Warning: Permanently added '[localhost]:27287' (ECDSA) to the list of known hosts. 2025/06/24 12:10:14 fuzzer started 2025/06/24 12:10:14 dialing manager at localhost:37113 syzkaller login: [ 99.947868] cgroup: Unknown subsys name 'net' [ 100.110501] cgroup: Unknown subsys name 'cpuset' [ 100.154102] cgroup: Unknown subsys name 'rlimit' 2025/06/24 12:10:30 syscalls: 211 2025/06/24 12:10:30 code coverage: enabled 2025/06/24 12:10:30 comparison tracing: enabled 2025/06/24 12:10:30 extra coverage: enabled 2025/06/24 12:10:30 setuid sandbox: enabled 2025/06/24 12:10:30 namespace sandbox: enabled 2025/06/24 12:10:30 Android sandbox: enabled 2025/06/24 12:10:30 fault injection: enabled 2025/06/24 12:10:30 leak checking: enabled 2025/06/24 12:10:30 net packet injection: enabled 2025/06/24 12:10:30 net device setup: enabled 2025/06/24 12:10:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/24 12:10:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/24 12:10:30 USB emulation: enabled 2025/06/24 12:10:30 hci packet injection: enabled 2025/06/24 12:10:30 wifi device emulation: enabled 2025/06/24 12:10:30 802.15.4 emulation: enabled 2025/06/24 12:10:30 fetching corpus: 0, signal 0/0 (executing program) 2025/06/24 12:10:32 starting 8 fuzzer processes 12:10:32 executing program 0: getrusage(0x1, &(0x7f0000000000)) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x80000000, &(0x7f0000000100)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000200)=0x1, 0x4) getrusage(0x0, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000380)) r1 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x200, 0x10080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='wg1\x00', 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xff32}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r3 = socket(0x11, 0x5, 0x87a) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000700)={0x7, "c35e6b"}, 0x6) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000740)=0x1) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, &(0x7f0000000780)="2acac937077682c0a3abac2a9f59e6c25dc94912e8fbaa987a76ea628008ecf976b102d5846a2ea8dfbefb7f4a9d3622408a86688fb0a7c647356bfc469ee94dcc2e074da3c78fd8f4b9a823b85e478028ba6fe7bd8ace0384b2eef76724b1ef683d5c1ee5bd6778b1a4fc97eb736791bb95bd1e50f45153c8") r4 = gettid() wait4(r4, 0x0, 0x20000000, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000800)=r4) 12:10:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffd, 0x4c40) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x20041) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x7, 0xfffffffd, 0x43, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x9, 0x40}}) bind(r0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @random="64bf33682ae0", 'veth0_to_hsr\x00'}}, 0x80) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}}, 0x48810) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000440)=0x68) r6 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@nfc, &(0x7f0000000500)=0x80, 0x80000) r7 = syz_open_dev$vcsa(&(0x7f0000000540), 0xe0d, 0x38001) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4a, 0xa8, @random="d83a82d4050e412a7fb2d2dca51a734e1d726e106caef9b8afde85aa7c3f030b66e77c2886f8e9d0a0f3c194accbc3ae52dfcc3cc4fe99f163ea16b9973cb5f8eea2e51112ba"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x12, 0xa8, @random="64e891af4a2d26cdfe7616151476"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8020}, 0x8804) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000fc0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000002000)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001fc0)={&(0x7f00000018c0)={0x6cc, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd7bc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfffb, 0x6, 0x0, 0x10001}, {0x4e0, 0x8, 0x1, 0x3ff}, {0x8, 0x7f, 0x3, 0x4}, {0xa2, 0x5, 0x3, 0x9}, {0x0, 0x1, 0xd6, 0x5}, {0x200, 0x80, 0x3, 0x8}, {0x4, 0x4, 0x3, 0x8001}, {0x100, 0x7, 0xff, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7fff, 0xff, 0x8, 0xaf}, {0x8, 0x20, 0x6, 0xb6}]}}}]}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x8000}, 0x200000d0) 12:10:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28000004}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x84}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7ff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4040001) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r3) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe0, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xcc, 0xa8, @random="7350ef84f879bf151f63ccf877257709108494ca87f200a6a6926ebb9487e2bc7e0c4985a37ca9d2a156aed9c6bde3bdaa923bb3fadfd21f298c302c0647001ec7dfb8e2493dd0957b7608b61e0c8b2a0f47f2640882d882ca49aafdea29270f3d68981297fcd657f796847e05e879dbfc83dffb962d0e67dd57b6fbc3c32f0f638ed6306cec9027460f6ba2c2dcacefd631fd4405fa6afdd58122fdc2f6922a9cecf0babd36c46a676fb687cd8f2fcce03a4ecb9c48e8a1abf69a43cbc87162e94f5c866d0835dc"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x180}, 0x24004054) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r6, 0x200, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x58}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf58b}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x128, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x880}, 0x800) r8 = socket(0x9, 0x5, 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r7) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r9, 0x9a7feab8db8a3499, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000005) 12:10:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xbac) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r4, 0x4b30, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x84, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000044}, 0x4040001) r7 = syz_open_pts(r0, 0x80000) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000002800)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$VT_DISALLOCATE(r8, 0x5608) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r9, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x10, 0x3f5, 0x120, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x400}, 0x8013) ioctl$KIOCSOUND(r8, 0x4b2f, 0x101) [ 117.576426] audit: type=1400 audit(1750767032.675:8): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:10:32 executing program 4: sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4bd}, {0x6, 0x11, 0x5}, {0x8}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0xa3d6ecdabb7a984d}, 0x4001) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x113}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc04c004}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x200, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4e}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x15}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x381}, {0x6, 0x11, 0xf5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3800000}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x75}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}]}, 0x200}, 0x1, 0x0, 0x0, 0x50}, 0x8000) socketpair(0x9, 0x2, 0x20, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x8050) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000a00)=0xfffc, &(0x7f0000000a40)=0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x98}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}]}, 0x44}}, 0x4000800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x118, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x53c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff0001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x48004}, 0x20004041) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000001040)) 12:10:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x521000) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x3) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x3c0aca86) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x181900) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x81) modify_ldt$read_default(0x2, &(0x7f0000000140)=""/174, 0xae) prctl$PR_SET_UNALIGN(0x6, 0x1) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000200)=0x1) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000240)) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000002c0)=0xfffffffffffff664) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000300)={0xffffffff}) syz_open_pts(r1, 0x88000) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000340)=0x56) r2 = syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x521500) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000003c0)) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000004c0)) r3 = syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x88041) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000540)) 12:10:32 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xfb33) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x438000, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24008854) write$snapshot(r1, &(0x7f0000000300)="2568bc91ab58da4c788bd4ed8bc10e21834a94ea0fc118402e5d6d0341346a253142dbbe782fd68bb77eec7613c9cc6900a4de3a0663f361041c65221c4bdfd19e736f67c7062f25a40ed7f377e1a45e", 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x8, 'veth1_virt_wifi\x00', {'veth1_to_batadv\x00'}}) ioctl$SNAPSHOT_FREE(r2, 0x3305) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x3, 'ipvlan0\x00', {0x6}, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000440)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000480)={0x8, 'netpci0\x00', {'ip_vti0\x00'}, 0x8}) r5 = socket$inet6(0xa, 0x3, 0x81) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f00000004c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000500)=0x28) 12:10:32 executing program 7: r0 = gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)=r0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x44000) migrate_pages(r0, 0x0, &(0x7f0000000280)=0x5, &(0x7f00000002c0)=0x2) r4 = gettid() wait4(r4, &(0x7f0000000300), 0x1, &(0x7f0000000340)) r5 = accept4(r2, &(0x7f0000000400)=@ethernet={0x0, @link_local}, &(0x7f0000000480)=0x80, 0x80400) r6 = accept4$inet6(r5, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000540)={0x0, 'virt_wifi0\x00'}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x4008010) socketpair(0x26, 0x3, 0xfffffff8, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r9, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0xb}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) [ 119.074641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.076111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.079327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.083913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.086327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.087890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.091507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.099309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.117611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.119717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.132413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.135646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.137276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.153518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.157448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.232448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.242560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.247158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.253212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.266036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.271750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.277673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.283991] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.294551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.296492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.299956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.302360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.305121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.309417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.318351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.320483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.323725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.326966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.355814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.363603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.369931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.396384] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.408013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.423998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.439718] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.149714] Bluetooth: hci1: command tx timeout [ 121.150334] Bluetooth: hci0: command tx timeout [ 121.213369] Bluetooth: hci2: command tx timeout [ 121.406449] Bluetooth: hci5: command tx timeout [ 121.406491] Bluetooth: hci3: command tx timeout [ 121.533185] Bluetooth: hci6: command tx timeout [ 121.534194] Bluetooth: hci4: command tx timeout [ 121.534268] Bluetooth: hci7: command tx timeout [ 123.197442] Bluetooth: hci0: command tx timeout [ 123.198128] Bluetooth: hci1: command tx timeout [ 123.261269] Bluetooth: hci2: command tx timeout [ 123.453482] Bluetooth: hci3: command tx timeout [ 123.453525] Bluetooth: hci5: command tx timeout [ 123.581192] Bluetooth: hci4: command tx timeout [ 123.581228] Bluetooth: hci6: command tx timeout [ 123.581701] Bluetooth: hci7: command tx timeout [ 125.245337] Bluetooth: hci1: command tx timeout [ 125.245834] Bluetooth: hci0: command tx timeout [ 125.310135] Bluetooth: hci2: command tx timeout [ 125.501188] Bluetooth: hci3: command tx timeout [ 125.502456] Bluetooth: hci5: command tx timeout [ 125.629181] Bluetooth: hci4: command tx timeout [ 125.629621] Bluetooth: hci6: command tx timeout [ 125.630023] Bluetooth: hci7: command tx timeout [ 127.294202] Bluetooth: hci0: command tx timeout [ 127.294680] Bluetooth: hci1: command tx timeout [ 127.357429] Bluetooth: hci2: command tx timeout [ 127.550153] Bluetooth: hci5: command tx timeout [ 127.550606] Bluetooth: hci3: command tx timeout [ 127.677154] Bluetooth: hci7: command tx timeout [ 127.677600] Bluetooth: hci6: command tx timeout [ 127.678010] Bluetooth: hci4: command tx timeout [ 178.787634] syz-executor.0 (283) used greatest stack depth: 25024 bytes left [ 178.970016] syz-executor.1 (284) used greatest stack depth: 24832 bytes left [ 181.332501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.335882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.338525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.345633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.350926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.385804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.391504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.394131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.399506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.403664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.453240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.459801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.462011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.480429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.486031] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.600925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.605738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.632875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.651689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.660343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.663157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.668675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.671312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.677147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.738693] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.812212] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.815588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.831499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.833789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.850972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.878362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.880368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.880414] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.889723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.913365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.914618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.915902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.929340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.951533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.976862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.421139] Bluetooth: hci0: command tx timeout [ 183.485153] Bluetooth: hci1: command tx timeout [ 183.613150] Bluetooth: hci2: command tx timeout [ 183.742275] Bluetooth: hci3: command tx timeout [ 183.805123] Bluetooth: hci4: command tx timeout [ 184.062177] Bluetooth: hci7: command tx timeout [ 184.062898] Bluetooth: hci6: command tx timeout [ 184.063449] Bluetooth: hci5: command tx timeout [ 185.469143] Bluetooth: hci0: command tx timeout [ 185.534176] Bluetooth: hci1: command tx timeout [ 185.661122] Bluetooth: hci2: command tx timeout [ 185.790421] Bluetooth: hci3: command tx timeout [ 185.854120] Bluetooth: hci4: command tx timeout [ 186.110904] Bluetooth: hci7: command tx timeout [ 186.111418] Bluetooth: hci5: command tx timeout [ 186.111840] Bluetooth: hci6: command tx timeout [ 187.518118] Bluetooth: hci0: command tx timeout [ 187.584092] Bluetooth: hci1: command tx timeout [ 187.710323] Bluetooth: hci2: command tx timeout [ 187.838251] Bluetooth: hci3: command tx timeout [ 187.901109] Bluetooth: hci4: command tx timeout [ 188.158438] Bluetooth: hci6: command tx timeout [ 188.158972] Bluetooth: hci5: command tx timeout [ 188.160135] Bluetooth: hci7: command tx timeout [ 189.566126] Bluetooth: hci0: command tx timeout [ 189.630127] Bluetooth: hci1: command tx timeout [ 189.758224] Bluetooth: hci2: command tx timeout [ 189.886205] Bluetooth: hci3: command tx timeout [ 189.949614] Bluetooth: hci4: command tx timeout [ 190.205345] Bluetooth: hci5: command tx timeout [ 190.205906] Bluetooth: hci7: command tx timeout [ 190.207193] Bluetooth: hci6: command tx timeout [ 243.797732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.800405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.802449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.806826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.818529] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.881808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.889463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.893642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.906986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.913730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.925763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.934755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.944443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.956177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.958954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.062386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.077580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.084573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.116204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.133298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.136862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.140286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.142968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.163476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.167403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.217518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.232744] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.307610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.353907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.355631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.356630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.420708] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.449402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.450291] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.456764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.458154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.488016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.509022] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.515414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.535813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.886274] Bluetooth: hci0: command tx timeout [ 245.949440] Bluetooth: hci1: command tx timeout [ 246.013154] Bluetooth: hci2: command tx timeout [ 246.205188] Bluetooth: hci4: command tx timeout [ 246.205296] Bluetooth: hci3: command tx timeout [ 246.590444] Bluetooth: hci7: command tx timeout [ 246.653175] Bluetooth: hci6: command tx timeout [ 246.781234] Bluetooth: hci5: command tx timeout [ 247.933239] Bluetooth: hci0: command tx timeout [ 247.997520] Bluetooth: hci1: command tx timeout [ 248.061140] Bluetooth: hci2: command tx timeout [ 248.253280] Bluetooth: hci4: command tx timeout [ 248.253315] Bluetooth: hci3: command tx timeout [ 248.638308] Bluetooth: hci7: command tx timeout [ 248.702118] Bluetooth: hci6: command tx timeout [ 248.830380] Bluetooth: hci5: command tx timeout [ 249.981355] Bluetooth: hci0: command tx timeout [ 250.046778] Bluetooth: hci1: command tx timeout [ 250.109281] Bluetooth: hci2: command tx timeout [ 250.301176] Bluetooth: hci3: command tx timeout [ 250.301302] Bluetooth: hci4: command tx timeout [ 250.685140] Bluetooth: hci7: command tx timeout [ 250.749298] Bluetooth: hci6: command tx timeout [ 250.878109] Bluetooth: hci5: command tx timeout [ 252.031105] Bluetooth: hci0: command tx timeout [ 252.093153] Bluetooth: hci1: command tx timeout [ 252.158087] Bluetooth: hci2: command tx timeout [ 252.349736] Bluetooth: hci3: command tx timeout [ 252.350404] Bluetooth: hci4: command tx timeout [ 252.734427] Bluetooth: hci7: command tx timeout [ 252.798138] Bluetooth: hci6: command tx timeout [ 252.925338] Bluetooth: hci5: command tx timeout [ 306.450902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.453714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.455887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.471366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.474211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.646008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.651338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.652854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.660811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.663468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.761783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.763961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.765600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.777808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.787187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.915330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.919482] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.921871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.927914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.937775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.950487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.970755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.975420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.983008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.010939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.015795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.017901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.021580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.028183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.029151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.035817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.042281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.048530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.055804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.066427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.074005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.087127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.095540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.098507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.100511] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.541165] Bluetooth: hci0: command tx timeout [ 308.733349] Bluetooth: hci1: command tx timeout [ 308.861211] Bluetooth: hci2: command tx timeout [ 309.117205] Bluetooth: hci3: command tx timeout [ 309.181222] Bluetooth: hci6: command tx timeout [ 309.181286] Bluetooth: hci4: command tx timeout [ 309.373156] Bluetooth: hci7: command tx timeout [ 309.437402] Bluetooth: hci5: command tx timeout [ 310.592112] Bluetooth: hci0: command tx timeout [ 310.782316] Bluetooth: hci1: command tx timeout [ 310.909168] Bluetooth: hci2: command tx timeout [ 311.165570] Bluetooth: hci3: command tx timeout [ 311.229159] Bluetooth: hci4: command tx timeout [ 311.229207] Bluetooth: hci6: command tx timeout [ 311.422098] Bluetooth: hci7: command tx timeout [ 311.485457] Bluetooth: hci5: command tx timeout [ 312.641481] Bluetooth: hci0: command tx timeout [ 312.829126] Bluetooth: hci1: command tx timeout [ 312.957303] Bluetooth: hci2: command tx timeout [ 313.213531] Bluetooth: hci3: command tx timeout [ 313.278120] Bluetooth: hci4: command tx timeout [ 313.278642] Bluetooth: hci6: command tx timeout [ 313.469134] Bluetooth: hci7: command tx timeout [ 313.533302] Bluetooth: hci5: command tx timeout [ 314.685247] Bluetooth: hci0: command tx timeout [ 314.878096] Bluetooth: hci1: command tx timeout [ 315.005505] Bluetooth: hci2: command tx timeout [ 315.261135] Bluetooth: hci3: command tx timeout [ 315.325172] Bluetooth: hci4: command tx timeout [ 315.326646] Bluetooth: hci6: command tx timeout [ 315.517160] Bluetooth: hci7: command tx timeout [ 315.581132] Bluetooth: hci5: command tx timeout [ 369.185370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.192584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.195654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.199306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.204795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.359630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.365744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.370192] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.419619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.437211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.445370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.459345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.464607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.467848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.479971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.501617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.507372] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.514415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.545666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.549358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.551984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.559792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.560957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.562833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.566656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.570313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.592390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.594614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.599976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.608739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.695728] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.697860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.704193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.731427] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.734363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.750360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.769286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.799634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.826654] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.846519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.261155] Bluetooth: hci0: command tx timeout [ 371.518258] Bluetooth: hci1: command tx timeout [ 371.583249] Bluetooth: hci4: command tx timeout [ 371.585280] Bluetooth: hci2: command tx timeout [ 371.709184] Bluetooth: hci3: command tx timeout [ 371.711191] Bluetooth: hci5: command tx timeout [ 371.902574] Bluetooth: hci7: command tx timeout [ 371.965146] Bluetooth: hci6: command tx timeout [ 373.309725] Bluetooth: hci0: command tx timeout [ 373.566464] Bluetooth: hci1: command tx timeout [ 373.629603] Bluetooth: hci4: command tx timeout [ 373.629622] Bluetooth: hci2: command tx timeout [ 373.757221] Bluetooth: hci3: command tx timeout [ 373.757755] Bluetooth: hci5: command tx timeout [ 373.949472] Bluetooth: hci7: command tx timeout [ 374.013135] Bluetooth: hci6: command tx timeout [ 375.357124] Bluetooth: hci0: command tx timeout [ 375.613284] Bluetooth: hci1: command tx timeout [ 375.677359] Bluetooth: hci4: command tx timeout [ 375.677586] Bluetooth: hci2: command tx timeout [ 375.805240] Bluetooth: hci5: command tx timeout [ 375.805786] Bluetooth: hci3: command tx timeout [ 375.998323] Bluetooth: hci7: command tx timeout [ 376.061138] Bluetooth: hci6: command tx timeout [ 377.405496] Bluetooth: hci0: command tx timeout [ 377.663068] Bluetooth: hci1: command tx timeout [ 377.725144] Bluetooth: hci2: command tx timeout [ 377.725325] Bluetooth: hci4: command tx timeout [ 377.853417] Bluetooth: hci3: command tx timeout [ 377.853480] Bluetooth: hci5: command tx timeout [ 378.045152] Bluetooth: hci7: command tx timeout [ 378.109349] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:15:33 Registers: info registers vcpu 0 RAX=00000000ffffffff RBX=0000000000000000 RCX=a75a9a20c144951f RDX=00000000f6dccfda RSI=00000000ca96678f RDI=00000000d3058c59 RBP=ffffffff85c1cc40 RSP=ffff88802c74f9b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b063 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5fa8613540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5fa8ac3010 CR3=000000002b8ef000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff819fdaef RCX=ffff88802c76f27c RDX=1ffff110058ede70 RSI=ffffffff85c1cc40 RDI=ffffffff819fdaef RBP=ffff88802c76f380 RSP=ffff88802c76f300 R8 =0000000000000001 R9 =ffff88802c76f368 R10=000000000003b53d R11=0000000000021909 R12=ffff88802c76f3f0 R13=0000000000000000 R14=ffff8880193f0000 R15=0000000000092cc0 RIP=ffffffff8142fb4c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6bc9cab540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6bc9e96620 CR3=0000000033028000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000