Warning: Permanently added '[localhost]:36432' (ECDSA) to the list of known hosts. 2025/06/09 15:26:34 fuzzer started 2025/06/09 15:26:34 dialing manager at localhost:40003 syzkaller login: [ 100.503248] cgroup: Unknown subsys name 'net' [ 100.655054] cgroup: Unknown subsys name 'cpuset' [ 100.697112] cgroup: Unknown subsys name 'rlimit' 2025/06/09 15:26:59 syscalls: 234 2025/06/09 15:26:59 code coverage: enabled 2025/06/09 15:26:59 comparison tracing: enabled 2025/06/09 15:26:59 extra coverage: enabled 2025/06/09 15:26:59 setuid sandbox: enabled 2025/06/09 15:26:59 namespace sandbox: enabled 2025/06/09 15:26:59 Android sandbox: enabled 2025/06/09 15:26:59 fault injection: enabled 2025/06/09 15:26:59 leak checking: enabled 2025/06/09 15:26:59 net packet injection: enabled 2025/06/09 15:26:59 net device setup: enabled 2025/06/09 15:26:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/09 15:26:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/09 15:26:59 USB emulation: enabled 2025/06/09 15:26:59 hci packet injection: enabled 2025/06/09 15:26:59 wifi device emulation: enabled 2025/06/09 15:26:59 802.15.4 emulation: enabled 2025/06/09 15:26:59 fetching corpus: 0, signal 0/0 (executing program) 2025/06/09 15:27:00 starting 8 fuzzer processes 15:27:00 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/10) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/27) r0 = semget$private(0x0, 0x1, 0x8) semtimedop(r0, &(0x7f0000000080)=[{0x2, 0x9, 0x800}, {0x0, 0x2, 0x1000}, {0x2, 0x3bf3, 0x1000}, {0x4, 0x5, 0x800}, {0x2, 0x2000, 0x800}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') r2 = socket$inet(0x2, 0x800, 0x3) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000140)={'macsec0\x00', 0x5}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'gretap0\x00'}) semctl$GETPID(r0, 0x4, 0xb, &(0x7f00000001c0)=""/4096) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000011c0)=""/54) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000001200)) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000001240)={'veth0_to_hsr\x00', 0x800}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r1) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r5 = semget(0x3, 0x3, 0x204) semctl$GETNCNT(r5, 0x4, 0xe, &(0x7f00000022c0)=""/167) write$bt_hci(r1, &(0x7f0000002380)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x6d}}}, 0x5) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) 15:27:00 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000200)={'wlan0\x00', 0xffc1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x174, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200020}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xefdc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f00000004c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000500)=0x28) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000540)={0x3, 0x56, "69ff20", 0x40, 0x5}) r4 = socket(0x15, 0x800, 0xffff) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000600)=0x1, 0x4) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000640), &(0x7f0000000680)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x50000002) socketpair(0x0, 0x3, 0x8, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@private2, @in6=@mcast2}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}}}, &(0x7f0000000a00)=0xe8) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x0, 0x0, 0x70bd27, 0x2, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x2400c801) 15:27:00 executing program 2: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) r0 = socket(0x6, 0x80000, 0xb4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x9, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'bond_slave_1\x00', {0x3}, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000400)={'vlan0\x00', {0x2, 0x0, @multicast2}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) getsockopt(r1, 0x3, 0x6, &(0x7f0000000b40)=""/27, &(0x7f0000000b80)=0x1b) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000bc0)=0x1, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000c00)={'geneve1\x00', {0x2, 0x0, @multicast2}}) write$bt_hci(r1, &(0x7f0000000c40)={0x1, @pin_code_reply={{0x40d, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f, "4dc48d9e8e4dec8e958831a28226a260"}}}, 0x1b) r2 = socket(0x2b, 0x1, 0x10000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000c80)={0x8, 'sit0\x00', {'ipvlan1\x00'}, 0x54c}) ioctl$sock_proto_private(r2, 0x89e8, &(0x7f0000000cc0)="ded38c30f8ce11076590a6fdd25656897329206066445d0f0da733666ad7b2f4f362a62c08ccc18b1e9a43cf3aaa2ca0f75323f84ccd97c817612ee7bc87cba093cc5a8b0e") socketpair(0x23, 0x800, 0x1, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000000e00)="da2e9779a4f60ef1c3c0daba09a21f8c396b0647df29f87f1b2b303e8ac29b695b462033eab65c7443712719624d52e111eb972b9416794ea448ba970ecc40de352174e2077e69730507e9de89ce119281c50d7b25005acd3720207cc8ad0d70780f5aaac70d17cfa3dd7adb21b66ca1f15912d18a4196c62267158e3240b2b24d0019a5ba87f158fdc1d1a60cf1fd392a644f77333ada6b870c5f3abbfe3c2d3c1dedaad2a918b9c3") socket$inet(0x2, 0x5, 0x301) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000ec0), &(0x7f0000000f00)=0x40) 15:27:00 executing program 3: ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)="6783d77e41330b3b7d18f589e6d263c88b22c11de78feaad1ec05290b32934d73ae539514b1ebdc2b175117b38a6dcc305f42ca30c67beb031658a7c926a155108be393b2b46188335996247fc4fa3864102417f86e23705ce68091d7e978ffdb2704e3e0239193d03afb2d535fb3d594c3ede14eb1fb997750e5021a6e29ee3a3d4c5632a34f706054260fd15e8f80ebb276b49df52cde3d2ef4311e8d665bce8f9ec2b6e377f754e8c770413123b475f8a8f") getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x200080d4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, 'bridge_slave_0\x00', {0x1}, 0x2}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x8, 'wlan1\x00', {'veth1_to_bridge\x00'}, 0x81}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x200041c5) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000003c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000400)=0x28) r1 = accept(0xffffffffffffffff, &(0x7f0000000440)=@tipc, &(0x7f00000004c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'batadv_slave_1\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44044) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000007c0), &(0x7f0000000840)=0x68) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000008c0)={0x6, 'team_slave_1\x00', {0xfffffe01}, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1b}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x815}, 0x4008004) [ 125.967782] audit: type=1400 audit(1749482820.328:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:27:00 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001600)={0x3, 0x0, "116f7d", 0x5b, 0x5}) bind$bt_hci(r1, &(0x7f0000001640), 0x6) connect(0xffffffffffffffff, &(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x1000, @local, 0x2, 0x3}, 0x80) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000001800)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000001700)="fa1f5dbff9a7dea319c552fd05883968944b8f33f4aff0c1eeebb9a0d8280c898db8730ed2b88a122ea5ff2b3eb62fb17a98c1d971d0873d3234596c809b78965676e8cc508396d479e8dc5685ac10dae1c32fc64d7da2bb2aa338d0c6ec1f473b707dcdeebe3e944241fc24d721a9dd12e4fcb6a2f9ed31ee1c2d1aeb6909aa2e6ab86ae350eaf483003af0b3d6c4d6d7c00f49e10b34311aa707543946fc2d174a118ba4d4b7e6a47492a985703af9c226c750f0bf3297b2f466ee3492c6acf9d6f4a0aa68946ea4e3f0f620a6b3a4d0c9e37a96697e34eb353740eef7fdaaf405dda1d81a274c32", 0xe9, 0x48040, 0x1}, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001840)='net/llc/socket\x00') ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000001880)={0x2, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0880, 0x0) syz_io_uring_setup(0x11e6, &(0x7f0000001900)={0x0, 0x6822, 0x0, 0x1, 0x39, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001980), &(0x7f00000019c0)) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, &(0x7f00000097c0)=[{{&(0x7f0000001b00)=@isdn, 0x80, &(0x7f0000003f40)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/205, 0xcd}, {&(0x7f0000002c80)=""/133, 0x85}, {&(0x7f0000002d40)=""/54, 0x36}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/125, 0x7d}, {&(0x7f0000002e40)=""/147, 0x93}, {&(0x7f0000002f00)=""/22, 0x16}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x9, &(0x7f0000004000)=""/44, 0x2c}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004040)=""/247, 0xf7}], 0x1, &(0x7f0000004180)=""/93, 0x5d}, 0x80000000}, {{&(0x7f0000004200)=@nl=@proc, 0x80, &(0x7f0000004340)=[{&(0x7f0000004280)=""/192, 0xc0}], 0x1, &(0x7f0000004380)=""/186, 0xba}}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000004440)=""/253, 0xfd}, {&(0x7f0000004540)=""/34, 0x22}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x3, &(0x7f00000055c0)=""/69, 0x45}, 0x10001}, {{&(0x7f0000005640)=@tipc, 0x80, &(0x7f00000057c0)=[{&(0x7f00000056c0)=""/202, 0xca}], 0x1, &(0x7f0000005800)=""/166, 0xa6}, 0x4}, {{&(0x7f00000058c0)=@ieee802154, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005940)=""/252, 0xfc}, {&(0x7f0000005a40)=""/26, 0x1a}], 0x2, &(0x7f0000005ac0)=""/67, 0x43}, 0x7}, {{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000005b40)=""/129, 0x81}, {&(0x7f0000005c00)=""/164, 0xa4}, {&(0x7f0000005cc0)=""/49, 0x31}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/33, 0x21}, {&(0x7f0000006d40)=""/52, 0x34}, {&(0x7f0000006d80)=""/161, 0xa1}, {&(0x7f0000006e40)=""/137, 0x89}, {&(0x7f0000006f00)=""/15, 0xf}, {&(0x7f0000006f40)=""/61, 0x3d}], 0xa, &(0x7f0000007040)=""/132, 0x84}, 0x69e}, {{0x0, 0x0, &(0x7f0000009600)=[{&(0x7f0000007100)=""/53, 0x35}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/250, 0xfa}, {&(0x7f0000008240)=""/159, 0x9f}, {&(0x7f0000008300)=""/207, 0xcf}, {&(0x7f0000008400)=""/224, 0xe0}, {&(0x7f0000008500)=""/4096, 0x1000}, {&(0x7f0000009500)=""/87, 0x57}, {&(0x7f0000009580)=""/103, 0x67}], 0x9, &(0x7f00000096c0)=""/243, 0xf3}, 0x9}], 0x8, 0x2, &(0x7f00000099c0)={0x0, 0x3938700}) bind$bt_hci(r3, &(0x7f0000009a00)={0x1f, 0x4, 0x2}, 0x6) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000009a40)=@hsc={0x1, 0x1, "e5ed17b24d64d3448b42"}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000009a80)='net/udp\x00') getpeername(r6, &(0x7f0000009ac0)=@ethernet={0x0, @dev}, &(0x7f0000009b40)=0x80) 15:27:00 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@ethernet={0x0, @random}, &(0x7f0000000300)=0x80) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x79, @bearer=@l2={'ib', 0x3a, 'rose0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername(r0, &(0x7f0000000440)=@nl=@proc, &(0x7f00000004c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000540)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000000980)=""/247, 0xf7}, {&(0x7f0000000a80)=""/164, 0xa4}, {&(0x7f0000000b40)=""/207, 0xcf}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x6, &(0x7f0000000dc0)=""/183, 0xb7}, 0x6}], 0x1, 0x40, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000ec0)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000f00)={'vlan0\x00', {0x2, 0x0, @empty}}) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000f40)={@msf={0x7d, 0x2c}, 0x0, 0x7}) connect(r0, &(0x7f0000000f80)=@ll={0x11, 0xd, r1, 0x1, 0x9, 0x6, @multicast}, 0x80) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x140080c4}, 0x24001094) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001100)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001140)={'batadv_slave_1\x00'}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001180), 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r4, &(0x7f00000016c0)=[{{&(0x7f00000011c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001240)=""/44, 0x2c}, {&(0x7f0000001280)=""/121, 0x79}, {&(0x7f0000001300)=""/98, 0x62}, {&(0x7f0000001380)=""/27, 0x1b}, {&(0x7f00000013c0)=""/184, 0xb8}], 0x5}, 0x9}, {{&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/210, 0xd2}], 0x1}}], 0x2, 0x10000, &(0x7f0000001740)={0x0, 0x3938700}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003e00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003dc0)={&(0x7f00000017c0)=@alg, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001840)=""/145, 0x91}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/132, 0x84}, {&(0x7f00000029c0)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/201, 0xc9}, {&(0x7f0000002bc0)=""/160, 0xa0}, {&(0x7f0000002c80)=""/103, 0x67}, {&(0x7f0000002d00)=""/45, 0x2d}], 0x8, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x0, 0x122, 0x1, {0x2}}, 0x8) 15:27:00 executing program 5: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x4001) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) r1 = socket(0x3, 0x80000, 0x7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}]}]}, 0x68}}, 0xc810) socketpair(0xb, 0x4, 0x63c2, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f80)={'wlan1\x00'}) accept(r2, &(0x7f0000001fc0)=@caif=@dgm, &(0x7f0000002040)=0x80) r4 = syz_open_procfs(0x0, &(0x7f0000002140)='net/udp6\x00') setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000002180)=0x3, 0x2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000021c0)={0x7}, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002200)={0xffffffffffffffff}) ioctl$sock_proto_private(r5, 0x89ed, &(0x7f0000002240)="45340ad2") sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x3c, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x11) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000002380)=0x96, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000023c0), &(0x7f0000002440)=0x68) r7 = syz_io_uring_setup(0x680e, &(0x7f0000002480)={0x0, 0xe8d2, 0x76fb5947ac3d4acf, 0x3, 0xfa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002500), &(0x7f0000002540)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r7, 0x10000000) 15:27:00 executing program 7: r0 = socket$inet(0x2, 0x1, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'nr0\x00', {0x40}, 0x2}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'macvlan1\x00', {0x2, 0x0, @dev}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x100000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7bbe}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x7c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r6 = socket$inet(0x2, 0x46edd4af1f2e5d09, 0x20) setsockopt(r6, 0x0, 0x6, &(0x7f0000000340)="bfa56b432fdbcdb771e13abe690ec84f956bcc061dc914a67a30653a2d6f3af1ba9d5b0fa2b99e2d56c74ab6d88c3176c55b1ed60477f24db41a16ffe7ec742aa04be464c32c6341d965283b12319ec109c94d1e9958475c14e89958074e45486a47555a52960233e3219719a2ff0d741aafbe27d0bec912db6eb2be503f81083961a6e25f831fa36ce1c6bf9f4291e7a1639474ddf960fb47", 0x99) socketpair(0x28, 0x5, 0x9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r7, &(0x7f0000000440)=@ethernet={0x6, @broadcast}, 0x80) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x848}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) [ 127.249863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.254490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.257037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.265784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.269867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.331376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.338229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.341012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.348439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.350964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.353977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.358728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.367810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.384804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.394754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.498340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.505304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.513717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.522006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.531815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.579320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.640716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.643781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.650983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.672870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.684179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.689142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.699013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.715565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.721504] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.723803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.729069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.738742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.742718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.746472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.757663] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.762754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.780921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.783487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.797179] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.334874] Bluetooth: hci0: command tx timeout [ 129.398286] Bluetooth: hci2: command tx timeout [ 129.463258] Bluetooth: hci1: command tx timeout [ 129.654748] Bluetooth: hci3: command tx timeout [ 129.782273] Bluetooth: hci4: command tx timeout [ 129.846412] Bluetooth: hci7: command tx timeout [ 129.848033] Bluetooth: hci6: command tx timeout [ 129.848571] Bluetooth: hci5: command tx timeout [ 131.382453] Bluetooth: hci0: command tx timeout [ 131.446338] Bluetooth: hci2: command tx timeout [ 131.512254] Bluetooth: hci1: command tx timeout [ 131.702665] Bluetooth: hci3: command tx timeout [ 131.830430] Bluetooth: hci4: command tx timeout [ 131.895239] Bluetooth: hci6: command tx timeout [ 131.895721] Bluetooth: hci5: command tx timeout [ 131.895747] Bluetooth: hci7: command tx timeout [ 133.430617] Bluetooth: hci0: command tx timeout [ 133.495250] Bluetooth: hci2: command tx timeout [ 133.558309] Bluetooth: hci1: command tx timeout [ 133.750289] Bluetooth: hci3: command tx timeout [ 133.879281] Bluetooth: hci4: command tx timeout [ 133.942366] Bluetooth: hci7: command tx timeout [ 133.942806] Bluetooth: hci6: command tx timeout [ 133.943271] Bluetooth: hci5: command tx timeout [ 135.478510] Bluetooth: hci0: command tx timeout [ 135.542432] Bluetooth: hci2: command tx timeout [ 135.606450] Bluetooth: hci1: command tx timeout [ 135.798409] Bluetooth: hci3: command tx timeout [ 135.926669] Bluetooth: hci4: command tx timeout [ 135.990535] Bluetooth: hci5: command tx timeout [ 135.991030] Bluetooth: hci6: command tx timeout [ 135.991050] Bluetooth: hci7: command tx timeout [ 187.340268] syz-executor.1 (280) used greatest stack depth: 24608 bytes left [ 190.216665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.221003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.224254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.238964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.239888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.248457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.251699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.261122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.265837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.276044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.374102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.381836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.394747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.398814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.399103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.404391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.413317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.415682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.416708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.420978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.421951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.425022] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.431592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.437659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.444085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.679059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.690981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.700816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.703373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.706113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.716937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.720697] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.722518] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.731939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.734766] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.737819] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.758892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.759248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.793880] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.802913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.310311] Bluetooth: hci1: command tx timeout [ 192.378520] Bluetooth: hci0: command tx timeout [ 192.502388] Bluetooth: hci2: command tx timeout [ 192.503322] Bluetooth: hci4: command tx timeout [ 192.503394] Bluetooth: hci3: command tx timeout [ 192.824418] Bluetooth: hci5: command tx timeout [ 192.886417] Bluetooth: hci7: command tx timeout [ 192.951336] Bluetooth: hci6: command tx timeout [ 194.358315] Bluetooth: hci1: command tx timeout [ 194.423436] Bluetooth: hci0: command tx timeout [ 194.550630] Bluetooth: hci2: command tx timeout [ 194.551132] Bluetooth: hci3: command tx timeout [ 194.551655] Bluetooth: hci4: command tx timeout [ 194.870295] Bluetooth: hci5: command tx timeout [ 194.934592] Bluetooth: hci7: command tx timeout [ 194.998270] Bluetooth: hci6: command tx timeout [ 196.406663] Bluetooth: hci1: command tx timeout [ 196.471420] Bluetooth: hci0: command tx timeout [ 196.598852] Bluetooth: hci3: command tx timeout [ 196.599495] Bluetooth: hci4: command tx timeout [ 196.599784] Bluetooth: hci2: command tx timeout [ 196.918446] Bluetooth: hci5: command tx timeout [ 196.982935] Bluetooth: hci7: command tx timeout [ 197.046329] Bluetooth: hci6: command tx timeout [ 198.456576] Bluetooth: hci1: command tx timeout [ 198.518518] Bluetooth: hci0: command tx timeout [ 198.646299] Bluetooth: hci4: command tx timeout [ 198.646345] Bluetooth: hci2: command tx timeout [ 198.646878] Bluetooth: hci3: command tx timeout [ 198.966277] Bluetooth: hci5: command tx timeout [ 199.030276] Bluetooth: hci7: command tx timeout [ 199.094618] Bluetooth: hci6: command tx timeout [ 252.236861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.243375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.246088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.255632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.260477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.497536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.502032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.508693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.519304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.525817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.562888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.566805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.569375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.581859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.592021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.622312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.637799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.647717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.672151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.692778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.799424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.812154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.815835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.820795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.824039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.840995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.854655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.871803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.880012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.904752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.931740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.976119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.998915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.073535] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.103010] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.109696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.118501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.213521] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.219223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.222892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.326396] Bluetooth: hci0: command tx timeout [ 254.647339] Bluetooth: hci2: command tx timeout [ 254.648487] Bluetooth: hci1: command tx timeout [ 254.839493] Bluetooth: hci3: command tx timeout [ 254.966430] Bluetooth: hci4: command tx timeout [ 254.967405] Bluetooth: hci5: command tx timeout [ 255.222423] Bluetooth: hci6: command tx timeout [ 255.350288] Bluetooth: hci7: command tx timeout [ 256.375504] Bluetooth: hci0: command tx timeout [ 256.694305] Bluetooth: hci1: command tx timeout [ 256.694787] Bluetooth: hci2: command tx timeout [ 256.887325] Bluetooth: hci3: command tx timeout [ 257.014293] Bluetooth: hci4: command tx timeout [ 257.014752] Bluetooth: hci5: command tx timeout [ 257.272243] Bluetooth: hci6: command tx timeout [ 257.399335] Bluetooth: hci7: command tx timeout [ 258.422477] Bluetooth: hci0: command tx timeout [ 258.743763] Bluetooth: hci1: command tx timeout [ 258.744750] Bluetooth: hci2: command tx timeout [ 258.934621] Bluetooth: hci3: command tx timeout [ 259.062545] Bluetooth: hci4: command tx timeout [ 259.063978] Bluetooth: hci5: command tx timeout [ 259.318395] Bluetooth: hci6: command tx timeout [ 259.446493] Bluetooth: hci7: command tx timeout [ 260.472659] Bluetooth: hci0: command tx timeout [ 260.791377] Bluetooth: hci2: command tx timeout [ 260.791982] Bluetooth: hci1: command tx timeout [ 260.982608] Bluetooth: hci3: command tx timeout [ 261.111320] Bluetooth: hci4: command tx timeout [ 261.111811] Bluetooth: hci5: command tx timeout [ 261.368473] Bluetooth: hci6: command tx timeout [ 261.496255] Bluetooth: hci7: command tx timeout [ 314.376472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.382526] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.387047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.394974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.399405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.504607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.508476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.514912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.528645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.536648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.586419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.591908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.611378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.627013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.637076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.796972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.801360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.804931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.810699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.815696] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.865903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.877574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.886306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.944822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.951604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.971709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.981407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.983782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.997600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.009486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.019059] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.022905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.028442] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.032960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.038901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.061382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.069637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.093815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.098533] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 315.125607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.470361] Bluetooth: hci0: command tx timeout [ 316.599077] Bluetooth: hci1: command tx timeout [ 316.663251] Bluetooth: hci2: command tx timeout [ 316.854281] Bluetooth: hci3: command tx timeout [ 317.047399] Bluetooth: hci4: command tx timeout [ 317.174276] Bluetooth: hci5: command tx timeout [ 317.238801] Bluetooth: hci7: command tx timeout [ 317.430730] Bluetooth: hci6: command tx timeout [ 318.518313] Bluetooth: hci0: command tx timeout [ 318.646328] Bluetooth: hci1: command tx timeout [ 318.710819] Bluetooth: hci2: command tx timeout [ 318.902558] Bluetooth: hci3: command tx timeout [ 319.095238] Bluetooth: hci4: command tx timeout [ 319.222392] Bluetooth: hci5: command tx timeout [ 319.288568] Bluetooth: hci7: command tx timeout [ 319.478595] Bluetooth: hci6: command tx timeout [ 320.567267] Bluetooth: hci0: command tx timeout [ 320.694260] Bluetooth: hci1: command tx timeout [ 320.759252] Bluetooth: hci2: command tx timeout [ 320.950285] Bluetooth: hci3: command tx timeout [ 321.143360] Bluetooth: hci4: command tx timeout [ 321.270279] Bluetooth: hci5: command tx timeout [ 321.334486] Bluetooth: hci7: command tx timeout [ 321.526260] Bluetooth: hci6: command tx timeout [ 322.615457] Bluetooth: hci0: command tx timeout [ 322.742375] Bluetooth: hci1: command tx timeout [ 322.806608] Bluetooth: hci2: command tx timeout [ 322.998288] Bluetooth: hci3: command tx timeout [ 323.191475] Bluetooth: hci4: command tx timeout [ 323.319486] Bluetooth: hci5: command tx timeout [ 323.383439] Bluetooth: hci7: command tx timeout [ 323.575500] Bluetooth: hci6: command tx timeout [ 377.232112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.241742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.249804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.252851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.255525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.262496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.270847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.273513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.288540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.292363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.364078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.374521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.376263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.384687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.393712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.405713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.409539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.415517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.417757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.420069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 377.458624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.468760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.473094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.480433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.482594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.485038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.491718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.503103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.511693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.518544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.834757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.865660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.868033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.869025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.871785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.881936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.885028] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.888640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.935450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.947703] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.318304] Bluetooth: hci0: command tx timeout [ 379.382356] Bluetooth: hci1: command tx timeout [ 379.446320] Bluetooth: hci2: command tx timeout [ 379.510323] Bluetooth: hci3: command tx timeout [ 379.575558] Bluetooth: hci4: command tx timeout [ 379.638294] Bluetooth: hci5: command tx timeout [ 380.023284] Bluetooth: hci7: command tx timeout [ 380.086337] Bluetooth: hci6: command tx timeout [ 381.368287] Bluetooth: hci0: command tx timeout [ 381.430286] Bluetooth: hci1: command tx timeout [ 381.494307] Bluetooth: hci2: command tx timeout [ 381.559224] Bluetooth: hci3: command tx timeout [ 381.622300] Bluetooth: hci4: command tx timeout [ 381.686267] Bluetooth: hci5: command tx timeout [ 382.071366] Bluetooth: hci7: command tx timeout [ 382.135369] Bluetooth: hci6: command tx timeout [ 383.416405] Bluetooth: hci0: command tx timeout [ 383.478530] Bluetooth: hci1: command tx timeout [ 383.542251] Bluetooth: hci2: command tx timeout [ 383.606272] Bluetooth: hci3: command tx timeout [ 383.670261] Bluetooth: hci4: command tx timeout [ 383.735209] Bluetooth: hci5: command tx timeout [ 384.120251] Bluetooth: hci7: command tx timeout [ 384.183045] Bluetooth: hci6: command tx timeout [ 385.462579] Bluetooth: hci0: command tx timeout [ 385.526538] Bluetooth: hci1: command tx timeout [ 385.591479] Bluetooth: hci2: command tx timeout [ 385.654261] Bluetooth: hci3: command tx timeout [ 385.718509] Bluetooth: hci4: command tx timeout [ 385.782287] Bluetooth: hci5: command tx timeout [ 386.166336] Bluetooth: hci7: command tx timeout [ 386.230437] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 15:32:02 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880e561b000 RCX=ffffffff817410db RDX=0000000000000000 RSI=ffffffff81741197 RDI=ffff88806ce31850 RBP=0000000000000001 RSP=ffff8880316cf148 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c74ee8 R15=0000000000092cc0 RIP=ffffffff815ab910 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f63d7aea8e0 CR3=0000000033806000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888034be5cd8 RBX=0000000000000001 RCX=ffff88802ecaf7ec RDX=0000000000000001 RSI=ffffffff85c1cbc0 RDI=ffff888034be5cd8 RBP=ffffffff85c1cbc0 RSP=ffff88802ecaf7e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff817410f6 R13=0000000000000202 R14=ffff888034be5280 R15=0000000000000001 RIP=ffffffff8151ae58 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8b8a5a0260 CR3=000000000e309000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000