Warning: Permanently added '[localhost]:43887' (ECDSA) to the list of known hosts. 2025/01/30 11:03:45 fuzzer started 2025/01/30 11:03:46 dialing manager at localhost:36977 syzkaller login: [ 72.854203] cgroup: Unknown subsys name 'net' [ 72.944981] cgroup: Unknown subsys name 'cpuset' [ 72.958884] cgroup: Unknown subsys name 'rlimit' 2025/01/30 11:04:03 syscalls: 206 2025/01/30 11:04:03 code coverage: enabled 2025/01/30 11:04:03 comparison tracing: enabled 2025/01/30 11:04:03 extra coverage: enabled 2025/01/30 11:04:03 setuid sandbox: enabled 2025/01/30 11:04:03 namespace sandbox: enabled 2025/01/30 11:04:03 Android sandbox: enabled 2025/01/30 11:04:03 fault injection: enabled 2025/01/30 11:04:03 leak checking: enabled 2025/01/30 11:04:03 net packet injection: enabled 2025/01/30 11:04:03 net device setup: enabled 2025/01/30 11:04:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 11:04:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 11:04:03 USB emulation: enabled 2025/01/30 11:04:03 hci packet injection: enabled 2025/01/30 11:04:03 wifi device emulation: enabled 2025/01/30 11:04:03 802.15.4 emulation: enabled 2025/01/30 11:04:03 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 11:04:04 starting 8 fuzzer processes 11:04:04 executing program 0: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x475) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x67, 0x4283735, 0x4, 0x37, 0x2bb, 0x3]}, &(0x7f0000000080)=0x78) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f00000000c0)={0x1, 0xf9, 0x7, 0x4, 0xff, 0x2, 0x7}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth1_to_batadv\x00', 0x200, 0x7fffffff, 0x38e}) r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x80, 0x80040) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000200)) socketpair(0xf, 0x3, 0x3f, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x8, 0x6cb7, 0x6, 0xe71, 0x7]}, &(0x7f0000000300)=0x54) socketpair(0x22, 0x5, 0xc54, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000380)={0x1, 'batadv_slave_0\x00', 0x3}, 0x18) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000500)) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000540)=@fragment={0x0, 0x0, 0xe0, 0x1, 0x0, 0x6, 0x64}, 0x8) r3 = syz_io_uring_complete(0x0) getpeername$inet6(r3, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev}, &(0x7f00000005c0)=0x1c) socketpair(0xb987032b90039133, 0x3, 0x9, &(0x7f0000000600)) socketpair(0x1, 0x80000, 0x3ff, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000680)={0x2, 'rose0\x00', 0x4}, 0x18) r5 = socket$inet(0x2, 0x800, 0xe1) recvfrom$inet(r5, &(0x7f00000006c0)=""/175, 0xaf, 0x12000, &(0x7f0000000780)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) 11:04:04 executing program 1: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x1ff, 0x8001, 0x5}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008804}, 0x10000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x41) rt_sigaction(0x41, &(0x7f0000000380)={&(0x7f0000000300)="c442099094caffefffff430f9effc4e1f5ee6b40410f6a9970bd982040d9b70b000000c4e17d5be90f0d16c461f85228440f18d60f94f0", 0xc0000000, &(0x7f0000000340)="c1cc00c481782b01c46279f7560067420f83d70000002e36430f49d7c4827d1365db3644d3260fbc36c4a3a15ed200c4a2c59939", {[0xfffffffffffffffb]}}, &(0x7f0000000480)={&(0x7f00000003c0)="c402f920920b0000002e670f01fb66f24b0f2afe26660f38005989c4a2790e0e660f38288443cf000000470f296f0ec46379171908650f43088f49309735ffefffff", 0x0, &(0x7f0000000440)="6741d2f8410ff454a7c6c4e2fd3564a0ff67660f382927f36dc4e3656d7404002af0084bf845a33b188b1b343e450dc421f810820900000045dbe1"}, 0x8, &(0x7f00000004c0)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) rt_sigaction(0x26, &(0x7f0000000600)={&(0x7f0000000580)="c463e95fc25467420f850000008064400fffe86666410fc1c266f240e0008f2918016ed247d2cc26f30f1ecec4618d6492be000000c4e2c90507", 0x40000003, &(0x7f00000005c0)="c442090c70a9f34790652e6466490f7efdc4e1796f4a07440ff7f6660ffe719b411a08f0420855003e0f5ed3c4e2d1b68f70715054", {[0x80]}}, 0x0, 0x8, &(0x7f0000000640)) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000680)=0x3, 0x4) socketpair(0x2a, 0x1, 0x2, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000840), 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x0, [0x3, 0x5, 0x5]}, &(0x7f0000000bc0)=0x44) socketpair(0x5, 0x800, 0x2, &(0x7f0000000c00)={0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) [ 91.128518] audit: type=1400 audit(1738235044.920:7): avc: denied { execmem } for pid=269 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:04:04 executing program 2: r0 = socket$inet(0x2, 0x4, 0x7fffffff) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='dummy0\x00', 0x4000000, 0x2f, 0x1000}) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) socket$inet(0x2, 0x5, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x24008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x100, 0x70bd2a, 0x1, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x8000) openat$cgroup_type(r7, &(0x7f0000000580), 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x104100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x4000004) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000006c0)={0x2, 'geneve0\x00', 0x3}, 0x18) r8 = syz_io_uring_complete(0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000700)={0x0, 'wg1\x00', 0x3}, 0x18) socket$inet(0x2, 0x80000, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) 11:04:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40181}, 0x6f3cea8becd5632c) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1b, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18004}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x40840) r5 = pidfd_getfd(r3, r2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe984}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x681}, @BATADV_ATTR_VLANID={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x44804) r6 = pidfd_getfd(r3, r2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48100}, 0x4000000) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000600)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010101}, 0xc) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000840)={0x20, 0x0, &(0x7f0000000740)=[@dead_binder_done, @request_death={0x400c630e, 0x3}, @exit_looper], 0x85, 0x0, &(0x7f0000000780)="4d90ee2073992ce7a6423004d62f2660eb96f6f1a506e1c236b1e8eef64c2f0b1de01df39e85377ae165f1f1a26e96d69f1dcf4ced0476151509011dabff9c96155a25198e76a3b1a62ecf7287d006542c143b70f0b04b47fe018ce27e3a77335e9d6eadca5a1ebe61a8517e613e4b4b4d988d28ffec189f7a916c2d69801ccd50ee7d9163"}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r6) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = pidfd_getfd(r6, r3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4084) 11:04:04 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x4e21, 0x8, 0x4e21, 0x20, 0xa, 0x0, 0x20, 0x2b, r2, r3}, {0x2, 0x1, 0x401, 0x2, 0x0, 0x4, 0xff, 0x40}, {0x0, 0x0, 0x0, 0x1000}, 0x4, 0x6e6bb4, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0xa, @in6=@remote, 0x0, 0x0, 0x2, 0x1, 0x7, 0x5}}, 0xe8) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20008000) pidfd_getfd(r1, r0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0xa5f2, 0x4e20, 0x8, 0x2, 0x0, 0xa0, 0x67, r2, r3}, {0x10001, 0x5, 0x3, 0x2, 0x0, 0x400, 0x4, 0xd4b2}, {0x3, 0x100000000, 0x7, 0x4f}, 0x1, 0x6e6bb8, 0x2, 0x0, 0x2}, {{@in6=@loopback, 0x4d3, 0xff}, 0xa, @in=@local, 0x34ff, 0x3, 0x1, 0x8, 0x2, 0xfffffff8, 0x4}}, 0xe8) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/cgroup\x00') r7 = pidfd_getfd(r0, r6, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) geteuid() r8 = pidfd_getfd(r0, r6, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xf, 0x0, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r9, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xda63}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xeb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4004851) mount$9p_fd(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x8000, &(0x7f0000000900)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@uname={'uname', 0x3d, '@\\+('}}, {@access_user}, {@fscache}, {@access_user}, {@nodevmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x35, 0x62, 0x66, 0x64, 0x63, 0x37, 0x39], 0x2d, [0x3, 0x31, 0x64, 0x65], 0x2d, [0x38, 0x63, 0x66, 0x50], 0x2d, [0x38, 0x30, 0x31, 0x66], 0x2d, [0x63, 0x0, 0x62, 0x36, 0x65, 0x33, 0x65, 0x35]}}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@audit}]}}) 11:04:05 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @private=0xa010102}, 0x104, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1909, 0x5, 0x9}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x1a, 0x15, 0x10, 0x19, 0x2, 0x3, 0x6, 0x9c}}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0xfff9, 0x4e23, 0x4, 0x0, 0x80, 0x40, 0x2f}, {0xfffffffffffffff9, 0x0, 0x4, 0x3, 0x0, 0x40, 0x80000001, 0xca28}, {0x1, 0x3, 0x87}, 0x8001, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@remote, 0x4d4, 0x6c}, 0x2, @in6=@empty, 0x3500, 0x0, 0xae60c85da80b750, 0x9, 0x5, 0x4, 0x8}}, 0xe8) getsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000000200)=""/11, &(0x7f0000000240)=0xb) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x95, "03110e3c1b789661d2c788d7e7d7c9215adcdfc98eb98f594c5a80ceaebbf66c94d65706458fcd9e9df012eec936fd968ddda9c0a205188bec8b57c4efca2bb06b29484599ad7a5da8cda72dd62e237050cf6986974b25a5aed734019727ed433ce48bca612ee2ec3dacced97d05edf817d867246e5643461636842950a42db22f1cbd7850b079dddcd8cc890aa247faf5bc6dc68a"}, &(0x7f0000000340)=0xb9) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000380)="df3d342ecc7010aa469cbe6b98cb38f8902ac78466945d3abf9de118bf8fbf54324a5ab81e2518309db96b3e6e2c1cc9bd5a6eb4a2ca00c4b5bc1d415cd28c545d4290e746bad72058af110ac6d6e613b35cde3eb56f9c2928b4ab12da42899be3c246de9bb14fcc0ea7d739d2c2cf84e0c95099af43bdb611ba7dc735f6873684c03b4a09e4d1eb450cb32bcc175b6ad783dd1afaf2e94d8f15ec365c0f8c6313fe84e4c654e19edb7d52f6cf093e6e39c082a4d82eea3b207ca3d3055a5401da79789cea", 0xc5) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x907}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040844}, 0x4018) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000005c0)={{0xff, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x2, 'wrr\x00', 0x30, 0x0, 0x6d}, {@loopback, 0x4e20, 0x3, 0x8f6, 0xff, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000640)={{0x2c, @multicast2, 0x4e23, 0x4, 'dh\x00', 0x20, 0xef5f, 0x25}, {@multicast2, 0x4e23, 0x2000, 0x1f, 0x1f, 0xd5e}}, 0x44) socketpair(0x1, 0xa, 0xffff0000, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x880) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000800)={{0x2f, @multicast2, 0x4e23, 0x2, 'wlc\x00', 0x1, 0x2381, 0x1a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x8000, 0x8000, 0x2}}, 0x44) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x0, [0x8, 0x0, 0x80000001]}, &(0x7f0000000900)=0x44) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000940)={0xdc5ebf0dcf8224d3, @broadcast, 0x4e21, 0x1, 'lc\x00', 0x17, 0x0, 0x3d}, 0x2c) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000980)={0x0, 0x1, {0x5, 0x74a2, 0x2, 0x7, 0x9, 0xb8e6, 0x5, 0xa4e7, 0x1}}) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x601, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000804) 11:04:05 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="b6a0c9ea23b3f19717e24318496acf8b4b666c7fb964f4a70a1d47da81bd210a6e73235ea5c854d895d820e1d379b52482c16676e429b84653b6dbd195", 0x3d}], 0x1}, 0x0, 0x10, 0x1}, 0x3) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008010) r2 = io_uring_setup(0x689, &(0x7f0000000200)={0x0, 0x1522, 0x0, 0x0, 0x48, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x40010, r2, 0x10000000) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000280)=@srh={0x32, 0x12, 0x4, 0x9, 0x1, 0x68, 0x9, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, @local, @remote, @private2, @private2, @remote, @remote, @mcast1]}, 0x98) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x3, {{0xa, 0x4e20, 0x7, @remote, 0x3}}}, 0x88) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4, 0x9e, 0x0, 0x0, 0x1, 0xc, "d86fd52cfc91de991a45b75d2c7a4443f1209af63d2d1722f5ec1951beba69503291ce5f70931888cdf48a1711a98489c395415cf6b96cdd605dea16d75e78ab", "3443ee63483dedc9675d57f497b158b67f6d54c47fd5e4bc753f9c37b42a4e65993a4a29f159c4dbefe361998a16a294da891422f72cffba32c8f10e5ec5277c", "a693955f293d9b97a55680634468dcd363f3057d51edd82c379255035d675573", [0x4, 0x10001]}) r3 = syz_io_uring_complete(r0) r4 = pidfd_getfd(r1, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x1440, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@mmap}, {@loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x32, 0x66, 0x64, 0x36, 0x62, 0x65], 0x2d, [0x56, 0x34, 0x63, 0x39], 0x2d, [0x33, 0x54, 0x32, 0x61], 0x2d, [0x35, 0x35, 0x32, 0x66], 0x2d, [0x31, 0x34, 0x31, 0x33, 0x3, 0x37, 0x37, 0x33]}}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@dont_hash}]}}) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc041) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x30, r2, 0x10000000) r7 = syz_io_uring_complete(r0) syz_io_uring_submit(0x0, r6, &(0x7f0000000800)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r7, 0x0, &(0x7f00000007c0)='./file0\x00', 0x1, 0xc0000, 0x23456}, 0x9) 11:04:05 executing program 7: ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'wg0\x00', @ifru_hwaddr=@link_local}}) socketpair(0x7, 0x800, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e23, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xc, {0x2, 0x4e23, @local}, 'veth0_to_bond\x00'}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0x2, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000300)="9f348db7c5a82d87e2423aa9b4fd98f71e312d6a4b1a464fbf787b09250aba9091854766c5b25463fb675784a83c8d3c1baf78debf5ded1915217e1425343fe0a40c39e253cfd14418b7d26fe08d0fa32bf5a2bc0fa36193bbe80958534655efbf563c2af35176e4ea97ab3eb1889ba6a852acb356b537053e36ec4cb7f52db773db45a516f257bf782863a2743f9f22119d9ea394564be5e6b25ff7de20fc4adcc46bc5707fbd3049390f820077fd", 0xaf}, {&(0x7f00000003c0)="555a6b373b55460c485bc49c69697c43f246edf04fa91e846cf37b6c1c8a47be1e0a11f3624d426235fff65622e1bfb44decb0beb3bc4e7f494d0983283b1f793505e9872e04d4a88d8c67f46432f5525c8a8df4e14b20a49eeea6494d1a362eb4c9513032333f313cb17bb1ca499b", 0x6f}, {&(0x7f0000000440)="5a3175e5fbaa74d80e9ff5a4a656aebe8e4e79d246013522e54c19ea571ebcab27a37264e8811049313c91bd31e44cf5aab82fcafb31d339ebeb1b92d6710113ae2a3cf049ddf2ab5266f3dce700b47ccc6c70be31e6e32d5b88dfffb104617673f55712763a19deba59676ce6e38d7641", 0x71}], 0x3, 0xc, 0x0, {0x1}}, 0x5b) r2 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000540)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000580)=""/69, &(0x7f0000000600)=0x45) r4 = pidfd_getfd(r3, r3, 0x0) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000640)=""/189, &(0x7f0000000700)=0xbd) r5 = syz_io_uring_complete(0x0) openat$cgroup_procs(r5, &(0x7f0000000740)='tasks\x00', 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)="1259c65af10ad8ea3ae1178cb3eb30f1be9b119dd73f110c36", 0x19) ioctl$LOOP_CLR_FD(r4, 0x4c01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs2/binder0\x00', 0x800, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000800), &(0x7f0000000840)=0xc) [ 92.629666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.632506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.635167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.635287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.641255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.641350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.646225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.647716] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.652948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.659789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.679246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.683631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.742628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.748025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.751024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.771030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.788657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.793326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.806305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.842936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.856766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.873041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.873897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.922330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.923419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.926135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.927199] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.928328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.929938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.937446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.939640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.942038] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.948898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.951256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.953412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.981776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.003953] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.004914] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.006195] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.009952] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.032681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.033736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.045456] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.046907] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.047889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.102258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.105076] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.110394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.698418] Bluetooth: hci1: command tx timeout [ 94.763231] Bluetooth: hci0: command tx timeout [ 94.889943] Bluetooth: hci2: command tx timeout [ 95.145968] Bluetooth: hci3: command tx timeout [ 95.210174] Bluetooth: hci4: command tx timeout [ 95.211294] Bluetooth: hci5: command tx timeout [ 95.211353] Bluetooth: hci7: command tx timeout [ 95.531896] Bluetooth: hci6: command tx timeout [ 96.746881] Bluetooth: hci1: command tx timeout [ 96.816877] Bluetooth: hci0: command tx timeout [ 96.939040] Bluetooth: hci2: command tx timeout [ 97.194370] Bluetooth: hci3: command tx timeout [ 97.260918] Bluetooth: hci7: command tx timeout [ 97.261455] Bluetooth: hci4: command tx timeout [ 97.262197] Bluetooth: hci5: command tx timeout [ 97.578045] Bluetooth: hci6: command tx timeout [ 98.793887] Bluetooth: hci1: command tx timeout [ 98.858112] Bluetooth: hci0: command tx timeout [ 98.985962] Bluetooth: hci2: command tx timeout [ 99.243333] Bluetooth: hci3: command tx timeout [ 99.306860] Bluetooth: hci5: command tx timeout [ 99.307057] Bluetooth: hci4: command tx timeout [ 99.307429] Bluetooth: hci7: command tx timeout [ 99.627129] Bluetooth: hci6: command tx timeout [ 100.841997] Bluetooth: hci1: command tx timeout [ 100.905960] Bluetooth: hci0: command tx timeout [ 101.034992] Bluetooth: hci2: command tx timeout [ 101.290083] Bluetooth: hci3: command tx timeout [ 101.356918] Bluetooth: hci5: command tx timeout [ 101.357481] Bluetooth: hci7: command tx timeout [ 101.368818] Bluetooth: hci4: command tx timeout [ 101.678840] Bluetooth: hci6: command tx timeout [ 152.721325] syz-executor.1 (280) used greatest stack depth: 24160 bytes left [ 155.034982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.036382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.038655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.051948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.057028] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.058316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.255187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.257695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.264023] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.272841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.274530] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.275752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.317302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.319237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.327081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.330962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.334021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.336171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.340596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.348184] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.349641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.352621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.353983] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.358039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.411178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.413706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.415589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.425914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.429188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.445855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.463006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.464676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.465911] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.475654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.476931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.478853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.481494] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.484156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.484931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.512756] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.520962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.586602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.587668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.594938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.595734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.623800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.627485] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.629998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.162917] Bluetooth: hci0: command tx timeout [ 157.354883] Bluetooth: hci1: command tx timeout [ 157.418338] Bluetooth: hci3: command tx timeout [ 157.418383] Bluetooth: hci2: command tx timeout [ 157.545936] Bluetooth: hci7: command tx timeout [ 157.545967] Bluetooth: hci4: command tx timeout [ 157.673944] Bluetooth: hci5: command tx timeout [ 157.761532] Bluetooth: hci6: command tx timeout [ 159.223131] Bluetooth: hci0: command tx timeout [ 159.401914] Bluetooth: hci1: command tx timeout [ 159.466185] Bluetooth: hci3: command tx timeout [ 159.466254] Bluetooth: hci2: command tx timeout [ 159.594008] Bluetooth: hci4: command tx timeout [ 159.594067] Bluetooth: hci7: command tx timeout [ 159.721944] Bluetooth: hci5: command tx timeout [ 159.785864] Bluetooth: hci6: command tx timeout [ 161.258099] Bluetooth: hci0: command tx timeout [ 161.449885] Bluetooth: hci1: command tx timeout [ 161.514565] Bluetooth: hci2: command tx timeout [ 161.514645] Bluetooth: hci3: command tx timeout [ 161.642132] Bluetooth: hci7: command tx timeout [ 161.642759] Bluetooth: hci4: command tx timeout [ 161.771889] Bluetooth: hci5: command tx timeout [ 161.833981] Bluetooth: hci6: command tx timeout [ 163.307851] Bluetooth: hci0: command tx timeout [ 163.498016] Bluetooth: hci1: command tx timeout [ 163.562890] Bluetooth: hci2: command tx timeout [ 163.563439] Bluetooth: hci3: command tx timeout [ 163.691414] Bluetooth: hci7: command tx timeout [ 163.692030] Bluetooth: hci4: command tx timeout [ 163.826733] Bluetooth: hci5: command tx timeout [ 163.881934] Bluetooth: hci6: command tx timeout [ 215.266413] syz-executor.5 (3079) used greatest stack depth: 23896 bytes left [ 217.516267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.529339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.533612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.536108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.537676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.541610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.547883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.549572] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.551193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.573719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.577968] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.596232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.659186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.671283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.677251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.686246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.704334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.707354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.852973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.853471] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.859630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.862528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.863565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.869463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.870360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.871545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.879245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.881339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.884727] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.894609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.894978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.908498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.909280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.915167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.916678] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.922146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.989126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.023574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.034712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.057601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.058727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.063298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.064933] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.065994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.070321] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.128872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.138031] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.161712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.626270] Bluetooth: hci0: command tx timeout [ 219.626312] Bluetooth: hci1: command tx timeout [ 219.754052] Bluetooth: hci2: command tx timeout [ 220.009950] Bluetooth: hci3: command tx timeout [ 220.016697] Bluetooth: hci5: command tx timeout [ 220.017348] Bluetooth: hci4: command tx timeout [ 220.140263] Bluetooth: hci7: command tx timeout [ 220.266034] Bluetooth: hci6: command tx timeout [ 221.675833] Bluetooth: hci0: command tx timeout [ 221.676849] Bluetooth: hci1: command tx timeout [ 221.801946] Bluetooth: hci2: command tx timeout [ 222.057894] Bluetooth: hci4: command tx timeout [ 222.057931] Bluetooth: hci5: command tx timeout [ 222.058413] Bluetooth: hci3: command tx timeout [ 222.185938] Bluetooth: hci7: command tx timeout [ 222.315070] Bluetooth: hci6: command tx timeout [ 223.721909] Bluetooth: hci0: command tx timeout [ 223.721936] Bluetooth: hci1: command tx timeout [ 223.849898] Bluetooth: hci2: command tx timeout [ 224.105980] Bluetooth: hci3: command tx timeout [ 224.107129] Bluetooth: hci5: command tx timeout [ 224.107588] Bluetooth: hci4: command tx timeout [ 224.233976] Bluetooth: hci7: command tx timeout [ 224.361983] Bluetooth: hci6: command tx timeout [ 225.801827] Bluetooth: hci1: command tx timeout [ 225.802365] Bluetooth: hci0: command tx timeout [ 225.897975] Bluetooth: hci2: command tx timeout [ 226.154889] Bluetooth: hci4: command tx timeout [ 226.156204] Bluetooth: hci5: command tx timeout [ 226.156999] Bluetooth: hci3: command tx timeout [ 226.281865] Bluetooth: hci7: command tx timeout [ 226.410890] Bluetooth: hci6: command tx timeout [ 279.944847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.946531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.949992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.952493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.953963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.954987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.011370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.014193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.024278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.036194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.038936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.041153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.061492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.066102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.067957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.096973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.100356] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.102605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.194086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.211134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.219693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.247535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.250896] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.268152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.340478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.344792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.346100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.362702] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.364690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.367958] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.383206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.384895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.388878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.389859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.391635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.395013] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.396158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.397671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.399299] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.403495] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.404658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.407025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.407983] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.411935] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.413037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.425525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.427181] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.428287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.961945] Bluetooth: hci0: command tx timeout [ 282.091830] Bluetooth: hci1: command tx timeout [ 282.153844] Bluetooth: hci2: command tx timeout [ 282.345847] Bluetooth: hci3: command tx timeout [ 282.474995] Bluetooth: hci4: command tx timeout [ 282.475844] Bluetooth: hci7: command tx timeout [ 282.537838] Bluetooth: hci5: command tx timeout [ 282.601856] Bluetooth: hci6: command tx timeout [ 284.010616] Bluetooth: hci0: command tx timeout [ 284.138616] Bluetooth: hci1: command tx timeout [ 284.202037] Bluetooth: hci2: command tx timeout [ 284.394867] Bluetooth: hci3: command tx timeout [ 284.522042] Bluetooth: hci7: command tx timeout [ 284.522282] Bluetooth: hci4: command tx timeout [ 284.586859] Bluetooth: hci5: command tx timeout [ 284.651811] Bluetooth: hci6: command tx timeout [ 286.058009] Bluetooth: hci0: command tx timeout [ 286.186918] Bluetooth: hci1: command tx timeout [ 286.249828] Bluetooth: hci2: command tx timeout [ 286.441867] Bluetooth: hci3: command tx timeout [ 286.569946] Bluetooth: hci7: command tx timeout [ 286.570501] Bluetooth: hci4: command tx timeout [ 286.633845] Bluetooth: hci5: command tx timeout [ 286.698778] Bluetooth: hci6: command tx timeout [ 288.106784] Bluetooth: hci0: command tx timeout [ 288.233951] Bluetooth: hci1: command tx timeout [ 288.304840] Bluetooth: hci2: command tx timeout [ 288.489838] Bluetooth: hci3: command tx timeout [ 288.617871] Bluetooth: hci4: command tx timeout [ 288.617891] Bluetooth: hci7: command tx timeout [ 288.682887] Bluetooth: hci5: command tx timeout [ 288.748794] Bluetooth: hci6: command tx timeout [ 342.398680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.400555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.405217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.408493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.418031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.420109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.522494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.524284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.525552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.533327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.538466] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.540977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.653438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.657562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.660628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.667978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.669314] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.670437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.674347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.676290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.681195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.684449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.697024] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.701023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.775975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.783158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.784215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.792877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.797397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.797981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.807021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.807519] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.809009] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.869645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.875135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.879364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.879544] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.880449] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.890686] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.900892] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.901685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.956482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.967499] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.978272] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.979408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.985572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.002095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.014134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.490169] Bluetooth: hci0: command tx timeout [ 344.555080] Bluetooth: hci1: command tx timeout [ 344.745871] Bluetooth: hci3: command tx timeout [ 344.747091] Bluetooth: hci2: command tx timeout [ 344.874894] Bluetooth: hci4: command tx timeout [ 344.939675] Bluetooth: hci5: command tx timeout [ 345.065847] Bluetooth: hci7: command tx timeout [ 345.066890] Bluetooth: hci6: command tx timeout [ 346.538824] Bluetooth: hci0: command tx timeout [ 346.602898] Bluetooth: hci1: command tx timeout [ 346.793898] Bluetooth: hci2: command tx timeout [ 346.795717] Bluetooth: hci3: command tx timeout [ 346.922857] Bluetooth: hci4: command tx timeout [ 346.986806] Bluetooth: hci5: command tx timeout [ 347.113833] Bluetooth: hci6: command tx timeout [ 347.114926] Bluetooth: hci7: command tx timeout [ 348.585888] Bluetooth: hci0: command tx timeout [ 348.649927] Bluetooth: hci1: command tx timeout [ 348.841881] Bluetooth: hci3: command tx timeout [ 348.842935] Bluetooth: hci2: command tx timeout [ 348.969845] Bluetooth: hci4: command tx timeout [ 349.033921] Bluetooth: hci5: command tx timeout [ 349.163812] Bluetooth: hci7: command tx timeout [ 349.164012] Bluetooth: hci6: command tx timeout [ 350.635791] Bluetooth: hci0: command tx timeout [ 350.697899] Bluetooth: hci1: command tx timeout [ 350.889896] Bluetooth: hci2: command tx timeout [ 350.889931] Bluetooth: hci3: command tx timeout [ 351.017848] Bluetooth: hci4: command tx timeout [ 351.081827] Bluetooth: hci5: command tx timeout [ 351.213880] Bluetooth: hci6: command tx timeout [ 351.214410] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:09:15 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802ba67c58 RCX=ffffffff818a3f12 RDX=ffff88800ce8b780 RSI=0000000000000008 RDI=ffffea00001d89c0 RBP=ffffea00001d89c0 RSP=ffff88802ba67b30 R8 =0000000000000000 R9 =fffff9400003b138 R10=0000000000000001 R11=0000000000000000 R12=0000000000000107 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88802ba67d98 RIP=ffffffff81abcc40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9f01e4f540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f01f75c50 CR3=00000000341d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffff11005ca7153 RSI=0000000000000004 RDI=ffff88802e538a9c RBP=ffff88802e538a78 RSP=ffff88802e55f630 R8 =0000000000000001 R9 =0000000000080000 R10=0000000000000005 R11=0000000000000000 R12=ffff88802e538000 R13=ffffffff85d06758 R14=0000000000000000 R15=0000000000040000 RIP=ffffffff814fd92e RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f837cdec540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f837cfd7620 CR3=000000002e7ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000