Warning: Permanently added '[localhost]:57927' (ECDSA) to the list of known hosts. 2025/06/11 09:18:06 fuzzer started 2025/06/11 09:18:06 dialing manager at localhost:37235 syzkaller login: [ 104.508866] cgroup: Unknown subsys name 'net' [ 104.669690] cgroup: Unknown subsys name 'cpuset' [ 104.699623] cgroup: Unknown subsys name 'rlimit' 2025/06/11 09:18:26 syscalls: 200 2025/06/11 09:18:26 code coverage: enabled 2025/06/11 09:18:26 comparison tracing: enabled 2025/06/11 09:18:26 extra coverage: enabled 2025/06/11 09:18:26 setuid sandbox: enabled 2025/06/11 09:18:26 namespace sandbox: enabled 2025/06/11 09:18:26 Android sandbox: enabled 2025/06/11 09:18:26 fault injection: enabled 2025/06/11 09:18:26 leak checking: enabled 2025/06/11 09:18:26 net packet injection: enabled 2025/06/11 09:18:26 net device setup: enabled 2025/06/11 09:18:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 09:18:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 09:18:26 USB emulation: enabled 2025/06/11 09:18:26 hci packet injection: enabled 2025/06/11 09:18:26 wifi device emulation: enabled 2025/06/11 09:18:26 802.15.4 emulation: enabled 2025/06/11 09:18:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 09:18:28 starting 8 fuzzer processes 09:18:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x67000000000}}, './file0\x00'}) rt_sigaction(0x12, &(0x7f00000002c0)={&(0x7f0000000240)="c48125e16300c4022d3f480036f30fa7c0f0810500000080953f20258fc810a6ba8dad00000ef247ad3ef346a5c461096c8e2eaa42e8f0831aa1c4816d72e000", 0x10000002, &(0x7f0000000280)="de159a0000004680cb0043d0970b00010065f2640fa93ef042006e0a2e0f156ec6672e407c350ff8c5c4c1f82e1067f00fbb0b", {[0x479]}}, &(0x7f0000000400)={&(0x7f0000000300)="3626f243a7c441797ea50f8400008fca181282abaf000000000000c48299982736f0804b6590f3410fbc53a1d2aa00000000c4e2ad9104ff660fee4bdc66410f3a0f562d07", 0x0, &(0x7f0000000380)="45d1c8660f3a147100f4c42231aecdf047f794b0a0000000f3450f7e2c2d090000003e6566460faef00fda9a1a00000041dbbace2e27dc3ef2450f7c9306000000c423cd7e048100"}, 0x8, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x408002, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r7) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x5, 0x3f}}, './file0/file0\x00'}) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x1}, 0x401) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) r11 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r9, {r10, r11}}, './file0\x00'}) 09:18:28 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000801) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x300, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x2cc, 0x8, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x300}, 0x1, 0x0, 0x0, 0xa0}, 0x4004080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r2) r3 = syz_open_pts(r2, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="467012ab54880426b3bc8e8b16c5f37f4475283555c856b5eb3d1b3ad6009dfbe9b01402812ea84b371b8a8a4aaa22e9aeb69d1d0eaf67b74ef263db0cca98e05786c08af2c8b0bf49068a4287471d598e1b2a515270ec08be8bbfc43217ecdc273b7d148a23dde73d92", 0x6a}, {&(0x7f00000006c0)="f2aff399bdff60f1bf6a52e4443b75d62604509f5e8b33e95b298777615fa8d6a106f8", 0x23}, {&(0x7f0000000700)="7d7f172471e493873cf9301d16bb17fa349615dbb490d46b93957069b9364ec28faab870fdf3a7facd315bb74e14d72752a4b8f6383b499ce359ffa5749aa22d692ca6d0d4", 0x45}], 0x3, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) syz_open_dev$usbmon(&(0x7f00000007c0), 0x8, 0x200000) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000800)={0x2, 0x3, 0xff, 0x2, 0x1, "63b26d9bfe7acb71"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000840)) ioctl$TIOCSIG(r2, 0x40045436, 0x26) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r4) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000008c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) 09:18:28 executing program 2: keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffff9) keyctl$update(0x2, r0, &(0x7f00000000c0)="0e38fa5f59e88daef878e401117ec16f8b3e33090fb2f4eda07364ee45ddadb1857927be4346ad5a96f4130d143319abe880ff870fb5bbb9d8766acb7675679447cce5240beaa0c167e84a05b6ffa964af1dd7edd45806d059b3ddbec6951b874de63f43e894041f3aa9086ab724fddbb6af9ba5fdd75c5c128361e781461eca54b97bcd507141d81cf8636791", 0x8d) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1, 0xa1, 0xac}, 0x0, &(0x7f0000000240)="ebc108c90aca209a38b851951ccff57f07cb610b699f493f14dbf332d355c4b5e8027062b5eec991c4c20a85904a6b5720a5920292dcef0a2ca9623955fba5b474b158d9fcb0ed950d1ada49182faed9ee04c08ff893ab7b67cb44f788c3470a2eada30389519d06d2e589830121df3acd2ae63e0e4d95b9bc29b4b7bff2680e2c650878910dc30a2a471830e147a946072f1455d37aaf5ca5306e7447bd46a9fb", &(0x7f0000000300)="c87d138bec610789093cd153e3dc496796efdb047d8ae81ea8e3029eef3da83260dbcb5cdfcfd5081a233edc8f606efe6b1741bb703f1ce9513f7f638410c6efab59cbd0d3b487383b7a5818b3c9766ecae3723b9121d016c771153acf172d43129ac6dd2d54a8bf404cb73ac09752bee10df018979c5da399cffad8a2fc7a1a7f2e832f1025193d9a1c7419bad517971de8bb9af40a54ec764d4805af4a67909b1fd520bc76a92d2c6ff3d9") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r1, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)={0x2, 0x0, @a}, 0x48, r1) keyctl$update(0x2, r2, &(0x7f0000000540)="4c175d918ea9b440451faea336394a301684bd8827a2aa8ed446031bbab6d118d0437665a5f68395", 0x28) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r4, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000680)={r3, 0x59, 0x1000}, &(0x7f00000006c0)={'enc=', 'raw', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f0000000740)="c8d1d23f07723acc80c722c39646491b1c7f075f7c249d6a37d6b22d78f291ca34c5e448030e271efe9cc67884a4c26f2f0d278bfb23559b71f98a165acfbc993959496aa0d57a58d72c038f6ab05743e491549741692c17ef", &(0x7f00000007c0)=""/4096) add_key(&(0x7f00000017c0)='rxrpc\x00', &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000001840)='dns_resolver\x00', &(0x7f0000001880)={'syz', 0x0}, r1) keyctl$invalidate(0x15, r4) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xafd) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) r6 = add_key$keyring(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$invalidate(0x15, r6) 09:18:28 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="1a3ef5ae450443af7336c1798f2fd2b539ac4a208e3503a5278f7e6f8a72241c244f14b9dce3892e740ec4f6890e8a72ac6f70d99b8e124cc709e7f627b58e5f8c0f814877d6ab604573fabdbdb197ebd0cea85741ab4aa0aadc00907571c9f6eb3c630a54153e11fbb9d688bf005ac1918a24dde703b3a63c1d1cabeff86a2cfe7f539108f32eeb0c4c875c43617e7ed230ef911e85e9e7738359") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1, 0xffe0000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, @in_args={0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd467}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r12, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x1000}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r11, {0xc5}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r13, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, @in_args={0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r12, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file1\x00'}) ioctl$KDGKBDIACR(r14, 0x4b4a, &(0x7f0000000500)=""/193) 09:18:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x1}}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xa25d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file1\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x5) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x4010, r3, 0x8) ioctl$TIOCSBRK(r1, 0x5427) r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x8001) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000200)={0x6bd, 0x33, 0x80, 0x41, 0x9, "8c24fd521174577c07dbd88cc0d75456a9b62a", 0x7, 0x5}) r8 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x84) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8001}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000400)=0x1) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000440)=0x4) [ 125.834921] audit: type=1400 audit(1749633508.256:7): avc: denied { execmem } for pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:18:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x47d457df30fe59c7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x19cef1464a874730}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x814) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x49fff84613b0d5e0}, 0x20000040) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5004}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r1, 0x800, 0x70bd2a, 0x9, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x53}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3a}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}]}, 0x74}}, 0x10080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4008094) 09:18:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfb}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x8080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x400080c2}, 0x1) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x300}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x7b6cd6e973b00d68) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r7, 0x920, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a80)={'wpan3\x00'}) 09:18:28 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r1, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r3, 0x0}}, './file0\x00'}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0x7fff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x0, r4}}, './file0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r6) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_io_uring_setup(0x3721, &(0x7f0000000540)={0x0, 0x182e, 0x20, 0x1, 0x181}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000640)=""/137) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r9) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 127.297603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.299519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.301079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.305024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.307568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.371567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.375521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.378124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.381378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.382301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.386364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.391248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.395640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.398471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.399639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.402037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.409310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.411674] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.413049] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.414481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.416367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.421180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.423205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.425468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.428419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.429476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.430484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.434870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.440518] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.441632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.445537] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.451517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.471059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.530575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.530645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.536220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.536232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.559480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.560347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.585346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.385728] Bluetooth: hci0: command tx timeout [ 129.513318] Bluetooth: hci1: command tx timeout [ 129.514197] Bluetooth: hci5: command tx timeout [ 129.514264] Bluetooth: hci2: command tx timeout [ 129.641246] Bluetooth: hci7: command tx timeout [ 129.641261] Bluetooth: hci4: command tx timeout [ 129.641409] Bluetooth: hci6: command tx timeout [ 129.705899] Bluetooth: hci3: command tx timeout [ 131.434362] Bluetooth: hci0: command tx timeout [ 131.561358] Bluetooth: hci1: command tx timeout [ 131.563533] Bluetooth: hci2: command tx timeout [ 131.566066] Bluetooth: hci5: command tx timeout [ 131.689000] Bluetooth: hci6: command tx timeout [ 131.690680] Bluetooth: hci4: command tx timeout [ 131.690703] Bluetooth: hci7: command tx timeout [ 131.753056] Bluetooth: hci3: command tx timeout [ 133.481889] Bluetooth: hci0: command tx timeout [ 133.609189] Bluetooth: hci2: command tx timeout [ 133.611105] Bluetooth: hci1: command tx timeout [ 133.612729] Bluetooth: hci5: command tx timeout [ 133.736916] Bluetooth: hci7: command tx timeout [ 133.736950] Bluetooth: hci6: command tx timeout [ 133.738093] Bluetooth: hci4: command tx timeout [ 133.801901] Bluetooth: hci3: command tx timeout [ 135.529250] Bluetooth: hci0: command tx timeout [ 135.657925] Bluetooth: hci5: command tx timeout [ 135.659586] Bluetooth: hci1: command tx timeout [ 135.660624] Bluetooth: hci2: command tx timeout [ 135.785017] Bluetooth: hci6: command tx timeout [ 135.785108] Bluetooth: hci4: command tx timeout [ 135.788095] Bluetooth: hci7: command tx timeout [ 135.849152] Bluetooth: hci3: command tx timeout [ 187.845336] syz-executor.3 (283) used greatest stack depth: 24864 bytes left [ 190.208484] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.211000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.215665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.220971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.225098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.344606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.345739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.349308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.354243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.357393] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.367634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.371879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.375237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.404688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.410562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.413189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.425193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.429228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.431295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.431932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.435164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.439749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.446519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.449326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.452962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.455376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.457513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.460480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.465870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.483156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.494454] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.498553] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.506407] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.512000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.512525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.519109] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.537975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.544759] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.548284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.554167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.297099] Bluetooth: hci0: command tx timeout [ 192.425262] Bluetooth: hci2: command tx timeout [ 192.552955] Bluetooth: hci3: command tx timeout [ 192.553013] Bluetooth: hci4: command tx timeout [ 192.555663] Bluetooth: hci1: command tx timeout [ 192.555734] Bluetooth: hci5: command tx timeout [ 192.617088] Bluetooth: hci6: command tx timeout [ 192.618950] Bluetooth: hci7: command tx timeout [ 194.345846] Bluetooth: hci0: command tx timeout [ 194.472920] Bluetooth: hci2: command tx timeout [ 194.601859] Bluetooth: hci3: command tx timeout [ 194.603370] Bluetooth: hci1: command tx timeout [ 194.603418] Bluetooth: hci5: command tx timeout [ 194.605059] Bluetooth: hci4: command tx timeout [ 194.665124] Bluetooth: hci6: command tx timeout [ 194.670876] Bluetooth: hci7: command tx timeout [ 196.392903] Bluetooth: hci0: command tx timeout [ 196.520928] Bluetooth: hci2: command tx timeout [ 196.649144] Bluetooth: hci5: command tx timeout [ 196.650873] Bluetooth: hci4: command tx timeout [ 196.652840] Bluetooth: hci1: command tx timeout [ 196.652900] Bluetooth: hci3: command tx timeout [ 196.715002] Bluetooth: hci6: command tx timeout [ 196.717037] Bluetooth: hci7: command tx timeout [ 198.440862] Bluetooth: hci0: command tx timeout [ 198.568899] Bluetooth: hci2: command tx timeout [ 198.696996] Bluetooth: hci5: command tx timeout [ 198.698590] Bluetooth: hci3: command tx timeout [ 198.698676] Bluetooth: hci4: command tx timeout [ 198.699719] Bluetooth: hci1: command tx timeout [ 198.760955] Bluetooth: hci7: command tx timeout [ 198.762490] Bluetooth: hci6: command tx timeout [ 250.787964] syz-executor.3 (2456) used greatest stack depth: 24832 bytes left [ 252.899182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.952676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.961446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.975128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.003179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.116665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.123144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.125241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.137507] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.139516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.144320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.146447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.152128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.153114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.155652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.163239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.168317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.173289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.189150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.198177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.199268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.201139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.203400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.211101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.213494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.215730] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.221949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.239461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.239585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.247088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.257285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.259376] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.262368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.266368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.268412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.349482] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.351450] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.352727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.357225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.359569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.080911] Bluetooth: hci0: command tx timeout [ 255.209262] Bluetooth: hci2: command tx timeout [ 255.209300] Bluetooth: hci1: command tx timeout [ 255.274117] Bluetooth: hci3: command tx timeout [ 255.336983] Bluetooth: hci5: command tx timeout [ 255.337051] Bluetooth: hci6: command tx timeout [ 255.401107] Bluetooth: hci4: command tx timeout [ 255.464932] Bluetooth: hci7: command tx timeout [ 257.128948] Bluetooth: hci0: command tx timeout [ 257.257596] Bluetooth: hci1: command tx timeout [ 257.258829] Bluetooth: hci2: command tx timeout [ 257.320923] Bluetooth: hci3: command tx timeout [ 257.385289] Bluetooth: hci5: command tx timeout [ 257.386148] Bluetooth: hci6: command tx timeout [ 257.448984] Bluetooth: hci4: command tx timeout [ 257.516154] Bluetooth: hci7: command tx timeout [ 259.177235] Bluetooth: hci0: command tx timeout [ 259.304892] Bluetooth: hci2: command tx timeout [ 259.305966] Bluetooth: hci1: command tx timeout [ 259.369120] Bluetooth: hci3: command tx timeout [ 259.432947] Bluetooth: hci5: command tx timeout [ 259.433215] Bluetooth: hci6: command tx timeout [ 259.497258] Bluetooth: hci4: command tx timeout [ 259.560976] Bluetooth: hci7: command tx timeout [ 261.224927] Bluetooth: hci0: command tx timeout [ 261.352996] Bluetooth: hci1: command tx timeout [ 261.353126] Bluetooth: hci2: command tx timeout [ 261.416873] Bluetooth: hci3: command tx timeout [ 261.480889] Bluetooth: hci5: command tx timeout [ 261.480924] Bluetooth: hci6: command tx timeout [ 261.544973] Bluetooth: hci4: command tx timeout [ 261.608875] Bluetooth: hci7: command tx timeout [ 315.394816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.406049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.407451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.414333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.416361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.589726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.600013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.602724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.621808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.630763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.678134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.681176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.686250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.692719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.696572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.771302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.776585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.779163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.795903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.808998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.968707] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.974155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.979098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.982014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.004464] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.007051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.011442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.014281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.017804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.020140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.027035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.031766] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.032094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.053194] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.060089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.078056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.080952] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.086279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.101874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.127994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.481163] Bluetooth: hci0: command tx timeout [ 317.673950] Bluetooth: hci1: command tx timeout [ 317.929061] Bluetooth: hci2: command tx timeout [ 317.994837] Bluetooth: hci3: command tx timeout [ 318.121623] Bluetooth: hci4: command tx timeout [ 318.185850] Bluetooth: hci7: command tx timeout [ 318.187746] Bluetooth: hci6: command tx timeout [ 318.249145] Bluetooth: hci5: command tx timeout [ 319.529158] Bluetooth: hci0: command tx timeout [ 319.721650] Bluetooth: hci1: command tx timeout [ 319.977840] Bluetooth: hci2: command tx timeout [ 320.041039] Bluetooth: hci3: command tx timeout [ 320.169027] Bluetooth: hci4: command tx timeout [ 320.233200] Bluetooth: hci7: command tx timeout [ 320.234874] Bluetooth: hci6: command tx timeout [ 320.296987] Bluetooth: hci5: command tx timeout [ 321.577297] Bluetooth: hci0: command tx timeout [ 321.769145] Bluetooth: hci1: command tx timeout [ 322.025865] Bluetooth: hci2: command tx timeout [ 322.089670] Bluetooth: hci3: command tx timeout [ 322.216974] Bluetooth: hci4: command tx timeout [ 322.280955] Bluetooth: hci7: command tx timeout [ 322.281528] Bluetooth: hci6: command tx timeout [ 322.345180] Bluetooth: hci5: command tx timeout [ 323.625207] Bluetooth: hci0: command tx timeout [ 323.817081] Bluetooth: hci1: command tx timeout [ 324.073858] Bluetooth: hci2: command tx timeout [ 324.136891] Bluetooth: hci3: command tx timeout [ 324.265035] Bluetooth: hci4: command tx timeout [ 324.328991] Bluetooth: hci6: command tx timeout [ 324.329522] Bluetooth: hci7: command tx timeout [ 324.393179] Bluetooth: hci5: command tx timeout [ 378.052225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.058571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.060315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.063508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.065592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.355812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.363113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.365244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.370003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.371993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.429277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.433166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.437719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.441823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.447544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.512030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.515484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.516965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.522268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.524330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.584982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.593389] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.596740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.602478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.604615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.621890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.624377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.627347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.636667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.639496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.694423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.705467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.717181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.741579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.755690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.762624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.772563] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.779493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.798735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.812289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.137035] Bluetooth: hci0: command tx timeout [ 380.392945] Bluetooth: hci1: command tx timeout [ 380.520900] Bluetooth: hci2: command tx timeout [ 380.648911] Bluetooth: hci4: command tx timeout [ 380.776985] Bluetooth: hci3: command tx timeout [ 380.777392] Bluetooth: hci6: command tx timeout [ 380.840934] Bluetooth: hci5: command tx timeout [ 380.904890] Bluetooth: hci7: command tx timeout [ 382.184894] Bluetooth: hci0: command tx timeout [ 382.441698] Bluetooth: hci1: command tx timeout [ 382.569028] Bluetooth: hci2: command tx timeout [ 382.698818] Bluetooth: hci4: command tx timeout [ 382.824913] Bluetooth: hci3: command tx timeout [ 382.826170] Bluetooth: hci6: command tx timeout [ 382.889163] Bluetooth: hci5: command tx timeout [ 382.954990] Bluetooth: hci7: command tx timeout [ 384.235072] Bluetooth: hci0: command tx timeout [ 384.489005] Bluetooth: hci1: command tx timeout [ 384.616912] Bluetooth: hci2: command tx timeout [ 384.745855] Bluetooth: hci4: command tx timeout [ 384.873920] Bluetooth: hci6: command tx timeout [ 384.874486] Bluetooth: hci3: command tx timeout [ 384.937236] Bluetooth: hci5: command tx timeout [ 385.001637] Bluetooth: hci7: command tx timeout [ 386.280922] Bluetooth: hci0: command tx timeout [ 386.536959] Bluetooth: hci1: command tx timeout [ 386.665139] Bluetooth: hci2: command tx timeout [ 386.793046] Bluetooth: hci4: command tx timeout [ 386.921868] Bluetooth: hci3: command tx timeout [ 386.921904] Bluetooth: hci6: command tx timeout [ 386.984914] Bluetooth: hci5: command tx timeout [ 387.048890] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:23:35 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffff88806ce089cc RDX=1ffff1100d9c1158 RSI=ffffffff812d97bc RDI=ffff88806ce08a78 RBP=ffff88806ce08ad0 RSP=ffff88806ce08a00 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b71d R11=0000000000006b94 R12=0000000000000000 R13=ffff88806ce08ac0 R14=ffff8880373b3700 R15=ffff88806ce08a78 RIP=ffffffff815abdfe RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f829d2a5540 00000000 00000000 GS =0000 ffff8880e561a000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f829d4404a1 CR3=0000000025b93000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806cf31850 RBP=ffffffff85c1cbc0 RSP=ffff888016f9f828 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b71d R11=00000000000c4d1f R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888016f9f910 RIP=ffffffff8151b14e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571a000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd9438b3710 CR3=0000000035563000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000