 0x8000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000480), 0x8}, 0x2, 0xa8ee, 0x759, 0x1, 0x7, 0x10000, 0x7, 0x0, 0x53, 0x0, 0x989}, 0x0, 0x7, r4, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000540)={0x3, 0x0, [0x0, 0x0, 0x0]}) socketpair(0x27, 0x2, 0x3, &(0x7f0000000580)) getpeername(r0, &(0x7f00000005c0)=@sco={0x1f, @fixed}, &(0x7f0000000640)=0x80) write$eventfd(r2, &(0x7f0000000680)=0xdb, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000006c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getpeername(r3, &(0x7f0000000740)=@nl, &(0x7f00000007c0)=0x80) epoll_create1(0x0) 02:10:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x6, 0x0, 0x40, 0x0, 0x9, 0x40000, 0x51374e6cb87e438b, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x1108, 0x742b, 0x80000001, 0x5, 0x3, 0x800, 0x1, 0x0, 0x64, 0x0, 0x9}, r1, 0xd, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000140)={0x6c, 0x0, '\x00', [@pad1]}, 0x10) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x30040, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='./cgroup/syz0\x00') r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x1cd22c5d13026842, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x7f, 0x6, 0x40, 0x0, 0x255, 0x4010, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd14, 0x4, @perf_config_ext={0x1f, 0xfd}, 0x10680, 0x3f, 0x7fff, 0x7, 0x2, 0x5, 0xf46, 0x0, 0x53a, 0x0, 0x6}, r0, 0x1, 0xffffffffffffffff, 0x8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xffffff80}}, ["", ""]}, 0x24}}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) getsockname$netlink(r6, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x4) syz_open_dev$vcsu(&(0x7f0000000640), 0xa455, 0x502) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000700)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 02:10:57 executing program 6: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x44000) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x48}}, 0x810) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000280)=0x6, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9120c}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x20042808) r3 = syz_open_dev$vcsu(&(0x7f0000000400), 0xab, 0xa001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5be}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8004) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/18, 0x12, 0x0, &(0x7f0000000600)=""/182, 0xb6}, &(0x7f0000000700)=0x40) epoll_create1(0x80000) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40004c0}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd5f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x429}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r3) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) setns(r5, 0x20000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000a80)=0x6, 0x4) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) 02:10:58 executing program 7: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'batadv0\x00', {0x8000}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_timer', 0x40a880, 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048080) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x48811) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141800, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000380)={{0x4, 0x7}, 0x100, './file0\x00'}) socketpair(0x1a, 0xa, 0x7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x20000001) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r2, 0x57aa4000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000091) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000740)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000780)={0x6, 'veth1_macvtap\x00', {0x7f6c}, 0x5}) socketpair(0x26, 0x4, 0x6, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x840) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x4004045) [ 88.936075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.938396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.939816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.943883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.945978] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.947216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.997233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.998479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.999335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.009300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.009836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.013731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.018675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.023089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.024253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.036106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.037914] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.038905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.066440] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.069736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.070151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.072811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.074175] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.075933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.076819] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.077232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.080961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.085670] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.086757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.086946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.090838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.093200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.100644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.104163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.108798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.110075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.112829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.114857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.118719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.118916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.119090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.119263] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.123167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.123425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.124535] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.125038] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.125673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.129358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.966182] Bluetooth: hci0: command tx timeout [ 91.094208] Bluetooth: hci5: command tx timeout [ 91.094282] Bluetooth: hci2: command tx timeout [ 91.095226] Bluetooth: hci1: command tx timeout [ 91.158832] Bluetooth: hci7: command tx timeout [ 91.158965] Bluetooth: hci6: command tx timeout [ 91.159747] Bluetooth: hci4: command tx timeout [ 91.222602] Bluetooth: hci3: command tx timeout [ 93.014636] Bluetooth: hci0: command tx timeout [ 93.142215] Bluetooth: hci1: command tx timeout [ 93.142654] Bluetooth: hci2: command tx timeout [ 93.142757] Bluetooth: hci5: command tx timeout [ 93.205698] Bluetooth: hci6: command tx timeout [ 93.205843] Bluetooth: hci4: command tx timeout [ 93.205936] Bluetooth: hci7: command tx timeout [ 93.269535] Bluetooth: hci3: command tx timeout [ 95.061596] Bluetooth: hci0: command tx timeout [ 95.189695] Bluetooth: hci5: command tx timeout [ 95.189802] Bluetooth: hci2: command tx timeout [ 95.189852] Bluetooth: hci1: command tx timeout [ 95.253593] Bluetooth: hci7: command tx timeout [ 95.253698] Bluetooth: hci4: command tx timeout [ 95.253785] Bluetooth: hci6: command tx timeout [ 95.317604] Bluetooth: hci3: command tx timeout [ 97.109723] Bluetooth: hci0: command tx timeout [ 97.237583] Bluetooth: hci1: command tx timeout [ 97.237680] Bluetooth: hci2: command tx timeout [ 97.237784] Bluetooth: hci5: command tx timeout [ 97.302539] Bluetooth: hci6: command tx timeout [ 97.302640] Bluetooth: hci4: command tx timeout [ 97.302726] Bluetooth: hci7: command tx timeout [ 97.365567] Bluetooth: hci3: command tx timeout [ 148.937196] syz-executor.6 (284) used greatest stack depth: 23520 bytes left [ 151.214785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.221069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.230886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.235047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.239978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.242652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.244762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.248273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.250885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.253189] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.258658] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.264054] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.366898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.373928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.379671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.381987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.389048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.393671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.400083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.404974] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.406795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.409115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.409959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.410573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.427778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.432615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.433613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.437180] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.437843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.438360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.438890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.453859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.455614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.456003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.460970] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.475155] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.483912] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.484307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.491608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.495809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.502951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.503335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.519849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.524416] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.564474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.608910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.633073] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.639835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.303625] Bluetooth: hci0: command tx timeout [ 153.304076] Bluetooth: hci1: command tx timeout [ 153.493753] Bluetooth: hci5: command tx timeout [ 153.493764] Bluetooth: hci4: command tx timeout [ 153.557822] Bluetooth: hci2: command tx timeout [ 153.559709] Bluetooth: hci3: command tx timeout [ 153.559906] Bluetooth: hci6: command tx timeout [ 153.750586] Bluetooth: hci7: command tx timeout [ 155.350526] Bluetooth: hci1: command tx timeout [ 155.350559] Bluetooth: hci0: command tx timeout [ 155.541635] Bluetooth: hci4: command tx timeout [ 155.541776] Bluetooth: hci5: command tx timeout [ 155.605626] Bluetooth: hci6: command tx timeout [ 155.605722] Bluetooth: hci3: command tx timeout [ 155.605812] Bluetooth: hci2: command tx timeout [ 155.798630] Bluetooth: hci7: command tx timeout [ 157.397541] Bluetooth: hci1: command tx timeout [ 157.397633] Bluetooth: hci0: command tx timeout [ 157.590497] Bluetooth: hci5: command tx timeout [ 157.590590] Bluetooth: hci4: command tx timeout [ 157.653578] Bluetooth: hci2: command tx timeout [ 157.653672] Bluetooth: hci3: command tx timeout [ 157.653758] Bluetooth: hci6: command tx timeout [ 157.845706] Bluetooth: hci7: command tx timeout [ 159.445848] Bluetooth: hci0: command tx timeout [ 159.445920] Bluetooth: hci1: command tx timeout [ 159.639252] Bluetooth: hci4: command tx timeout [ 159.639582] Bluetooth: hci5: command tx timeout [ 159.702095] Bluetooth: hci6: command tx timeout [ 159.702163] Bluetooth: hci3: command tx timeout [ 159.702310] Bluetooth: hci2: command tx timeout [ 159.894575] Bluetooth: hci7: command tx timeout [ 213.231638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.237685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.241205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.244072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.246619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.248365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.347272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.348712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.349857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.352591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.354555] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.355531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.472510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.478166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.492335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.493567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.494599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.496764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.497907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.501816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.503320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.504356] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.522667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.524380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.525932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.527322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.528374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.534227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.535754] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.537195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.556144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.566578] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.567149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.589224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.591758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.593096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.601663] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.607667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.607766] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.614115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.620769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.627815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.628320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.635715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.653881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.692208] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.701518] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.710627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.317705] Bluetooth: hci0: command tx timeout [ 215.381525] Bluetooth: hci1: command tx timeout [ 215.574250] Bluetooth: hci4: command tx timeout [ 215.574281] Bluetooth: hci2: command tx timeout [ 215.638556] Bluetooth: hci3: command tx timeout [ 215.701551] Bluetooth: hci5: command tx timeout [ 215.701732] Bluetooth: hci6: command tx timeout [ 215.829543] Bluetooth: hci7: command tx timeout [ 217.365645] Bluetooth: hci0: command tx timeout [ 217.430767] Bluetooth: hci1: command tx timeout [ 217.622031] Bluetooth: hci4: command tx timeout [ 217.622517] Bluetooth: hci2: command tx timeout [ 217.685547] Bluetooth: hci3: command tx timeout [ 217.749583] Bluetooth: hci6: command tx timeout [ 217.750241] Bluetooth: hci5: command tx timeout [ 217.877564] Bluetooth: hci7: command tx timeout [ 219.413528] Bluetooth: hci0: command tx timeout [ 219.477510] Bluetooth: hci1: command tx timeout [ 219.670334] Bluetooth: hci2: command tx timeout [ 219.670357] Bluetooth: hci4: command tx timeout [ 219.733513] Bluetooth: hci3: command tx timeout [ 219.797540] Bluetooth: hci5: command tx timeout [ 219.797624] Bluetooth: hci6: command tx timeout [ 219.926507] Bluetooth: hci7: command tx timeout [ 221.462973] Bluetooth: hci0: command tx timeout [ 221.526542] Bluetooth: hci1: command tx timeout [ 221.717567] Bluetooth: hci4: command tx timeout [ 221.718542] Bluetooth: hci2: command tx timeout [ 221.781624] Bluetooth: hci3: command tx timeout [ 221.845552] Bluetooth: hci5: command tx timeout [ 221.846505] Bluetooth: hci6: command tx timeout [ 221.974511] Bluetooth: hci7: command tx timeout [ 275.620276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.627143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.630069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.647604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.656132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.661296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.691777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.697239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.703510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.710741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.716922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.725385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.893775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.898305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.909674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.940783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.952168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.953795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.957197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.012015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.014714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.022180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.028869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.041942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.047717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.048170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.052917] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.055667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.058609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.062740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.066251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.066326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.070143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.070999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.074211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.110400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.126281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.141050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.142109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.143341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.155784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.156275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.159638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.192089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.203589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.237627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.237803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.259098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.717746] Bluetooth: hci0: command tx timeout [ 277.782713] Bluetooth: hci1: command tx timeout [ 278.101881] Bluetooth: hci3: command tx timeout [ 278.102833] Bluetooth: hci2: command tx timeout [ 278.294475] Bluetooth: hci7: command tx timeout [ 278.358879] Bluetooth: hci4: command tx timeout [ 278.360223] Bluetooth: hci5: command tx timeout [ 278.360459] Bluetooth: hci6: command tx timeout [ 279.768447] Bluetooth: hci0: command tx timeout [ 279.830706] Bluetooth: hci1: command tx timeout [ 280.149526] Bluetooth: hci3: command tx timeout [ 280.149558] Bluetooth: hci2: command tx timeout [ 280.341526] Bluetooth: hci7: command tx timeout [ 280.406576] Bluetooth: hci4: command tx timeout [ 280.406643] Bluetooth: hci6: command tx timeout [ 280.406743] Bluetooth: hci5: command tx timeout [ 281.814534] Bluetooth: hci0: command tx timeout [ 281.879504] Bluetooth: hci1: command tx timeout [ 282.198485] Bluetooth: hci2: command tx timeout [ 282.198570] Bluetooth: hci3: command tx timeout [ 282.390509] Bluetooth: hci7: command tx timeout [ 282.453783] Bluetooth: hci5: command tx timeout [ 282.454366] Bluetooth: hci6: command tx timeout [ 282.454577] Bluetooth: hci4: command tx timeout [ 283.864449] Bluetooth: hci0: command tx timeout [ 283.926484] Bluetooth: hci1: command tx timeout [ 284.246756] Bluetooth: hci3: command tx timeout [ 284.246849] Bluetooth: hci2: command tx timeout [ 284.441275] Bluetooth: hci7: command tx timeout [ 284.501586] Bluetooth: hci4: command tx timeout [ 284.502616] Bluetooth: hci5: command tx timeout [ 284.503350] Bluetooth: hci6: command tx timeout [ 337.956256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.962776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.967988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.979146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.983950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.985972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.276809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.277813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.278381] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.280276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.281311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.281828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.363677] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.365870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.370326] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.372531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.374744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.376539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.413049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.417135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.419273] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.420125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.421834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.429705] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.434783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.438759] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.440532] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.441281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.447074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.449376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.459208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.461477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.465329] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.466874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.468113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.502814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.510573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.511641] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.517638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.531122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.536594] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.547448] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.554578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.559920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.567642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.585319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.596182] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.612165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.054670] Bluetooth: hci0: command tx timeout [ 340.310485] Bluetooth: hci1: command tx timeout [ 340.503450] Bluetooth: hci4: command tx timeout [ 340.503545] Bluetooth: hci6: command tx timeout [ 340.694563] Bluetooth: hci2: command tx timeout [ 340.695080] Bluetooth: hci3: command tx timeout [ 340.885653] Bluetooth: hci7: command tx timeout [ 340.950593] Bluetooth: hci5: command tx timeout [ 342.101796] Bluetooth: hci0: command tx timeout [ 342.357572] Bluetooth: hci1: command tx timeout [ 342.549542] Bluetooth: hci4: command tx timeout [ 342.549647] Bluetooth: hci6: command tx timeout [ 342.741612] Bluetooth: hci3: command tx timeout [ 342.741652] Bluetooth: hci2: command tx timeout [ 342.936456] Bluetooth: hci7: command tx timeout [ 342.998525] Bluetooth: hci5: command tx timeout [ 344.151519] Bluetooth: hci0: command tx timeout [ 344.405994] Bluetooth: hci1: command tx timeout [ 344.599493] Bluetooth: hci6: command tx timeout [ 344.600160] Bluetooth: hci4: command tx timeout [ 344.789664] Bluetooth: hci3: command tx timeout [ 344.790495] Bluetooth: hci2: command tx timeout [ 344.981580] Bluetooth: hci7: command tx timeout [ 345.045545] Bluetooth: hci5: command tx timeout [ 346.199447] Bluetooth: hci0: command tx timeout [ 346.453640] Bluetooth: hci1: command tx timeout [ 346.645541] Bluetooth: hci4: command tx timeout [ 346.645651] Bluetooth: hci6: command tx timeout [ 346.838989] Bluetooth: hci2: command tx timeout [ 346.839297] Bluetooth: hci3: command tx timeout [ 347.031457] Bluetooth: hci7: command tx timeout [ 347.093477] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 02:15:59 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff815ec480 RCX=0000000000000001 RDX=ffff88806ce09a28 RSI=ffff88802367fdb0 RDI=ffff88806ce09a28 RBP=ffff88806ce09ac0 RSP=ffff88806ce09a18 R8 =0000000000000001 R9 =ffff88806ce09a68 R10=000000000003ab7c R11=00000000000211ad R12=ffff88806ce09af0 R13=0000000000000000 R14=ffff88800d99b780 R15=ffff88800e292540 RIP=ffffffff81348bd2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7aec4408b0 CR3=000000001a5d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff0000000000000000000000ff00 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffff11002c1e3f8 RSI=ffffffff85c18d00 RDI=ffff8880160f1fc0 RBP=ffff8880160f1bc0 RSP=ffff888025ee7208 R8 =0000000000000001 R9 =ffff8880160f2608 R10=ffffffff864057d7 R11=0000000000000000 R12=ffff8880160f1bc0 R13=0000000000000000 R14=ffffffff85c709c8 R15=0000000000092cc0 RIP=ffffffff815a2f10 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f82b1040008 CR3=00000000276ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000