Warning: Permanently added '[localhost]:30576' (ECDSA) to the list of known hosts. 2024/11/06 21:05:32 fuzzer started 2024/11/06 21:05:32 dialing manager at localhost:46317 syzkaller login: [ 73.538554] cgroup: Unknown subsys name 'net' [ 73.623977] cgroup: Unknown subsys name 'cpuset' [ 73.676616] cgroup: Unknown subsys name 'rlimit' 2024/11/06 21:05:49 syscalls: 202 2024/11/06 21:05:49 code coverage: enabled 2024/11/06 21:05:49 comparison tracing: enabled 2024/11/06 21:05:49 extra coverage: enabled 2024/11/06 21:05:49 setuid sandbox: enabled 2024/11/06 21:05:49 namespace sandbox: enabled 2024/11/06 21:05:49 Android sandbox: enabled 2024/11/06 21:05:49 fault injection: enabled 2024/11/06 21:05:49 leak checking: enabled 2024/11/06 21:05:49 net packet injection: enabled 2024/11/06 21:05:49 net device setup: enabled 2024/11/06 21:05:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/06 21:05:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/06 21:05:49 USB emulation: enabled 2024/11/06 21:05:49 hci packet injection: enabled 2024/11/06 21:05:49 wifi device emulation: enabled 2024/11/06 21:05:49 802.15.4 emulation: enabled 2024/11/06 21:05:49 fetching corpus: 0, signal 0/0 (executing program) 2024/11/06 21:05:51 starting 8 fuzzer processes 21:05:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40801}, 0x20044094) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, 0x4}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xb0680, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x2002c091) r2 = socket(0x3, 0x5, 0x7) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000820}, 0x3634c393ac0a969d) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c890}, 0x4004880) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000580)={{0x2, 0x4e24, @broadcast}, {0x306, @multicast}, 0x5c, {0x2, 0x4e23, @remote}, 'veth0_to_bridge\x00'}) r4 = socket(0x22, 0x3, 0x9) sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000007c0)={@private0, 0x0}, &(0x7f0000000800)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x1, 0x96d, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x40, 0x2, 0x1ff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f0000000e40)={0x9c0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x39f000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffff, 0x8, 0x8, 0xffffff09}, {0x3, 0x76, 0x97, 0x3f}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfb92}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x40, 0xf7}]}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x8, 0xe4, 0x6}, {0x1, 0x0, 0x0, 0xff}, {0x2, 0x9, 0x8, 0x2}, {0x9, 0x7f, 0x7f, 0x6}]}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1a8, 0xfd, 0x6, 0x9}, {0x3, 0x4, 0xe9, 0x1}, {0x8a, 0x80, 0xf9, 0x8001}, {0x5, 0x1, 0x49, 0x5}, {0x8001, 0x0, 0x80, 0x7}, {0x800, 0xb5, 0x2, 0x7f}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x44800}, 0x880) 21:05:51 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000080)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008011}, 0x20044044) r1 = socket$inet(0x2, 0x2, 0x1f) getresuid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000019c0)={{{@in6=@empty, @in6=@mcast1, 0x4e22, 0x0, 0x4e24, 0x8000, 0x2, 0xa0, 0xa0, 0x6c, 0x0, r2}, {0x6edccefc, 0x9, 0x0, 0x3, 0xaf, 0x9, 0x7, 0x4f}, {0xc0a5, 0x34, 0x10001, 0x1}, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x3c}, 0x8, @in6=@empty, 0x3505, 0x4, 0x3, 0x7f, 0xf6ac, 0x8, 0x1000}}, 0xe8) syz_genetlink_get_family_id$wireguard(&(0x7f0000001ac0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001b00)={{0x2, 0x4e21, @private=0xa010101}, {0x306}, 0xa, {0x2, 0x4e20, @loopback}, 'vlan0\x00'}) r3 = accept4$inet(r1, &(0x7f0000001b80)={0x2, 0x0, @initdev}, &(0x7f0000001bc0)=0x10, 0x800) getresuid(&(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001cc0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e21, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x3c, r0, r4}, {0x6, 0x2, 0x1ff, 0xba9b, 0x829, 0x1, 0x6, 0xfffffffffffffffa}, {0x2, 0x7dd308e2, 0x4, 0xfff}, 0x6, 0x6e6bb1, 0x0, 0x0, 0x2, 0x2}, {{@in=@local, 0x4d6, 0x2b}, 0x2, @in6=@mcast2, 0x3501, 0x3, 0x2, 0x9, 0xdea, 0x3, 0x7}}, 0xe8) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e40)={0x13c, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r6 = socket$inet(0x2, 0x2, 0x10001) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000002040)={{0x88, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e20, 0x3, 'ovf\x00', 0x12, 0x4, 0x40}, {@multicast2, 0x4e21, 0x3, 0x101, 0x5, 0xff}}, 0x44) r7 = socket$inet(0x2, 0xa, 0x2) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f00000020c0)={0x2b, @multicast1, 0x4e22, 0x2, 'sh\x00', 0x1c, 0x101, 0x70}, 0x2c) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002100), 0x2800, 0x0) ioctl$RTC_ALM_READ(r8, 0x80247008, &(0x7f0000002140)) 21:05:51 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x8000000, 0x0, {{0x12, 0x4, 0x2, 0x19, 0x48, 0x64, 0x0, 0xfa, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x1b, 0xbe, [@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @loopback, @empty]}, @cipso={0x86, 0x18, 0x1, [{0x2, 0x5, "9c0195"}, {0x0, 0xd, "abc531c26859ce8579a1d1"}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0xfffa, 0x8, 0x0, 0x3, 0x82, r1}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x501200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x2, 0x0, 0x7, 0x0, 0x3218}, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000240)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x1, 0x50, 0xe1}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x9, 0x0, 0x80, 0xec000}, {0x0, 0x0, 0x1, 0x9}, {0x101, 0x2, 0x7, 0x9}]}) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = semget(0x3, 0x4, 0x618) getgroups(0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0x0]) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, r6}, 0x6099, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000540)={{0x1, 0x3, 0x4, 0x2, 0x1}, 0x8000, 0x5, 0xf6}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x8c, 0x20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0x10, 0x10, 0x101, 0x7}}) [ 91.674374] audit: type=1400 audit(1730927151.454:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:05:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x640003) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x3, 0x80000000, 0x0, 0x8}, 0x4, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x577, 0xffff, 0x3f, 0x5}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000140)="0a889d5f754c2732d521bb20f7e14c9c348eecace6e5724784b1fcbf574caf77faa454c83c661b60749f7f9c4465d44b0241e0ded34fc57408745f9858ad0624f31cbe02ab6d066e4ad7748c9f4340334143989a51df5fe5ef20af88165deca97674e0d877a16a4046db19075805e51733b3094a0f4f044d013ef0d1a412abdb23459b4183b30c3a54daf4d93568a79dc364a9ae16eaddfdb87a74a5cce3f591bf5766be43b270c231b720e03d56fd5a064fbe650af574b2a641362cda126eba14e41774d80d24cf373463b451d16db843067740081fb69a83", 0xd9) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000240)=""/112) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000300)={{0x3, 0x0, 0x5, 0x3, 0x1}, 0x3ff, 0x40}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) eventfd2(0x3, 0x80000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000440)={{0xffffffffffffffff, 0x1, 0x2, 0x0, 0x7}, 0x5, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000004c0)={0x8, [0x100, 0xfffffff9], 0x6}, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e22, @empty}, {0x306, @random="3de96a0985be"}, 0x6, {0x2, 0x4e24, @loopback}, 'bridge0\x00'}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x529080) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000005c0)={0xfffffffe, 0x28, 0x14, 0x5, 0x0, 0xfffffffb, 0x6, 0x55}) connect(r1, &(0x7f0000000600)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x80) keyctl$session_to_parent(0x12) 21:05:51 executing program 4: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x108, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048800}, 0x40000000) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8) r1 = socket(0xa, 0x6, 0x7296) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="700413b75b44"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "6d3cdbe36e412e6e4a8a1562c5373186"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8b7231f614e7fb5b4498970c2fa96277"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xf834e1007f7860f4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xffff8000}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8001}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg(r5, &(0x7f0000000d00)={&(0x7f0000000540)=@l2={0x1f, 0x4, @any, 0x7, 0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000005c0)="3d3b8dfb5d791a7a1351f4d6e3a49779b451eacfc0ed2a9279d27930a8f237e981bc398e7023d6204475f0fbab3348f4be0319cd1544054f6aee7f30c0e155b04f52eb896439dbe29d8fb6ccffd2deda92d13248247aa420733afdaff28d97", 0x5f}, {&(0x7f0000000640)="b1f169556da12c4c9cfd520d885e7d33fc0674b7c25e5498d34cff54fd64cc28b76721cf6bf4cd269975407e074864b3d3", 0x31}, {&(0x7f0000000680)="6b10fa2a5ff9d65bc69c3b488168a714a935435e1f1f886e0383690ce725e3aafc0f951bb432deddef3d7ac2a2b29cdf2b56eb3dd53342eeb9153f5e2ecfa088c491b0b5fba4f5cfe7c2b57297f48c79dd983458ab47815e81a8c6402c91630e3d4bf923ad8bef51dd35fade6ee30e", 0x6f}, {&(0x7f0000000700)="b36eeb24f30ef1c13c00f12b63b9f05b02a86374346153830ed9d0a2032cbc9e7baacf6da1ac06ee45c659492eb9a28ba4e323de465696933469d6d7878381e033d92fae9f0b6c6b13158a1c1040613c51157ae7587103d4ef79cc8d8cbc12b04f1c9c74de604f309b", 0x69}, {&(0x7f0000000780)="79ed20ac3eddd776285f95e11272ea2f6895baa7a254785b39ef5c69be9903b8d9d5fc1eea570f7bd91a71ebf7065d2879b7b924fac34bc322255cb0763a1a2680418a651274a996ae32459541705e3f6087", 0x52}, {&(0x7f0000000800)="b6b8aab8421feafefcb4b82a963e7b08bd3395eade2bb12753db1facbef57187ec378b5da7cf426d1743e9a3b278dac52d18396947c0bb9e0d919bd4b3b5a42b72b1cc89a67772303b05a52f53758bc19220389d734ea7cf43a716889afab0647edda8a3278824ab0de0d08b859db2a3ae794447737d91fa2478bd812cef8237d0912ec56a8e560872c114092fb5716e90b62e1f2c6aa9a6a010e7962aba748d46ec5e8befebb825da488c7bb74f8c82c94d4466154ad1ecd4761975500d64222fd882aa705353e52c40ff736de425952285393c8ea0acbba92367f1b4b799ada1230f4db7f404bc294f82a31dd72d5ef7723d51ba41", 0xf6}, {&(0x7f0000000900)="2b847bede3b6b1af71fca43690c2c83e76d2f723e6239dc902b7ffb5a7eb12b663d687968a0ca2a2", 0x28}, {&(0x7f0000000940)="f1269065fae3198e18cef09ce7e50de724440a", 0x13}, {&(0x7f0000000980)="ebfe4ce8bc38e44ca0a76ccb29c885337546d0c34abfdfa58fa978e3f134d3eea1855aaa60c896c6632756898e05fd12489f4c2cab665f22d2788be93e9743026c49681dd10b4ff5fba3c81c44d226b6dccbbf77e9a5e55c8180a2a088347756d02af49868df5ab5a93c11eda7a998cc74a18786bc1cf1ba20c0df72f991f67c", 0x80}], 0x9, &(0x7f0000000ac0)=[{0xa0, 0x107, 0x5, "97451ea5d318dcb248450d1ed8400388bdbb03c782f44e17fec5d12444a8fab3c145c633a852f109af27897c81518be37d89b7db3fb6ce274afa6c519ea0eaddcf8b7aa5719b9921938825995c3a18a235b26dde67b1ca887815253ba75c1e6585166e3cab83b47563b11d0d8d85dc1e97c3235dd1483cc8b3e7aa083243d5ba45a514002c88b1fa30e27bfad3ec010d"}, {0x88, 0x3a, 0x9, "8a5dd2c963e2ede98c1938c3d5b21efb2cb1415208b0e2e11cbf0695beb4989dea807a48cd5656db2ca51fc243e2fe23885e436484ba5263c28a908163a25b57b1e527f714d1c4391c85249f7f5afb0092521d8ab9bdea50ae540f9c37ea3afa9a5d4748031e0772c608d056eaf979b0967e626efffeb410"}, {0xe8, 0x117, 0x4, "8966960cfb7fcf0cf73766bda8b5f3f051ae52a154d22d5c5e62c77e4f9b85156b6d09b1bdc51633938e4350f1983fd266e972d6b245a5f0f67f00bc516c0bcf0aaf8dfdcf76b2e14c4cd65fabfd4e61ca4708da0fa97e60f1631d611787c16bc4818a9948e645c67ba9759ac02624fcc27429b7e2702a8fed103f63aaa2df1f3163afca4b10f8bcb7e3397283032f8a137ab5759850bf13afc3d07755526e40a267e36dabc5faaad7d4855a9b7eabd1a5be525844d6c62bf1077e7cc74ac42fcb0e8d4d4085d9095a53cb238201e75b5e0b"}], 0x210}, 0x20000084) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @empty, @private}, &(0x7f0000000e00)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x94, r6, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x811}, 0x1) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x84, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70bc3ca2e6b4227631144aa71a34ca89df356c3c580c8a176d72415c67509c4d"}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8050) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000001240)=""/4096) 21:05:51 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x80, {{0x2, 0x4e20, @multicast2}}}, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x2f, @empty, 0x4e24, 0x3, 'fo\x00', 0x0, 0x7, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x0, 0x401, 0x6aae, 0x2}}, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x7e, [0x0, 0x0, 0x1, 0x200, 0xe793, 0x2], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/126}, &(0x7f0000000280)=0x78) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000300)={0x5, {{0x2, 0x4e23, @private=0xa010102}}}, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000003c0)={0x8, {{0x2, 0x4e22, @loopback}}}, 0x88) time(&(0x7f0000000480)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x2, 0x7f, "71ccb5", 0x5a, 0x40}) r2 = socket$inet(0x2, 0x5, 0x2) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000500)=""/13, &(0x7f0000000540)=0xd) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x49c0, 0x0) r4 = eventfd2(0xffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000005c0)=r4, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000600)={0x3, 0x2, 0x400}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000640)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x9, 0xfffffffffffffffa, 0x2ccc, 0x3, 0x9]}, &(0x7f00000006c0)=0x78) socket$inet(0x2, 0xa, 0x101) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000700)=""/79, &(0x7f0000000780)=0x4f) 21:05:51 executing program 6: r0 = semget$private(0x0, 0x4, 0x10) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/210) r1 = semget$private(0x0, 0x0, 0x164) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000100)=""/4096) semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000001100)=0xff) semtimedop(r1, &(0x7f0000001140)=[{0x3, 0xcbe4}, {0x1, 0x1}], 0x2, &(0x7f0000001180)={0x77359400}) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000011c0)=""/4096) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f00000021c0)=""/243) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000022c0)=[0xfff9, 0x0]) semtimedop(0x0, &(0x7f0000002300)=[{0x3, 0x7}, {0x1, 0x3, 0x1000}, {0xecc5480cdcf6104c, 0x4, 0x1000}], 0x3, &(0x7f0000002340)={0x77359400}) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000002380)=""/103) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000002400)={0x4, 0x1b, 0xd, 0x4, 0x3, 0x7fffffff, 0x3, 0x22, 0xffffffffffffffff}) r2 = syz_open_dev$rtc(&(0x7f0000002440), 0x4, 0x80000) ioctl$RTC_WIE_ON(r2, 0x700f) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000002480)=[0x1, 0xf, 0x7fff, 0xfe00, 0xeb, 0x8d, 0x2]) r3 = semget(0x2, 0x2, 0x602) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f00000024c0)=""/188) getgroups(0x3, &(0x7f0000002580)=[0x0, 0xee00, 0xee01]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000025c0)={{0x2, 0xee01, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x6}, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2}) semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000002640)=""/104) 21:05:51 executing program 7: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/38) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd, 0x1ff, 0x0, 0x401, 0x2}, 0x5) syz_io_uring_setup(0x2222, &(0x7f00000000c0)={0x0, 0x74db, 0x2, 0x0, 0x74}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x10001, 0x22bf, 0x9, 0xfffffffffffffffc, 0xfe6, 0x6b3]}, &(0x7f0000000240)=0x78) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000, 0x10000, &(0x7f0000001280)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000012c0)={0x6, 0x1, 0x8000, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001340)) r1 = socket$inet(0x2, 0x4, 0x8) connect(r1, &(0x7f0000001380)=@hci={0x1f, 0x3}, 0x80) recvfrom$packet(r0, &(0x7f0000001400)=""/244, 0xf4, 0x1, &(0x7f0000001500)={0x11, 0x1a, 0x0, 0x1, 0x3, 0x6, @random="8a7d48459345"}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000001540)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001580)={0x0, @multicast1, @multicast2}, &(0x7f00000015c0)=0xc) r3 = socket$inet(0x2, 0x8000e, 0xff) bind$inet(r3, &(0x7f0000001600)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001640)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x8, 0x8, 0x80, 0x1ff]}, &(0x7f00000016c0)=0x78) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001700)={@remote, @rand_addr=0x64010100, @loopback}, 0xc) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000001780)={0x0, @vsock={0x28, 0x0, 0xffffffff, @host}, @tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x3}}, @sco={0x1f, @none}, 0x6, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001740)='geneve1\x00', 0x8, 0x473c, 0xffc1}) [ 93.127187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.128588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.132520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.140027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.143073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.144168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.178938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.180496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.181582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.193182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.195433] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.197638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.259371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.261947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.263378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.265524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.268543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.272491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.273465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.274632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.278758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.281062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.306749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.308751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.309156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.311755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.315422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.321476] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.325663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.327454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.331348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.332331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.333412] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.335448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.336986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.337941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.339594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.345719] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.345779] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.349484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.350449] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.355636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.358922] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.360290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.365577] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.369492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.371458] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.374527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.215440] Bluetooth: hci0: command tx timeout [ 95.279385] Bluetooth: hci1: command tx timeout [ 95.342442] Bluetooth: hci2: command tx timeout [ 95.406665] Bluetooth: hci7: command tx timeout [ 95.408116] Bluetooth: hci3: command tx timeout [ 95.408130] Bluetooth: hci5: command tx timeout [ 95.409628] Bluetooth: hci4: command tx timeout [ 95.470335] Bluetooth: hci6: command tx timeout [ 97.262418] Bluetooth: hci0: command tx timeout [ 97.326285] Bluetooth: hci1: command tx timeout [ 97.390848] Bluetooth: hci2: command tx timeout [ 97.456286] Bluetooth: hci4: command tx timeout [ 97.458031] Bluetooth: hci3: command tx timeout [ 97.459291] Bluetooth: hci5: command tx timeout [ 97.460456] Bluetooth: hci7: command tx timeout [ 97.518309] Bluetooth: hci6: command tx timeout [ 99.310549] Bluetooth: hci0: command tx timeout [ 99.374284] Bluetooth: hci1: command tx timeout [ 99.439250] Bluetooth: hci2: command tx timeout [ 99.502517] Bluetooth: hci7: command tx timeout [ 99.503024] Bluetooth: hci3: command tx timeout [ 99.504078] Bluetooth: hci4: command tx timeout [ 99.504583] Bluetooth: hci5: command tx timeout [ 99.566464] Bluetooth: hci6: command tx timeout [ 101.358443] Bluetooth: hci0: command tx timeout [ 101.424352] Bluetooth: hci1: command tx timeout [ 101.488283] Bluetooth: hci2: command tx timeout [ 101.550339] Bluetooth: hci4: command tx timeout [ 101.550830] Bluetooth: hci5: command tx timeout [ 101.551161] Bluetooth: hci3: command tx timeout [ 101.551958] Bluetooth: hci7: command tx timeout [ 101.614457] Bluetooth: hci6: command tx timeout [ 158.112272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.124297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.125926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.134888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.137163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.138703] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.139499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.139852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.141761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.159299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.175957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.179424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.210141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.211036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.217821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.223426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.227709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.232491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.244700] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.247271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.250123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.252165] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.253156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.255037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.392766] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.396310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.397575] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.400461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.403627] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.404673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.424718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.426910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.443417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.445063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.447856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.449477] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.451603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.457021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.459747] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.462308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.497530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.503466] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.523847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.530729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.530776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.538083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.546474] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.557468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.176248] Bluetooth: hci0: command tx timeout [ 160.238346] Bluetooth: hci1: command tx timeout [ 160.310229] Bluetooth: hci3: command tx timeout [ 160.366271] Bluetooth: hci2: command tx timeout [ 160.494312] Bluetooth: hci5: command tx timeout [ 160.558285] Bluetooth: hci7: command tx timeout [ 160.559870] Bluetooth: hci6: command tx timeout [ 160.687351] Bluetooth: hci4: command tx timeout [ 162.222265] Bluetooth: hci0: command tx timeout [ 162.287266] Bluetooth: hci1: command tx timeout [ 162.350267] Bluetooth: hci3: command tx timeout [ 162.416232] Bluetooth: hci2: command tx timeout [ 162.544119] Bluetooth: hci5: command tx timeout [ 162.606309] Bluetooth: hci7: command tx timeout [ 162.606395] Bluetooth: hci6: command tx timeout [ 162.734441] Bluetooth: hci4: command tx timeout [ 164.270335] Bluetooth: hci0: command tx timeout [ 164.334365] Bluetooth: hci1: command tx timeout [ 164.399231] Bluetooth: hci3: command tx timeout [ 164.462305] Bluetooth: hci2: command tx timeout [ 164.590398] Bluetooth: hci5: command tx timeout [ 164.654310] Bluetooth: hci7: command tx timeout [ 164.654395] Bluetooth: hci6: command tx timeout [ 164.783389] Bluetooth: hci4: command tx timeout [ 166.319440] Bluetooth: hci0: command tx timeout [ 166.382327] Bluetooth: hci1: command tx timeout [ 166.449228] Bluetooth: hci3: command tx timeout [ 166.510284] Bluetooth: hci2: command tx timeout [ 166.640280] Bluetooth: hci5: command tx timeout [ 166.702312] Bluetooth: hci6: command tx timeout [ 166.703346] Bluetooth: hci7: command tx timeout [ 166.831427] Bluetooth: hci4: command tx timeout [ 220.511033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.521850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.535019] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.539107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.544577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.562890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.604115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.607703] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.608870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.612921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.618774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.622772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.625947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.632607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.644853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.663937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.671447] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.676078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.708515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.712450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.728453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.741783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.746957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.749342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.755443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.757100] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.765441] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.772367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.777430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.779585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.784558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.792765] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.794937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.797534] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.799986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.803473] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.804450] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.806736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.828151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.835915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.838386] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.843431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.845499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.852472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.872822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.879661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.892083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.893840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.574418] Bluetooth: hci0: command tx timeout [ 222.702284] Bluetooth: hci1: command tx timeout [ 222.766293] Bluetooth: hci2: command tx timeout [ 222.830263] Bluetooth: hci4: command tx timeout [ 222.895294] Bluetooth: hci7: command tx timeout [ 222.958360] Bluetooth: hci3: command tx timeout [ 222.959089] Bluetooth: hci5: command tx timeout [ 222.959947] Bluetooth: hci6: command tx timeout [ 224.623074] Bluetooth: hci0: command tx timeout [ 224.750495] Bluetooth: hci1: command tx timeout [ 224.815397] Bluetooth: hci2: command tx timeout [ 224.878452] Bluetooth: hci4: command tx timeout [ 224.943244] Bluetooth: hci7: command tx timeout [ 225.006268] Bluetooth: hci6: command tx timeout [ 225.006308] Bluetooth: hci5: command tx timeout [ 225.007575] Bluetooth: hci3: command tx timeout [ 226.670297] Bluetooth: hci0: command tx timeout [ 226.798391] Bluetooth: hci1: command tx timeout [ 226.862254] Bluetooth: hci2: command tx timeout [ 226.927322] Bluetooth: hci4: command tx timeout [ 226.990278] Bluetooth: hci7: command tx timeout [ 227.054733] Bluetooth: hci5: command tx timeout [ 227.055018] Bluetooth: hci3: command tx timeout [ 227.055698] Bluetooth: hci6: command tx timeout [ 228.718306] Bluetooth: hci0: command tx timeout [ 228.846256] Bluetooth: hci1: command tx timeout [ 228.910252] Bluetooth: hci2: command tx timeout [ 228.974309] Bluetooth: hci4: command tx timeout [ 229.040250] Bluetooth: hci7: command tx timeout [ 229.102445] Bluetooth: hci5: command tx timeout [ 229.103651] Bluetooth: hci3: command tx timeout [ 229.104113] Bluetooth: hci6: command tx timeout [ 282.966992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.968646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.970936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.971425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.972265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.972554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.974793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.976602] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.978534] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.981914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.992274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.993946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.075450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.079417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.082387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.086123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.102041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.104456] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.108403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.110502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.113353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.122613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.131137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 283.137765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.144660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.151518] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.155240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.167544] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.172441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.203825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.207389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.210661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.214377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.216431] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.218642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.219496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.234342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.238614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.240572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.243684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.246021] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.248497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.272461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.287465] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.304948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.307380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.313107] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.314738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.038345] Bluetooth: hci0: command tx timeout [ 285.040552] Bluetooth: hci1: command tx timeout [ 285.166291] Bluetooth: hci2: command tx timeout [ 285.230400] Bluetooth: hci3: command tx timeout [ 285.359221] Bluetooth: hci5: command tx timeout [ 285.360946] Bluetooth: hci6: command tx timeout [ 285.362551] Bluetooth: hci4: command tx timeout [ 285.422360] Bluetooth: hci7: command tx timeout [ 287.086438] Bluetooth: hci0: command tx timeout [ 287.088031] Bluetooth: hci1: command tx timeout [ 287.214289] Bluetooth: hci2: command tx timeout [ 287.278589] Bluetooth: hci3: command tx timeout [ 287.406347] Bluetooth: hci6: command tx timeout [ 287.407855] Bluetooth: hci4: command tx timeout [ 287.407923] Bluetooth: hci5: command tx timeout [ 287.472196] Bluetooth: hci7: command tx timeout [ 289.134338] Bluetooth: hci0: command tx timeout [ 289.136243] Bluetooth: hci1: command tx timeout [ 289.262236] Bluetooth: hci2: command tx timeout [ 289.326232] Bluetooth: hci3: command tx timeout [ 289.455206] Bluetooth: hci5: command tx timeout [ 289.455245] Bluetooth: hci4: command tx timeout [ 289.456519] Bluetooth: hci6: command tx timeout [ 289.518374] Bluetooth: hci7: command tx timeout [ 291.183254] Bluetooth: hci1: command tx timeout [ 291.183363] Bluetooth: hci0: command tx timeout [ 291.310273] Bluetooth: hci2: command tx timeout [ 291.374333] Bluetooth: hci3: command tx timeout [ 291.502300] Bluetooth: hci4: command tx timeout [ 291.502333] Bluetooth: hci6: command tx timeout [ 291.503661] Bluetooth: hci5: command tx timeout [ 291.566452] Bluetooth: hci7: command tx timeout [ 345.151371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.158272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.162018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.166684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.172334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.181782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.347650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.353399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.358401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.361529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.363242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.364558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.400941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.406869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.419410] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.438397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.440077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.442533] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.533069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.538524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.551556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.560434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.566590] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.572401] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.603902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.613723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.635924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.653485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.662960] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.674405] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.036765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.038717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.044513] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.052381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.053178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.054394] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.056994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.058791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.069113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.072007] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 346.073004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.077393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.082485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.095427] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 346.131416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.131524] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.136583] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.145460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.248221] Bluetooth: hci0: command tx timeout [ 347.374394] Bluetooth: hci1: command tx timeout [ 347.502282] Bluetooth: hci2: command tx timeout [ 347.694309] Bluetooth: hci3: command tx timeout [ 348.078288] Bluetooth: hci4: command tx timeout [ 348.142361] Bluetooth: hci6: command tx timeout [ 348.206237] Bluetooth: hci5: command tx timeout [ 348.207720] Bluetooth: hci7: command tx timeout [ 349.294779] Bluetooth: hci0: command tx timeout [ 349.422266] Bluetooth: hci1: command tx timeout [ 349.553190] Bluetooth: hci2: command tx timeout [ 349.743388] Bluetooth: hci3: command tx timeout [ 350.128222] Bluetooth: hci4: command tx timeout [ 350.197192] Bluetooth: hci6: command tx timeout [ 350.254444] Bluetooth: hci5: command tx timeout [ 350.254500] Bluetooth: hci7: command tx timeout [ 351.343629] Bluetooth: hci0: command tx timeout [ 351.470289] Bluetooth: hci1: command tx timeout [ 351.598215] Bluetooth: hci2: command tx timeout [ 351.792240] Bluetooth: hci3: command tx timeout [ 352.174229] Bluetooth: hci4: command tx timeout [ 352.238266] Bluetooth: hci6: command tx timeout [ 352.302208] Bluetooth: hci5: command tx timeout [ 352.303530] Bluetooth: hci7: command tx timeout [ 353.390342] Bluetooth: hci0: command tx timeout [ 353.518366] Bluetooth: hci1: command tx timeout [ 353.646268] Bluetooth: hci2: command tx timeout [ 353.841249] Bluetooth: hci3: command tx timeout [ 354.222253] Bluetooth: hci4: command tx timeout [ 354.286285] Bluetooth: hci6: command tx timeout [ 354.350201] Bluetooth: hci7: command tx timeout [ 354.351297] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 21:11:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000004 RCX=ffffffff847c5905 RDX=ffff88800e671b80 RSI=0000000000000003 RDI=0000000000000005 RBP=ffffffff852ca200 RSP=ffff888022dcf978 R8 =0000000000000000 R9 =ffff88800e6725b8 R10=0000000000000001 R11=ffff88802c7204a8 R12=0000000000000001 R13=0000000000000005 R14=0000000000000004 R15=ffff888022dcfc70 RIP=ffffffff8151dd37 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f18f15cc4a1 CR3=000000002e35e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff81a9d611 RDX=000000000000a9d6 RSI=000000000000a9d6 RDI=ffffffff86c51090 RBP=ffff88800ef66ef0 RSP=ffff88800ef66e28 R8 =0000000000000000 R9 =ffff88800ef66ed8 R10=000000000003c001 R11=000000000001eba3 R12=ffff88800ef66ef8 R13=ffff88800ef66ee0 R14=ffff88800ef66ed9 R15=ffff88800ef66e98 RIP=ffffffff81149230 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556533f4d080 CR3=0000000033b9c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000