Warning: Permanently added '[localhost]:56960' (ECDSA) to the list of known hosts. 2024/11/08 07:58:50 fuzzer started 2024/11/08 07:58:50 dialing manager at localhost:46317 syzkaller login: [ 62.516376] cgroup: Unknown subsys name 'net' [ 62.596514] cgroup: Unknown subsys name 'cpuset' [ 62.666311] cgroup: Unknown subsys name 'rlimit' 2024/11/08 07:59:08 syscalls: 208 2024/11/08 07:59:08 code coverage: enabled 2024/11/08 07:59:08 comparison tracing: enabled 2024/11/08 07:59:08 extra coverage: enabled 2024/11/08 07:59:08 setuid sandbox: enabled 2024/11/08 07:59:08 namespace sandbox: enabled 2024/11/08 07:59:08 Android sandbox: enabled 2024/11/08 07:59:08 fault injection: enabled 2024/11/08 07:59:08 leak checking: enabled 2024/11/08 07:59:08 net packet injection: enabled 2024/11/08 07:59:08 net device setup: enabled 2024/11/08 07:59:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/08 07:59:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/08 07:59:08 USB emulation: enabled 2024/11/08 07:59:08 hci packet injection: enabled 2024/11/08 07:59:08 wifi device emulation: enabled 2024/11/08 07:59:08 802.15.4 emulation: enabled 2024/11/08 07:59:08 fetching corpus: 0, signal 0/0 (executing program) 2024/11/08 07:59:09 starting 8 fuzzer processes 07:59:09 executing program 0: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0x100000001, 0x20, 0x8, 0x20, 0x3}, 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x333640, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000100)=""/55, &(0x7f0000000140)=0x37) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) read$eventfd(r0, &(0x7f0000000200), 0x8) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000240)=""/23, &(0x7f0000000280)=0x17) r1 = socket$inet(0x2, 0x4, 0x3) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xd1, 0xb2b, 0x44, @remote, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x700, 0x7800, 0x0, 0x3}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000540)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'sit0\x00', r2, 0x2f, 0x9, 0x20, 0x5, 0x4, @private1, @mcast2, 0x718, 0x40, 0xff, 0xff}}) r3 = syz_open_dev$vcsa(&(0x7f0000000640), 0xfb, 0x101000) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) 07:59:09 executing program 1: mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) move_pages(0x0, 0x2, &(0x7f0000001080)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f00000010c0)=[0x1ff], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) move_pages(0x0, 0x2, &(0x7f0000001140)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000001180)=[0x5, 0x0, 0x80000000, 0x7], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ffc000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002240)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/50, 0x32, 0x0, &(0x7f0000001240)=""/4096, 0x1000}, &(0x7f0000002280)=0x40) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x11, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000023c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000022c0)=""/68, 0x44, 0x1, &(0x7f0000002340)=""/75, 0x4b}, &(0x7f0000002400)=0x40) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000025c0)={&(0x7f00000024c0)={0xfc, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xae3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = syz_io_uring_setup(0xea6, &(0x7f0000002640)={0x0, 0xaa7e, 0x0, 0x2, 0x209, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000026c0), &(0x7f0000002700)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mbind(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, &(0x7f0000002740)=0xfa1b, 0x2, 0x7) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff2000/0x2000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0xb, &(0x7f0000ffa000/0x3000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002840)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002780), 0x0, 0x1, &(0x7f00000027c0)=""/92, 0x5c}, &(0x7f0000002880)=0x40) 07:59:09 executing program 2: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x758}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x8000, 0x101000) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x4080) r4 = syz_open_dev$vcsa(&(0x7f0000000440), 0xeab, 0x40400) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4a21140e}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000000780)={{0x3, 0x2, 0x200000, 0x7, 0xfffffffc, 0x1}, 0x184, [0x200, 0x2, 0xc1e, 0xffff0001, 0xfffff276, 0x10000, 0x7f, 0x7, 0x5, 0x3, 0x3, 0x4, 0x8, 0x5, 0x8, 0x0, 0x0, 0x9, 0x8, 0x2ec, 0x58c01ddb, 0x7, 0xf47, 0x9, 0x0, 0x2, 0x7, 0x2, 0x3, 0x1f, 0x52, 0x3, 0x7fff, 0x20, 0x2, 0x8, 0x3, 0x2, 0x5, 0x7ff, 0x37, 0x8, 0x900000, 0xce, 0x5, 0x4, 0x7a, 0x6bf8, 0x100, 0x1000, 0x3ff, 0x8, 0x2, 0x6, 0x80000000, 0x3, 0xcaa5, 0x1, 0x1, 0x0, 0x4e, 0x1, 0x6, 0x33, 0x1, 0x7, 0x7, 0x786, 0x20, 0x5, 0x40, 0x3, 0x4, 0x0, 0x8, 0xc0, 0x401, 0x20, 0x100, 0x6, 0x5e9, 0x20000, 0x45d, 0x6a, 0x5, 0xffffffff, 0x4, 0xaa4, 0x7, 0x7f, 0x2, 0x0, 0x4, 0xffff4544, 0x8, 0x7, 0x10001, 0x3ff, 0x7, 0x80, 0x7, 0x200, 0x4, 0x4, 0x1, 0xac0, 0x1f, 0x7, 0x1, 0x7fff, 0xfffffffb, 0x1c6b, 0x100, 0x4, 0x1ff, 0x3, 0x2, 0x1, 0x1, 0x8, 0x98, 0x7, 0xfffffffd, 0x1, 0xff, 0x80000000, 0x6dc9df98, 0x7ff, 0x508, 0x5, 0x8, 0x4, 0x3, 0x9988, 0x1, 0xff, 0x4, 0x20, 0x6, 0x693, 0x1f, 0x8, 0x3f, 0x3, 0x2e08, 0x800, 0x8000, 0x8b0, 0x5, 0x3f, 0xfffffff9, 0x5bd, 0x7ff, 0xffffffff, 0x6, 0x8001, 0x2, 0xff, 0x200, 0x7e, 0x13, 0x4, 0x1, 0x4, 0x4, 0x0, 0x7, 0xfa02, 0x1ff, 0x100, 0x3, 0x1, 0x0, 0x7ff, 0x3, 0x8, 0x2ea, 0xea, 0x401, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x1, 0x2, 0x3ff, 0x5, 0x3, 0x7f, 0x200, 0x1, 0x5, 0x8, 0x0, 0x7, 0x1, 0x4, 0x5ad, 0x3, 0x5, 0x1, 0x2, 0x5, 0x7, 0xe, 0x0, 0x3, 0x5, 0x1, 0x65, 0x80000000, 0xa2, 0x5, 0xffffffff, 0x803c, 0x401, 0x9, 0x7, 0x7, 0x5eea, 0x400, 0x4, 0xc26, 0x4, 0x101, 0x7ff, 0x9, 0x8, 0x0, 0x4, 0x6, 0x7, 0x1, 0xfffffffd, 0xfd, 0x1, 0x874, 0x8, 0x0, 0xff, 0x1, 0x6, 0x3, 0x4, 0x1ff, 0xffff0000, 0x3, 0x7, 0x0, 0xffff, 0x3c3, 0x1, 0x5, 0x8, 0x1, 0x47f0, 0xffffffff, 0x2, 0x7f, 0x8, 0x7, 0x1, 0x7, 0x7, 0x20, 0x6, 0x5, 0xf1, 0xf25b, 0x3, 0x4, 0x3, 0x1, 0x5, 0x9, 0xbc67, 0x4, 0x7ff, 0x20, 0x81, 0x10000, 0x5, 0xfffff801, 0x5, 0xbd, 0x7bb, 0x4, 0x800, 0x4, 0x8, 0x2, 0x0, 0x401, 0x3, 0x8000, 0x10000, 0x80000001, 0x5, 0x9, 0x1, 0x2, 0x0, 0x40, 0x8b64, 0x0, 0x998, 0xffffffff, 0x0, 0xffff5df0, 0x7fe0000, 0xb92, 0xfffffffc, 0x401, 0x80000001, 0x4, 0x6, 0xfc8, 0x1, 0x8001, 0x80, 0x9, 0x7f, 0x1, 0xfffffffc, 0x200, 0x9, 0x9, 0x9, 0x8000, 0xad9, 0x2, 0x9, 0x80, 0x8, 0x2997, 0x7, 0x7, 0x5, 0xa36, 0x245400, 0x8b, 0x3, 0x6, 0x80, 0x8, 0x200, 0x1000, 0x0, 0x7ff, 0x6, 0x2, 0x8ee, 0x7ff, 0x3, 0x6, 0x1, 0x5, 0x6, 0x2, 0x7fff, 0x10001, 0xf94, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1, 0x5, 0x6, 0xb33, 0x800, 0xda, 0x6, 0x0, 0x1000, 0x8001, 0xc5, 0x2, 0x9, 0x4, 0xc9ad, 0x7, 0x6, 0x1, 0xf5a, 0x81, 0x8, 0x3, 0xff, 0x41dd1451, 0x8, 0x63, 0x200, 0x8, 0x2, 0x2, 0x5, 0x1, 0x81, 0x2, 0x6a, 0x1, 0x7, 0x8, 0x5, 0x9, 0x7, 0xfffffff9, 0xf95c3f2, 0x1fe00, 0x56ae, 0x7f, 0x7f, 0x401, 0x8, 0x7a, 0x5, 0x4, 0x81, 0x0, 0x903b85d, 0x7fba, 0x7ff, 0x8, 0x1ecf, 0x9, 0x118, 0x2, 0x200, 0x2, 0x1, 0x9, 0x3, 0x1, 0x4, 0x1e, 0x9bd, 0x40, 0x2, 0x8, 0x9, 0x401, 0x2, 0x4, 0x4, 0xfe, 0x1, 0x0, 0x0, 0xffff3aad, 0x10001, 0x0, 0x0, 0x75db, 0x1f, 0x7fffffff, 0x1a02, 0xde6b, 0x5, 0x5, 0x9, 0x7, 0x7, 0x1, 0x4, 0x8, 0x4f64, 0x0, 0x3, 0x3ff, 0x81, 0x81, 0x2, 0x80000001, 0x400, 0x3, 0x5, 0x0, 0x7, 0xa729, 0x0, 0x7f, 0x4, 0x4a, 0x6, 0x5, 0x22, 0xde2b, 0x8, 0x45, 0xcb, 0x6, 0x6, 0x6, 0xffff8001, 0x40, 0x9, 0x8, 0xc8e, 0xffff, 0x1, 0x8000, 0x8001, 0x400, 0x7, 0x7, 0x1, 0xfffffff7, 0x3, 0x4, 0x6, 0xcf29, 0x7, 0xfff, 0x40, 0x10000, 0x8, 0xffff0001, 0x4, 0x2, 0x5, 0x5, 0x2, 0xfd, 0x6, 0x7ff, 0x200, 0x3, 0x6, 0x4, 0x6, 0x6, 0x1, 0xfb, 0x4, 0x3f, 0xfffffc01, 0x101, 0xfffffffa, 0x5, 0x5, 0xff, 0x2, 0x4, 0x0, 0x8, 0x4, 0x0, 0x0, 0x28d, 0x5, 0x10001, 0xa42, 0x8, 0x8000, 0x0, 0x180000, 0x9, 0x101, 0x6, 0x7, 0xb00, 0x80000000, 0xa4bd, 0x1, 0x40, 0x9, 0xc760, 0x1, 0x80000001, 0x1000, 0xffffffff, 0x5831, 0x80, 0x3ff, 0x40000, 0x7, 0x2e, 0x1ff, 0x8, 0xabf, 0x1, 0x26, 0x6, 0x0, 0xd9e, 0x6, 0x2, 0x100, 0x2, 0x8, 0x5, 0x8001, 0x4, 0x9, 0x10000, 0x1ff, 0x80000001, 0x2, 0x80000000, 0x7fffffff, 0x30ab, 0x4, 0x34, 0x8, 0x1f, 0x9, 0xc9, 0x8, 0x1, 0x1, 0xceb, 0x5, 0x0, 0x401, 0xff, 0x7ff, 0x800, 0x4, 0x0, 0x10001, 0x7, 0x80, 0x8, 0xbb85, 0x4, 0x101, 0x800, 0xffff7fff, 0x1f, 0x5, 0x10000, 0x9, 0x9, 0x8, 0x1, 0xf8c, 0x81, 0x0, 0x9, 0x4, 0x200, 0x400, 0xfffffffb, 0x10000, 0x1ff, 0xffff8000, 0xffffffff, 0x4, 0x31, 0x6, 0x4c, 0xfffffffa, 0x5, 0xf94a, 0x5, 0x2, 0xcd, 0x800, 0x7, 0x5, 0x3ff, 0x3ff, 0x400, 0x10001, 0xffffffff, 0x0, 0x401, 0xc22, 0x9, 0x91f, 0x2, 0x7, 0x7fff, 0xbf59487, 0x8, 0xfffffffe, 0xaf, 0x20, 0xd1e, 0xc783, 0x6, 0xfff, 0x2, 0x3ff, 0x2, 0x7, 0xdf, 0x8, 0x80000001, 0x16, 0xc48d, 0x5, 0x200, 0x0, 0x3, 0x5, 0x5, 0x3265, 0x1, 0x6, 0x3, 0x7, 0xf4, 0x81, 0x3, 0x0, 0x39a, 0x1f, 0x2, 0xe000, 0x200, 0x7, 0x4, 0x2, 0x1, 0x81, 0x7, 0x67, 0xe7a, 0x40, 0xff, 0x1, 0x9, 0xfffffffa, 0xf966, 0x7, 0x5, 0x3, 0x3, 0x9, 0x3f, 0x6, 0x1, 0xfffffff9, 0xff, 0x6, 0x41, 0xfffff62c, 0x8001, 0x6, 0x800, 0x3, 0x1d63, 0x8, 0x100, 0x0, 0x6, 0x15, 0x5, 0x96, 0x7fff, 0x7, 0x7, 0xfffffffb, 0x7, 0xff, 0x3, 0xe0, 0x3, 0x2, 0x6, 0x30, 0x7, 0x7, 0x8, 0xfffffffd, 0x0, 0x3f, 0xfff, 0x10000, 0x6, 0x4, 0x7f, 0x0, 0x4, 0x1, 0x100, 0x7f, 0x5, 0x42, 0xffffff12, 0x14, 0x5, 0x1e, 0x2, 0x1f, 0x7, 0x9, 0x1, 0x1, 0x7, 0x47, 0x2, 0x3, 0x0, 0x100, 0x0, 0x3, 0x6, 0x9, 0x5, 0xaa22, 0x6, 0x1000, 0x0, 0x7ff, 0x117efecb, 0xffffff35, 0x8, 0x3, 0x9, 0x8, 0x4, 0x20, 0x7, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x3e5, 0x5, 0xffffcb2c, 0x9, 0x81, 0xa477, 0x3f, 0x3, 0xffffffff, 0xffffffff, 0x8001, 0x1f, 0x8, 0x9, 0x9, 0x2, 0x7a6b, 0x7, 0x8e5, 0x6, 0x8000, 0x7, 0xc69, 0xde8d, 0x1, 0x4, 0x3ff, 0x0, 0x6, 0x20, 0xfff, 0xff, 0x8000, 0x6e, 0x2, 0x4, 0x4, 0x5, 0x4, 0x6a01, 0xffffffff, 0x4, 0xfffffffb, 0x9, 0x3, 0x3, 0x6, 0x4, 0x1, 0x2de05fab, 0x3, 0x1, 0x34a68801, 0x7ce2, 0x5, 0x3, 0x1, 0x7, 0x80000001, 0x8, 0x8, 0x2, 0x7, 0x3f, 0x6, 0x1f, 0xffff, 0x8, 0x4, 0x1f, 0x1, 0x2, 0x0, 0x21f5, 0x1, 0x7f, 0x1ff, 0xfffffff8, 0x0, 0x0, 0x792a, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7, 0xffff, 0x7, 0x7, 0x1f, 0x1, 0xfff, 0x6, 0x0, 0x7fffffff, 0x80000001, 0x7, 0xfff, 0xfe3, 0x2, 0x2, 0x6, 0xffffffa8, 0x4, 0x0, 0x10000000, 0x8, 0x1000, 0x46a, 0x6, 0x0, 0x1, 0x8, 0x4, 0x8, 0x3, 0x7, 0x2, 0x7ff, 0x400000, 0x3, 0x98db, 0x3, 0x400, 0x10000, 0x3, 0xffffc8a5, 0x4, 0x0, 0x800, 0x3ff, 0x400, 0x1c, 0x26, 0x401, 0xbbf, 0x5, 0x120b, 0x3f, 0x9, 0xb0d5, 0x3, 0x2, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3, 0x10000, 0x0, 0x1, 0x9, 0x13e0bf52, 0xea4, 0x2c3, 0x9, 0x39b6, 0x8, 0x8, 0xffffffff, 0xffffffff, 0x9, 0x1, 0x0, 0x7ff, 0x3, 0x5c, 0x8663, 0xf5, 0x1, 0x100, 0x0, 0x200, 0x7, 0x3, 0x401, 0x4, 0x2, 0x7, 0x8, 0x8, 0x8, 0x100, 0x5, 0x8001, 0x8, 0xffff, 0x4, 0x80000000, 0x80000000, 0x400, 0x1, 0x80000001, 0x5, 0x4, 0x80000000, 0x7e3, 0x7]}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) r7 = syz_open_dev$sg(&(0x7f00000018c0), 0x5, 0x8000) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r5, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x10000, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4040001) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) [ 81.050562] audit: type=1400 audit(1731052749.853:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:59:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004080) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4020850}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x400d4}, 0x8000) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000700), 0x7f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000740)=r3, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x10000, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x69}}, [""]}, 0x24}}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r6) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x20008000) 07:59:09 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, &(0x7f0000001240)=0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000012c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001280), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x92, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001700)=0x4, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r2, 0x9, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x841) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001900)={'syztnl0\x00', &(0x7f0000001880)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0xa, 0x22, @local, @mcast1, 0x8000, 0x40, 0x7, 0x1}}) r4 = socket$inet(0x2, 0x802, 0xc3a) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001980)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001940), {[{{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffffff, 0xffffff00, 0x7, 0x3, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x5, 0x8c5e, 0x8d, 0x3f, 0x8, 0x2, 'team_slave_1\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x29}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xa24, 0x9, 0x2}}}, {{@arp={@loopback, @remote, 0xffffffff, 0xffffffff, 0x10, 0x0, {@empty, {[0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x3, 0x6, 0x2, 0x1f, 0x6, 'vxcan1\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0xc6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000001dc0)={0x11, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e23, 0x0, 'rr\x00', 0x5, 0x5, 0x35}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001e80)={'syztnl2\x00', &(0x7f0000001e00)={'syztnl0\x00', r3, 0x29, 0x3, 0x80, 0x3, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x20, 0x26}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001f40)={'syztnl1\x00', &(0x7f0000001ec0)={'syztnl0\x00', r5, 0x2f, 0x2, 0x9, 0x0, 0x40, @private0, @mcast2, 0x918a9276a2f9b063, 0x78e2, 0x5, 0xfffffc01}}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000001f80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000001fc0), 0x6a2080, 0x0) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000002000), &(0x7f0000002040)=0x4) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 07:59:09 executing program 4: r0 = syz_io_uring_setup(0x54e0, &(0x7f0000000000)={0x0, 0x92f1, 0x7f4c31b8609281a6, 0x3, 0xbe}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) write$nbd(0xffffffffffffffff, &(0x7f0000000100)={0x67446698, 0x1, 0x1, 0x4, 0x1, "c001bc8ba9ffa2057a8d9b471941acc1b21b36012a4b"}, 0x26) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x20, 0x8}, 0x48) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000200)={0x80, 0x7, 0x80000001}) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x3, 0x8001) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', r3, 0x2f, 0x6, 0x8, 0x5, 0x43, @empty, @private0, 0x7800, 0x8000, 0xffff8001}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8040, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x309000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000005c0)={r6, 0x1, r4, 0xffff, 0x80000}) r7 = socket$inet(0x2, 0x800, 0x7fffffff) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000680)={0x6, &(0x7f0000000640)=[{0xfffc, 0x0, 0x5, 0x8000}, {0x80, 0x2, 0x8, 0x5}, {0x2, 0x3f, 0x3, 0x6f46e705}, {0x9, 0xee, 0x1, 0x1}, {0x8001, 0x73, 0xf0, 0x1}, {0x0, 0x7, 0x7, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000006c0)) 07:59:09 executing program 6: r0 = eventfd2(0xfffffffa, 0xbc02dbde3ad1d736) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040)=r0, 0x1) eventfd2(0x5, 0x80400) r1 = io_uring_setup(0x70f8, &(0x7f0000000080)={0x0, 0xeb85, 0x1, 0x3, 0x364}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/21, 0x15, 0x0, &(0x7f0000000140)=""/111, 0x6f}, &(0x7f0000000200)=0x40) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = eventfd2(0x6, 0x801) r4 = eventfd2(0x1ff, 0x100802) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000002c0)=r4, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x20000000000, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000e10000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c60000/0x4000)=nil, &(0x7f00008c7000/0x3000)=nil, &(0x7f0000abc000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a60000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ae8000/0x3000)=nil, &(0x7f0000fdb000/0x1000)=nil, &(0x7f00000003c0)="896bcd9b813b9ff7dff88fac4b4645e01033f54830dc11ce5bbb4281f485465f48a216048b15946cb680c95c7312de1c192099f9adafcf032069eb0a793cbf0760eae77e359096d0e00113d644295ffd7c9d30186e5a3a1f10a9aa6d72b3b8d4628b4537f64deb6a39117f2035ac17a23806e0754b70b7a345d5fd866efd612fc7fbb54cef1ed29dc2984c81b6dd5f315cdfaa13", 0x94, r3}, 0x68) socket$inet(0x2, 0x1, 0x2) mmap$binder(&(0x7f0000fa8000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9277) r5 = io_uring_setup(0x39c8, &(0x7f0000000500)={0x0, 0x1b41, 0x4, 0x3, 0x27c, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000600)={@empty, @empty}, 0xc) 07:59:09 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80, 0xa00) bind$bt_sco(r0, &(0x7f0000000040), 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0)=r0, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x149040, 0x0) openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20048801}, 0x91) r5 = io_uring_setup(0x6700, &(0x7f00000003c0)={0x0, 0x834c, 0x20, 0x2, 0xd3}) syz_io_uring_setup(0x6658, &(0x7f0000000440)={0x0, 0xa9cf, 0x4, 0x1, 0x346, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_open_dev$loop(&(0x7f0000000540), 0xffff, 0x40000) openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'sit0\x00', r1, 0x2f, 0xac, 0x3f, 0x1, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x1, 0x13}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000680)={'NETMAP\x00'}, &(0x7f00000006c0)=0x1e) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x2, 0xe0c2) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x400001, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) openat$cgroup_pressure(r8, &(0x7f00000007c0)='memory.pressure\x00', 0x2, 0x0) [ 82.467615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.468888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.471436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.492803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.496874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.498818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.499759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.521487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.524989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.532002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.539487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.540758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.567700] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.569172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.575932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.577143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.579758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.581171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.582167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.583541] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.584062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.584366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.585631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.588518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.590575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.594023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.595046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.596347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.602092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.612233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.618947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.620575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.627386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.628326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.629943] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.631110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.635750] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.643042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.651335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.658333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.663907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.665815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.667173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.680532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.681968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.684811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.686458] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.687471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.528157] Bluetooth: hci0: command tx timeout [ 84.592223] Bluetooth: hci1: command tx timeout [ 84.656417] Bluetooth: hci6: command tx timeout [ 84.658221] Bluetooth: hci3: command tx timeout [ 84.721193] Bluetooth: hci2: command tx timeout [ 84.791189] Bluetooth: hci7: command tx timeout [ 84.792936] Bluetooth: hci5: command tx timeout [ 84.807624] Bluetooth: hci4: command tx timeout [ 86.577829] Bluetooth: hci0: command tx timeout [ 86.642634] Bluetooth: hci1: command tx timeout [ 86.705135] Bluetooth: hci3: command tx timeout [ 86.705627] Bluetooth: hci6: command tx timeout [ 86.768820] Bluetooth: hci2: command tx timeout [ 86.831912] Bluetooth: hci5: command tx timeout [ 86.833425] Bluetooth: hci7: command tx timeout [ 86.833485] Bluetooth: hci4: command tx timeout [ 88.623838] Bluetooth: hci0: command tx timeout [ 88.687873] Bluetooth: hci1: command tx timeout [ 88.753848] Bluetooth: hci6: command tx timeout [ 88.755513] Bluetooth: hci3: command tx timeout [ 88.816858] Bluetooth: hci2: command tx timeout [ 88.879887] Bluetooth: hci5: command tx timeout [ 88.880420] Bluetooth: hci4: command tx timeout [ 88.881189] Bluetooth: hci7: command tx timeout [ 90.673033] Bluetooth: hci0: command tx timeout [ 90.741566] Bluetooth: hci1: command tx timeout [ 90.799914] Bluetooth: hci6: command tx timeout [ 90.799981] Bluetooth: hci3: command tx timeout [ 90.865098] Bluetooth: hci2: command tx timeout [ 90.927954] Bluetooth: hci4: command tx timeout [ 90.928876] Bluetooth: hci7: command tx timeout [ 90.929500] Bluetooth: hci5: command tx timeout [ 146.146428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.154437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.156320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.159229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.161272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.162334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.163492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.166041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.167014] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.167425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.167988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.173022] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.176025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.178434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.181033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.184254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.186921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.188704] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.193949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.200806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.201738] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.202654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.205513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.207990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.210230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.212084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.213139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.214782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.216290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.217164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.217864] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.221009] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.225809] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.226867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.235416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.237779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.239038] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.240136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.245183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.248576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.260572] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.262523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.268004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.270954] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.271550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.277706] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.280245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.282408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.271904] Bluetooth: hci3: command tx timeout [ 148.335939] Bluetooth: hci5: command tx timeout [ 148.336656] Bluetooth: hci7: command tx timeout [ 148.337303] Bluetooth: hci4: command tx timeout [ 148.338036] Bluetooth: hci1: command tx timeout [ 148.338596] Bluetooth: hci2: command tx timeout [ 148.339945] Bluetooth: hci0: command tx timeout [ 148.399950] Bluetooth: hci6: command tx timeout [ 150.321078] Bluetooth: hci3: command tx timeout [ 150.384114] Bluetooth: hci2: command tx timeout [ 150.385553] Bluetooth: hci0: command tx timeout [ 150.387480] Bluetooth: hci4: command tx timeout [ 150.388542] Bluetooth: hci1: command tx timeout [ 150.388599] Bluetooth: hci7: command tx timeout [ 150.389812] Bluetooth: hci5: command tx timeout [ 150.448005] Bluetooth: hci6: command tx timeout [ 152.368907] Bluetooth: hci3: command tx timeout [ 152.433809] Bluetooth: hci7: command tx timeout [ 152.434913] Bluetooth: hci1: command tx timeout [ 152.435975] Bluetooth: hci0: command tx timeout [ 152.437413] Bluetooth: hci5: command tx timeout [ 152.438496] Bluetooth: hci4: command tx timeout [ 152.439579] Bluetooth: hci2: command tx timeout [ 152.495835] Bluetooth: hci6: command tx timeout [ 154.415979] Bluetooth: hci3: command tx timeout [ 154.480071] Bluetooth: hci2: command tx timeout [ 154.480556] Bluetooth: hci5: command tx timeout [ 154.481244] Bluetooth: hci1: command tx timeout [ 154.481699] Bluetooth: hci4: command tx timeout [ 154.482726] Bluetooth: hci0: command tx timeout [ 154.483229] Bluetooth: hci7: command tx timeout [ 154.544096] Bluetooth: hci6: command tx timeout [ 207.418009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.420670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.422897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.426483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.428952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.431183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.488293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.495010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.497714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.507854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.511212] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.513824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.556059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.570006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.572708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.579048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.582026] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.584370] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.620220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.624217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.627057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.651069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.655544] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.657684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.676940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.679485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.681624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.685417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.688355] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.690363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.758314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.803222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.806127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.860198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.884471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.887130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.889406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.892098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.894193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.896849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.903518] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.904053] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.908105] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.910320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.996063] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.023426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.039005] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.054699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.457127] Bluetooth: hci0: command tx timeout [ 209.584859] Bluetooth: hci1: command tx timeout [ 209.647993] Bluetooth: hci2: command tx timeout [ 209.711856] Bluetooth: hci3: command tx timeout [ 209.712523] Bluetooth: hci4: command tx timeout [ 209.968872] Bluetooth: hci5: command tx timeout [ 209.969812] Bluetooth: hci7: command tx timeout [ 210.159899] Bluetooth: hci6: command tx timeout [ 211.503885] Bluetooth: hci0: command tx timeout [ 211.633803] Bluetooth: hci1: command tx timeout [ 211.696546] Bluetooth: hci2: command tx timeout [ 211.761067] Bluetooth: hci3: command tx timeout [ 211.761572] Bluetooth: hci4: command tx timeout [ 212.015942] Bluetooth: hci7: command tx timeout [ 212.016470] Bluetooth: hci5: command tx timeout [ 212.207856] Bluetooth: hci6: command tx timeout [ 213.552805] Bluetooth: hci0: command tx timeout [ 213.679878] Bluetooth: hci1: command tx timeout [ 213.744064] Bluetooth: hci2: command tx timeout [ 213.810776] Bluetooth: hci4: command tx timeout [ 213.811252] Bluetooth: hci3: command tx timeout [ 214.065799] Bluetooth: hci5: command tx timeout [ 214.066329] Bluetooth: hci7: command tx timeout [ 214.265864] Bluetooth: hci6: command tx timeout [ 215.600813] Bluetooth: hci0: command tx timeout [ 215.728885] Bluetooth: hci1: command tx timeout [ 215.795800] Bluetooth: hci2: command tx timeout [ 215.855924] Bluetooth: hci3: command tx timeout [ 215.856409] Bluetooth: hci4: command tx timeout [ 216.113219] Bluetooth: hci7: command tx timeout [ 216.113813] Bluetooth: hci5: command tx timeout [ 216.303927] Bluetooth: hci6: command tx timeout [ 269.997036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.999505] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.005585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.008395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.009874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.011331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.015638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.019534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.022235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.023962] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.024940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.026252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.033381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.036571] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.044939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.058992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.065001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.067512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.075324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.078692] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.082620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.085672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.087435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.088673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.141324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.144512] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.148059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.149168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.150201] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.156440] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.158036] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.159101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.164996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.168443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.171183] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.174635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.221246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.239341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.244062] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.257037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.257096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.258991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.264421] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.265835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.270037] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.271232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.271285] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.273009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.111906] Bluetooth: hci2: command tx timeout [ 272.113124] Bluetooth: hci1: command tx timeout [ 272.113166] Bluetooth: hci3: command tx timeout [ 272.114937] Bluetooth: hci0: command tx timeout [ 272.241799] Bluetooth: hci4: command tx timeout [ 272.243620] Bluetooth: hci5: command tx timeout [ 272.367963] Bluetooth: hci7: command tx timeout [ 272.369612] Bluetooth: hci6: command tx timeout [ 274.160049] Bluetooth: hci3: command tx timeout [ 274.160684] Bluetooth: hci1: command tx timeout [ 274.162424] Bluetooth: hci2: command tx timeout [ 274.162973] Bluetooth: hci0: command tx timeout [ 274.288981] Bluetooth: hci5: command tx timeout [ 274.289524] Bluetooth: hci4: command tx timeout [ 274.415850] Bluetooth: hci7: command tx timeout [ 274.416383] Bluetooth: hci6: command tx timeout [ 276.207891] Bluetooth: hci0: command tx timeout [ 276.208427] Bluetooth: hci3: command tx timeout [ 276.209374] Bluetooth: hci2: command tx timeout [ 276.210439] Bluetooth: hci1: command tx timeout [ 276.335844] Bluetooth: hci5: command tx timeout [ 276.336087] Bluetooth: hci4: command tx timeout [ 276.464082] Bluetooth: hci7: command tx timeout [ 276.464628] Bluetooth: hci6: command tx timeout [ 278.257154] Bluetooth: hci2: command tx timeout [ 278.257704] Bluetooth: hci1: command tx timeout [ 278.258785] Bluetooth: hci3: command tx timeout [ 278.259204] Bluetooth: hci0: command tx timeout [ 278.383806] Bluetooth: hci4: command tx timeout [ 278.384337] Bluetooth: hci5: command tx timeout [ 278.511875] Bluetooth: hci7: command tx timeout [ 278.512429] Bluetooth: hci6: command tx timeout [ 332.039235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.041934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.044631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.048568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.050390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.053877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.110354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.113970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.140348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.144977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.147052] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.148285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.171519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.177308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.178385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.181820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.183385] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.188327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.227686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.233616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.239079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.247965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.252276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.253470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.291338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.297103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.301156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.308117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.321961] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.323284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.452013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.472147] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.478050] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.481888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.484982] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.487577] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.490998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.510008] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.518338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.525760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.575011] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.578349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.589972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.602823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.608073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.650014] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.664886] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.686289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.127831] Bluetooth: hci0: command tx timeout [ 334.193768] Bluetooth: hci1: command tx timeout [ 334.255849] Bluetooth: hci2: command tx timeout [ 334.322015] Bluetooth: hci3: command tx timeout [ 334.384951] Bluetooth: hci4: command tx timeout [ 334.575903] Bluetooth: hci7: command tx timeout [ 334.639798] Bluetooth: hci5: command tx timeout [ 334.768831] Bluetooth: hci6: command tx timeout [ 336.175806] Bluetooth: hci0: command tx timeout [ 336.239905] Bluetooth: hci1: command tx timeout [ 336.303867] Bluetooth: hci2: command tx timeout [ 336.369572] Bluetooth: hci3: command tx timeout [ 336.432743] Bluetooth: hci4: command tx timeout [ 336.623914] Bluetooth: hci7: command tx timeout [ 336.687992] Bluetooth: hci5: command tx timeout [ 336.816446] Bluetooth: hci6: command tx timeout [ 338.223820] Bluetooth: hci0: command tx timeout [ 338.288938] Bluetooth: hci1: command tx timeout [ 338.351778] Bluetooth: hci2: command tx timeout [ 338.415937] Bluetooth: hci3: command tx timeout [ 338.479865] Bluetooth: hci4: command tx timeout [ 338.672257] Bluetooth: hci7: command tx timeout [ 338.735806] Bluetooth: hci5: command tx timeout [ 338.863784] Bluetooth: hci6: command tx timeout [ 340.272089] Bluetooth: hci0: command tx timeout [ 340.335848] Bluetooth: hci1: command tx timeout [ 340.399797] Bluetooth: hci2: command tx timeout [ 340.463801] Bluetooth: hci3: command tx timeout [ 340.527804] Bluetooth: hci4: command tx timeout [ 340.719866] Bluetooth: hci7: command tx timeout [ 340.783887] Bluetooth: hci5: command tx timeout [ 340.911790] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 08:04:19 Registers: info registers vcpu 0 RAX=ffffffff87ee2f28 RBX=0000000000000016 RCX=ffffffff812fc914 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff87ee2f20 RBP=ffff888016965280 RSP=ffff88803007fc20 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=ffffffff87ee2f27 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888016965cc0 RIP=ffffffff818baf6a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f67916f6540 CR3=0000000025e3e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81848f70 RCX=0000000000000001 RDX=1ffff11004886e7c RSI=ffff888024437580 RDI=ffffffff81848f70 RBP=ffff8880244373e0 RSP=ffff888024437358 R8 =0000000000000001 R9 =ffff8880244373c8 R10=000000000003c001 R11=0000000000024dd3 R12=ffff888024437450 R13=0000000000000000 R14=ffff88800f605280 R15=0000000000000cc0 RIP=ffffffff8121f1ef RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f82930368 CR3=0000000035a86000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000