Warning: Permanently added '[localhost]:38211' (ECDSA) to the list of known hosts. 2024/11/12 21:39:59 fuzzer started 2024/11/12 21:40:00 dialing manager at localhost:46317 syzkaller login: [ 70.064645] cgroup: Unknown subsys name 'net' [ 70.135654] cgroup: Unknown subsys name 'cpuset' [ 70.147524] cgroup: Unknown subsys name 'rlimit' 2024/11/12 21:40:17 syscalls: 206 2024/11/12 21:40:17 code coverage: enabled 2024/11/12 21:40:17 comparison tracing: enabled 2024/11/12 21:40:17 extra coverage: enabled 2024/11/12 21:40:17 setuid sandbox: enabled 2024/11/12 21:40:17 namespace sandbox: enabled 2024/11/12 21:40:17 Android sandbox: enabled 2024/11/12 21:40:17 fault injection: enabled 2024/11/12 21:40:17 leak checking: enabled 2024/11/12 21:40:17 net packet injection: enabled 2024/11/12 21:40:17 net device setup: enabled 2024/11/12 21:40:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 21:40:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 21:40:17 USB emulation: enabled 2024/11/12 21:40:17 hci packet injection: enabled 2024/11/12 21:40:17 wifi device emulation: enabled 2024/11/12 21:40:17 802.15.4 emulation: enabled 2024/11/12 21:40:17 fetching corpus: 0, signal 0/0 (executing program) 2024/11/12 21:40:19 starting 8 fuzzer processes 21:40:19 executing program 0: ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/1) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x20, 0x4, 0xffff, 0x800, 0x8, 0x5}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/245) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000180)={@local, @broadcast, @empty}, &(0x7f00000001c0)=0xc) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000200)=""/95) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x10c9b0000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x1a}, &(0x7f0000000340)=""/236, 0xec, &(0x7f0000000440)=""/68, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58) r1 = accept4$inet(r0, &(0x7f0000000580)={0x2, 0x0, @multicast2}, &(0x7f00000005c0)=0x10, 0x80000) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @remote}, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x4, 0x3}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x200100, 0x0) r3 = socket$inet(0x2, 0x800, 0x10001) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={0x458, 0x3f4, 0x300, 0x70bd28, 0x25dfdbfb, {0x5, 0x2, 0x3d, [0x4, 0x6fa, 0x7fffffff, 0x2, 0x7, 0x9, 0x1, 0x9, 0x1b, 0x3, 0xfffffc00, 0x8, 0x0, 0x0, 0x3a5, 0x6, 0x20, 0x1, 0x300000, 0x1, 0x2, 0x401, 0x5, 0x10000, 0x906, 0x2, 0x6, 0x0, 0x1, 0x608, 0x200, 0x8001, 0x4, 0x1000, 0x7, 0x7, 0x7fff, 0x8, 0xcc, 0x7, 0x2, 0x6, 0x7, 0x8, 0x1, 0x6, 0x0, 0x2, 0x6ce73ec4, 0x8d37, 0x3f, 0x3, 0x200, 0x0, 0x1ff, 0x80, 0x401, 0x71d, 0x5, 0x3, 0xfffffff9, 0x80, 0x5c, 0x4], [0x3, 0x8, 0x3, 0x9, 0x5, 0x200, 0x4, 0x2, 0x81, 0x8, 0xffff0000, 0x48, 0x1f, 0x7, 0x4, 0x0, 0x2, 0x6ccfecee, 0xe1, 0xffffff7f, 0x2, 0x2, 0x1, 0x3, 0x4d, 0xc752, 0x6, 0x3, 0x8000, 0x0, 0x7fffffff, 0x9, 0x6, 0x40, 0x8001, 0x3b, 0x7fff, 0x1, 0x0, 0x6, 0x3ff, 0x8000, 0x1f, 0x0, 0x462a, 0x40, 0x18, 0xfff, 0x1000, 0x101, 0x7f, 0x9, 0x3f, 0xfffffff8, 0x7, 0x1000, 0xfffffff9, 0x8000, 0x2, 0x70, 0x0, 0x0, 0xfffff000, 0xffffffff], [0x6, 0x7, 0x401, 0xe6, 0x5e5aadd, 0x7, 0x9, 0x0, 0x18, 0x3, 0x3, 0x8, 0x8, 0x80, 0x6, 0xff, 0xffff, 0x8, 0x9cc, 0x9a, 0x9, 0xc1e, 0x2, 0x9, 0x401, 0x6, 0x800, 0x7, 0x2, 0x1f, 0x2, 0x8, 0x6, 0x8, 0x2, 0x9c, 0x2, 0x1, 0xfffffffd, 0xdc, 0x2afe, 0x3ff, 0x0, 0x8e, 0x7, 0x2, 0xffff8000, 0x6, 0x401, 0x400, 0x80000001, 0x97e, 0x1, 0x7f, 0x10001, 0x7f, 0x70d, 0x84e, 0x6171, 0x3, 0x9, 0x2, 0x7, 0x7], [0x1, 0x8000, 0xffffffff, 0x7ff, 0x7a0, 0x5, 0x5, 0x0, 0xf476, 0x2, 0x40, 0x1, 0x2, 0x5, 0x401, 0x101, 0x100, 0x4d8, 0xffffffff, 0x6, 0x9, 0x400, 0x2, 0xffff, 0x6, 0x5, 0x80, 0x81, 0x2, 0x0, 0xffffffff, 0x7f7, 0x800, 0x80000001, 0x4, 0x0, 0x8542, 0x7ff, 0x8000, 0x8, 0x0, 0x7f, 0xe754, 0x1daf6833, 0x80000000, 0x1, 0xd2, 0x1ff, 0x9, 0x5, 0x6, 0x10000, 0x0, 0x6, 0x6, 0x1, 0x8, 0xd13, 0x8000, 0x3, 0x2, 0x852f, 0x3, 0x8], 0x36, ['/dev/hwrng\x00', '@-{\x00', '/dev/hwrng\x00', '/\x00', '!}^\x00', '/dev/hwrng\x00', '/dev/hwrng\x00']}, [""]}, 0x458}, 0x1, 0x0, 0x0, 0x40}, 0x446009141792204b) syz_open_dev$loop(0xfffffffffffffffd, 0xd48d, 0x100) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffc0, 0x0, 0x3, 0xb, 0x10, "ae0b53845c8b24cb6c473e24d9a75f9f5c236787dcda441cc728f09c65745ddc6e61799aaef5cd4af46c81d64505daa669e2bbafb3850d829598a2226f4dedcb", "6d402e8099c23f28e916d19342b78c4fc22e66cd6a51172daa4241dc1017df12f53242b549699e524b32c1fd4f60e08c4cea65793af0204bd05c661b5fc9d7cb", "1abdf9e5401bdbba84987efb44f234e9dbdfc9b5d87563d73abc2f1ef87bd657", [0x401, 0x100]}) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000e00)=""/213, &(0x7f0000000f00)=0xd5) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f40), 0x802, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x18, 0x453, 0x502, 0x70bd26, 0x25dfdbfd, "0c3fbf7743db", ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20080044}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001080)={@rand_addr, @local}, &(0x7f00000010c0)=0xc) 21:40:19 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd=r0, 0x5, 0x1, 0x80000001, 0x10, 0x1, {0x1}}, 0x5) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x63a3914426c7e092) r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x1000) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000180)=0x6, 0x7fffffff, 0x7) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x50, 0xffffffffffffffff, 0x2236) r2 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0xa1, 0x21, 0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0xfffffffffffffffa}, 0x2000, 0xb945, 0x8, 0x4, 0xb1c8, 0x4, 0x48bd, 0x0, 0x81, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000340)={0x2, 'macvlan1\x00', 0x1}, 0x18) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000380)={0xfffffffa, 0x4, 0x5, 0x4, 0x8, 0x1, 0x8}) clock_gettime(0x0, &(0x7f0000003e40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000540)=""/128, 0x80}, {&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000600)=""/114, 0x72}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/13, 0xd}, {&(0x7f0000001780)=""/210, 0xd2}, {&(0x7f0000001880)=""/43, 0x2b}, {&(0x7f00000018c0)=""/37, 0x25}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001a80)=""/237, 0xed}, {&(0x7f0000001b80)=""/188, 0xbc}, {&(0x7f0000001c40)=""/57, 0x39}, {&(0x7f0000001c80)=""/2, 0x2}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/120, 0x78}, {&(0x7f0000001d80)=""/188, 0xbc}, {&(0x7f0000001e40)=""/168, 0xa8}, {&(0x7f0000001f00)=""/242, 0xf2}], 0x9, &(0x7f00000020c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000002140), 0x6e, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/60, 0x3c}, {&(0x7f0000002200)=""/234, 0xea}, {&(0x7f0000002300)=""/137, 0x89}], 0x3, &(0x7f0000002400)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000024c0)=""/26, 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002540)=""/194, 0xc2}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/175, 0xaf}, {&(0x7f0000003700)=""/29, 0x1d}], 0x4, &(0x7f0000003780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003800)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003880)=""/46, 0x2e}, {&(0x7f00000038c0)=""/201, 0xc9}, {&(0x7f00000039c0)=""/24, 0x18}], 0x3}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003ac0)=""/194, 0xc2}], 0x1, &(0x7f0000003c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x8, 0x0, &(0x7f0000003e80)={r3, r4+10000000}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003ec0), 0x84240, 0x0) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$vcsu(&(0x7f0000003f00), 0x7ff, 0x183040) 21:40:19 executing program 2: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x3b, 0x10, 0x15, 0xf, 0x0, 0xff, 0x6, 0x138, 0x1}) ioctl$RTC_AIE_OFF(r0, 0x7002) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x400000) ioctl$RTC_PIE_ON(r2, 0x7005) r3 = clone3(&(0x7f0000000540)={0x44020080, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/7, 0x7, &(0x7f0000000440)=""/162, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = clone3(&(0x7f0000000600)={0x4020000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x38}, &(0x7f0000000180)=""/236, 0xec, &(0x7f0000000280)=""/147, &(0x7f00000005c0)=[0x0, r3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r4}}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0), 0x10500, 0x0) ioctl$RTC_AIE_OFF(r7, 0x7002) r8 = getpgrp(r6) getpgid(r8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000880)=0x0) r10 = perf_event_open(&(0x7f00000008c0)={0x4, 0x80, 0x9, 0x6, 0x3, 0xe, 0x0, 0x1, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x5, @perf_config_ext={0x800, 0x7}, 0x2482, 0x3, 0x65, 0x6, 0x3ff, 0x0, 0xfff8, 0x0, 0xffffffff, 0x0, 0xfffffffffffffbff}, r5, 0xf, r1, 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x5, 0x3, 0x4, 0x3, 0x0, 0x9, 0x88045, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x6}, 0x40a8, 0x4, 0xfff, 0x8, 0x2, 0x2, 0x86, 0x0, 0xe20, 0x0, 0x5}, r9, 0x3, r10, 0x8) clone3(&(0x7f0000000c00)={0x1000000, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0), {0xe}, &(0x7f0000000a00)=""/208, 0xd0, &(0x7f0000000b00)=""/77, &(0x7f0000000b80)=[r3, 0x0], 0x2}, 0x58) 21:40:19 executing program 3: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x204fd21488e39c10, 0xffffffffffffffff, 0x8000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1519}}, 0x86) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r3 = shmget(0x1, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) r4 = syz_io_uring_setup(0x24e6, &(0x7f00000001c0)={0x0, 0x9590, 0x8, 0x0, 0x186, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x88, 0x0, &(0x7f0000000480)=[@acquire={0x40046305, 0x1}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/208, 0xd0, 0x1, 0x40}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}}, @enter_looper, @free_buffer, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}], 0x36, 0x0, &(0x7f0000000540)="4744f08534de70feb583a15b53bb88f43bdce5ebaf8444d5ef90b856677d6fa7250a7dbd38cf44203087500213577ac06004440d92e4"}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000005c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_dev$vcsu(&(0x7f0000000600), 0x480000000000, 0x12180) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x453, 0x200, 0x70bd2d, 0x25dfdbff, "ee22366252827fd1d6536cde84b64ad8ab54edffa348d3f84ce790da0fe47e59291b94ee6aad6789c338771ee3858d5a4b51baf61c8c7ad0253ac0a0789d3592f542c1c587a0ade26eb15bc5c49155733fd667a359f0339ef400011a6a831d41e952ac0ce5f9e08acec29a1ff202706d1b05b6e25869d3fb69c25778463f", ["", "", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x400c082) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f00000007c0)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000800)=0xfe51, 0x0, 0x1) r6 = accept$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev}, &(0x7f0000000880)=0x10) accept(r6, &(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000940)=0x80) shmat(r3, &(0x7f0000ffb000/0x1000)=nil, 0x3000) fcntl$getown(r4, 0x9) r7 = syz_open_dev$vcsu(&(0x7f0000000980), 0x6c, 0x200000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000bc0)={0x4c, 0x0, &(0x7f0000000a80)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x3, 0x2, 0x4}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}, 0x1000}], 0xa6, 0x0, &(0x7f0000000b00)="29fe972fa29d54d82c292f0d6618cd341fbf504f1e45809984653f1acefe1f1b5c5cfc64c88499214d1275b082ea27017d6f785ac8247905fdb994047ac92da4c0623e4acda5ad1eccdb3d5843416da08ae31d38021236b6280e9aeb7ff53eeff4bc0608161323ad0e1c518b9b20a8d833aa99ff484deafccc02ce9a84a6753deba93a921c3f0f5c6e2a89af39dc0747ebc22534b548fd834610502532f6b5f47906e539d4ff"}) 21:40:19 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x214000, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x3f3, 0x100, 0x70bd2c, 0x25dfdbfe, {0x4, 0x2, 0x3e, [0x1, 0x9a69, 0x5, 0x31ee, 0x80, 0x7, 0x3, 0x7, 0x6, 0xfff, 0x8000, 0x3f, 0x4, 0x1ff, 0x1f00, 0x8, 0xf15e, 0x0, 0x3, 0xff, 0xfffffffc, 0x80000000, 0x80, 0x5, 0x4, 0xfffffffc, 0x3, 0x6, 0x40, 0xfffffffc, 0x480000, 0x3, 0x400, 0x6, 0x1e91f186, 0x6, 0x2, 0x3, 0x10000, 0x5, 0x1, 0x7, 0x0, 0x10001, 0x1, 0x4, 0x10000, 0xfffffffa, 0x5, 0xa0, 0x0, 0x0, 0xffd6, 0x4, 0x1, 0x1, 0x6, 0x2131, 0xffffffff, 0x4, 0x81, 0x100, 0x2, 0x8], [0x4, 0x348, 0x1, 0x10000, 0x5, 0x1, 0xe7, 0xd6b6, 0x0, 0x6ac, 0x7, 0x7fffffff, 0x8, 0x1000, 0x80, 0xffffffff, 0x3f, 0x8001, 0xead, 0x5, 0x6a, 0x6, 0x1f, 0x9f3f, 0x6a8, 0x9, 0x8, 0xfff, 0x7, 0x957, 0x5, 0x200, 0x3, 0x2800000, 0x1, 0x0, 0x4412b31b, 0x80, 0x80000000, 0xffffffff, 0x8, 0x8, 0x7, 0x1000, 0xfffffff8, 0x3, 0x7, 0x7e35, 0x5, 0x12fc, 0x0, 0x1, 0x1, 0xffffff80, 0x9, 0xe8, 0x5, 0x9, 0x5, 0x4861, 0x4, 0x2, 0x1, 0x6], [0x98d, 0x12000, 0x4, 0xffffffff, 0x800, 0x100, 0x5, 0x3, 0x2, 0x1, 0x5, 0xcf7, 0x4, 0x2, 0x4, 0x8000, 0x0, 0x9, 0xffff8001, 0xfff, 0x80000000, 0x401, 0x5, 0x1, 0x40, 0xfffffffd, 0x2, 0x2, 0x240, 0x4, 0x7, 0x9, 0x6, 0xb80, 0x80, 0x3, 0x7, 0x8, 0xfff, 0x8, 0x401, 0x6, 0x9, 0xff, 0x5, 0x8, 0x200, 0x80000001, 0x8, 0x4, 0xc7c, 0xffffffff, 0x5, 0x8640, 0x241, 0x5, 0x4, 0x3, 0x1, 0xfffffffa, 0x4a29e379, 0x40, 0x25c1ad98], [0x3ff, 0xcf54, 0x7, 0x4aa19fcc, 0x3f, 0x7, 0x0, 0x9, 0x3, 0x4, 0x0, 0x36, 0x9, 0x8, 0x9, 0x8, 0x80, 0x4, 0x8, 0x100, 0xff, 0x7, 0x7, 0x3f, 0xee7a, 0xffff, 0xffff, 0x3, 0xce80, 0xfffffffc, 0x1, 0x55c, 0x8, 0x7, 0x5, 0x4, 0x9, 0x8, 0x30, 0x1ff, 0x4, 0x296, 0x7, 0x1, 0x3ff, 0x0, 0x4, 0x4, 0x21a, 0x5, 0x1000, 0x2, 0x76f4, 0x8, 0x0, 0x8, 0xb6f, 0x7, 0x800, 0x3, 0x5, 0x8, 0x1ff], 0x13, ['\x00', '~]:+-( \x00', '$\x89#\x00', '\x00', '\x83*\x00', '|\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = accept$inet(r1, &(0x7f0000000540)={0x2, 0x0, @initdev}, &(0x7f0000000580)=0x10) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000005c0)=""/120, &(0x7f0000000640)=0x78) r3 = accept4$inet(r1, 0x0, &(0x7f0000000680), 0x800) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000006c0)={@dev, @broadcast, @private}, &(0x7f0000000700)=0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000840)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) r4 = socket$inet(0x2, 0x5, 0xfffffffb) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@local, @in6=@mcast1}}, {{@in6=@private1}, 0x0, @in6=@private2}}, &(0x7f00000009c0)=0xe8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) get_mempolicy(&(0x7f0000000a40), &(0x7f0000000a80), 0x5, &(0x7f0000ffc000/0x1000)=nil, 0x2) r5 = socket$inet(0x2, 0x4, 0x1) sendto$inet(r5, &(0x7f0000000ac0)="894ec40fba561f4729e4617e4d02aaa25b9876495b40998f8c6963b420ba9615eca2d4dcfaaf14807b81361fbaf13a805b5abcf58f4b7f9aa643f96879bc30eb0b74397e96811dac3e2249", 0x4b, 0x894, 0x0, 0x0) socketpair(0x1e, 0x5, 0xc19b, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000b80)={@multicast2, @broadcast, @rand_addr=0x64010101}, 0xc) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000bc0)=""/227, &(0x7f0000000cc0)=0xe3) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000d00)={@remote, @multicast2, @private}, &(0x7f0000000d40)=0xc) [ 88.698184] audit: type=1400 audit(1731447619.469:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:40:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x10001) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40460d1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}]}, 0x74}}, 0x8000) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20004011) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000110}, 0x40) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48050) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tpm_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8045}, 0x0) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000e80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a00)={0x420, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfb, {0x5, 0x2, 0x3b, [0x40, 0x3, 0x5, 0x5, 0x800, 0x1000, 0x401, 0x8001, 0x8, 0x3, 0x4, 0x40, 0x7, 0x77, 0x39, 0x6, 0xd, 0x401, 0x9, 0x5, 0x6501, 0x10001, 0x1ff, 0x400, 0x3, 0x1, 0x7, 0x0, 0x3ff, 0x2, 0xfffffffc, 0x2, 0x97, 0x7, 0x7, 0x9, 0x3, 0x6, 0xffff, 0x100, 0x2, 0x10819ae1, 0x742e, 0x1, 0x0, 0x3f, 0xfffffff9, 0x7, 0x8, 0x80000001, 0x81, 0x1ff, 0x2, 0x73, 0x6, 0x1, 0x20, 0x7f, 0x8, 0xac1, 0x401, 0x7ff, 0x9, 0x40000], [0x7, 0xfff, 0x1000, 0x6, 0x400, 0x3, 0x8000, 0x1ff, 0x0, 0x20, 0x2126, 0x80000000, 0x4, 0x9, 0x1f, 0xfffffffb, 0x0, 0xffffffff, 0x7fff, 0x7f, 0x2, 0x6, 0x9, 0xfffffeff, 0xfffffffb, 0x0, 0x2, 0x9, 0xffffffff, 0x0, 0x3, 0x5, 0xfffff001, 0x1ee331f6, 0x6, 0x2, 0x4, 0xc9, 0xffffff56, 0x10001, 0xa2, 0xd786, 0x80, 0x7, 0x8, 0x7fff, 0x8, 0x1, 0x8, 0x3, 0x6, 0xf6, 0xfff, 0x9, 0x3, 0x0, 0x3f, 0x5, 0x4, 0xb3f, 0x2, 0x9, 0x8, 0x6], [0x9, 0xbb44, 0x1, 0xffff85bc, 0x9, 0x401, 0x5, 0x6, 0x9, 0x7, 0x7f, 0x3, 0x8, 0x2, 0x9, 0x8, 0x6, 0x8, 0x1, 0x1, 0x101, 0x7fffffff, 0x1000, 0x7, 0xdbf, 0x7f, 0x6, 0xfffffff7, 0x8, 0x0, 0x7ff, 0x1, 0x18, 0x3, 0x9, 0x43e, 0x9, 0xa7000000, 0x100, 0xec, 0x80000001, 0x0, 0xff, 0x80000001, 0x0, 0x401, 0x7ff, 0x80000001, 0x4, 0x4, 0x400, 0x179b, 0x8000, 0x9, 0x4, 0x10000, 0x6, 0x2, 0x10000, 0x63, 0xffffffff, 0xffffffff, 0x3f, 0xfffffffd], [0x1, 0xfffffc00, 0x200, 0x5, 0x3, 0x3, 0x8, 0x4, 0x80, 0x4536, 0x6, 0xf9, 0x20, 0x5, 0x7ff, 0x4, 0x1f, 0x6, 0x400, 0x3, 0x800, 0x1, 0x800, 0x0, 0x9, 0x7f, 0x830, 0xffffffff, 0x4, 0x0, 0x5, 0x7, 0x7, 0x1, 0x5, 0x401, 0x3, 0x3f, 0x5, 0xfffffffb, 0x3, 0x3, 0x800, 0x9, 0xfff, 0x6, 0x1, 0x1, 0xd4f, 0x6, 0x2, 0x1, 0x1ff, 0xfffffeff, 0x200, 0x8, 0x80000000, 0x7f, 0x9, 0x9, 0xffff, 0x7, 0x40, 0x401]}, [""]}, 0x420}, 0x1, 0x0, 0x0, 0x80a}, 0x24008840) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x18000}, 0x1) r5 = pidfd_getfd(r3, r3, 0x0) sendmsg$AUDIT_SET(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbfc, {0x4, 0x1, 0x2, 0xffffffffffffffff, 0x64, 0x6, 0x8, 0x8d, 0x0, 0x68}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000400) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x68, r6, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}}, 0x4000000) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020880}, 0x4890) 21:40:19 executing program 6: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="989724ff53a8e5fa64abe5318a5281beb905369e57", 0x15}, {&(0x7f0000000100)="ccee52f8e40d2d409334089b0d4494ffd9448e6ccda39f1dc975e5a308a5c00a92007377f3fae22141693ca42b5c8c943087732c71bfb84f1b4c8a1d11cb8fd704a2ca8ca1cd9ecbd8b51fd33369ec3b05175c1f9b3b57f3d3972c67869cbafdda09067209303a8d9e24da1db8499573c05c9c75753c31fbd6079fc2b1c076518363932c3ce6f37d10102cfcf5627373c8033e471b5b4dba343984b1c370ab8b04a3ea1f02debd7eb96e4bd11e9a720f49bc046099e219d5716a83", 0xbb}, {&(0x7f00000001c0)="50b11f9843658c932725b55b6ff397c5c8350e11508ad329c921dd98da47f81f04114cc8d4320ed9d1f91400eae14b1abe4efcf59cf0b620ccb1bc8f3968c65391f471eb102896ffdee6c327131ce45d63b04edf4e8ded1b2fd9765e8f42f88e72b1c9c7f1f796d4d0090c30ba6875e2d5b031ed4529ca39a2044d1c5a02e83a4e72ba7903645f32ed312d005fe7ae4bb341abf5fa567759c76b25ce68a68ac356", 0xa1}], 0x3, &(0x7f00000002c0)=[{0xb0, 0x88, 0x3, "f8188a09f16c02a61206df9940771adcf9cae97d726bc6e37fa9c0d46ab263358b754abb7ca4bc7ca2035e5ced6c21495fb5707158252f7b4e9337e96fc259f2a8a6e4fa14a35cade6b5f1b3a44da74c9a46045228563c96189dc3c1941a03ca080c4807e4dbd0fc0567667e7302216da02512f533f175ef1f7a1e16468e68fe28ca24e5af458708ebf1035659631b099af005a55ee8c6d0f173f648176e5e"}], 0xb0}, 0x0, 0x8010}, 0x4) r3 = io_uring_setup(0x73d9, &(0x7f0000000400)={0x0, 0xe308, 0x4, 0x1, 0x339}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r3, 0x8000000) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000480)={0x3b, @rand_addr=0x64010100, 0x4e22, 0x1, 'fo\x00', 0x38, 0x2, 0x71}, 0x2c) syz_open_dev$evdev(&(0x7f00000004c0), 0x80, 0x305080) pidfd_getfd(r4, r0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@tipc, &(0x7f0000000580)=0x80) accept4$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x10, 0x80000) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000640)=""/97) syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x2, 0x414800) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000700)={0xffffffc1, 0x17, 0xc, 0x1f, 0x7, 0x0, 0x0, 0x5}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in=@remote, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) 21:40:19 executing program 7: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r0) pkey_alloc(0x0, 0x2) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x453, 0x20, 0x70bd27, 0x25dfdbfd, "9f3068fde56c530c68cae6d5c2c528a6e9ddba0fd5165cc10e271f5488602348e4032d6be8060c863c5b4f5e8be302f25274a759cd0c56238fdba553f91c46a28533ea49562c84ed7bca0fed808bc71368855878272145", ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc081}, 0x880) r2 = accept(0xffffffffffffffff, &(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000400)=0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000480)) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, r0) r3 = accept$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @initdev}, &(0x7f0000000500)=0x10) accept4$inet(r3, &(0x7f0000000540)={0x2, 0x0, @broadcast}, &(0x7f0000000580)=0x10, 0x80000) r4 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, r4) syz_io_uring_setup(0x1b03, &(0x7f00000005c0)={0x0, 0xb48a, 0x1, 0x2, 0x364}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000006c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14, 0x1}, 0x5) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000840)) [ 90.248733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.252220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.254055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.255204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.256764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.260284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.262290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.265427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.268507] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.270957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.275126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.276044] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.279357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.280844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.293551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.311249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.319905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.321245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.322740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.328555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.329732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.333226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.334095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.334942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.336309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.337389] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.338560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.339621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.340966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.345278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.353680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.374279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.378596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.381073] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.390828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.395322] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.397442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.409193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.427435] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.435169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.439226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.441188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.446457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.448946] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.450477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.773303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.821288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.825320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.340423] Bluetooth: hci2: command tx timeout [ 92.340425] Bluetooth: hci0: command tx timeout [ 92.403384] Bluetooth: hci3: command tx timeout [ 92.467139] Bluetooth: hci1: command tx timeout [ 92.467153] Bluetooth: hci7: command tx timeout [ 92.531148] Bluetooth: hci6: command tx timeout [ 92.595145] Bluetooth: hci5: command tx timeout [ 92.918402] Bluetooth: hci4: command tx timeout [ 94.387779] Bluetooth: hci0: command tx timeout [ 94.388132] Bluetooth: hci2: command tx timeout [ 94.451421] Bluetooth: hci3: command tx timeout [ 94.515543] Bluetooth: hci7: command tx timeout [ 94.515613] Bluetooth: hci1: command tx timeout [ 94.579543] Bluetooth: hci6: command tx timeout [ 94.654224] Bluetooth: hci5: command tx timeout [ 94.963102] Bluetooth: hci4: command tx timeout [ 96.435197] Bluetooth: hci0: command tx timeout [ 96.436217] Bluetooth: hci2: command tx timeout [ 96.499079] Bluetooth: hci3: command tx timeout [ 96.563097] Bluetooth: hci1: command tx timeout [ 96.564074] Bluetooth: hci7: command tx timeout [ 96.627118] Bluetooth: hci6: command tx timeout [ 96.691105] Bluetooth: hci5: command tx timeout [ 97.012120] Bluetooth: hci4: command tx timeout [ 98.483196] Bluetooth: hci2: command tx timeout [ 98.483738] Bluetooth: hci0: command tx timeout [ 98.547194] Bluetooth: hci3: command tx timeout [ 98.611215] Bluetooth: hci7: command tx timeout [ 98.611236] Bluetooth: hci1: command tx timeout [ 98.675084] Bluetooth: hci6: command tx timeout [ 98.739187] Bluetooth: hci5: command tx timeout [ 99.059148] Bluetooth: hci4: command tx timeout [ 153.345058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.346651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.347963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.352392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.354942] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.357245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.404926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.409654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.413427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.416293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.418579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.420361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.420378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.424381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.426473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.438908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.442291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.450545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.474957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.483387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.487303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.492637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.501448] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.504245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.529867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.531819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.533066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.537065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.540676] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.541956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.558645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.576646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.584286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.585056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.586197] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.591532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.598206] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.599447] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.616520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.620366] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.627596] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.629064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.630559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.637256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.639319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.665630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.669088] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.670834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.381176] Bluetooth: hci0: command tx timeout [ 155.508096] Bluetooth: hci1: command tx timeout [ 155.571192] Bluetooth: hci5: command tx timeout [ 155.572730] Bluetooth: hci4: command tx timeout [ 155.574534] Bluetooth: hci2: command tx timeout [ 155.700064] Bluetooth: hci7: command tx timeout [ 155.702279] Bluetooth: hci3: command tx timeout [ 155.702924] Bluetooth: hci6: command tx timeout [ 157.430036] Bluetooth: hci0: command tx timeout [ 157.555096] Bluetooth: hci1: command tx timeout [ 157.620028] Bluetooth: hci2: command tx timeout [ 157.620207] Bluetooth: hci4: command tx timeout [ 157.621311] Bluetooth: hci5: command tx timeout [ 157.749030] Bluetooth: hci6: command tx timeout [ 157.750553] Bluetooth: hci7: command tx timeout [ 157.750575] Bluetooth: hci3: command tx timeout [ 159.475822] Bluetooth: hci0: command tx timeout [ 159.603333] Bluetooth: hci1: command tx timeout [ 159.667280] Bluetooth: hci5: command tx timeout [ 159.668306] Bluetooth: hci2: command tx timeout [ 159.669035] Bluetooth: hci4: command tx timeout [ 159.797037] Bluetooth: hci6: command tx timeout [ 159.798042] Bluetooth: hci3: command tx timeout [ 159.798661] Bluetooth: hci7: command tx timeout [ 161.523077] Bluetooth: hci0: command tx timeout [ 161.651485] Bluetooth: hci1: command tx timeout [ 161.715113] Bluetooth: hci2: command tx timeout [ 161.716048] Bluetooth: hci4: command tx timeout [ 161.717056] Bluetooth: hci5: command tx timeout [ 161.844065] Bluetooth: hci3: command tx timeout [ 161.844094] Bluetooth: hci7: command tx timeout [ 161.845524] Bluetooth: hci6: command tx timeout [ 215.037902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.039522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.040944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.042236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.048761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.050920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.052627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.054418] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.062751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.078245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.080207] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.081290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.180840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.182210] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.186092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.187187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.188450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.189739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.196628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.199687] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.201806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.206651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.210629] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.212717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.310236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.315142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.320199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.323361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.341581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.343300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.346379] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.352546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.389194] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.391899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.400629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.405177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.405377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.409668] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.412179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.448212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.463543] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.470340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.509735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.516445] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.520381] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.549207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.567283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.568581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.076186] Bluetooth: hci0: command tx timeout [ 217.140131] Bluetooth: hci1: command tx timeout [ 217.268100] Bluetooth: hci2: command tx timeout [ 217.269212] Bluetooth: hci3: command tx timeout [ 217.459057] Bluetooth: hci4: command tx timeout [ 217.459906] Bluetooth: hci5: command tx timeout [ 217.589356] Bluetooth: hci6: command tx timeout [ 217.652129] Bluetooth: hci7: command tx timeout [ 219.124262] Bluetooth: hci0: command tx timeout [ 219.187168] Bluetooth: hci1: command tx timeout [ 219.315091] Bluetooth: hci2: command tx timeout [ 219.316580] Bluetooth: hci3: command tx timeout [ 219.507212] Bluetooth: hci5: command tx timeout [ 219.508793] Bluetooth: hci4: command tx timeout [ 219.636288] Bluetooth: hci6: command tx timeout [ 219.700999] Bluetooth: hci7: command tx timeout [ 221.172122] Bluetooth: hci0: command tx timeout [ 221.236076] Bluetooth: hci1: command tx timeout [ 221.363272] Bluetooth: hci2: command tx timeout [ 221.363829] Bluetooth: hci3: command tx timeout [ 221.555230] Bluetooth: hci5: command tx timeout [ 221.557040] Bluetooth: hci4: command tx timeout [ 221.684161] Bluetooth: hci6: command tx timeout [ 221.747194] Bluetooth: hci7: command tx timeout [ 223.220589] Bluetooth: hci0: command tx timeout [ 223.286127] Bluetooth: hci1: command tx timeout [ 223.411151] Bluetooth: hci3: command tx timeout [ 223.412667] Bluetooth: hci2: command tx timeout [ 223.604124] Bluetooth: hci4: command tx timeout [ 223.605755] Bluetooth: hci5: command tx timeout [ 223.732245] Bluetooth: hci6: command tx timeout [ 223.795047] Bluetooth: hci7: command tx timeout [ 277.519234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.522609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.526226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.533353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.534514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.537735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.538713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.540279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.543384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.550567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.553175] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.555195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.583709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.593529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.596639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.603226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.605988] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.608209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.636834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.642166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.649334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.651326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.655207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.657446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.671730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.672367] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.675647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.677707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.693061] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.697923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.700850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.707613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.709645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.712234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.713597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.720425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.723144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.749112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.754284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.760455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.765185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.771618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.772835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.778212] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.781371] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.783163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.784378] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.785497] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.603106] Bluetooth: hci0: command tx timeout [ 279.603210] Bluetooth: hci1: command tx timeout [ 279.667225] Bluetooth: hci2: command tx timeout [ 279.732069] Bluetooth: hci4: command tx timeout [ 279.795092] Bluetooth: hci5: command tx timeout [ 279.796202] Bluetooth: hci3: command tx timeout [ 279.859559] Bluetooth: hci7: command tx timeout [ 279.860212] Bluetooth: hci6: command tx timeout [ 281.651135] Bluetooth: hci1: command tx timeout [ 281.652811] Bluetooth: hci0: command tx timeout [ 281.715142] Bluetooth: hci2: command tx timeout [ 281.779044] Bluetooth: hci4: command tx timeout [ 281.843112] Bluetooth: hci3: command tx timeout [ 281.843631] Bluetooth: hci5: command tx timeout [ 281.909283] Bluetooth: hci6: command tx timeout [ 281.909809] Bluetooth: hci7: command tx timeout [ 283.699348] Bluetooth: hci0: command tx timeout [ 283.700139] Bluetooth: hci1: command tx timeout [ 283.763016] Bluetooth: hci2: command tx timeout [ 283.828992] Bluetooth: hci4: command tx timeout [ 283.891114] Bluetooth: hci3: command tx timeout [ 283.892331] Bluetooth: hci5: command tx timeout [ 283.955022] Bluetooth: hci7: command tx timeout [ 283.956155] Bluetooth: hci6: command tx timeout [ 285.747173] Bluetooth: hci1: command tx timeout [ 285.747228] Bluetooth: hci0: command tx timeout [ 285.811184] Bluetooth: hci2: command tx timeout [ 285.875080] Bluetooth: hci4: command tx timeout [ 285.939118] Bluetooth: hci5: command tx timeout [ 285.939238] Bluetooth: hci3: command tx timeout [ 286.003126] Bluetooth: hci6: command tx timeout [ 286.003205] Bluetooth: hci7: command tx timeout [ 339.797695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.800390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.802354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.805712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.807725] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.809238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.917075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.925306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.926508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.947142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.949697] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.950911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.026494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.028637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.030234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.032642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.034036] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.035222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.120153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.143541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.145698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.148364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.154751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.164371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.172247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.173515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.186567] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.187636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.194512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.196018] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.196765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.197190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.204549] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.204645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.226562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.230615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.238063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.242203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.244473] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.246724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.247464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.250065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.258509] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.278385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.304445] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.308808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.311435] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.318139] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.875385] Bluetooth: hci0: command tx timeout [ 342.003189] Bluetooth: hci1: command tx timeout [ 342.067143] Bluetooth: hci2: command tx timeout [ 342.259069] Bluetooth: hci3: command tx timeout [ 342.259075] Bluetooth: hci4: command tx timeout [ 342.324225] Bluetooth: hci5: command tx timeout [ 342.451100] Bluetooth: hci7: command tx timeout [ 342.452216] Bluetooth: hci6: command tx timeout [ 343.924083] Bluetooth: hci0: command tx timeout [ 344.052035] Bluetooth: hci1: command tx timeout [ 344.115081] Bluetooth: hci2: command tx timeout [ 344.307013] Bluetooth: hci4: command tx timeout [ 344.308401] Bluetooth: hci3: command tx timeout [ 344.372019] Bluetooth: hci5: command tx timeout [ 344.500019] Bluetooth: hci6: command tx timeout [ 344.500040] Bluetooth: hci7: command tx timeout [ 345.972057] Bluetooth: hci0: command tx timeout [ 346.099131] Bluetooth: hci1: command tx timeout [ 346.164974] Bluetooth: hci2: command tx timeout [ 346.356044] Bluetooth: hci3: command tx timeout [ 346.356596] Bluetooth: hci4: command tx timeout [ 346.419055] Bluetooth: hci5: command tx timeout [ 346.547042] Bluetooth: hci7: command tx timeout [ 346.548450] Bluetooth: hci6: command tx timeout [ 348.019119] Bluetooth: hci0: command tx timeout [ 348.147221] Bluetooth: hci1: command tx timeout [ 348.211160] Bluetooth: hci2: command tx timeout [ 348.406989] Bluetooth: hci4: command tx timeout [ 348.407536] Bluetooth: hci3: command tx timeout [ 348.480968] Bluetooth: hci5: command tx timeout [ 348.595101] Bluetooth: hci6: command tx timeout [ 348.596435] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:45:29 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=1ffffffff104fd50 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff888015ec03fc RBP=ffff888015ec0000 RSP=ffff8880345efd90 R8 =0000000000000001 R9 =ffff888015ec0a38 R10=ffffffff87ee2f87 R11=0000000000000001 R12=ffff8880328a57e0 R13=ffff8880328a57f0 R14=ffff8880328a5810 R15=00007f05c9e40060 RIP=ffffffff813abf00 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f05c998c540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f05c9e40060 CR3=000000002f43e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000040 RCX=0000000000000001 RDX=1ffff110017012a0 RSI=0000000000000000 RDI=ffff88800b809500 RBP=ffff88802aaafc90 RSP=ffff88802aaafc30 R8 =ffff88802aaafc50 R9 =fffffbfff0fdc5ea R10=ffffffff87ee2f57 R11=00000000000c36d9 R12=ffff888008ff03c0 R13=0000000000000cc0 R14=0000000000000040 R15=0000000000000cc0 RIP=ffffffff81848f96 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3e18517088 CR3=000000002c914000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000