Warning: Permanently added '[localhost]:36403' (ECDSA) to the list of known hosts. 2024/10/29 19:14:54 fuzzer started 2024/10/29 19:14:54 dialing manager at localhost:45639 syzkaller login: [ 69.712945] cgroup: Unknown subsys name 'net' [ 69.852337] cgroup: Unknown subsys name 'cpuset' [ 69.888581] cgroup: Unknown subsys name 'rlimit' 2024/10/29 19:15:11 syscalls: 204 2024/10/29 19:15:11 code coverage: enabled 2024/10/29 19:15:11 comparison tracing: enabled 2024/10/29 19:15:11 extra coverage: enabled 2024/10/29 19:15:11 setuid sandbox: enabled 2024/10/29 19:15:11 namespace sandbox: enabled 2024/10/29 19:15:11 Android sandbox: enabled 2024/10/29 19:15:11 fault injection: enabled 2024/10/29 19:15:11 leak checking: enabled 2024/10/29 19:15:11 net packet injection: enabled 2024/10/29 19:15:11 net device setup: enabled 2024/10/29 19:15:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/29 19:15:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/29 19:15:11 USB emulation: enabled 2024/10/29 19:15:11 hci packet injection: enabled 2024/10/29 19:15:11 wifi device emulation: enabled 2024/10/29 19:15:11 802.15.4 emulation: enabled 2024/10/29 19:15:11 fetching corpus: 0, signal 0/0 (executing program) 2024/10/29 19:15:13 starting 8 fuzzer processes 19:15:13 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', r1, 0x80, 0x7, 0x1, 0x1, {{0x26, 0x4, 0x3, 0x7, 0x98, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0xb, 0xfb, [@rand_addr=0x64010100, @local]}, @timestamp_addr={0x44, 0x3c, 0xf5, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x8}, {@multicast2, 0x2}, {@empty, 0x3ff}, {@multicast1, 0x3}, {@local, 0x967}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0x8}]}, @generic={0x83, 0xa, "7548e48abe568bcc"}, @end, @end, @timestamp_addr={0x44, 0x1c, 0x2b, 0x1, 0x2, [{@rand_addr=0x64010102, 0x800}, {@remote, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0x1, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0xf358}]}]}}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r1, 0x29, 0x7, 0x7, 0x100, 0x12, @mcast1, @remote, 0x40, 0x1, 0xffffffd1, 0x5}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000380)="73a0a9c5c9b5d86c9a10bd988a610a8a5668e931b905dfbf19b82b4b8a993252d969da74d5ca6127d4856f3118312b25c7aac680d0bd4f6060138e379d4d81a90c77f63db552dcc8e7836972f789f4986c2b8a80efeb885fbd79c80746810c67dd7a38456ef3aba9ab974b67c0d21bedfc23f125086368a9d7638a8c2afc4721cca06ee986fa5d08781e9b72862c2590c0dedcd7e7a8ae5acb39925e4a0afa6e9b935eab87c38ecb2240c9b61a070681881a843bacefde59f24c958e560ac48cf83cbc30be2ffe6480b3b4c446454d86e498f15e907c") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r1, 0x8, 0x718, 0x200, 0x10000, {{0x11, 0x4, 0x0, 0x38, 0x44, 0x65, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@cipso={0x86, 0x18, 0x1, [{0x1, 0x12, "834dcb95e765cfca375cdc685f9ddb02"}]}, @generic={0x82, 0xa, "b07c0f5351ffe107"}, @noop, @timestamp_prespec={0x44, 0xc, 0x76, 0x3, 0x1, [{@empty}]}]}}}}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={r1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x19b88, &(0x7f0000000580)={'veth1_to_hsr\x00', @ifru_flags}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x4, 0x3, 0x9, 0x56000000, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x80, 0x40, 0x2d, 0x7}}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000680)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r5, 0x7, 0x0, 0x400, 0x4}, 0x3) r7 = accept4$bt_l2cap(r4, &(0x7f00000006c0)={0x1f, 0x0, @none}, &(0x7f0000000700)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00'}) r8 = socket$inet6(0xa, 0x4, 0x7f) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x7d1b, 0x3c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x1, 0x7800, 0x6, 0x8}}) clone3(&(0x7f0000003bc0)={0x2000000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x40}, &(0x7f0000000900)=""/248, 0xf8, &(0x7f0000000a00)=""/4096, &(0x7f0000003b80)=[0x0, 0xffffffffffffffff], 0x2, {r4}}, 0x58) 19:15:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0}, 0x4) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x6000, @fd_index=0x7, 0x1, 0x0, 0x0, 0x12, 0x1, {0x1}}, 0x1) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0xe) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x101, &(0x7f0000000180)=0x4) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1}, 0xc) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x10000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x24}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x200060d4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x63, 0x3, {{0x1e, 0x4, 0x3, 0x23, 0x78, 0x67, 0x0, 0xfd, 0x0, 0x0, @private=0xa010100, @empty, {[@end, @lsrr={0x83, 0xb, 0xf5, [@multicast1, @private=0xa010101]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0xc, "dabbbcd69b2377860abc"}, {0x1, 0xd, "711de7ba7ae2d4be09fd2a"}, {0x0, 0x11, "2ff18db611adbdd93b29839f28b666"}, {0x2, 0xc, "1fc05ed7702557399928"}, {0x5, 0x7, "edee738666"}, {0x6, 0xf, "cf74518df0dc56e749a2776186"}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@private=0xa010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x40, 0x4e21, 0x4, 0xa, 0x40, 0x20, 0x2f, r4, r5}, {0x2, 0x4, 0x7ff, 0x7, 0x5, 0x9, 0xde, 0xf1b}, {0x3, 0x8000, 0x8, 0x7ff}, 0x200, 0x6e6bbd, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x33}, 0x2, @in6=@private0, 0x3505, 0x3, 0x0, 0x81, 0xfffff1af, 0xfff, 0x4}}, 0xe8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000700)={0x9, [0xfffffc01]}, 0x10) pipe(&(0x7f0000000740)={0xffffffffffffffff}) syz_io_uring_setup(0x7f20, &(0x7f0000000780)={0x0, 0x2f9a, 0x20, 0x1, 0x2af, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000800), &(0x7f0000000840)) [ 87.650640] audit: type=1400 audit(1730229313.485:7): avc: denied { execmem } for pid=269 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:15:13 executing program 4: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8b0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x82880, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x0, 0xcb, 0x8000, {0x1c79, 0xffffff55}, 0x6, 0x4}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x200080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x28, 0x6, 0xfff, {0x63a9, 0x81}, 0x5, 0x4}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x130, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3facf677}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x130}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) r3 = pidfd_getfd(r0, r1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x101, 0x2e}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x6, 0x1, 0xd0ec}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fdda315f0edb"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x70}}, 0x4008800) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000700)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000780), 0x2) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000007c0)={0x4, "af3ba96106fac10e86946a0bba2072cf8c3affa34a63206485b4dc3187a2b6278bea5b6fcea087409d7608bc8863c0f9a86a08d36e4d8540d6c61fa782d9a0f1"}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x101, 0x0) write$tcp_mem(r6, &(0x7f0000000880)={0x200, 0x20, 0x3, 0x20, 0xfffffffffffffff8}, 0x48) pipe(&(0x7f0000000900)) 19:15:13 executing program 2: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x3c, @remote, 0x4e20, 0x4, 'sh\x00', 0x0, 0x2, 0x15}, 0x2c) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000100)=0x899c, 0x4) epoll_create(0x100) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040001) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280)=0x5, 0x4) getpeername$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5da8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0xc) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000800), 0x8) 19:15:13 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0xe1131c175a43b775, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xe841}, 0x4040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r0, 0x34, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24048881) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040044}, 0x80c0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/cgroups\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x119000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x150, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:dhcp_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x8000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:vhost_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:audisp_var_run_t:s0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e40), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x6c, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c4) 19:15:13 executing program 5: mq_open(&(0x7f0000000000)=',^/\x00', 0x800, 0x20, &(0x7f0000000040)={0x2a4, 0x80000001, 0xce9, 0xa64}) mq_open(&(0x7f0000000080)=',^/\x00', 0x800, 0x46, &(0x7f00000000c0)={0x100000000, 0x0, 0x6, 0xfffffffffffffa68}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = gettid() mq_notify(r0, &(0x7f0000000140)={0x0, 0x17, 0x4, @tid=r1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000001c0)={0x4, 0x200, 0xff, 0x4, 0xd6, 0x7, 0x2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x988, 0x0, 'client1\x00', 0x4, "9583c480f6bcf91c", "277fe5b78502b692215526ac04cb5dfd15d0af4f1c780932b3189b88903d59dc", 0x1}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf105}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mq_open(&(0x7f00000004c0)='/proc/vmallocinfo\x00', 0x80, 0x81, &(0x7f0000000500)={0x9, 0xffffffffffff7fff, 0xd6, 0xad9}) r4 = gettid() pidfd_open(r4, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000540)=0x14, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfd0000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="261ea2d046aa"}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8c1) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 19:15:13 executing program 6: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="b2de66878f4fb5386f164433dc77ecdeb82ec9800200ba04fe6cba127f98115097ee86896af1a617e84781729844f77f5c4bdc8e9137509c71865b07933d1d6673a4f7f727fa5d311619d7f72cc0", 0x4e) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x288000, 0x0) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000100)="b93dfaf20a25f750271659f88eba6f743767bebbb48d14f75462776bcbc46b3d07997e25264bcc46d443490c925cdc5999c522ad7377e5626b8532261560a8001e8d86fda1166e8447bc519c0158687d9d27395f5c57008a2b907fd61001761b8e2fa5ed828dd0691c1e8c7aebcddf11020dd139fbf6") write(r0, &(0x7f0000000180)="ee9bf0bbaa92729b47ab1ef464b14450e0f85b9ef6fb44446f3b42dbbfeb2a1cf7a5bd533f3e04093a2e30c2240e8fe2d68a", 0x32) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x119a00, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = mq_open(&(0x7f0000000200)='/dev/full\x00', 0x80, 0x52, &(0x7f0000000240)={0x40, 0x4a9d, 0xe8c, 0x4}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000280)="956d86f535ca7ac878fe3cf580e81be8c95ffe78ddeeab66759b5f3722edd58f19954d35f8e7aaa6416d8be06651592bde310c523bf8b5a631c3be6d5e46b6bdc7adc97465bb268360c33b0c373342e156d7fd0813373279c349119c8298d28215c677ec228412a824baf1165d61796fc5ff6dee2546194c8ad9212e3616a0cc7a955ed283b9e41fce4f5f94fd977f0f5d509861c20975c165b2d64125d82a7b6870e52ecb97b26083205bf74f417db60165345cd43996bb574f65bd96177cda36472189d6451b1a94d7f4913c1e2c1912484fa3563679fa187d08c151d0f70d6f0701f7f707d2e819a576a9a0ef42cb8e5d5953", 0xf4, 0x9, &(0x7f00000003c0)={r4, r5+10000000}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000440)) r7 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f0000000480)=0x8000) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x240000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r8, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000500)={0x6, 0x80, 0x0, {0x7, 0xb47}, 0xffffffff}) 19:15:13 executing program 7: clock_gettime(0x0, &(0x7f0000000000)) clock_getres(0x2, &(0x7f0000000040)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="39283dd11ccdfa87ef3d3c81fc2b3d0359f64393933607eeda1b79b315c8fc74c8a0dfec9c3a7780c3681aef547b3642e649aec965e128bac1716c03d6d1a40868cf3334e82455768e37dbd39f6988805bbaface244b08985c92bccede050e99248bc093a4a825357f029211418eb1247198c0c2617a003fad78382cf75a6de14fec74cb97779b69b7e6e263b34edf994ffdbc1be0d821d49e19d91931c3032195c4292c54e43c9cee8a1151c519a743ad70e898f72c26e4802824bae0ae5ea1ff958588a53a1786e529918c061071cf23646a5f44", 0xd5, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) clock_getres(0x7, &(0x7f00000001c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_notify(r1, &(0x7f0000000400)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000240)="62c02172e9c2fb267f01eaca91ee24d442e37189141a37e4e099e7d68131af7a3486f1059ebc1d5a7b1b97de4df91038496e57220739e31503eb488ab1a9a97cace2692ca1746e66d9359e5495d1aa8d6435a530432c5cb5c3bae34cb8ec44316bc7681422816e5a57d989dfd7ddf1af84dd7838e2781b9ab188374b1265542e59e33fb8247340c71839ca81f3ba", &(0x7f0000000300)="0692201b8973abef066f616e1a51ddd2087236026b44dbfb0cadd8d3e74fff517b8d88eb05ea59139509a58e782fe5eb7cf83fac4ba40ea174c3aaf2a7eae23aa582bed718cd63207e0615ca326f5506e0da49f04da6aaabd7179f995a3240d87abb31f831e6ab7dd31bf4d793b55d728addc5db0e5b8492fcc3c5c53342836f6630b40b1e8942abe17fddc2b61011181a13d857eb49cec2520a3b87aad7da5da49d2aaa623199ab0d74ecca0e67831ae82949e2240a46d2f1030c7298d6766324413dc10987c10a634737ffc472c106ab0bde5980fd7982be41d289f56e405ca9cac10b661502905ec764fa51910678805140d8c165b8d52809fbb42c55"}}) mq_timedsend(r1, &(0x7f0000000440)="f48cf25fbde93ca20ffaef4ebd5cd0447dfd994aedf1475b89cef0fc3a692704a50a6b90b52e055f14b213ab988f0239cb88a7218a70749ca169d86d0d0689a1", 0x40, 0x501f, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000004c0)={0x2, 0x0, 'client1\x00', 0xffffffff80000004, "097ee9e47a761ace", "a652b0b9e044eee9ee2231cd07304990a62f7dc36765065443162189e9373dc2", 0x189f, 0x9}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0xa1002, 0x0) mq_timedreceive(r2, &(0x7f00000005c0)=""/38, 0x26, 0x3, &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) clock_getres(0x7, &(0x7f0000000680)) clock_getres(0x0, &(0x7f00000006c0)) clock_gettime(0x1, &(0x7f0000000700)) mq_timedsend(r0, &(0x7f0000000740)="baa45ea8018a14bcc89b703916da4794895e9cec211ee1d352274c048016b49036eadd7b59b8af6fab4f5f579142b1e37ce85c3f3a0b7d98f62b2f464a173a84ddeefc4fe354b355c5dc183525405323a72b3595d2e8cfc8a35b1ef7d36b4a1d56d74e8a682c161c7d958b88649330a57f9d0873c5df91648856e07c71d0995efe81adcfcff76e597bd6dbd348c67364d2ecd8cb28c8b48cde4917f3c7ad84d9329776aa49f6fcd3da84e36df565b6d70ebb33", 0xb3, 0x1, &(0x7f0000000800)={0x77359400}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) socketpair(0x2a, 0xa, 0x7ff, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r2}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) mq_timedreceive(r0, &(0x7f0000000a00)=""/4096, 0x1000, 0x9, &(0x7f0000001a00)) [ 89.162558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.171784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.174741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.176883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.177481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.180496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.184444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.184633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.186998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.187646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.193764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.194944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.200559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.202457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.204738] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.206810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.209351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.211896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.217085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.221072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.223404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.223427] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.226309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.226405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.230726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.231862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.235617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.235642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.238846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.240085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.243649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.243860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.246324] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.248367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.252357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.256980] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.258574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.267256] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.268864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.274867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.277849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.279559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.284546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.287107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.290944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.294043] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.295106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.301405] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.309076] Bluetooth: hci7: command tx timeout [ 91.310962] Bluetooth: hci0: command tx timeout [ 91.312568] Bluetooth: hci4: command tx timeout [ 91.313286] Bluetooth: hci3: command tx timeout [ 91.372264] Bluetooth: hci5: command tx timeout [ 91.372288] Bluetooth: hci6: command tx timeout [ 91.372482] Bluetooth: hci1: command tx timeout [ 91.374249] Bluetooth: hci2: command tx timeout [ 93.356231] Bluetooth: hci3: command tx timeout [ 93.358451] Bluetooth: hci4: command tx timeout [ 93.359960] Bluetooth: hci7: command tx timeout [ 93.359996] Bluetooth: hci0: command tx timeout [ 93.420279] Bluetooth: hci1: command tx timeout [ 93.421309] Bluetooth: hci2: command tx timeout [ 93.422306] Bluetooth: hci5: command tx timeout [ 93.422958] Bluetooth: hci6: command tx timeout [ 95.404216] Bluetooth: hci0: command tx timeout [ 95.406239] Bluetooth: hci4: command tx timeout [ 95.406700] Bluetooth: hci3: command tx timeout [ 95.408212] Bluetooth: hci7: command tx timeout [ 95.468259] Bluetooth: hci5: command tx timeout [ 95.468785] Bluetooth: hci1: command tx timeout [ 95.469882] Bluetooth: hci6: command tx timeout [ 95.470397] Bluetooth: hci2: command tx timeout [ 97.453341] Bluetooth: hci3: command tx timeout [ 97.453884] Bluetooth: hci7: command tx timeout [ 97.454524] Bluetooth: hci4: command tx timeout [ 97.454581] Bluetooth: hci0: command tx timeout [ 97.516293] Bluetooth: hci1: command tx timeout [ 97.519393] Bluetooth: hci6: command tx timeout [ 97.519426] Bluetooth: hci5: command tx timeout [ 97.519877] Bluetooth: hci2: command tx timeout [ 152.214037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.217045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.220266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.221540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.225470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.226012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.226730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.228823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.232545] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.233626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.235672] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.238897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.240000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.244450] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.247493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.248358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.250084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.251318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.253389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.261519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.264958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.284410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.290979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.292760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.341651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.350408] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.382646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.385338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.389292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.390908] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.392221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.393608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.400379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.407777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.413521] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.414896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.417495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.420530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.422457] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.422908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.424398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.433208] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.435036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.438078] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.439419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.452393] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.474250] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.483491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.284304] Bluetooth: hci1: command tx timeout [ 154.285317] Bluetooth: hci0: command tx timeout [ 154.349255] Bluetooth: hci3: command tx timeout [ 154.349262] Bluetooth: hci2: command tx timeout [ 154.412847] Bluetooth: hci4: command tx timeout [ 154.477287] Bluetooth: hci5: command tx timeout [ 154.477299] Bluetooth: hci6: command tx timeout [ 154.540457] Bluetooth: hci7: command tx timeout [ 156.332317] Bluetooth: hci0: command tx timeout [ 156.333961] Bluetooth: hci1: command tx timeout [ 156.396211] Bluetooth: hci3: command tx timeout [ 156.397236] Bluetooth: hci2: command tx timeout [ 156.460246] Bluetooth: hci4: command tx timeout [ 156.526288] Bluetooth: hci6: command tx timeout [ 156.526494] Bluetooth: hci5: command tx timeout [ 156.588216] Bluetooth: hci7: command tx timeout [ 158.380226] Bluetooth: hci1: command tx timeout [ 158.380764] Bluetooth: hci0: command tx timeout [ 158.444330] Bluetooth: hci2: command tx timeout [ 158.444566] Bluetooth: hci3: command tx timeout [ 158.509306] Bluetooth: hci4: command tx timeout [ 158.572216] Bluetooth: hci5: command tx timeout [ 158.574301] Bluetooth: hci6: command tx timeout [ 158.636577] Bluetooth: hci7: command tx timeout [ 160.428217] Bluetooth: hci0: command tx timeout [ 160.428304] Bluetooth: hci1: command tx timeout [ 160.492259] Bluetooth: hci3: command tx timeout [ 160.493466] Bluetooth: hci2: command tx timeout [ 160.556488] Bluetooth: hci4: command tx timeout [ 160.621198] Bluetooth: hci6: command tx timeout [ 160.621730] Bluetooth: hci5: command tx timeout [ 160.684311] Bluetooth: hci7: command tx timeout [ 214.402619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.409612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.413295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.417402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.423774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.426773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.429039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.446503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.451528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.453078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.455405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.457740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.459738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.461894] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.463690] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.464988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.467627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.469193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.590754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.594548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.626192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.634655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.637196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.640640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.644396] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.648467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.650958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.671529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.685697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.700509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.705886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.707213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.732461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.740039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.745210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.748373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.751528] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.753742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.773009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.777181] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.780501] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.788414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.790341] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.791566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.801657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.813958] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.823422] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.850316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.493592] Bluetooth: hci1: command tx timeout [ 216.556222] Bluetooth: hci0: command tx timeout [ 216.557042] Bluetooth: hci2: command tx timeout [ 216.686177] Bluetooth: hci4: command tx timeout [ 216.812219] Bluetooth: hci3: command tx timeout [ 216.812304] Bluetooth: hci7: command tx timeout [ 216.813241] Bluetooth: hci5: command tx timeout [ 216.878023] Bluetooth: hci6: command tx timeout [ 218.541214] Bluetooth: hci1: command tx timeout [ 218.604202] Bluetooth: hci2: command tx timeout [ 218.604238] Bluetooth: hci0: command tx timeout [ 218.733183] Bluetooth: hci4: command tx timeout [ 218.860373] Bluetooth: hci7: command tx timeout [ 218.860500] Bluetooth: hci3: command tx timeout [ 218.861428] Bluetooth: hci5: command tx timeout [ 218.924466] Bluetooth: hci6: command tx timeout [ 220.588229] Bluetooth: hci1: command tx timeout [ 220.654150] Bluetooth: hci0: command tx timeout [ 220.654624] Bluetooth: hci2: command tx timeout [ 220.780217] Bluetooth: hci4: command tx timeout [ 220.908466] Bluetooth: hci5: command tx timeout [ 220.908585] Bluetooth: hci7: command tx timeout [ 220.909449] Bluetooth: hci3: command tx timeout [ 220.973280] Bluetooth: hci6: command tx timeout [ 222.637298] Bluetooth: hci1: command tx timeout [ 222.702312] Bluetooth: hci2: command tx timeout [ 222.702343] Bluetooth: hci0: command tx timeout [ 222.828164] Bluetooth: hci4: command tx timeout [ 222.956404] Bluetooth: hci3: command tx timeout [ 222.956454] Bluetooth: hci7: command tx timeout [ 222.956923] Bluetooth: hci5: command tx timeout [ 223.021255] Bluetooth: hci6: command tx timeout [ 276.683715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.696942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.700033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.708810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.713917] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.716936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.795471] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.800145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.804324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.804528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.813500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.814912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.838308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.840947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.846957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.848783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.865405] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.871985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.985468] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.990550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.003755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.003881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.029938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.041498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.065587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.067681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.079570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.090331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.108779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.112160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.114674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.120995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.125399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.127299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.132626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.136489] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.142327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.158647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.164813] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.178330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.179407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.188417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.189715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.211222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.213203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.216319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.281392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.288742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.765156] Bluetooth: hci0: command tx timeout [ 278.899199] Bluetooth: hci1: command tx timeout [ 278.957293] Bluetooth: hci2: command tx timeout [ 279.212224] Bluetooth: hci3: command tx timeout [ 279.212646] Bluetooth: hci6: command tx timeout [ 279.278507] Bluetooth: hci4: command tx timeout [ 279.341572] Bluetooth: hci5: command tx timeout [ 279.405228] Bluetooth: hci7: command tx timeout [ 280.812173] Bluetooth: hci0: command tx timeout [ 280.940294] Bluetooth: hci1: command tx timeout [ 281.004212] Bluetooth: hci2: command tx timeout [ 281.264129] Bluetooth: hci3: command tx timeout [ 281.264251] Bluetooth: hci6: command tx timeout [ 281.324263] Bluetooth: hci4: command tx timeout [ 281.389438] Bluetooth: hci5: command tx timeout [ 281.452162] Bluetooth: hci7: command tx timeout [ 282.860171] Bluetooth: hci0: command tx timeout [ 282.989311] Bluetooth: hci1: command tx timeout [ 283.052235] Bluetooth: hci2: command tx timeout [ 283.308198] Bluetooth: hci3: command tx timeout [ 283.308235] Bluetooth: hci6: command tx timeout [ 283.372249] Bluetooth: hci4: command tx timeout [ 283.436329] Bluetooth: hci5: command tx timeout [ 283.502133] Bluetooth: hci7: command tx timeout [ 284.908183] Bluetooth: hci0: command tx timeout [ 285.036263] Bluetooth: hci1: command tx timeout [ 285.100179] Bluetooth: hci2: command tx timeout [ 285.356276] Bluetooth: hci3: command tx timeout [ 285.357772] Bluetooth: hci6: command tx timeout [ 285.421251] Bluetooth: hci4: command tx timeout [ 285.485213] Bluetooth: hci5: command tx timeout [ 285.549192] Bluetooth: hci7: command tx timeout [ 339.006210] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.007833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.009777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.014848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.041389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.042550] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.059973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.061317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.063183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.065385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.066732] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.067720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.262399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.271321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.272192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.275302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.276033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.282684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.283469] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.288315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.298630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.300433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.310362] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.317427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.331286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.332776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.335531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.338443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.342314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.344987] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.347527] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.349760] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.352037] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.355966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.358215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.365467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.378246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.382648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.384982] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.386959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.388617] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.391692] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.392656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.409354] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.423338] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.503524] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.510462] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.513389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.100414] Bluetooth: hci0: command tx timeout [ 341.101604] Bluetooth: hci1: command tx timeout [ 341.356175] Bluetooth: hci3: command tx timeout [ 341.420498] Bluetooth: hci4: command tx timeout [ 341.420598] Bluetooth: hci2: command tx timeout [ 341.484279] Bluetooth: hci5: command tx timeout [ 341.484311] Bluetooth: hci6: command tx timeout [ 341.548240] Bluetooth: hci7: command tx timeout [ 343.148262] Bluetooth: hci1: command tx timeout [ 343.148838] Bluetooth: hci0: command tx timeout [ 343.405255] Bluetooth: hci3: command tx timeout [ 343.469213] Bluetooth: hci2: command tx timeout [ 343.469752] Bluetooth: hci4: command tx timeout [ 343.532181] Bluetooth: hci5: command tx timeout [ 343.534409] Bluetooth: hci6: command tx timeout [ 343.596142] Bluetooth: hci7: command tx timeout [ 345.196398] Bluetooth: hci0: command tx timeout [ 345.197885] Bluetooth: hci1: command tx timeout [ 345.452169] Bluetooth: hci3: command tx timeout [ 345.516157] Bluetooth: hci4: command tx timeout [ 345.516182] Bluetooth: hci2: command tx timeout [ 345.582178] Bluetooth: hci6: command tx timeout [ 345.582708] Bluetooth: hci5: command tx timeout [ 345.645144] Bluetooth: hci7: command tx timeout [ 347.244268] Bluetooth: hci1: command tx timeout [ 347.245863] Bluetooth: hci0: command tx timeout [ 347.500306] Bluetooth: hci3: command tx timeout [ 347.564138] Bluetooth: hci2: command tx timeout [ 347.565194] Bluetooth: hci4: command tx timeout [ 347.628670] Bluetooth: hci5: command tx timeout [ 347.628719] Bluetooth: hci6: command tx timeout [ 347.693165] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:20:24 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffffffff0b9f7bf RSI=0000000000000000 RDI=ffffffff85cfbdf8 RBP=ffff8880339dd280 RSP=ffff88803341f9a8 R8 =0000000000000001 R9 =0000000000000001 R10=ffff8880339ddcbc R11=00000000000c3270 R12=ffffffff85cfbdf8 R13=ffffffff85cfbdf8 R14=0000000000000000 R15=0000000000000cc0 RIP=ffffffff812fa9a2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ca7ecf088 CR3=0000000018df2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86bdbd69 RBX=0000000000000001 RCX=ffffffff86bdbd66 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff86bdbd68 RBP=ffff88806cf09ab0 RSP=ffff88806cf099e8 R8 =0000000000000001 R9 =ffff88806cf09a98 R10=000000000003c001 R11=00000000000bfee9 R12=ffff88806cf09ab8 R13=ffff88806cf09aa0 R14=ffff8880326a78f8 R15=ffff88806cf09a58 RIP=ffffffff81149ab1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2006e3c260 CR3=0000000035dac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000