syzkaller login: [ 65.876994] scp (237) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:29187' (ECDSA) to the list of known hosts. 2025/01/25 03:20:11 fuzzer started 2025/01/25 03:20:12 dialing manager at localhost:40883 [ 68.583448] cgroup: Unknown subsys name 'net' [ 68.679823] cgroup: Unknown subsys name 'cpuset' [ 68.710811] cgroup: Unknown subsys name 'rlimit' [ 73.724788] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 03:20:28 syscalls: 202 2025/01/25 03:20:28 code coverage: enabled 2025/01/25 03:20:28 comparison tracing: enabled 2025/01/25 03:20:28 extra coverage: enabled 2025/01/25 03:20:28 setuid sandbox: enabled 2025/01/25 03:20:28 namespace sandbox: enabled 2025/01/25 03:20:28 Android sandbox: enabled 2025/01/25 03:20:28 fault injection: enabled 2025/01/25 03:20:28 leak checking: enabled 2025/01/25 03:20:28 net packet injection: enabled 2025/01/25 03:20:28 net device setup: enabled 2025/01/25 03:20:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 03:20:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 03:20:28 USB emulation: enabled 2025/01/25 03:20:28 hci packet injection: enabled 2025/01/25 03:20:28 wifi device emulation: enabled 2025/01/25 03:20:28 802.15.4 emulation: enabled 2025/01/25 03:20:28 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 03:20:29 starting 8 fuzzer processes 03:20:29 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x301840, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x486000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1000000000}}, './file0\x00'}) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000180)=""/94, &(0x7f0000000200)=0x5e) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000240)) read$ptp(r4, &(0x7f00000002c0)=""/187, 0xbb) r5 = openat$cgroup_ro(r2, &(0x7f0000000380)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic\x00', 0x6) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x81) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000400)={0x80, 0x8}) epoll_create1(0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000440), 0x2, 0x0) r6 = syz_io_uring_complete(0x0) write$snapshot(r6, &(0x7f0000000480)="3af24aa2a64432497f7fdd3a2f5cea923e640d7765b4d3ed3d521838552bac2b13c02e9a4debcbfd1247ef36b6e5ecdf5ab94382493c30e2a3f858fb3c2e95d01b262ecdc4f33536289d53ae1047231bd4ac0f423f93d8c5244e246ea4ccdab0517263b9ca0a35c1103bb444c99b118d5cd1d2147e17160feeff2b25b6ff818bc4d0f3292393240b7eb2cc1ee367366112c0b8ecac7a1b97af4d21ee6c5d89fa011731debd026c50f7342710aeb5e58c1493b8c64cc770bc539e0adc6c86eea80328b9b2", 0xc4) getsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 03:20:29 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x7fffffff) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/94, &(0x7f0000000180)=0x5e) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) getsockname(r0, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000280)=0x80) r2 = socket(0x5, 0x1, 0xc15) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x1ff, 0x12) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'syz_tun\x00', {0x8}, 0x2234}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000003c0)=0x5eb7eacb) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000400)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000440)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480), 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socketpair(0xa, 0x800, 0x36cc, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000580)=@ccm_128={{0x303}, "0132bcc3d54ba058", "4898085eb240c5656d82f5d62f53f0f6", "7e8e520a", "7be5bf9e6ae5567f"}, 0x28) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000005c0)) 03:20:29 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x1}, 0x27e4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0, 0x0, 0x2a, 0x0, "23ede0b8814a63592b1b807bd766ab26d8c8f4b6c590ab48e3bb106a2c8b30f01685d6707487be68bf00129c267a239616f7a62ceda1efd5025d8b71a25b8a82afb0bb166870812aabd0a2407fcad0ea"}, 0xd8) r1 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x24e9, &(0x7f0000000180)={0x0, 0x7648, 0x10, 0x3, 0xb8, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = socket(0x21, 0x4, 0x9) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x40004005) r3 = syz_io_uring_setup(0xc8f, &(0x7f0000000380)={0x0, 0x5eab, 0x4, 0x0, 0x1e0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, &(0x7f00000004c0)={0x57, 0x2}) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000500)) syz_io_uring_setup(0x35d7, &(0x7f0000000540)={0x0, 0xab3c, 0x20, 0x2, 0x135}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) io_uring_setup(0x4fcd, &(0x7f0000000680)={0x0, 0x96c9, 0x1, 0x2, 0x88, 0x0, r3}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000700)={0xffffffffffffffff, 0x4d4, 'vAG', 0x40, 0x9}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780)) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000800)) 03:20:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r0, 0x6, 0xd37d71f4144afd18, &(0x7f0000000080)=0x64d, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x3e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @none}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x6f5a5639}}, './file0/file0\x00'}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/17, 0x11, 0x1, &(0x7f0000000280)=""/160, 0xa0}, &(0x7f0000000380)=0x40) bind$bt_sco(r0, &(0x7f00000003c0), 0x8) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000400)={0xaa14, 0xc}) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='io.weight\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001980)={0x134, 0x0, &(0x7f00000017c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x36}, @fd}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @release, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001540)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x2e}}, &(0x7f00000015c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001600)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x2, 0x25}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001680)={0x0, 0x18, 0x38}}, 0x400}, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001700)={@fda={0x66646185, 0x6, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f00000016c0)=""/43, 0x2b, 0x0, 0xa}, @fda={0x66646185, 0xa, 0x1, 0x38}}, &(0x7f0000001780)={0x0, 0x20, 0x48}}}], 0x68, 0x0, &(0x7f0000001900)="56fd6738083fb7fc5c31c623a0002de364d6493d146e5ef1fde579dc8b9267198bc7726e4d23d324a028a3512b0361c4c35de64113eb49a2270f5797de548162d952c22b0f030f64b2f3369adf406593037b536bb71c0d53c078d24fe17b9572022c98dd370f211d"}) bind$bt_hci(r3, &(0x7f00000019c0)={0x1f, 0x1}, 0x6) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x3, &(0x7f0000001a00)=0xff, 0x4) perf_event_open(&(0x7f0000001a40)={0xa, 0x80, 0x81, 0x8, 0x40, 0x9, 0x0, 0x7, 0x4484, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4c4, 0x4, @perf_config_ext={0x101, 0x3}, 0x1, 0x400, 0x8, 0x4, 0x2, 0x101, 0x1, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001ac0), 0x240000, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000001b40)={&(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001b80), 0x2, 0x0) 03:20:29 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000040)={'\x00', 0xcd9f02e, 0x1, 0x5}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = openat$cgroup_pressure(r0, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x5442}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000200)={{0xfff}, {0x51, 0x80}, 0x3}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9f507) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0\x00'}) r6 = openat$cgroup_subtree(r4, &(0x7f0000000300), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x140008, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@cache_mmap}, {@posixacl}, {@cache_none}, {@posixacl}], [{@obj_role={'obj_role', 0x3d, 'io.pressure\x00'}}]}}) r7 = openat$cgroup_ro(r4, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f0000000440)) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000540)) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getresuid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x200000, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, 'cgroup.subtree_control\x00'}}, {@mmap}, {@nodevmap}, {@noextend}, {@mmap}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r9}}]}}) 03:20:29 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x204002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) syz_io_uring_complete(0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x1, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8, 0x700, 0x6, 0x401}}) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000340)=0x7) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000380)={'custom1\x00'}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) [ 85.965702] audit: type=1400 audit(1737775229.772:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:20:29 executing program 6: r0 = socket(0x25, 0x80000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x80000000, 0x4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x4000010, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x200, 0x105000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x7, 0x7, 0xc, 0x10, "241550c25c682447674e0fcd1fd0aa825d2b799c37f0cd4203efe847f531a5bc12791e3fe54cbb3a2408e2f95a64b939c42752abe719eb11ab75f5d491baeb19", "4122a5ead7ee9f17b65bd10f126c77076de79469345837f72271c778049e0fca", [0x7ff, 0xfffffffffffffffa]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x4002) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7fffffff, 0xbbf, 0x0, 0x4, 0x1d, 0x0, "5a92ba0204143551195fdbca66d74e6ba8bb4d07b21244fa265a778a48b050c507f217ec0a6d5098f6397e2306095d853e74a1a09d3263e775a4c981c36eb385", "5f02717c38f98b1de4f45fee5631a2ae897bd607cc65a72c1de1f51b2a0c70cc2a72c3b657d36399171ff549fbac462441423b0979922fd73929e5f38ea5fa67", "a634b285ab68255efd57bff49f8816445ea2b19ad740fd09821b28a1ec4591c9", [0x2]}) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r8, 0x4c08, 0x5) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0xdc2) r9 = syz_io_uring_complete(r1) ioctl$LOOP_CLR_FD(r9, 0x4c01) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000380)={0x8, 0x81, 0x7f, 0x2, 0x1}, 0x14) 03:20:29 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x4, 0x80, 0x1, 0xfffffff9, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x69, 0x10, 0x2, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x29, 0x4, 0x4, 0x100, 0x4, @local, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xb3, 0x1, 0x8000, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r2, 0x29, 0x1f, 0x80, 0x401, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @private1, 0x10, 0x8000, 0xfffff001, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r3, 0x4, 0x20, 0x1f, 0x3f, 0x10, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x7, 0x217d}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x2f, 0x0, 0x0, 0xc0, 0x2, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x700, 0x7, 0x6}}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x2f, 0x3f, 0x75, 0x8, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x80, 0x80, 0x6, 0xdd4}}) bind$bt_hci(r4, &(0x7f00000005c0)={0x1f, 0x4, 0x4}, 0x6) getsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000600), &(0x7f0000000640)=0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f00000006c0), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6gre0\x00', r1, 0x2f, 0x4, 0x93, 0x3af484f7, 0x2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x16ccf07ceb05b88f, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'sit0\x00', r5, 0x29, 0x3, 0x5, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x6, 0x2, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', r9, 0x2b, 0x3, 0xfb, 0xffffffff, 0x20, @dev={0xfe, 0x80, '\x00', 0x1c}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x8}}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6tnl0\x00', r1, 0x2f, 0x3f, 0x1, 0x8, 0x47, @empty, @private1, 0x8, 0x700, 0x3, 0x6}}) socketpair(0x1e, 0x6, 0x4, &(0x7f0000000a00)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000a40)={0x6, 'ipvlan1\x00', {0x6}, 0x3f}) [ 87.588520] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.594049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.596999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.605227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.609908] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.615541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.647686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.657856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.665820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.677802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.682518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.685041] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.687599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.693162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.695386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.702005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.709586] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.713171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.775956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.781656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.783934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.790105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.794592] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.798733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.838766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.849720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.851482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.855840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.861999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.862655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.864534] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.866728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.871248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.877492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.883724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.886576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.916662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.921088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.940702] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.943706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.953557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.955170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.971464] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.975685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.979587] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.981087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.997714] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.998697] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.664842] Bluetooth: hci0: command tx timeout [ 89.729198] Bluetooth: hci1: command tx timeout [ 89.793522] Bluetooth: hci2: command tx timeout [ 89.857244] Bluetooth: hci3: command tx timeout [ 89.984844] Bluetooth: hci5: command tx timeout [ 89.987082] Bluetooth: hci4: command tx timeout [ 90.049454] Bluetooth: hci7: command tx timeout [ 90.050725] Bluetooth: hci6: command tx timeout [ 91.712489] Bluetooth: hci0: command tx timeout [ 91.776916] Bluetooth: hci1: command tx timeout [ 91.840841] Bluetooth: hci2: command tx timeout [ 91.906375] Bluetooth: hci3: command tx timeout [ 92.032443] Bluetooth: hci5: command tx timeout [ 92.032990] Bluetooth: hci4: command tx timeout [ 92.096588] Bluetooth: hci6: command tx timeout [ 92.097152] Bluetooth: hci7: command tx timeout [ 93.760920] Bluetooth: hci0: command tx timeout [ 93.824423] Bluetooth: hci1: command tx timeout [ 93.888462] Bluetooth: hci2: command tx timeout [ 93.952426] Bluetooth: hci3: command tx timeout [ 94.081487] Bluetooth: hci5: command tx timeout [ 94.082133] Bluetooth: hci4: command tx timeout [ 94.144516] Bluetooth: hci7: command tx timeout [ 94.145027] Bluetooth: hci6: command tx timeout [ 95.808670] Bluetooth: hci0: command tx timeout [ 95.872500] Bluetooth: hci1: command tx timeout [ 95.936522] Bluetooth: hci2: command tx timeout [ 96.000534] Bluetooth: hci3: command tx timeout [ 96.129433] Bluetooth: hci4: command tx timeout [ 96.130765] Bluetooth: hci5: command tx timeout [ 96.192579] Bluetooth: hci7: command tx timeout [ 96.193734] Bluetooth: hci6: command tx timeout [ 151.010021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.013768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.015452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.021128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.024757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.026388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.128894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.130815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.136995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.138129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.141868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.143623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.144665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.145472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.146097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.149728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.155602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.157346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.160196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.162479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.163135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.163857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.164758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.170200] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.184485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.193726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.195503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.197909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.199666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.207532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.215867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.218855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.230556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.232758] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.234808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.241929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.304827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.307667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.311970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.314884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.316672] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.317701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.379445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.406673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.419807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.430610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.437481] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.443503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.088397] Bluetooth: hci0: command tx timeout [ 153.216492] Bluetooth: hci2: command tx timeout [ 153.217250] Bluetooth: hci1: command tx timeout [ 153.280399] Bluetooth: hci4: command tx timeout [ 153.280997] Bluetooth: hci3: command tx timeout [ 153.344716] Bluetooth: hci6: command tx timeout [ 153.345497] Bluetooth: hci5: command tx timeout [ 153.536414] Bluetooth: hci7: command tx timeout [ 155.137433] Bluetooth: hci0: command tx timeout [ 155.265040] Bluetooth: hci2: command tx timeout [ 155.265549] Bluetooth: hci1: command tx timeout [ 155.328406] Bluetooth: hci3: command tx timeout [ 155.328865] Bluetooth: hci4: command tx timeout [ 155.395542] Bluetooth: hci5: command tx timeout [ 155.395993] Bluetooth: hci6: command tx timeout [ 155.584378] Bluetooth: hci7: command tx timeout [ 157.184700] Bluetooth: hci0: command tx timeout [ 157.312516] Bluetooth: hci1: command tx timeout [ 157.313012] Bluetooth: hci2: command tx timeout [ 157.376450] Bluetooth: hci4: command tx timeout [ 157.377038] Bluetooth: hci3: command tx timeout [ 157.440423] Bluetooth: hci6: command tx timeout [ 157.440889] Bluetooth: hci5: command tx timeout [ 157.632418] Bluetooth: hci7: command tx timeout [ 159.233327] Bluetooth: hci0: command tx timeout [ 159.360570] Bluetooth: hci1: command tx timeout [ 159.361067] Bluetooth: hci2: command tx timeout [ 159.424376] Bluetooth: hci4: command tx timeout [ 159.424820] Bluetooth: hci3: command tx timeout [ 159.488450] Bluetooth: hci5: command tx timeout [ 159.488904] Bluetooth: hci6: command tx timeout [ 159.680493] Bluetooth: hci7: command tx timeout [ 213.007739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.012522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.016737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.022267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.025910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.028090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.197000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.203122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.205149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.208957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.213268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.215269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.217425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.219879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.223477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.223977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.226651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.228637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.241448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.249947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.252537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.269889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.273017] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.274921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.340092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.356933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.362778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.363031] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.374558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.376537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.386475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.393818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.413770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.421777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.423800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.425927] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.427008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.427872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.428646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.433629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.436174] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.438103] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.449495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.454647] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.455930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.459612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.466050] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.476999] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.105518] Bluetooth: hci0: command tx timeout [ 215.296376] Bluetooth: hci2: command tx timeout [ 215.297167] Bluetooth: hci1: command tx timeout [ 215.361008] Bluetooth: hci3: command tx timeout [ 215.488562] Bluetooth: hci7: command tx timeout [ 215.554373] Bluetooth: hci5: command tx timeout [ 215.555093] Bluetooth: hci4: command tx timeout [ 215.616690] Bluetooth: hci6: command tx timeout [ 217.153552] Bluetooth: hci0: command tx timeout [ 217.345431] Bluetooth: hci2: command tx timeout [ 217.345914] Bluetooth: hci1: command tx timeout [ 217.409410] Bluetooth: hci3: command tx timeout [ 217.537426] Bluetooth: hci7: command tx timeout [ 217.601413] Bluetooth: hci5: command tx timeout [ 217.601882] Bluetooth: hci4: command tx timeout [ 217.665455] Bluetooth: hci6: command tx timeout [ 219.201555] Bluetooth: hci0: command tx timeout [ 219.393353] Bluetooth: hci1: command tx timeout [ 219.393815] Bluetooth: hci2: command tx timeout [ 219.457389] Bluetooth: hci3: command tx timeout [ 219.586305] Bluetooth: hci7: command tx timeout [ 219.649449] Bluetooth: hci4: command tx timeout [ 219.649947] Bluetooth: hci5: command tx timeout [ 219.712347] Bluetooth: hci6: command tx timeout [ 221.248721] Bluetooth: hci0: command tx timeout [ 221.441375] Bluetooth: hci2: command tx timeout [ 221.442053] Bluetooth: hci1: command tx timeout [ 221.504392] Bluetooth: hci3: command tx timeout [ 221.632407] Bluetooth: hci7: command tx timeout [ 221.697228] Bluetooth: hci5: command tx timeout [ 221.697889] Bluetooth: hci4: command tx timeout [ 221.760497] Bluetooth: hci6: command tx timeout [ 275.597844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.603115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.606772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.616236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.621547] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.629190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.663821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.671209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.673908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.685345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.689621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.694611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.699592] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.701703] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.706581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.710184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.712982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.714844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.769833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.794545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.811720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.816539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.818109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.820865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.825182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.829961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.832728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.835468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.837644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.842707] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.844121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.846701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.850714] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.853034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.858474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.885651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.925248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.942805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.949600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.958436] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.973988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.979964] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.989004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.990847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.011140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.034723] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.058893] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.069699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.696387] Bluetooth: hci0: command tx timeout [ 277.825513] Bluetooth: hci1: command tx timeout [ 277.826575] Bluetooth: hci2: command tx timeout [ 278.016435] Bluetooth: hci4: command tx timeout [ 278.017506] Bluetooth: hci3: command tx timeout [ 278.080882] Bluetooth: hci6: command tx timeout [ 278.080958] Bluetooth: hci5: command tx timeout [ 278.144617] Bluetooth: hci7: command tx timeout [ 279.745414] Bluetooth: hci0: command tx timeout [ 279.872339] Bluetooth: hci2: command tx timeout [ 279.873529] Bluetooth: hci1: command tx timeout [ 280.064453] Bluetooth: hci3: command tx timeout [ 280.064482] Bluetooth: hci4: command tx timeout [ 280.128449] Bluetooth: hci6: command tx timeout [ 280.128491] Bluetooth: hci5: command tx timeout [ 280.194336] Bluetooth: hci7: command tx timeout [ 281.792421] Bluetooth: hci0: command tx timeout [ 281.920455] Bluetooth: hci1: command tx timeout [ 281.921397] Bluetooth: hci2: command tx timeout [ 282.112471] Bluetooth: hci3: command tx timeout [ 282.113685] Bluetooth: hci4: command tx timeout [ 282.176416] Bluetooth: hci5: command tx timeout [ 282.177475] Bluetooth: hci6: command tx timeout [ 282.242301] Bluetooth: hci7: command tx timeout [ 283.840393] Bluetooth: hci0: command tx timeout [ 283.968361] Bluetooth: hci1: command tx timeout [ 283.969449] Bluetooth: hci2: command tx timeout [ 284.162923] Bluetooth: hci4: command tx timeout [ 284.162942] Bluetooth: hci3: command tx timeout [ 284.225367] Bluetooth: hci6: command tx timeout [ 284.225441] Bluetooth: hci5: command tx timeout [ 284.289047] Bluetooth: hci7: command tx timeout [ 337.684549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.687706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.689088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.693833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.698806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.701172] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.932160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.938762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.941632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.943207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.944636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.945931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.948818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.953126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.957776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.960783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.962757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.965969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.081193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.083503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.092676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.094208] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.132791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.134611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.145107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.157506] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.161471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.170477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.172661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.174746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.208685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.211153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.234842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.237312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.255085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.266533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.274876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.282514] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.302666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.302793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.308822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.311604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.313918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.317956] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.321186] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.327722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.327794] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.340585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.778325] Bluetooth: hci0: command tx timeout [ 340.032384] Bluetooth: hci1: command tx timeout [ 340.032428] Bluetooth: hci2: command tx timeout [ 340.289319] Bluetooth: hci4: command tx timeout [ 340.352639] Bluetooth: hci3: command tx timeout [ 340.418418] Bluetooth: hci6: command tx timeout [ 340.418799] Bluetooth: hci7: command tx timeout [ 340.480393] Bluetooth: hci5: command tx timeout [ 341.824486] Bluetooth: hci0: command tx timeout [ 342.080359] Bluetooth: hci2: command tx timeout [ 342.080856] Bluetooth: hci1: command tx timeout [ 342.336324] Bluetooth: hci4: command tx timeout [ 342.400834] Bluetooth: hci3: command tx timeout [ 342.464318] Bluetooth: hci6: command tx timeout [ 342.464766] Bluetooth: hci7: command tx timeout [ 342.530282] Bluetooth: hci5: command tx timeout [ 343.872435] Bluetooth: hci0: command tx timeout [ 344.129475] Bluetooth: hci1: command tx timeout [ 344.129497] Bluetooth: hci2: command tx timeout [ 344.386409] Bluetooth: hci4: command tx timeout [ 344.448426] Bluetooth: hci3: command tx timeout [ 344.513459] Bluetooth: hci7: command tx timeout [ 344.513681] Bluetooth: hci6: command tx timeout [ 344.576971] Bluetooth: hci5: command tx timeout [ 345.921336] Bluetooth: hci0: command tx timeout [ 346.176356] Bluetooth: hci2: command tx timeout [ 346.177457] Bluetooth: hci1: command tx timeout [ 346.433410] Bluetooth: hci4: command tx timeout [ 346.496412] Bluetooth: hci3: command tx timeout [ 346.560431] Bluetooth: hci7: command tx timeout [ 346.560491] Bluetooth: hci6: command tx timeout [ 346.624396] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 03:25:31 Registers: info registers vcpu 0 RAX=ffffffff87f0bca0 RBX=ffffffff87f15750 RCX=ffffffff814f3e3e RDX=fffffbfff0fe15e5 RSI=0000000000000008 RDI=ffffffff87f0af20 RBP=ffff888034cf2700 RSP=ffff88806ce09b68 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000001 R12=ffff888034cf1bc0 R13=0000000000000000 R14=ffffffff86405170 R15=0000000000000000 RIP=ffffffff84ab2f40 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f412e217540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f412e334710 CR3=0000000028262000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff8684b88e RBX=0000000000000001 RCX=ffffffff8684b88e RDX=0000000000000000 RSI=ffffffff8684b83a RDI=ffffffff864d1e7c RBP=ffff8880264472d0 RSP=ffff888026447208 R8 =ffffffff8684b83a R9 =ffff8880264472b8 R10=000000000003ab7c R11=00000000000241cd R12=ffff8880264472d8 R13=ffff8880264472c0 R14=ffff8880264472b9 R15=ffff888026447278 RIP=ffffffff8134910a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb976c2c368 CR3=000000002d744000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000