Warning: Permanently added '[localhost]:43330' (ECDSA) to the list of known hosts. 2025/05/26 01:28:48 fuzzer started 2025/05/26 01:28:49 dialing manager at localhost:46087 syzkaller login: [ 101.248049] cgroup: Unknown subsys name 'net' [ 101.381119] cgroup: Unknown subsys name 'cpuset' [ 101.417347] cgroup: Unknown subsys name 'rlimit' 2025/05/26 01:29:11 syscalls: 202 2025/05/26 01:29:11 code coverage: enabled 2025/05/26 01:29:11 comparison tracing: enabled 2025/05/26 01:29:11 extra coverage: enabled 2025/05/26 01:29:11 setuid sandbox: enabled 2025/05/26 01:29:11 namespace sandbox: enabled 2025/05/26 01:29:11 Android sandbox: enabled 2025/05/26 01:29:11 fault injection: enabled 2025/05/26 01:29:11 leak checking: enabled 2025/05/26 01:29:11 net packet injection: enabled 2025/05/26 01:29:11 net device setup: enabled 2025/05/26 01:29:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 01:29:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 01:29:11 USB emulation: enabled 2025/05/26 01:29:11 hci packet injection: enabled 2025/05/26 01:29:11 wifi device emulation: enabled 2025/05/26 01:29:11 802.15.4 emulation: enabled 2025/05/26 01:29:11 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 01:29:13 starting 8 fuzzer processes 01:29:13 executing program 0: r0 = fsopen(&(0x7f0000000000)='fuseblk\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6dbe, 0x23}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "526b59f309d8c5344362e886b611abc7"}, @NL80211_ATTR_PMKID={0x14, 0x55, "972744e636b22a12ac7e584e9200f051"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d9e35ba68713"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0/file0\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x8890) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x8, 0x1}}, './file0/file0\x00'}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = socket(0x2b, 0x800, 0x5f5f) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r10, {0xff}}, './file0\x00'}) 01:29:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file1\x00'}) getgroups(0x3, &(0x7f00000001c0)=[0xffffffffffffffff, r1, r4]) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x20429, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}], [{@smackfshat={'smackfshat', 0x3d, '-[#Y'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}, {@dont_measure}]}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x3ff}}, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x20048000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x4c8000, 0x84, 0x10}, 0x18) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42815}, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000580), 0x4) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000005c0)='127.0.0.1\x00', &(0x7f0000000600)='./file1/file0\x00', r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1/file0/file0\x00'}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)={'L+', 0x3}, 0x16, 0x3) getresuid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) mount$cgroup(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x41002, &(0x7f0000000880)={[{@name={'name', 0x3d, 'trusted.overlay.nlink\x00'}}, {@clone_children}, {@clone_children}, {}, {@name={'name', 0x3d, '-[&['}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x65, 0x62, 0x33, 0x65, 0x39, 0x34, 0x39], 0x2d, [0x0, 0x62, 0x62, 0x33], 0x2d, [0x66, 0x38, 0x32, 0x64], 0x2d, [0x38, 0x32, 0x33, 0x33], 0x2d, [0x61, 0x64, 0x65, 0x33, 0x33, 0x36, 0x37, 0x61]}}}, {@smackfsfloor}, {@euid_lt={'euid<', r3}}, {@subj_role}, {@fowner_gt={'fowner>', r8}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) recvmsg$unix(r2, &(0x7f0000000bc0)={&(0x7f0000000a40), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/35, 0x23}, {&(0x7f0000000b00)=""/17, 0x11}], 0x2, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x2000) mount$cgroup2(0x0, &(0x7f00000009c0)='./file1/file0\x00', &(0x7f0000000a00), 0x1000020, &(0x7f0000000c00)={[{@memory_recursiveprot}, {@memory_localevents}, {}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@smackfsdef={'smackfsdef', 0x3d, 'trusted.overlay.nlink\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@measure}, {@uid_lt={'uid<', r9}}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.nlink\x00'}}]}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) 01:29:13 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='}\x00', &(0x7f0000000080)='./file0\x00', r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8900, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r3 = memfd_secret(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000180)={{0x0, 0xe0bb, 0xfffffffffffff801, 0x4, 0x81, 0x1, 0x100, 0x81, 0x9, 0x3, 0x2, 0x8000, 0x1, 0xc3, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r3, {0x2, 0x9}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2, {0x80}}, './file1\x00'}) r7 = fsmount(r4, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000001240)={{0x1, 0x1, 0x18, r7, {0x8}}, './file1\x00'}) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001280), 0x355800, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r11, {0x2}}, './file1\x00'}) fsetxattr$trusted_overlay_origin(r10, &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x5) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000001500)={{0x1, 0x1, 0x18, r8, {0x8f2f}}, './file0/file0\x00'}) [ 125.013344] audit: type=1400 audit(1748222953.448:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:29:13 executing program 4: setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x8, "b32af4"}, 0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x2, 0x4) r0 = socket(0x1e, 0x2, 0x1) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x738, @none, 0x7f, 0x2}, 0xe) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, r1, r3, 0x0, 0x10, 0x9}, 0x3, 0x1, 0x4, 0x1f, 0x0, r4, 0xf8a}) chdir(&(0x7f00000002c0)='./file0/file0\x00') shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000300)=""/158) r5 = syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./file0/file0\x00', 0x619f, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000440)="1906a4ec0359850f31811d9c1e7d2b8b5e0ee8e8161c1810a26b72be5d3d14e107c04ae55b39bab2f4b843c5d4a040b6c0709ee7e739e3a846890c396d008167ff6e3dba6e3c300facf756499ef8401b2c227fd9a920d1ac9bd68ff000187c7335399bbf3626eab3ce92474c31ba95cb30328fe0da2ab4e5a67eb5ebf828f1c1bf377535967a6483928730fb4c6a50ee0a2a50dd56a47fc621aa76fb8b942443b6e22ebf57c566d6217aa0a7fe1da537fb680145a066c48cf9cbc43b4c508115d74f09864eaf489d685d2d", 0xcb, 0x4}, {&(0x7f0000000540)="4c14150a841c6eda4de7bffa845eee", 0xf, 0x1}, {&(0x7f0000000580)="d891278a589ad8196c29458dd7468232f8be15badaa36f2791f8ba2c48adf4d5c63e74b6645e02bee719a55d0d97837b67db5fdfeb7efc4fb36ada63e2bd015bbcab9433daa73591aae7f2e4d9cf6ee3cf5d7dba069036f00cb20df4a63828954c48a3d1c4675a9f8f5f52e79addc05b2c132edee3e20fbfd4521e9f044f6840f153f8ec25173458badc825e4b0176ae9e9ad2bba4", 0x95, 0x3ff}, {&(0x7f0000000640)="63594141726815edf9b1aebf7e780284e52c979e15b5a0ca6a8a032df831572ef86d00cd08234fb9d541492840525977d2ad23e9cdbdc76d106729464339d7823c275881bd8764bdbfdc8e31b1ed73083e36a54341", 0x55, 0x6f8}], 0x400, &(0x7f0000000740)={[{@fat=@dos1xfloppy}, {@fat=@nfs}, {@fat=@check_strict}, {@dots}, {@dots}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '\'\'/+#^^]{'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0/file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fstat(r2, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f0000001e40)={0x56, 0x7d, 0x2, {{0x0, 0x41, 0xff, 0xfffffffc, {0x0, 0x0, 0x4}, 0x19010000, 0xffffffff, 0x9520, 0x200, 0x0, '', 0x6, '\xff\xff\xff\xff\xff\xff', 0x7, '#+!(\xa7+#', 0x1, '('}, 0x0, '', r6, r7, r8}}, 0x56) open$dir(&(0x7f0000001ec0)='./file0/file0\x00', 0x80441, 0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001f00), &(0x7f0000001f40)=0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001f80), &(0x7f0000001fc0)=0xc) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000002000)) 01:29:13 executing program 6: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/122) r0 = shmget(0x2, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/145) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/196) r2 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000240)={0x68, 0x29, 0x1, {0xda3c, [{{0x4, 0x0, 0x3}, 0x3, 0xbc, 0x7, './file0'}, {{0x40, 0x0, 0x4}, 0x80, 0x1b, 0x7, './file0'}, {{0x1, 0x3, 0x8}, 0x7, 0x5, 0x7, './file0'}]}}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000300)=""/153) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000003c0)=""/117) r5 = shmget(0x1, 0x8000, 0x200, &(0x7f0000ff8000/0x8000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000440)=""/40) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil) r6 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r6, 0xb) r7 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000480)=""/223) 01:29:13 executing program 7: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8028802}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "1d523c84e90361a5d27d2856ed8327f7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/19, 0x13}], 0x6, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffc) r3 = syz_open_dev$sg(&(0x7f00000008c0), 0x9, 0x40) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000900)) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000940)) openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x40, 0x0) mount$cgroup2(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x100000, &(0x7f0000000a40)={[{}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_recursiveprot}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]}) socketpair(0x11, 0x4, 0x3, &(0x7f0000000ac0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_open_dev$sg(&(0x7f0000000c40), 0x8, 0x200600) pipe2$9p(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RMKDIR(r6, &(0x7f0000000cc0)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r6, {0x9, 0x5}}, './file0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfd, 0x13}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_PMKID={0x14, 0x55, "d751caee58d02e5b36aed215a59ba2d2"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="9fba55f9db4e9d0b93a19a646419"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x600440c4}, 0x4000) 01:29:14 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xd32e, 0xa, &(0x7f0000000640)=[{&(0x7f0000000080)="692cba75d4cbc57300dcde53e975c03f51b4b5d6", 0x14}, {&(0x7f00000000c0)="1bf02a3d2b7c60fa2577355d807953ed8d7058344a05c99b6aace3e5ba04dbd047fac2f37da3172abd59d0bb2f6bf3603d12437a15bbdc7dd9ce6ee046bc8c9675de563fb8ce74d1f961e583af45745f36d1be3853b299f36dda766f15e0f7b71d0715052493dbcbe1eca72710d43737c8773dd8e78053db4bd5cfd57e6475b5ad6d17752b0f532b3e169df97f2d8805c5a35a143e5fd69bf0d0f77aad6f8faf1885ebee1b282cbf14c7ab505d264ac1ffb67c67fe1dcb696fc3d331afb21f984d3cbecfb46b", 0xc6, 0x8}, {&(0x7f00000001c0)="fb4358110f1999fb047cd5f72f163ac8e7f7a1e8dfa8e9e35988c4166fce6e908f483600ed281812692dcd927068c42b8324622e866df7e1ea74fb268ad193589db57bd611ae6186d8", 0x49, 0xffffffff}, {&(0x7f0000000240)="70f3bef51d929762226f2152896cac74802065e257bd941fbabd316ef164805355cde4c6c0e5e5f522b3843bc52caebc0cbd23b77215e12827e3298b37ecb998914f7b5df0c5b7a1f0153520480ac0dff5d1e29af1eaae855a9064778bb9149126073d70308fd1db7b7f448a6f3c0acc6accfacfde2ff844884bf1ee7159d6194f01ec1353277968127b76d06778ae42e6933f53316011adc9cc6701691c077bbdedad8ae67e71dd6575485c20fc42d669dfb8143286d5e0219b597e91fe36459aa956098f4d80d4e802f4ed7863d1e1cd649214f9f265334c7fb12a39073381766ef6c1025185abb32d397c4244c649cf7d97c7", 0xf4, 0x7}, {&(0x7f0000000340)="f2a583503eb73a03275de7d8a96ad2008f02591faa727af803190cccecd7b96b4e4c68", 0x23, 0x8}, {&(0x7f0000000380)="c1e94e958f89f6e2f2415fa63f43a506119a9acc0bac65fedfc174d7fce761e2ef76db4e9f19870bb140a62602a7b0a8f68f530b9df81bdb4ce69027f093d6189401d843b3611fa7f6ad75cf394bb885ec6c4fb449ed25d02bc9a14149223988ada4ca3eea31759eb6cd364f21bf256705c16cd6ecf1e5e547706660eda94478c43bdd8fb6748f123e543f44352a857167d24c283a451edb8572f884d7f72d4042d9001e383953fdbf873b0a3d046b47ef231cc4b9fa6e9be8f380f9534f8030211f2448142b02876051f5812deb5dbf1f1dee1a76016b2cf4635e960c3b667bf4f91a616c2ecc3ca1c7a950c7539c236263ada199e9", 0xf6}, {&(0x7f0000000480)="22e2e7739591024688d9dedbb04745ce72bf2960eeb6e105f74d226617a38e2dac3b86f08696c156dd3fbe9c943d4be9aa49e8bb50afeae1cb460233a6b19ae4f7c5423f58b1c22cef818788c166b18cd2eb", 0x52, 0x2}, {&(0x7f0000000500)="538428490243b4000c9d6be18e023984b2517ee8d65e6501954f69d6ccad67756962", 0x22, 0x1}, {&(0x7f0000000540)="a7b2820c0d3af0a527663742889a2e274a966ef32eff4927d07b4781a55b15", 0x1f, 0x9}, {&(0x7f0000000580)="5be651ddc57ea7d55c3986624c1027aaacd4d8d63df7515792c15835973b8961e7492ad91339a781e042cfe8f1b015941e8fdb0fe22eb7d2dc31fd826463d322686fcbcd3e4e216eed51d41bb6baeabfca72e66153a7d0e3eaa4364cb09586619f29ca1e2525671cd44ca7e110b371c2e1125c27b63b907411ae0ba2e41b823a92e8afe72025f4357482269446e44883c30eda4b784e100830c065ba81eb71cda021dd192b92e811d10f2c306b2d7b3ce998cca2b0", 0xb5, 0xfffffffffffffffe}], 0x894082, &(0x7f0000000740)={[{@nodots}, {@nodots}, {@dots}, {@nodots}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r1 = creat(&(0x7f0000000780)='./file0\x00', 0x110) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'msdos\x00'}, {0x20, 'defcontext'}, {0x20, '\\'}, {0x20, 'defcontext'}, {0x20, '-*):%}}'}, {0x20, '-\xb3{\xbd&'}, {0x20, 'dots'}], 0xa, "7c61b0c651f253f00de87f51aef19f571217d30ec0fb05aa04224992a9c47175a5973df471eff53cb5f9223308dd54a19950942e9d"}, 0x72) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='user.incfs.size\x00', &(0x7f00000008c0)='\\', 0x1, 0x9ccb129ed2bef77) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RREADLINK(r2, &(0x7f0000001ac0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r1, {0x63a7}}, './file0\x00'}) write$P9_RFSYNC(r3, &(0x7f0000001b40)={0x7, 0x33, 0x1}, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001b80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "9c892185b0eff0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002b80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002d80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000002f80)={{0x0, 0x7f, 0x7ff, 0xff, 0x1, 0x7ff, 0x2, 0x0, 0x8, 0x4, 0x7, 0x0, 0x581a, 0x333373c7, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003f80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000004380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000004580)={{0x0, 0x230, 0xffffffffffffff01, 0x3, 0x1, 0x8, 0x7, 0x1, 0x4, 0x6, 0x0, 0x6, 0x1, 0x4, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000005580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000005780)={{0x0, 0x80, 0xfffffffffffffffc, 0x2, 0x1000, 0x7, 0x8, 0x1, 0xffff8000, 0x5, 0x4, 0x100, 0x3, 0x1, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000006780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000006c780)={0xff, [{0x0, r4}, {}, {r5, r6}, {r7, r8}, {r9, r10}, {}, {}, {r11, r12}, {r13}, {0x0, r14}], 0x80, "fdad78c099ddff"}) 01:29:14 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) exit(0x47) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) faccessat(r8, &(0x7f0000000340)='./file0\x00', 0x11) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file1\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x111401, 0x240, 0x10}, 0x18) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, r11, {0x10000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r12, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006b140)={0x8, [{0x0, r2}, {0x0, r2}, {}, {r0, r2}, {r1, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r0, r2}, {r0, r2}, {}, {0x0, r2}, {0x0, r2}, {}, {r1}, {r0, r2}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {r0, r2}, {r0, r2}, {r1}, {r1}, {0x0, r2}, {r1, r2}, {r0, r2}, {}, {}, {}, {r0, r2}, {r0, r2}, {r0, r2}, {0x0, r2}, {}, {r0}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {r1, r2}, {0x0, r2}, {r0, r2}, {r1, r2}, {}, {r1}, {r1, r2}, {}, {r1}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {r0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r1, r2}, {r1, r2}, {r1, r2}, {}, {r0}, {r0, r2}, {0x0, r2}, {}, {r0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1, r2}, {0x0, r2}, {r0}, {0x0, r2}, {r1}, {r0}, {r0, r2}, {r1}, {}, {r1, r2}, {r1, r2}, {0x0, r2}, {}, {r0, r2}, {r0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {r0}, {}, {0x0, r2}, {}, {r0, r2}, {r1}, {r0}, {r1, r2}, {r1, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {}, {}, {0x0, r2}, {0x0, r2}, {r1}, {r1}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r0}, {r1, r2}, {0x0, r2}, {r0, r2}, {}, {r0}, {}, {}, {r0}, {r0, r2}, {0x0, r2}, {r0, r2}, {r0}, {r0, r2}, {r0}, {r0}, {r1, r2}, {r1, r2}, {r0}, {r0, r2}, {0x0, r2}, {r1, r2}, {r1, r2}, {r1}, {r0}, {r1}, {0x0, r2}, {r0}, {r0, r2}, {r1, r2}, {r0, r2}, {r1, r2}, {}, {}, {r1}, {r1}, {0x0, r2}, {r0}, {}, {0x0, r2}, {r1, r2}, {r1}, {r1, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {}, {r1, r2}, {r0, r2}, {}, {r1, r2}, {r0, r2}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {r0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {}, {r0}, {r1, r2}, {0x0, r2}, {r0}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {r0, r2}, {r1, r2}, {r0, r2}, {r1, r2}, {}, {r1}, {r0}, {0x0, r2}, {r0}, {r0}, {0x0, r2}, {r0, r2}, {}, {}, {r1, r2}, {r0}, {r0, r2}, {r0}, {r1}, {r0}, {r1, r2}, {r0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {}, {r0, r2}, {r0, r2}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r0, r2}, {r0}, {0x0, r2}, {}, {r0, r2}, {r1}, {r1}, {0x0, r2}, {r1, r2}, {r1, r2}, {0x0, r2}, {0x0, r2}, {r1}], 0x6, "b68a3b58b85814"}) [ 126.648163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.655237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.657947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.660168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.663139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.669042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.675682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.682994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.687012] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.692804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.830580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.840930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.849151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.851005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.856883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.859222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.868315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.878203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.894868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.901878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.910217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.915253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.919032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.924159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.931977] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.935934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.946015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.959363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.971704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.977097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.150163] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.153387] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.174348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.211917] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.215935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.286634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.294888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.307086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.340111] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.362042] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.784196] Bluetooth: hci1: command tx timeout [ 128.784965] Bluetooth: hci0: command tx timeout [ 128.912645] Bluetooth: hci3: command tx timeout [ 129.042496] Bluetooth: hci4: command tx timeout [ 129.043156] Bluetooth: hci5: command tx timeout [ 129.043714] Bluetooth: hci2: command tx timeout [ 129.296534] Bluetooth: hci6: command tx timeout [ 129.487801] Bluetooth: hci7: command tx timeout [ 130.832745] Bluetooth: hci1: command tx timeout [ 130.833261] Bluetooth: hci0: command tx timeout [ 130.959530] Bluetooth: hci3: command tx timeout [ 131.088661] Bluetooth: hci2: command tx timeout [ 131.089141] Bluetooth: hci5: command tx timeout [ 131.089618] Bluetooth: hci4: command tx timeout [ 131.343809] Bluetooth: hci6: command tx timeout [ 131.535553] Bluetooth: hci7: command tx timeout [ 132.879766] Bluetooth: hci0: command tx timeout [ 132.880668] Bluetooth: hci1: command tx timeout [ 133.009504] Bluetooth: hci3: command tx timeout [ 133.137155] Bluetooth: hci4: command tx timeout [ 133.138431] Bluetooth: hci5: command tx timeout [ 133.140070] Bluetooth: hci2: command tx timeout [ 133.391719] Bluetooth: hci6: command tx timeout [ 133.583613] Bluetooth: hci7: command tx timeout [ 134.927586] Bluetooth: hci0: command tx timeout [ 134.928153] Bluetooth: hci1: command tx timeout [ 135.056538] Bluetooth: hci3: command tx timeout [ 135.183739] Bluetooth: hci2: command tx timeout [ 135.184237] Bluetooth: hci5: command tx timeout [ 135.185670] Bluetooth: hci4: command tx timeout [ 135.439618] Bluetooth: hci6: command tx timeout [ 135.631567] Bluetooth: hci7: command tx timeout [ 186.330644] syz-executor.2 (287) used greatest stack depth: 24672 bytes left [ 188.713236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.720218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.728176] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.741353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.747272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.770344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.775229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.786806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.797110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.808816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.995859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.021947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.030203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.044389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.046410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.050212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.055757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.057908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.106201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.108154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.119016] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.124057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.129395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.136645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.141740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.149200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.151238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.154358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.170026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.171550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.179066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.182149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.210943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.211734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.216608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.218717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.235065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.245968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.284108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.294205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.801698] Bluetooth: hci0: command tx timeout [ 190.863789] Bluetooth: hci1: command tx timeout [ 191.119655] Bluetooth: hci2: command tx timeout [ 191.184494] Bluetooth: hci3: command tx timeout [ 191.247547] Bluetooth: hci4: command tx timeout [ 191.311607] Bluetooth: hci6: command tx timeout [ 191.375581] Bluetooth: hci7: command tx timeout [ 191.375605] Bluetooth: hci5: command tx timeout [ 192.847694] Bluetooth: hci0: command tx timeout [ 192.911522] Bluetooth: hci1: command tx timeout [ 193.167659] Bluetooth: hci2: command tx timeout [ 193.233542] Bluetooth: hci3: command tx timeout [ 193.295850] Bluetooth: hci4: command tx timeout [ 193.359621] Bluetooth: hci6: command tx timeout [ 193.423889] Bluetooth: hci7: command tx timeout [ 193.424639] Bluetooth: hci5: command tx timeout [ 194.896734] Bluetooth: hci0: command tx timeout [ 194.960490] Bluetooth: hci1: command tx timeout [ 195.216527] Bluetooth: hci2: command tx timeout [ 195.279766] Bluetooth: hci3: command tx timeout [ 195.344677] Bluetooth: hci4: command tx timeout [ 195.408513] Bluetooth: hci6: command tx timeout [ 195.472551] Bluetooth: hci5: command tx timeout [ 195.472978] Bluetooth: hci7: command tx timeout [ 196.944745] Bluetooth: hci0: command tx timeout [ 197.008574] Bluetooth: hci1: command tx timeout [ 197.266502] Bluetooth: hci2: command tx timeout [ 197.327798] Bluetooth: hci3: command tx timeout [ 197.392671] Bluetooth: hci4: command tx timeout [ 197.457610] Bluetooth: hci6: command tx timeout [ 197.521205] Bluetooth: hci7: command tx timeout [ 197.521262] Bluetooth: hci5: command tx timeout [ 251.372937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.379889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.387279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.401737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.408163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.624647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.628276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.631360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.642005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.646161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.789825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.817818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.822309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.829005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.844327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.848728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.855821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.862232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.864337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.873751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.879950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.885676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.931207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.944034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.947821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.973096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 251.973674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.980843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.996815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.001787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.015614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.038684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.041838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.045144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.056908] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.057273] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.061601] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.087854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.118071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.134941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.457029] Bluetooth: hci0: command tx timeout [ 253.713510] Bluetooth: hci1: command tx timeout [ 253.968069] Bluetooth: hci4: command tx timeout [ 254.032570] Bluetooth: hci2: command tx timeout [ 254.096199] Bluetooth: hci3: command tx timeout [ 254.159561] Bluetooth: hci7: command tx timeout [ 254.223925] Bluetooth: hci5: command tx timeout [ 254.287699] Bluetooth: hci6: command tx timeout [ 255.503572] Bluetooth: hci0: command tx timeout [ 255.759927] Bluetooth: hci1: command tx timeout [ 256.016510] Bluetooth: hci4: command tx timeout [ 256.079662] Bluetooth: hci2: command tx timeout [ 256.143590] Bluetooth: hci3: command tx timeout [ 256.207760] Bluetooth: hci7: command tx timeout [ 256.271553] Bluetooth: hci5: command tx timeout [ 256.335582] Bluetooth: hci6: command tx timeout [ 257.552232] Bluetooth: hci0: command tx timeout [ 257.807700] Bluetooth: hci1: command tx timeout [ 258.063647] Bluetooth: hci4: command tx timeout [ 258.127770] Bluetooth: hci2: command tx timeout [ 258.191581] Bluetooth: hci3: command tx timeout [ 258.255518] Bluetooth: hci7: command tx timeout [ 258.319897] Bluetooth: hci5: command tx timeout [ 258.383870] Bluetooth: hci6: command tx timeout [ 259.600483] Bluetooth: hci0: command tx timeout [ 259.855787] Bluetooth: hci1: command tx timeout [ 260.111762] Bluetooth: hci4: command tx timeout [ 260.176190] Bluetooth: hci2: command tx timeout [ 260.239512] Bluetooth: hci3: command tx timeout [ 260.303499] Bluetooth: hci7: command tx timeout [ 260.368220] Bluetooth: hci5: command tx timeout [ 260.431517] Bluetooth: hci6: command tx timeout [ 314.094345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.112601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.115929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.123581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.127234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.133255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.150327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.152817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.160349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.182185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.274634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.293224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.295966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.304180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.312818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.354131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.361477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.365294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.377549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.406144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.408142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.457220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.459515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.464890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.473490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.482751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.488374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.498022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.503755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.509591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 314.513254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.536072] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 314.550628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.569962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.580009] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 314.597246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.615977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.635135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.675109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.697000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.175543] Bluetooth: hci0: command tx timeout [ 316.242545] Bluetooth: hci1: command tx timeout [ 316.367550] Bluetooth: hci3: command tx timeout [ 316.623850] Bluetooth: hci2: command tx timeout [ 316.624861] Bluetooth: hci4: command tx timeout [ 316.687710] Bluetooth: hci7: command tx timeout [ 316.751586] Bluetooth: hci5: command tx timeout [ 316.815522] Bluetooth: hci6: command tx timeout [ 318.224544] Bluetooth: hci0: command tx timeout [ 318.287695] Bluetooth: hci1: command tx timeout [ 318.415682] Bluetooth: hci3: command tx timeout [ 318.671622] Bluetooth: hci4: command tx timeout [ 318.672110] Bluetooth: hci2: command tx timeout [ 318.736501] Bluetooth: hci7: command tx timeout [ 318.799620] Bluetooth: hci5: command tx timeout [ 318.863530] Bluetooth: hci6: command tx timeout [ 320.272645] Bluetooth: hci0: command tx timeout [ 320.337867] Bluetooth: hci1: command tx timeout [ 320.464698] Bluetooth: hci3: command tx timeout [ 320.719706] Bluetooth: hci4: command tx timeout [ 320.720185] Bluetooth: hci2: command tx timeout [ 320.785672] Bluetooth: hci7: command tx timeout [ 320.847521] Bluetooth: hci5: command tx timeout [ 320.911561] Bluetooth: hci6: command tx timeout [ 322.321719] Bluetooth: hci0: command tx timeout [ 322.384690] Bluetooth: hci1: command tx timeout [ 322.512683] Bluetooth: hci3: command tx timeout [ 322.767669] Bluetooth: hci4: command tx timeout [ 322.768146] Bluetooth: hci2: command tx timeout [ 322.832524] Bluetooth: hci7: command tx timeout [ 322.896550] Bluetooth: hci5: command tx timeout [ 322.960499] Bluetooth: hci6: command tx timeout [ 376.415917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.422794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.425813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.439905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.444632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.552361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.555741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.563722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.573078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.579089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.683870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.696993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.702197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.704297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.710200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.718151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.720296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.736820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.779899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.780366] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.790974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.792837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.825895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.828911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.833656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 376.838136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.842028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 376.845887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 376.850985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.857237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.866151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 376.868340] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.873993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.891271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.908938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.919833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.928781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.941815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.976256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.027631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.512521] Bluetooth: hci0: command tx timeout [ 378.639554] Bluetooth: hci1: command tx timeout [ 378.767555] Bluetooth: hci2: command tx timeout [ 378.831565] Bluetooth: hci3: command tx timeout [ 378.959923] Bluetooth: hci7: command tx timeout [ 379.024801] Bluetooth: hci5: command tx timeout [ 379.087757] Bluetooth: hci6: command tx timeout [ 379.087795] Bluetooth: hci4: command tx timeout [ 380.559531] Bluetooth: hci0: command tx timeout [ 380.688567] Bluetooth: hci1: command tx timeout [ 380.817851] Bluetooth: hci2: command tx timeout [ 380.880801] Bluetooth: hci3: command tx timeout [ 381.008650] Bluetooth: hci7: command tx timeout [ 381.073569] Bluetooth: hci5: command tx timeout [ 381.135619] Bluetooth: hci4: command tx timeout [ 381.136548] Bluetooth: hci6: command tx timeout [ 382.607822] Bluetooth: hci0: command tx timeout [ 382.736516] Bluetooth: hci1: command tx timeout [ 382.863556] Bluetooth: hci2: command tx timeout [ 382.928291] Bluetooth: hci3: command tx timeout [ 383.056654] Bluetooth: hci7: command tx timeout [ 383.119549] Bluetooth: hci5: command tx timeout [ 383.183551] Bluetooth: hci4: command tx timeout [ 383.185313] Bluetooth: hci6: command tx timeout [ 384.657502] Bluetooth: hci0: command tx timeout [ 384.783701] Bluetooth: hci1: command tx timeout [ 384.912689] Bluetooth: hci2: command tx timeout [ 384.976535] Bluetooth: hci3: command tx timeout [ 385.103842] Bluetooth: hci7: command tx timeout [ 385.167502] Bluetooth: hci5: command tx timeout [ 385.233524] Bluetooth: hci6: command tx timeout [ 385.234014] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 01:34:17 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff81a7ddb1 RCX=ffff88803816765c RDX=1ffff1100702ceec RSI=ffffffff85c1d1c0 RDI=ffffffff81a7ddb1 RBP=ffffffff81a7ddb1 RSP=ffff8880381676b8 R8 =0000000000000001 R9 =ffff888038167748 R10=000000000003b67d R11=0000000000024a99 R12=0000000000000001 R13=0000000000000000 R14=ffff8880377dd280 R15=ffff88800cc14a00 RIP=ffffffff8142fa32 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3cb79f1260 CR3=000000002de65000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000001ac RCX=ffffffff8161e643 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff88309f08 RSP=ffff88806cf08648 R8 =0000000000000000 R9 =0000000000000008 R10=0000000000000008 R11=0000000000000000 R12=ffffffff8161f3d7 R13=003b9aca00000000 R14=ffff88802315b700 R15=000000000048c194 RIP=ffffffff8151ac45 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9ffa84b540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2fb83b15e0 CR3=000000001bdbd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff0000000000000000000000ff00 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000