Warning: Permanently added '[localhost]:39871' (ECDSA) to the list of known hosts. 2025/06/26 05:10:03 fuzzer started 2025/06/26 05:10:03 dialing manager at localhost:41253 syzkaller login: [ 93.741607] cgroup: Unknown subsys name 'net' [ 93.879902] cgroup: Unknown subsys name 'cpuset' [ 93.932903] cgroup: Unknown subsys name 'rlimit' 2025/06/26 05:10:19 syscalls: 205 2025/06/26 05:10:19 code coverage: enabled 2025/06/26 05:10:19 comparison tracing: enabled 2025/06/26 05:10:19 extra coverage: enabled 2025/06/26 05:10:19 setuid sandbox: enabled 2025/06/26 05:10:19 namespace sandbox: enabled 2025/06/26 05:10:19 Android sandbox: enabled 2025/06/26 05:10:19 fault injection: enabled 2025/06/26 05:10:19 leak checking: enabled 2025/06/26 05:10:19 net packet injection: enabled 2025/06/26 05:10:19 net device setup: enabled 2025/06/26 05:10:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/26 05:10:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/26 05:10:19 USB emulation: enabled 2025/06/26 05:10:19 hci packet injection: enabled 2025/06/26 05:10:19 wifi device emulation: enabled 2025/06/26 05:10:19 802.15.4 emulation: enabled 2025/06/26 05:10:19 fetching corpus: 0, signal 0/0 (executing program) 2025/06/26 05:10:21 starting 8 fuzzer processes 05:10:21 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0x4, 0x40, 0x5, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x10, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x144}, 0x20000004) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', r0, 0x4, 0x1, 0x8, 0x0, 0x4941ea937db80175, @private1, @local, 0x700, 0x1, 0xffffffff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x29, 0x40, 0x3, 0x9, 0x3, @local, @loopback, 0x7800, 0x7, 0x7, 0x44}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x275}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffb}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x19e}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000820}, 0x4000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', r5, 0x7b7e1c8c90873a7b, 0x6, 0x3, 0x1, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x1, 0x8, 0xfffffffa, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r9, 0x2f, 0x20, 0x6, 0x10001, 0x9, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x40, 0x200, 0xdc5}}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) 05:10:21 executing program 1: prctl$PR_SET_IO_FLUSHER(0x39, 0xbc14) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20, 0x6}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x7, 0xffffffffffffffff, 0xfffffffd, 0x80000}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x8401, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$P9_RFLUSH(r4, &(0x7f0000000200)={0x7, 0x6d, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xee01, r5}}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x1, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r8, @in_args={0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x9, 0x2b}}, './file0\x00'}) 05:10:21 executing program 2: ustat(0x3ff, &(0x7f0000000000)) ustat(0xfffffffffffffff8, &(0x7f0000000040)) ustat(0x4, &(0x7f0000000080)) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getrandom(&(0x7f00000000c0)=""/159, 0x9f, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000001c0)) ustat(0x5, &(0x7f0000000200)) msgget(0x3, 0x131) syz_open_dev$rtc(&(0x7f0000000240), 0x4, 0x800) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x9c7) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x5}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000380)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x3, [{{0x80, 0x1, 0x1}, 0x1000, 0x9, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x5, 0x14, 0x7, './file0'}]}}, 0x49) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x7d8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000004c0)={r1, 0x2, 0xffff, 0x9}) [ 111.142020] audit: type=1400 audit(1750914621.420:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:10:21 executing program 3: keyctl$session_to_parent(0x12) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81, 0x7}}, './file0\x00'}) write$P9_RREADDIR(r0, &(0x7f0000000040)={0xe4, 0x29, 0x2, {0x1, [{{0x1, 0x0, 0x4}, 0x4, 0x1, 0x7, './file0'}, {{0x8, 0x1, 0x3}, 0x1, 0x7f, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x0, 0x27, 0x7, './file0'}, {{0x40, 0x3, 0x3}, 0xfffffffffffffff8, 0xfe, 0x7, './file0'}, {{0x80, 0x0, 0x5}, 0x3, 0x1, 0x7, './file0'}, {{0x85, 0x1, 0x2}, 0x5, 0x4, 0x7, './file0'}, {{0x10, 0x3, 0x8}, 0x7fff, 0x21, 0x7, './file0'}]}}, 0xe4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x6, 0x81, 0x21, @loopback, @mcast1, 0x1, 0x700, 0x7ff, 0x7}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x30301, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0/file0\x00'}) connect$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x6, @none, 0x2, 0x2}, 0xe) pipe(&(0x7f0000000400)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x140, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) write$P9_RSTATu(r6, &(0x7f00000005c0)={0x60, 0x7d, 0x1, {{0x0, 0x4a, 0xa1b1, 0x2, {0x20, 0x1, 0x2}, 0x20100000, 0xd5, 0x69e7, 0xcc, 0xb, '/dev/hwrng\x00', 0x1, ',', 0x1, '\x00', 0xa, '/dev/zero\x00'}, 0x1, '\x00', 0x0, 0x0, r7}}, 0x60) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x23c040, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x5, 0x8, 0x6, 0x4, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0x9, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc3}}, './file0/file0\x00'}) 05:10:21 executing program 4: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/70) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = msgget(0x2, 0x642) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setparam(r2, &(0x7f0000000100)=0xffff) getitimer(0x3, &(0x7f0000000140)) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) msgctl$IPC_RMID(r1, 0x0) r3 = gettid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xffff}, 0x0, 0x0, 0x1ff, 0x10001, 0x10000, 0x6, 0x3, 0x5, 0xffff, 0xdb, r3, r2}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) msgctl$IPC_RMID(r1, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000200)}) getitimer(0x0, &(0x7f0000000280)) mlockall(0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000002c0)) msgctl$IPC_RMID(r1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) 05:10:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3f}}, './file0\x00'}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x3c2, 0x4) fcntl$setsig(r0, 0xa, 0x2b) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x90, 0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r4 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r4, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x714}}, './file0\x00'}) ioctl$RTC_UIE_OFF(r6, 0x7004) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform', 0xe0100, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x6100, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x3, r8, r5, 0xffffffffffffffff, r5, 0x159, 0x2}, 0x0, 0x0, 0x401, 0xc260, 0x7, 0x7fffffff, 0x2, 0x200, 0xe08, 0xffff}) 05:10:21 executing program 6: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)={0x6, "cade4c"}, 0x6) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x4, @any, 0x1, 0x2}, 0xe) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sync_file_range(r1, 0x2, 0x0, 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x8, 0x10240) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x40}}, './file0\x00'}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000340), 0xfffffffffffffffe, 0x404002) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x6) ioctl$RTC_UIE_OFF(r2, 0x7004) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/bus/scsi', 0x890080, 0xe1) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 05:10:21 executing program 7: rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x7ff}) getpriority(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='autogroup\x00') r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x200000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffeff}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x140, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x801) tgkill(r0, r4, 0x2f) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x104, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf08}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7ad}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffff5b8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x7, 0x0, @random="2298de"}, {0x12, 0x0, @random="ac0d33622bd428e554cdbd319670"}, {0x1b, 0x0, @random="24409b3f777e9274f4144790d2407224a52eba69981b96"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x20048800}, 0x24048001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x20}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xffff475d}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x298}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='H'}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @random="3b4c10d31c1e"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) [ 112.686243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.692158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.694686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.706029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.710412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.749429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.763236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.765677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.772287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.778276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.781991] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.783597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.807161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.815424] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.828117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.844311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.858712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.863592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.867153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.875903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.879659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.881936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.889105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.897210] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.904507] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.910181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.922313] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.928493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.937543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.947234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.963281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.964666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.976372] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.979136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.983211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.985224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.997363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.024046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.038123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.047633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.770612] Bluetooth: hci0: command tx timeout [ 114.834528] Bluetooth: hci1: command tx timeout [ 114.962166] Bluetooth: hci6: command tx timeout [ 114.962901] Bluetooth: hci2: command tx timeout [ 115.026033] Bluetooth: hci4: command tx timeout [ 115.091707] Bluetooth: hci3: command tx timeout [ 115.153936] Bluetooth: hci5: command tx timeout [ 115.155168] Bluetooth: hci7: command tx timeout [ 116.818090] Bluetooth: hci0: command tx timeout [ 116.882655] Bluetooth: hci1: command tx timeout [ 117.010137] Bluetooth: hci2: command tx timeout [ 117.010172] Bluetooth: hci6: command tx timeout [ 117.074122] Bluetooth: hci4: command tx timeout [ 117.138542] Bluetooth: hci3: command tx timeout [ 117.202499] Bluetooth: hci7: command tx timeout [ 117.202640] Bluetooth: hci5: command tx timeout [ 118.866365] Bluetooth: hci0: command tx timeout [ 118.929848] Bluetooth: hci1: command tx timeout [ 119.058225] Bluetooth: hci6: command tx timeout [ 119.059052] Bluetooth: hci2: command tx timeout [ 119.122545] Bluetooth: hci4: command tx timeout [ 119.185998] Bluetooth: hci3: command tx timeout [ 119.250004] Bluetooth: hci5: command tx timeout [ 119.250433] Bluetooth: hci7: command tx timeout [ 120.915928] Bluetooth: hci0: command tx timeout [ 120.978860] Bluetooth: hci1: command tx timeout [ 121.105882] Bluetooth: hci6: command tx timeout [ 121.106020] Bluetooth: hci2: command tx timeout [ 121.171810] Bluetooth: hci4: command tx timeout [ 121.235081] Bluetooth: hci3: command tx timeout [ 121.298030] Bluetooth: hci5: command tx timeout [ 121.298906] Bluetooth: hci7: command tx timeout [ 175.407973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.415094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.419296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.422309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.426928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.427211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.439663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.440570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.447081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.448005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.471039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.489355] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.520821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.525299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.527411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.529907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.530970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.534470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.537342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.542935] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.545331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.547113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.547849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.549265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.552478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.554308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.556931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.560433] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.561481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.564133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.566519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.568287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.578616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.602376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.604233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.608583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.611237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.615134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.627739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.662161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.490022] Bluetooth: hci0: command tx timeout [ 177.490796] Bluetooth: hci1: command tx timeout [ 177.617833] Bluetooth: hci2: command tx timeout [ 177.681889] Bluetooth: hci4: command tx timeout [ 177.682523] Bluetooth: hci7: command tx timeout [ 177.683079] Bluetooth: hci5: command tx timeout [ 177.683637] Bluetooth: hci3: command tx timeout [ 177.684170] Bluetooth: hci6: command tx timeout [ 179.538137] Bluetooth: hci1: command tx timeout [ 179.538614] Bluetooth: hci0: command tx timeout [ 179.666809] Bluetooth: hci2: command tx timeout [ 179.730001] Bluetooth: hci3: command tx timeout [ 179.730454] Bluetooth: hci6: command tx timeout [ 179.731145] Bluetooth: hci4: command tx timeout [ 179.731622] Bluetooth: hci5: command tx timeout [ 179.732071] Bluetooth: hci7: command tx timeout [ 181.586540] Bluetooth: hci1: command tx timeout [ 181.587859] Bluetooth: hci0: command tx timeout [ 181.716204] Bluetooth: hci2: command tx timeout [ 181.778050] Bluetooth: hci5: command tx timeout [ 181.778732] Bluetooth: hci7: command tx timeout [ 181.779448] Bluetooth: hci4: command tx timeout [ 181.780178] Bluetooth: hci6: command tx timeout [ 181.780871] Bluetooth: hci3: command tx timeout [ 183.633883] Bluetooth: hci1: command tx timeout [ 183.634371] Bluetooth: hci0: command tx timeout [ 183.762116] Bluetooth: hci2: command tx timeout [ 183.825933] Bluetooth: hci4: command tx timeout [ 183.826420] Bluetooth: hci3: command tx timeout [ 183.826906] Bluetooth: hci6: command tx timeout [ 183.827317] Bluetooth: hci7: command tx timeout [ 183.827727] Bluetooth: hci5: command tx timeout [ 237.630191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.637637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.643044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.649390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.656172] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.680196] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.698545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.701232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.708389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.719516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.825033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.838334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.854489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.887495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.889375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.904838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.907497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.917157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.931687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.933967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.003922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.016440] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.026125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.051006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.071175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.295751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.323290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.327074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.339261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.352042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.356010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.362954] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.388871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.465229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.522221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.667088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.676177] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.684414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.780957] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.806327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.698840] Bluetooth: hci0: command tx timeout [ 239.761925] Bluetooth: hci1: command tx timeout [ 240.018319] Bluetooth: hci2: command tx timeout [ 240.018336] Bluetooth: hci3: command tx timeout [ 240.146943] Bluetooth: hci5: command tx timeout [ 240.466125] Bluetooth: hci4: command tx timeout [ 240.658121] Bluetooth: hci6: command tx timeout [ 240.913991] Bluetooth: hci7: command tx timeout [ 241.746569] Bluetooth: hci0: command tx timeout [ 241.809947] Bluetooth: hci1: command tx timeout [ 242.067829] Bluetooth: hci3: command tx timeout [ 242.067942] Bluetooth: hci2: command tx timeout [ 242.195812] Bluetooth: hci5: command tx timeout [ 242.515337] Bluetooth: hci4: command tx timeout [ 242.706139] Bluetooth: hci6: command tx timeout [ 242.962973] Bluetooth: hci7: command tx timeout [ 243.794196] Bluetooth: hci0: command tx timeout [ 243.857886] Bluetooth: hci1: command tx timeout [ 244.114809] Bluetooth: hci2: command tx timeout [ 244.115335] Bluetooth: hci3: command tx timeout [ 244.242019] Bluetooth: hci5: command tx timeout [ 244.561842] Bluetooth: hci4: command tx timeout [ 244.753897] Bluetooth: hci6: command tx timeout [ 245.011806] Bluetooth: hci7: command tx timeout [ 245.842033] Bluetooth: hci0: command tx timeout [ 245.906833] Bluetooth: hci1: command tx timeout [ 246.162807] Bluetooth: hci3: command tx timeout [ 246.162861] Bluetooth: hci2: command tx timeout [ 246.289842] Bluetooth: hci5: command tx timeout [ 246.609936] Bluetooth: hci4: command tx timeout [ 246.801922] Bluetooth: hci6: command tx timeout [ 247.058066] Bluetooth: hci7: command tx timeout [ 300.002687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.008330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.021264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.032511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.041523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.157055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.161919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.166244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.169166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.170608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.175468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.182060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.195060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.208271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.221011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.225594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.236700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.239150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.260097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.265652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.405844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.434455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.438686] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.474284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.496230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.751811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.773157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.791785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.827218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.858639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.878043] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.900971] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.906714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.913959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.955484] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.957545] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.000580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.012446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.029435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.052006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.098932] Bluetooth: hci0: command tx timeout [ 302.292114] Bluetooth: hci1: command tx timeout [ 302.354853] Bluetooth: hci3: command tx timeout [ 302.355389] Bluetooth: hci2: command tx timeout [ 302.739082] Bluetooth: hci4: command tx timeout [ 302.993947] Bluetooth: hci5: command tx timeout [ 303.121844] Bluetooth: hci7: command tx timeout [ 303.186851] Bluetooth: hci6: command tx timeout [ 304.147842] Bluetooth: hci0: command tx timeout [ 304.339031] Bluetooth: hci1: command tx timeout [ 304.404011] Bluetooth: hci2: command tx timeout [ 304.404443] Bluetooth: hci3: command tx timeout [ 304.787888] Bluetooth: hci4: command tx timeout [ 305.042982] Bluetooth: hci5: command tx timeout [ 305.170953] Bluetooth: hci7: command tx timeout [ 305.234825] Bluetooth: hci6: command tx timeout [ 306.194800] Bluetooth: hci0: command tx timeout [ 306.386241] Bluetooth: hci1: command tx timeout [ 306.449825] Bluetooth: hci3: command tx timeout [ 306.450257] Bluetooth: hci2: command tx timeout [ 306.834848] Bluetooth: hci4: command tx timeout [ 307.089958] Bluetooth: hci5: command tx timeout [ 307.218241] Bluetooth: hci7: command tx timeout [ 307.281815] Bluetooth: hci6: command tx timeout [ 308.243087] Bluetooth: hci0: command tx timeout [ 308.434798] Bluetooth: hci1: command tx timeout [ 308.497927] Bluetooth: hci2: command tx timeout [ 308.498679] Bluetooth: hci3: command tx timeout [ 308.881975] Bluetooth: hci4: command tx timeout [ 309.139234] Bluetooth: hci5: command tx timeout [ 309.266310] Bluetooth: hci7: command tx timeout [ 309.329936] Bluetooth: hci6: command tx timeout [ 363.687559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.699123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.702550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.719511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.724131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.749143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.753085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.765081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.781440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.787627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.874339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.883648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.899624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.909930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.926986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.089704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.092588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.095385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.123358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.136840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.143678] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.148323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.159422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.161213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.169005] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.169075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.178922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.190303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.195252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.226076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.229339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.244278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.248346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.261408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.274269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.275682] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.281030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.299328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.302531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.304174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.779948] Bluetooth: hci0: command tx timeout [ 365.841952] Bluetooth: hci1: command tx timeout [ 365.969867] Bluetooth: hci2: command tx timeout [ 366.290845] Bluetooth: hci3: command tx timeout [ 366.354830] Bluetooth: hci4: command tx timeout [ 366.417884] Bluetooth: hci6: command tx timeout [ 366.418504] Bluetooth: hci5: command tx timeout [ 366.419132] Bluetooth: hci7: command tx timeout [ 367.825897] Bluetooth: hci0: command tx timeout [ 367.889899] Bluetooth: hci1: command tx timeout [ 368.018031] Bluetooth: hci2: command tx timeout [ 368.337884] Bluetooth: hci3: command tx timeout [ 368.401873] Bluetooth: hci4: command tx timeout [ 368.466809] Bluetooth: hci6: command tx timeout [ 368.467619] Bluetooth: hci5: command tx timeout [ 368.469029] Bluetooth: hci7: command tx timeout [ 369.873848] Bluetooth: hci0: command tx timeout [ 369.937822] Bluetooth: hci1: command tx timeout [ 370.066345] Bluetooth: hci2: command tx timeout [ 370.385831] Bluetooth: hci3: command tx timeout [ 370.449881] Bluetooth: hci4: command tx timeout [ 370.513867] Bluetooth: hci6: command tx timeout [ 370.515156] Bluetooth: hci5: command tx timeout [ 370.515551] Bluetooth: hci7: command tx timeout [ 371.922009] Bluetooth: hci0: command tx timeout [ 371.988178] Bluetooth: hci1: command tx timeout [ 372.113920] Bluetooth: hci2: command tx timeout [ 372.433886] Bluetooth: hci3: command tx timeout [ 372.498813] Bluetooth: hci4: command tx timeout [ 372.561937] Bluetooth: hci7: command tx timeout [ 372.563132] Bluetooth: hci5: command tx timeout [ 372.564046] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:15:22 Registers: info registers vcpu 0 RAX=ffff888030109b80 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce3d100 RBP=ffff88806ce3d100 RSP=ffff88802ad27818 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81518bd4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1462729008 CR3=0000000028045000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff819c830e RDX=1ffffd4000036dcb RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea00001b6e40 RSP=ffff8880333bfbb8 R8 =0000000000000001 R9 =ffffed1006677f91 R10=0000000000000000 R11=0000000000000001 R12=ffff88800db1a140 R13=ffff8880333bfd88 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81738868 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1d7aa6f540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1d7af4a870 CR3=00000000346f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000