syzkaller login: [ 61.503548] hrtimer: interrupt took 3833137 ns Warning: Permanently added '[localhost]:52775' (ECDSA) to the list of known hosts. 2024/10/26 05:12:24 fuzzer started 2024/10/26 05:12:24 dialing manager at localhost:45639 [ 66.535512] cgroup: Unknown subsys name 'net' [ 66.603464] cgroup: Unknown subsys name 'cpuset' [ 66.620999] cgroup: Unknown subsys name 'rlimit' 2024/10/26 05:12:41 syscalls: 206 2024/10/26 05:12:41 code coverage: enabled 2024/10/26 05:12:41 comparison tracing: enabled 2024/10/26 05:12:41 extra coverage: enabled 2024/10/26 05:12:41 setuid sandbox: enabled 2024/10/26 05:12:41 namespace sandbox: enabled 2024/10/26 05:12:41 Android sandbox: enabled 2024/10/26 05:12:41 fault injection: enabled 2024/10/26 05:12:41 leak checking: enabled 2024/10/26 05:12:41 net packet injection: enabled 2024/10/26 05:12:41 net device setup: enabled 2024/10/26 05:12:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/26 05:12:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/26 05:12:41 USB emulation: enabled 2024/10/26 05:12:41 hci packet injection: enabled 2024/10/26 05:12:41 wifi device emulation: enabled 2024/10/26 05:12:41 802.15.4 emulation: enabled 2024/10/26 05:12:41 fetching corpus: 0, signal 0/0 (executing program) 2024/10/26 05:12:43 starting 8 fuzzer processes 05:12:43 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x96}, @l2cap_cid_signaling={{0x92}, [@l2cap_conf_rsp={{0x5, 0x40, 0x28}, {0x2, 0x0, 0x0, [@l2cap_conf_flushto={0x2, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0xff, 0x81, 0x4e71, 0x7f}}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x7, 0x1, 0x2, 0x1, 0x400, 0x38}}, @l2cap_conf_ews={0x7, 0x2, 0x7ff}]}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x3f, 0x3}}, @l2cap_info_req={{0xa, 0xa4, 0x2}, {0x2}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0xfff, 0x2}}, @l2cap_move_chan_req={{0xe, 0xff, 0x3}, {0x1, 0x1f}}, @l2cap_move_chan_rsp={{0xf, 0xff, 0x4}, {0x8}}, @l2cap_disconn_req={{0x6, 0x70, 0x4}, {0x6, 0x71}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0xeb2f, 0x8}}, @l2cap_conf_rsp={{0x5, 0x0, 0x2f}, {0x1, 0x6, 0x3, [@l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_flushto={0x2, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0xaa, 0x1, 0xa5e6, 0xfffff8d9, 0x80, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xe1, 0x11, 0xfffd, 0x8000, 0x1f}}]}}]}}, 0x9b) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x9a}, @l2cap_cid_signaling={{0x96}, [@l2cap_info_req={{0xa, 0x3, 0x2}, {0x4f4}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x7, 0x1}}, @l2cap_conf_req={{0x4, 0x9, 0x21}, {0x4, 0xa000, [@l2cap_conf_ews={0x7, 0x2, 0x101}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x9, 0x4, 0x2, 0x2, 0xc000}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x4, 0x7f, 0xfffa, 0xfff}}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xff, 0x8, 0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}}, @l2cap_conf_req={{0x4, 0x6, 0x50}, {0xce, 0x9, [@l2cap_conf_efs={0x6, 0x10, {0x69, 0x2, 0x9, 0xffffffe1, 0x1, 0x80000000}}, @l2cap_conf_ews={0x7, 0x2, 0x9}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x40, 0x1ff, 0x7, 0x459}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x80}, @l2cap_conf_efs={0x6, 0x10, {0x7f, 0x1, 0x0, 0x7, 0x4f14, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x1, 0x81, 0x4, 0x2, 0xfff}}]}}]}}, 0x9f) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe3}, "0ee145e9d26cb8471fe38277277ae531cb8a7a65a001f8d1e2c4a6331910422ae4934c40a8631ea5eb0f74cd9cf571c09cf77329ac3cea9658bbe4273f11a3bd16f06bcc8c29d3a77804c9b1e277a09484e38068d50679abe3fc747ef831a2249c28654a3e3e934fe5cad88fc45341398e6820864ed1e8a92dac20f0b08bee4d7928e5c08b5f19f7976cd0a784bda5d792f71f1bb22a47c7fbd00c9ee83fda1d650b8415421c20cf008ea1b97a181a1d9e9aef3eee008741a3c5c2480974719b6fb29835732454fc1add72b7e49d18345482625105009471d39b6e368df7aec5d20fc4"}, 0xe7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x7f, 0xc8}}}, 0x5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_enter(0xffffffffffffffff, 0x6ac4, 0xbf53, 0x2, &(0x7f0000000440)={[0xf2b7]}, 0x8) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x70}}, 0x4008803) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bc03d5f87df4786c9a65113cf71af3cfab2c59023dea304115ef605695568364"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000050) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 05:12:43 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x80) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0xa7f2b79af425945a}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x84}}, 0x4) syz_open_dev$vcsu(&(0x7f0000000400), 0x0, 0x82a00) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8000}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7fffffff}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044}, 0x2880) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x20000890) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x178, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x15c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8136}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x178}, 0x1, 0x0, 0x0, 0x4044000}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r1) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r8, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x15ca7b1f4d618aa2) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x20000050) 05:12:43 executing program 2: ptrace$setregset(0x4205, 0xffffffffffffffff, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)="cd7b8edea610b8a91334881e7cb41b5834aaf78debf0cc7565f9c50aa2fdc18224fddcbeea1e545b9f2324a21376e52a1dff6ba43e372d0e4f320946a5a782648c5c9e879442db1e6ac3d730be9ba78b3cb62d8e315c13786ecfd82ab09ed6a534c6aa6b436e7a34a1eeb92fedbdfe357501a33ca6e6e008d658999a3139b5c0c7537dbb04321e", 0x87}) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0xa6, 0x608202) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="61197bd553644f2cfbfdae18e27ecffbd06b866c05a638cdcf979531f47b6dc9c10d82d69af443deb554fd28e04e998271254c177f64a0f5ba5d92", 0x3b}, {&(0x7f0000000180)="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", 0xfb}], 0x2, 0x13, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000003c0)={&(0x7f00000002c0)="e75e83d9e479a899dd4e336ce68d235aff361d95e857dfb497115191f222ff1119de57be83740e11da98efc918214030f0404d96172ec473b71805bf172895ebd9fbd23195232fdc92360381c5ead7f979d5d064bbf997a59eac793583d024d8cfb7a49351ec86500cda44a4e197ee896908ec9802cff2f1c96d35305c599cdafd80a98536cdfbb7324e9178798dea27cb25160250ee0110ccbbaeb59790da2382668761637d0d86743aecf256c7a16ac017bda47f169ae65343026f44bb923b479f0f50f5ddf61cd9", 0xc9}) r1 = syz_open_dev$mouse(&(0x7f0000000400), 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000440)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x1f, 0x57, 0x0, @loopback, @mcast2, 0x7800, 0x700, 0x6, 0x1}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000580)=[r0, r1, r0, r0], 0x4) r3 = getpid() ptrace$setregset(0x4205, r3, 0x200, &(0x7f0000000600)={&(0x7f00000005c0)="14abb4e7134f3a0acd1c16ac48c5aa59653ec8f807407c855ebdabe88bf91009f21983835c408e4cc6f157aa6f", 0x2d}) setfsgid(0xee01) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', r2, 0x29, 0x0, 0x6, 0x7ff, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8079, 0x5, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6_vti0\x00', r4, 0x29, 0x0, 0x3f, 0x2, 0x10, @private1, @empty, 0x88, 0x10, 0x7}}) sysfs$2(0x2, 0x5, &(0x7f00000007c0)=""/107) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) setfsgid(0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xee01, r5, 0xee00) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x110, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1de3b73b1265e2e93923afd8661d53a4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dd19fc8774fb53b580580e4725ce9e71"}]}, @NL802154_ATTR_SEC_KEY={0xa4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ceb7b99d80912fb9b2d20e43481918cd"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfe}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000891) [ 84.518868] audit: type=1400 audit(1729919563.369:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:12:43 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffff9, 0x51, 0x0, 0x6, 0x9, 0x5, 0xde3, 0x100}, &(0x7f0000000040)={0x4, 0x3, 0x3f, 0x4, 0x2, 0x5, 0x194, 0x1000}, &(0x7f0000000080)={0x5, 0xbccd, 0x0, 0x3, 0x9, 0x642, 0x14d07e6e, 0x7}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x6]}, 0x8}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c5}, 0x440c5) clock_gettime(0x2, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000380)={r3, r4+60000000}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2d, 'io'}, {0x2d, 'blkio'}, {0x7ba58510a25b15e9, 'rlimit'}, {0x2d, 'devices'}, {0x2d, 'blkio'}]}, 0x23) sched_rr_get_interval(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = getpid() sched_rr_get_interval(r6, &(0x7f00000005c0)) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x8c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x0, 0x100, 0x70bd2a, 0x1, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2040004}, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f00000019c0)={&(0x7f00000009c0)=""/4096, 0x1000}) 05:12:43 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x9, 0x1, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0x7, 0x1}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)=0x1) sync() r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x1f) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', r0, 0x2f, 0x4, 0xd2, 0x4, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x40, 0x8a2, 0x81}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', r0, 0x0, 0x0, 0x7, 0x7f, 0x0, @remote, @mcast1, 0x1, 0x80, 0x9, 0x8}}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000002c0)={0x7a, ""/122}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r0, 0xf4c91fa645295c64, 0x1, 0x3f, 0xffffffff, 0x25, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x10, 0x1, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r3, 0x4, 0xa8, 0x7, 0x9, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x40, 0x7, 0x8, 0x10000}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/dns_resolver', 0x206000, 0x134) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'sit0\x00', r2, 0x2f, 0x6, 0x2, 0x4, 0x24, @mcast2, @loopback, 0x1, 0x80, 0x10001, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', r5, 0x29, 0xff, 0x1f, 0x6, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x11, 0x20, 0x40, 0x1}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r0, 0x4, 0x2, 0x3, 0x72ff, 0x6, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, 0x700, 0x700, 0xffff, 0x2}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 05:12:43 executing program 4: timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000040)) timer_delete(0x0) getitimer(0x0, &(0x7f0000000080)) getitimer(0x1, &(0x7f00000000c0)) munlockall() timer_delete(0x0) timer_create(0x6, &(0x7f0000000200)={0x0, 0x3b, 0x2, @thr={&(0x7f0000000100)="f0efff55b3992f8a530297194a97adfb726f6f5922c46f761e39b21ac100214b8a1c0eef33f5fe6f5679bd5e7962184e2122a7d5e32a119e83bf45928ae7cd730ad8911b8555c525ee0fd8138baf08141bceb3a8ec9c3f96e877dca41f8e938f0fd5a6a2b971", &(0x7f0000000180)="3376b704713edbfeb97e59fb48e35028d5a0948ba98eda2b28d33d4f2e8b0b6f5cb8ef33a80f1e7e3d3fb723dbc3f2608f2f027b3fd3ed684f10e0645bbe9370cc398cfb51a0301cefd9ed3b1af82912874bfb6740df30b7c0a2b2acfe4d01077e2c5c106039"}}, &(0x7f0000000240)=0x0) setuid(0xee00) getitimer(0x1, &(0x7f0000000280)) getitimer(0x1, &(0x7f00000002c0)) timer_gettime(r0, &(0x7f0000000300)) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x3, 0x2000) io_uring_enter(r1, 0x71ef, 0x2d5f, 0x0, &(0x7f0000000380)={[0x2]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x810, r1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400)) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$cgroup_subtree(r1, &(0x7f0000000500), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000580)={0x9, 0x0, &(0x7f0000000540)=[r3, r2, r2, r1, r4, r1, r1, r2]}, 0x8) 05:12:43 executing program 5: modify_ldt$write(0x1, &(0x7f0000000000)={0x3, 0x100000, 0x2000, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x746, 0x20000000, 0x2000, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x36f, 0x0, 0x1000, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xe9, 0x6, 0x3, 0x0, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x9, 0x9}}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000180)=0x2, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/devres', 0x2, 0x6c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x3, 0x3f, 0x64, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001, 0x8000, 0xb9, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000940)={'syztnl1\x00', r3, 0x0, 0xfd, 0x7, 0x10000, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8000, 0x5, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', r4, 0x0, 0x6, 0x9, 0x10000, 0x0, @local, @local, 0x10, 0x7800, 0x9, 0x100}}) modify_ldt$write(0x1, &(0x7f0000000ac0)={0x7f, 0xffffffffcfffefff, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', r4, 0x4, 0x8, 0x7f, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x7, 0xfffffffc, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000bc0)={'syztnl2\x00', r3, 0x2f, 0xfc, 0x39, 0x928, 0x29, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x8, 0x8000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'sit0\x00', r3, 0x29, 0x80, 0x4, 0x6, 0x20, @local, @mcast2, 0x80, 0x10, 0x8000, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001300)={'sit0\x00', &(0x7f0000001280)={'sit0\x00', r6, 0x2f, 0x5, 0x9, 0x24f1a5f, 0x2, @empty, @private1, 0x7800, 0x10, 0x9, 0x9}}) r7 = syz_open_dev$mouse(&(0x7f0000001340), 0x6, 0x800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001380)='/sys/class/wakeup', 0x480280, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000001400)={0x8000, 0x0, &(0x7f00000013c0)=[r2, r8, 0xffffffffffffffff]}, 0x3) modify_ldt$write(0x1, &(0x7f0000001440)={0xed, 0x20000800, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001500)={'syztnl1\x00', &(0x7f0000001480)={'syztnl0\x00', r5, 0x2d, 0x7, 0x3, 0x6, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7, 0x0, 0xfffffffc, 0x200}}) 05:12:43 executing program 7: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x6040) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x15) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000080), 0x100000000, 0xeeb445efeb2d94fa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x0, 0xffffffff, 0x9, @mcast1, @private1, 0x80, 0x40, 0x7, 0x7f}}) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000180)) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000001c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/platform', 0x113801, 0x110) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r4 = pidfd_open(0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) r5 = pidfd_getfd(r1, r4, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000280)) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000002c0)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000300)="cee2687d9d4958132026bdbb94df3449bba8afe4598e3b5b7d9e54545c5ac1afe4ceffeaba210873effa8ba97a564efd7beccb9672c30e4277fb1939c1e362c5732e4e9ed7541182343f414aebf447cd44bf74401554a947568599131dfdd6b84c7a266e13ba3e11dbbe70cb752fbc0a088a5715d3954968d5fffd818da581a769e7441c664ac15d522e04c6502582730d9328e22877c710650bcdc4", 0x9c) [ 85.917302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.929983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.937332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.959888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.985518] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.986620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.004314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.006298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.009265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.020609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.021725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.023552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.032827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.041052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.042237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.045698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.047023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.061556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.062359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.063322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.064624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.065735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.066838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.069440] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.072522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.074994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.084024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.086004] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.089278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.093298] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.094494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.100022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.101202] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.108935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.116689] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.116765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.118852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.120217] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.124243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.132991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.157523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.179341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.218776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.220275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.221324] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.268372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.272398] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.273556] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.060478] Bluetooth: hci0: command tx timeout [ 88.124211] Bluetooth: hci3: command tx timeout [ 88.190218] Bluetooth: hci5: command tx timeout [ 88.191891] Bluetooth: hci2: command tx timeout [ 88.252216] Bluetooth: hci4: command tx timeout [ 88.254058] Bluetooth: hci1: command tx timeout [ 88.315528] Bluetooth: hci7: command tx timeout [ 88.316475] Bluetooth: hci6: command tx timeout [ 90.107326] Bluetooth: hci0: command tx timeout [ 90.172248] Bluetooth: hci3: command tx timeout [ 90.235354] Bluetooth: hci5: command tx timeout [ 90.236594] Bluetooth: hci2: command tx timeout [ 90.299255] Bluetooth: hci4: command tx timeout [ 90.300675] Bluetooth: hci1: command tx timeout [ 90.363321] Bluetooth: hci7: command tx timeout [ 90.364719] Bluetooth: hci6: command tx timeout [ 92.155357] Bluetooth: hci0: command tx timeout [ 92.219283] Bluetooth: hci3: command tx timeout [ 92.284342] Bluetooth: hci2: command tx timeout [ 92.286013] Bluetooth: hci5: command tx timeout [ 92.347198] Bluetooth: hci4: command tx timeout [ 92.348765] Bluetooth: hci1: command tx timeout [ 92.411216] Bluetooth: hci6: command tx timeout [ 92.412655] Bluetooth: hci7: command tx timeout [ 94.203188] Bluetooth: hci0: command tx timeout [ 94.267236] Bluetooth: hci3: command tx timeout [ 94.331217] Bluetooth: hci5: command tx timeout [ 94.332730] Bluetooth: hci2: command tx timeout [ 94.395865] Bluetooth: hci4: command tx timeout [ 94.397417] Bluetooth: hci1: command tx timeout [ 94.459401] Bluetooth: hci7: command tx timeout [ 94.461038] Bluetooth: hci6: command tx timeout [ 148.807625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.811633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.815966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.817539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.823570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.824954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.826334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.828392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.831348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.835282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.838448] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.840794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.842830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.844576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.850517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.852474] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.857482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.858393] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.862357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.869195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.870745] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.872512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.874146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.875397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.946275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.955263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.959166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.964577] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.969734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.972827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.977721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.979555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.982966] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.986706] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.991469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.992353] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.993174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.993903] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.998370] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.999375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.000260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.001247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.001981] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.013584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.014817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.031215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.032885] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.034192] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.907336] Bluetooth: hci1: command tx timeout [ 150.908295] Bluetooth: hci0: command tx timeout [ 150.908866] Bluetooth: hci2: command tx timeout [ 150.971200] Bluetooth: hci3: command tx timeout [ 151.099233] Bluetooth: hci4: command tx timeout [ 151.099323] Bluetooth: hci6: command tx timeout [ 151.100177] Bluetooth: hci7: command tx timeout [ 151.100632] Bluetooth: hci5: command tx timeout [ 152.955459] Bluetooth: hci0: command tx timeout [ 152.955968] Bluetooth: hci1: command tx timeout [ 152.956313] Bluetooth: hci2: command tx timeout [ 153.020205] Bluetooth: hci3: command tx timeout [ 153.147250] Bluetooth: hci6: command tx timeout [ 153.147292] Bluetooth: hci7: command tx timeout [ 153.147721] Bluetooth: hci5: command tx timeout [ 153.148265] Bluetooth: hci4: command tx timeout [ 155.003379] Bluetooth: hci0: command tx timeout [ 155.003882] Bluetooth: hci1: command tx timeout [ 155.004422] Bluetooth: hci2: command tx timeout [ 155.067130] Bluetooth: hci3: command tx timeout [ 155.195303] Bluetooth: hci4: command tx timeout [ 155.195910] Bluetooth: hci5: command tx timeout [ 155.196409] Bluetooth: hci7: command tx timeout [ 155.196843] Bluetooth: hci6: command tx timeout [ 157.051259] Bluetooth: hci2: command tx timeout [ 157.051763] Bluetooth: hci1: command tx timeout [ 157.052261] Bluetooth: hci0: command tx timeout [ 157.115164] Bluetooth: hci3: command tx timeout [ 157.244125] Bluetooth: hci6: command tx timeout [ 157.244618] Bluetooth: hci7: command tx timeout [ 157.245294] Bluetooth: hci5: command tx timeout [ 157.245732] Bluetooth: hci4: command tx timeout [ 210.885731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.888016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.890033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.899490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.901926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.905821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.022253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.027580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.028998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.032814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.034666] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.037587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.078863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.084272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.087870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.089627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.091332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.092535] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.097768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.102339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.106485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.107375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.109621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.114387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.158938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.159517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.169896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.176295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.177648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.214710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.220628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.225325] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.252826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.255622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.263287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.266432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.274596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.282951] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.284707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.289337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.290342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.294467] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.305933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.307606] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.308930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.369724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.391524] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.395963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.988368] Bluetooth: hci0: command tx timeout [ 213.116211] Bluetooth: hci1: command tx timeout [ 213.179255] Bluetooth: hci2: command tx timeout [ 213.180275] Bluetooth: hci3: command tx timeout [ 213.371224] Bluetooth: hci5: command tx timeout [ 213.371367] Bluetooth: hci4: command tx timeout [ 213.435318] Bluetooth: hci6: command tx timeout [ 213.436204] Bluetooth: hci7: command tx timeout [ 215.035144] Bluetooth: hci0: command tx timeout [ 215.164201] Bluetooth: hci1: command tx timeout [ 215.227647] Bluetooth: hci3: command tx timeout [ 215.228170] Bluetooth: hci2: command tx timeout [ 215.419158] Bluetooth: hci4: command tx timeout [ 215.419207] Bluetooth: hci5: command tx timeout [ 215.483148] Bluetooth: hci7: command tx timeout [ 215.483307] Bluetooth: hci6: command tx timeout [ 217.083260] Bluetooth: hci0: command tx timeout [ 217.211212] Bluetooth: hci1: command tx timeout [ 217.275283] Bluetooth: hci3: command tx timeout [ 217.276194] Bluetooth: hci2: command tx timeout [ 217.467579] Bluetooth: hci5: command tx timeout [ 217.468251] Bluetooth: hci4: command tx timeout [ 217.531344] Bluetooth: hci6: command tx timeout [ 217.532328] Bluetooth: hci7: command tx timeout [ 219.164988] Bluetooth: hci0: command tx timeout [ 219.260152] Bluetooth: hci1: command tx timeout [ 219.323200] Bluetooth: hci2: command tx timeout [ 219.324169] Bluetooth: hci3: command tx timeout [ 219.515293] Bluetooth: hci5: command tx timeout [ 219.515319] Bluetooth: hci4: command tx timeout [ 219.581100] Bluetooth: hci7: command tx timeout [ 219.581595] Bluetooth: hci6: command tx timeout [ 273.202500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.206398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.207524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.209231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.212490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.217965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.220831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.222100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.223576] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.225288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.227468] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.232155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.358568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.360491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.362462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.374296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.381237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.382747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.408679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.435388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.438194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.439158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.441347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.443291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.446370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.448260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.449287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.454663] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.455921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.463379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.464458] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.466399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.467678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.500381] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.503528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.507364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.508212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.531643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.536886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.541485] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.543827] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.544960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.563802] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.567202] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.571446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.575766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.582345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.587378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.260188] Bluetooth: hci0: command tx timeout [ 275.260197] Bluetooth: hci1: command tx timeout [ 275.453323] Bluetooth: hci2: command tx timeout [ 275.515198] Bluetooth: hci4: command tx timeout [ 275.515890] Bluetooth: hci5: command tx timeout [ 275.579114] Bluetooth: hci3: command tx timeout [ 275.645169] Bluetooth: hci6: command tx timeout [ 275.707381] Bluetooth: hci7: command tx timeout [ 277.307231] Bluetooth: hci1: command tx timeout [ 277.308969] Bluetooth: hci0: command tx timeout [ 277.499254] Bluetooth: hci2: command tx timeout [ 277.563173] Bluetooth: hci4: command tx timeout [ 277.564632] Bluetooth: hci5: command tx timeout [ 277.627089] Bluetooth: hci3: command tx timeout [ 277.691159] Bluetooth: hci6: command tx timeout [ 277.755098] Bluetooth: hci7: command tx timeout [ 279.356087] Bluetooth: hci0: command tx timeout [ 279.356262] Bluetooth: hci1: command tx timeout [ 279.549059] Bluetooth: hci2: command tx timeout [ 279.611112] Bluetooth: hci5: command tx timeout [ 279.612456] Bluetooth: hci4: command tx timeout [ 279.675253] Bluetooth: hci3: command tx timeout [ 279.739246] Bluetooth: hci6: command tx timeout [ 279.803224] Bluetooth: hci7: command tx timeout [ 281.403139] Bluetooth: hci0: command tx timeout [ 281.404236] Bluetooth: hci1: command tx timeout [ 281.595265] Bluetooth: hci2: command tx timeout [ 281.659231] Bluetooth: hci4: command tx timeout [ 281.660225] Bluetooth: hci5: command tx timeout [ 281.729143] Bluetooth: hci3: command tx timeout [ 281.787193] Bluetooth: hci6: command tx timeout [ 281.851106] Bluetooth: hci7: command tx timeout [ 335.565816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.567414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.577830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.586600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.590821] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.595905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.749483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.753270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.755547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.757981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.759685] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.761542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.813723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.815417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.817140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.819365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.820349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.820464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.823421] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.827143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.837767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.839217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.841409] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.846895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.955657] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.963876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.968334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.983748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.990100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.999417] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.001838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.005458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.008302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.012281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.014629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.018308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.021379] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.023712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.032423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.034460] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.036500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.049286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.075152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.089881] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.093219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.095590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.131230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.136288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.660106] Bluetooth: hci0: command tx timeout [ 337.787585] Bluetooth: hci1: command tx timeout [ 337.916095] Bluetooth: hci2: command tx timeout [ 337.916446] Bluetooth: hci3: command tx timeout [ 338.107145] Bluetooth: hci4: command tx timeout [ 338.108096] Bluetooth: hci5: command tx timeout [ 338.171208] Bluetooth: hci7: command tx timeout [ 338.172234] Bluetooth: hci6: command tx timeout [ 339.708215] Bluetooth: hci0: command tx timeout [ 339.836165] Bluetooth: hci1: command tx timeout [ 339.963277] Bluetooth: hci2: command tx timeout [ 339.963306] Bluetooth: hci3: command tx timeout [ 340.155198] Bluetooth: hci4: command tx timeout [ 340.155255] Bluetooth: hci5: command tx timeout [ 340.219109] Bluetooth: hci6: command tx timeout [ 340.219147] Bluetooth: hci7: command tx timeout [ 341.755453] Bluetooth: hci0: command tx timeout [ 341.883308] Bluetooth: hci1: command tx timeout [ 342.011105] Bluetooth: hci2: command tx timeout [ 342.012631] Bluetooth: hci3: command tx timeout [ 342.203161] Bluetooth: hci4: command tx timeout [ 342.203272] Bluetooth: hci5: command tx timeout [ 342.267223] Bluetooth: hci6: command tx timeout [ 342.268358] Bluetooth: hci7: command tx timeout [ 343.805065] Bluetooth: hci0: command tx timeout [ 343.931121] Bluetooth: hci1: command tx timeout [ 344.060116] Bluetooth: hci3: command tx timeout [ 344.060162] Bluetooth: hci2: command tx timeout [ 344.252102] Bluetooth: hci5: command tx timeout [ 344.252188] Bluetooth: hci4: command tx timeout [ 344.315412] Bluetooth: hci7: command tx timeout [ 344.315590] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:17:43 Registers: info registers vcpu 0 RAX=00000000000012e7 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff848226d9 RBP=0000000000000000 RSP=ffff88802d99ff58 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff863f274f R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a01a60 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff61301d540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff6130afc70 CR3=0000000026a26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000100 RCX=0000000000000cc0 RDX=0000000000000001 RSI=0000000000000100 RDI=ffff888026a22600 RBP=ffff88802a72f750 RSP=ffff88802a72f6e8 R8 =ffff88806c2ec250 R9 =0000000000000000 R10=0000000000000000 R11=00000000000c2f81 R12=ffff888008cc2140 R13=0000000000000cc0 R14=0000000000000100 R15=0000000000000cc0 RIP=ffffffff8482ac2a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc23836a540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdbfd34e1f0 CR3=0000000029c84000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000