Warning: Permanently added '[localhost]:36051' (ECDSA) to the list of known hosts. 2025/05/28 13:45:05 fuzzer started 2025/05/28 13:45:06 dialing manager at localhost:36005 syzkaller login: [ 94.763418] cgroup: Unknown subsys name 'net' [ 94.927215] cgroup: Unknown subsys name 'cpuset' [ 94.965856] cgroup: Unknown subsys name 'rlimit' 2025/05/28 13:45:20 syscalls: 202 2025/05/28 13:45:20 code coverage: enabled 2025/05/28 13:45:20 comparison tracing: enabled 2025/05/28 13:45:20 extra coverage: enabled 2025/05/28 13:45:20 setuid sandbox: enabled 2025/05/28 13:45:20 namespace sandbox: enabled 2025/05/28 13:45:20 Android sandbox: enabled 2025/05/28 13:45:20 fault injection: enabled 2025/05/28 13:45:20 leak checking: enabled 2025/05/28 13:45:20 net packet injection: enabled 2025/05/28 13:45:20 net device setup: enabled 2025/05/28 13:45:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 13:45:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 13:45:20 USB emulation: enabled 2025/05/28 13:45:20 hci packet injection: enabled 2025/05/28 13:45:20 wifi device emulation: enabled 2025/05/28 13:45:20 802.15.4 emulation: enabled 2025/05/28 13:45:20 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 13:45:21 starting 8 fuzzer processes 13:45:21 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x100) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000000c0)={0x2, 0x1, 0x800}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xe6d1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100, 0x1}) msgrcv(0xffffffffffffffff, &(0x7f0000000200)={0x0, ""/96}, 0x68, 0x2, 0x3000) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x22801) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000002c0)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000340)={0x2, 0x2, 0x7ff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000440)) msgctl$IPC_RMID(0x0, 0x0) 13:45:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "3880fe25"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d6c0"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ea23279fa2"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x20, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair(0x27, 0x1, 0x10001, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) r7 = accept(r0, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa8, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x500000000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0xa8}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r1, 0x420, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8005) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/stat\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r6) sendmsg$NL80211_CMD_NEW_MPATH(r11, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x74, r12, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe0, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000845}, 0x4080) 13:45:21 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "76d50c855e90782b14ab138fb4f3ace6"}, @NL80211_ATTR_PMKID={0x14, 0x55, "978e6b9be0b8fc688a40a1a9e2f8a2ac"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}}, 0x48880) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000300)={0x0, 0x4, 0x5847, 0x7}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}}, 0x4000014) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000540)={0x2, 0x1, 0xcc, 0x20, 0x9, 0x8001}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x130000010}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x30b6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x20000050) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x316c736398dfe963}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000900)={'wpan0\x00'}) [ 110.262797] audit: type=1400 audit(1748439921.935:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:45:21 executing program 3: clock_gettime(0x1, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x8, 0x5, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x1, 0x7fff}}) clock_gettime(0x1, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername(r2, &(0x7f0000000200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x2400c004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8011}, 0x44092) clock_gettime(0x3, &(0x7f0000000580)) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r5, &(0x7f00000005c0)=@nfc_llcp, &(0x7f0000000640)=0x80) accept4(r5, 0x0, &(0x7f0000000680), 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) write$rfkill(r1, &(0x7f00000007c0)={0x0, 0x5, 0x2, 0x1, 0x1}, 0x8) 13:45:21 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="7a4fb84dd5c4d0a3519fa5a61c621b462e93ea24591801e7b3e4571c37a5f6c0e83259b2a582e10abb50d5c73fbbdb69cb65f1308544f6144e2de7a743c4116f75b05e6baa7df775b4c744a39c846a7b4c0662acac7615922d02ccfe36355eac860fb582b5fa1979260c6b7e73ef2f346f23737e") ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000280)={0x9, 0x20}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) wait4(0x0, &(0x7f0000000300), 0x1, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) geteuid() ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0xfffffffd, 0xffff8001, 0x7, 0x2, 0xf, "469cc63c8edd1462b065917a79f0df63f860e6"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000004c0)={0x51, 0xff6e, 0x3f, 0x2, 0xa, "510822b733d04731"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000500)={0x9, 0x4fb, 0x10001, 0x4, 0x12, "8105c2b89de5887d4a83d57e2ed2b9ea0eb673"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000580)={0x0, 0x1, r1, 0xae8, 0x80000}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000005c0)={0x3, 0x4, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'}) bind$bt_hci(r5, &(0x7f0000000640)={0x1f, 0x2}, 0x6) 13:45:21 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x6, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xbd) r0 = msgget$private(0x0, 0x218) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "c068"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a12543b2e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1755bbcf05"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x2400e000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000380)={r4, 0x0, r1, 0x5, 0x80000}) clock_gettime(0x0, &(0x7f0000004880)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/37, 0x25}, {&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/138, 0x8a}], 0x4, &(0x7f0000000680)=""/118, 0x76}, 0x3ff}, {{&(0x7f0000000700)=@caif=@rfm, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/83, 0x53}, {&(0x7f0000000940)=""/222, 0xde}, {&(0x7f0000000a40)=""/226, 0xe2}, {&(0x7f0000000b40)=""/156, 0x9c}, {&(0x7f0000000c00)=""/146, 0x92}], 0x7, &(0x7f0000000d40)=""/140, 0x8c}, 0x1}, {{&(0x7f0000000e00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e80)=""/219, 0xdb}, {&(0x7f0000000f80)=""/118, 0x76}, {&(0x7f0000001000)=""/183, 0xb7}, {&(0x7f00000010c0)=""/248, 0xf8}, {&(0x7f00000011c0)=""/142, 0x8e}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x6, &(0x7f0000002300)=""/10, 0xa}, 0x63}, {{&(0x7f0000002340)=@in, 0x80, &(0x7f0000004640)=[{&(0x7f00000023c0)=""/158, 0x9e}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/57, 0x39}, {&(0x7f00000034c0)=""/162, 0xa2}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/19, 0x13}, {&(0x7f00000045c0)=""/105, 0x69}], 0x7, &(0x7f00000046c0)=""/154, 0x9a}, 0xffff}], 0x4, 0x22, &(0x7f00000048c0)={r5, r6+10000000}) r7 = getpid() ioprio_set$pid(0x6, r7, 0x2007) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000004900)=r4) r8 = geteuid() r9 = fork() msgctl$IPC_SET(r0, 0x1, &(0x7f0000004940)={{0x1, 0xffffffffffffffff, 0x0, r8, 0xee01, 0x121, 0x40ad}, 0x0, 0x0, 0x8, 0x7fffffff, 0x80000001, 0x5, 0x9, 0x6, 0x7, 0xb492, r7, r9}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000004a40)) 13:45:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000001c0)={0x200, 0x0, 0xfc00, 0x9}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x80a002, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x7, 0x200000) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0xffffffff) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) r6 = syz_open_pts(r5, 0x400) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000002c0)={0x3, 0xffffffff, 0x286, 0x9, 0x2, 0x7}) r7 = getpgid(r3) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000300)=r7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000380)=0x857) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000003c0)={0x1, 0x3, 0x8000, 0x2, 0x0, 0xcdd}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000400)=0xffffffff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000480)={0xd, 0xe6d}) 13:45:22 executing program 7: r0 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0, 0x1, 0x9}) r1 = getpid() pidfd_open(r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000010) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) socketpair(0x26, 0x5, 0x1, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0xc399}}, './file0\x00'}) ioprio_get$pid(0x0, r5) r9 = syz_open_dev$hiddev(&(0x7f0000000340), 0xffffffffffffff20, 0x200600) ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000380)={0x2, 0x100, 0x3, 0xfffffff8, 0xfffffffc, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x50, 0x0, 0x8, 0x9}, {0x9, 0x0, 0x8}, {0x3ff, 0xf8, 0x3, 0x5}, {0x9, 0x1f, 0x9, 0x1}, {0x5d66, 0x86, 0x6, 0x7}, {0x8, 0xfb, 0x6, 0x80000001}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000440)={r4, 0x3, r8, 0x5}) [ 111.703553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.705391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.708471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.709387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.711397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.713274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.725279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.726644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.728465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.729902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.754455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.765353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.768688] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.787705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.810209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.815385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.817078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.819015] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.820352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.822140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.824830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.826693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.830309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.833364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.834494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.835716] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.839796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.844571] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.846141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.850347] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.851397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.851450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.853639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.868410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.876573] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.878844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.881079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.882612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.915061] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.937362] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.824758] Bluetooth: hci0: command tx timeout [ 113.824947] Bluetooth: hci1: command tx timeout [ 113.887022] Bluetooth: hci2: command tx timeout [ 113.887075] Bluetooth: hci5: command tx timeout [ 113.951550] Bluetooth: hci3: command tx timeout [ 113.951659] Bluetooth: hci4: command tx timeout [ 113.952174] Bluetooth: hci6: command tx timeout [ 114.015024] Bluetooth: hci7: command tx timeout [ 115.871925] Bluetooth: hci0: command tx timeout [ 115.872459] Bluetooth: hci1: command tx timeout [ 115.936609] Bluetooth: hci5: command tx timeout [ 115.937222] Bluetooth: hci2: command tx timeout [ 115.999528] Bluetooth: hci4: command tx timeout [ 116.001121] Bluetooth: hci3: command tx timeout [ 116.001148] Bluetooth: hci6: command tx timeout [ 116.063301] Bluetooth: hci7: command tx timeout [ 117.919934] Bluetooth: hci0: command tx timeout [ 117.920019] Bluetooth: hci1: command tx timeout [ 117.983927] Bluetooth: hci2: command tx timeout [ 117.984420] Bluetooth: hci5: command tx timeout [ 118.047406] Bluetooth: hci4: command tx timeout [ 118.048009] Bluetooth: hci6: command tx timeout [ 118.048060] Bluetooth: hci3: command tx timeout [ 118.110993] Bluetooth: hci7: command tx timeout [ 119.967034] Bluetooth: hci1: command tx timeout [ 119.967245] Bluetooth: hci0: command tx timeout [ 120.031097] Bluetooth: hci5: command tx timeout [ 120.031187] Bluetooth: hci2: command tx timeout [ 120.095021] Bluetooth: hci3: command tx timeout [ 120.096151] Bluetooth: hci6: command tx timeout [ 120.096412] Bluetooth: hci4: command tx timeout [ 120.160062] Bluetooth: hci7: command tx timeout [ 174.656241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.660254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.664250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.674455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.692828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.772205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.783422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.792058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.792198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.795769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.798305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.800078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.801237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.805213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.807076] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.808391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.820276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.824243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.824476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.830855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.854500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.857294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.863265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.896485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.899343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.901578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.904992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.905788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.908257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.918681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.934160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.941341] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.943107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.947060] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.955469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.955524] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.958811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.975204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.984235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.997226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.735280] Bluetooth: hci0: command tx timeout [ 176.863096] Bluetooth: hci2: command tx timeout [ 176.864027] Bluetooth: hci1: command tx timeout [ 176.927488] Bluetooth: hci6: command tx timeout [ 176.927554] Bluetooth: hci3: command tx timeout [ 176.993126] Bluetooth: hci4: command tx timeout [ 177.055049] Bluetooth: hci7: command tx timeout [ 177.119168] Bluetooth: hci5: command tx timeout [ 178.783104] Bluetooth: hci0: command tx timeout [ 178.912191] Bluetooth: hci2: command tx timeout [ 178.912267] Bluetooth: hci1: command tx timeout [ 178.975068] Bluetooth: hci3: command tx timeout [ 178.976354] Bluetooth: hci6: command tx timeout [ 179.040007] Bluetooth: hci4: command tx timeout [ 179.103036] Bluetooth: hci7: command tx timeout [ 179.166966] Bluetooth: hci5: command tx timeout [ 180.831782] Bluetooth: hci0: command tx timeout [ 180.958979] Bluetooth: hci1: command tx timeout [ 180.960194] Bluetooth: hci2: command tx timeout [ 181.023064] Bluetooth: hci6: command tx timeout [ 181.023626] Bluetooth: hci3: command tx timeout [ 181.087186] Bluetooth: hci4: command tx timeout [ 181.151182] Bluetooth: hci7: command tx timeout [ 181.215962] Bluetooth: hci5: command tx timeout [ 182.879922] Bluetooth: hci0: command tx timeout [ 183.007321] Bluetooth: hci2: command tx timeout [ 183.007705] Bluetooth: hci1: command tx timeout [ 183.071151] Bluetooth: hci3: command tx timeout [ 183.071328] Bluetooth: hci6: command tx timeout [ 183.134980] Bluetooth: hci4: command tx timeout [ 183.199072] Bluetooth: hci7: command tx timeout [ 183.262951] Bluetooth: hci5: command tx timeout [ 237.300391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.303895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.305506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.311244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.313392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.353661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.355282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.358979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.363260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.366294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.435718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.440388] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.442371] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.457087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.468759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.494341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.500156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.501584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.504501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.506330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.553709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.567178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.598300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.612510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.623484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.784421] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.794346] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.812425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.819439] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.847563] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.853183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.856623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.861678] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.880437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.891076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.898448] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.907238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.909454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.913414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.929428] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.328056] Bluetooth: hci0: command tx timeout [ 239.454996] Bluetooth: hci1: command tx timeout [ 239.518983] Bluetooth: hci3: command tx timeout [ 239.583431] Bluetooth: hci2: command tx timeout [ 239.775012] Bluetooth: hci4: command tx timeout [ 240.032410] Bluetooth: hci5: command tx timeout [ 240.033479] Bluetooth: hci6: command tx timeout [ 240.034070] Bluetooth: hci7: command tx timeout [ 241.376181] Bluetooth: hci0: command tx timeout [ 241.505983] Bluetooth: hci1: command tx timeout [ 241.568139] Bluetooth: hci3: command tx timeout [ 241.632609] Bluetooth: hci2: command tx timeout [ 241.822956] Bluetooth: hci4: command tx timeout [ 242.079968] Bluetooth: hci5: command tx timeout [ 242.080114] Bluetooth: hci7: command tx timeout [ 242.080514] Bluetooth: hci6: command tx timeout [ 243.423360] Bluetooth: hci0: command tx timeout [ 243.551474] Bluetooth: hci1: command tx timeout [ 243.615430] Bluetooth: hci3: command tx timeout [ 243.680981] Bluetooth: hci2: command tx timeout [ 243.870971] Bluetooth: hci4: command tx timeout [ 244.127004] Bluetooth: hci6: command tx timeout [ 244.130117] Bluetooth: hci7: command tx timeout [ 244.130136] Bluetooth: hci5: command tx timeout [ 245.473948] Bluetooth: hci0: command tx timeout [ 245.598972] Bluetooth: hci1: command tx timeout [ 245.662992] Bluetooth: hci3: command tx timeout [ 245.727075] Bluetooth: hci2: command tx timeout [ 245.918950] Bluetooth: hci4: command tx timeout [ 246.175028] Bluetooth: hci7: command tx timeout [ 246.175047] Bluetooth: hci6: command tx timeout [ 246.176008] Bluetooth: hci5: command tx timeout [ 299.852929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.888321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.908439] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.921516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.925539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.998489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.016277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.021330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.024569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.026579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.027515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.029534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.031249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.033660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.042094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.150769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.161480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.167335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.172487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.178011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.201816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.204599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.206214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.217151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.225749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.321245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.348203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.354203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.360239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.368168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.372136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.381187] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.448501] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.457932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.463562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.466109] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.478150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.501212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.555189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.627920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.983392] Bluetooth: hci0: command tx timeout [ 302.110993] Bluetooth: hci1: command tx timeout [ 302.111084] Bluetooth: hci2: command tx timeout [ 302.240934] Bluetooth: hci3: command tx timeout [ 302.302946] Bluetooth: hci4: command tx timeout [ 302.559353] Bluetooth: hci5: command tx timeout [ 302.559450] Bluetooth: hci6: command tx timeout [ 302.750974] Bluetooth: hci7: command tx timeout [ 304.030994] Bluetooth: hci0: command tx timeout [ 304.159130] Bluetooth: hci2: command tx timeout [ 304.160705] Bluetooth: hci1: command tx timeout [ 304.286985] Bluetooth: hci3: command tx timeout [ 304.352959] Bluetooth: hci4: command tx timeout [ 304.606956] Bluetooth: hci6: command tx timeout [ 304.607032] Bluetooth: hci5: command tx timeout [ 304.800065] Bluetooth: hci7: command tx timeout [ 306.079271] Bluetooth: hci0: command tx timeout [ 306.208286] Bluetooth: hci1: command tx timeout [ 306.209075] Bluetooth: hci2: command tx timeout [ 306.335119] Bluetooth: hci3: command tx timeout [ 306.399045] Bluetooth: hci4: command tx timeout [ 306.655087] Bluetooth: hci6: command tx timeout [ 306.655622] Bluetooth: hci5: command tx timeout [ 306.846994] Bluetooth: hci7: command tx timeout [ 308.127174] Bluetooth: hci0: command tx timeout [ 308.255598] Bluetooth: hci2: command tx timeout [ 308.256234] Bluetooth: hci1: command tx timeout [ 308.382959] Bluetooth: hci3: command tx timeout [ 308.447536] Bluetooth: hci4: command tx timeout [ 308.703219] Bluetooth: hci5: command tx timeout [ 308.703327] Bluetooth: hci6: command tx timeout [ 308.896911] Bluetooth: hci7: command tx timeout [ 362.545722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.550026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.554842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.558754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.569705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.669544] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.672463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.678934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.691269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.700375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.865197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.866743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.876824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.884657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.894362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.936592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.939087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.940461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.946780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.960188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.987649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.990843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.994722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.999450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.009513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.043394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.056229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.057658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.079525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.089553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.093962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.100106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.151190] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.200751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.227061] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.360210] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.419358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.422759] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.428737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.431200] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.639030] Bluetooth: hci0: command tx timeout [ 364.769950] Bluetooth: hci1: command tx timeout [ 364.959129] Bluetooth: hci2: command tx timeout [ 365.023387] Bluetooth: hci3: command tx timeout [ 365.086995] Bluetooth: hci4: command tx timeout [ 365.279068] Bluetooth: hci5: command tx timeout [ 365.343682] Bluetooth: hci6: command tx timeout [ 365.535050] Bluetooth: hci7: command tx timeout [ 366.686973] Bluetooth: hci0: command tx timeout [ 366.817097] Bluetooth: hci1: command tx timeout [ 367.006945] Bluetooth: hci2: command tx timeout [ 367.072134] Bluetooth: hci3: command tx timeout [ 367.134985] Bluetooth: hci4: command tx timeout [ 367.328058] Bluetooth: hci5: command tx timeout [ 367.391319] Bluetooth: hci6: command tx timeout [ 367.583949] Bluetooth: hci7: command tx timeout [ 368.735018] Bluetooth: hci0: command tx timeout [ 368.862975] Bluetooth: hci1: command tx timeout [ 369.055159] Bluetooth: hci2: command tx timeout [ 369.118974] Bluetooth: hci3: command tx timeout [ 369.184437] Bluetooth: hci4: command tx timeout [ 369.375308] Bluetooth: hci5: command tx timeout [ 369.440172] Bluetooth: hci6: command tx timeout [ 369.631839] Bluetooth: hci7: command tx timeout [ 370.782949] Bluetooth: hci0: command tx timeout [ 370.911369] Bluetooth: hci1: command tx timeout [ 371.104160] Bluetooth: hci2: command tx timeout [ 371.167014] Bluetooth: hci3: command tx timeout [ 371.232400] Bluetooth: hci4: command tx timeout [ 371.423295] Bluetooth: hci5: command tx timeout [ 371.486956] Bluetooth: hci6: command tx timeout [ 371.679003] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:50:24 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88801580e680 RCX=ffffffff819b949d RDX=ffff888028e01b80 RSI=ffffffff819b94ab RDI=ffff88801c56a508 RBP=ffff88801c56a580 RSP=ffff88802e63fda8 R8 =0000000000000001 R9 =0000000000000000 R10=00007f8b5df9a008 R11=0000000000000001 R12=ffff88801c56a500 R13=ffff88801c56a588 R14=00007f8b5df7f000 R15=00007f8b5df9a008 RIP=ffffffff819b94b0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8b5dad3540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b5df9a008 CR3=000000002d205000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888028267a00 RCX=ffffffff819c3402 RDX=ffff888035021b80 RSI=0000000000000000 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffff888033d8fac0 R8 =0000000000000001 R9 =ffffed100504cf00 R10=0000000000000001 R11=0000000000000001 R12=ffff88800e0b9140 R13=0000000000000001 R14=0000000000000001 R15=ffff888028267a10 RIP=ffffffff81738a00 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f169ade3000 CR3=0000000031d46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000