syzkaller login: [ 58.673115] sshd (238) used greatest stack depth: 23440 bytes left Warning: Permanently added '[localhost]:44519' (ECDSA) to the list of known hosts. 2024/11/13 22:28:06 fuzzer started 2024/11/13 22:28:06 dialing manager at localhost:46317 [ 71.004719] cgroup: Unknown subsys name 'net' [ 71.123432] cgroup: Unknown subsys name 'cpuset' [ 71.158746] cgroup: Unknown subsys name 'rlimit' 2024/11/13 22:28:24 syscalls: 202 2024/11/13 22:28:24 code coverage: enabled 2024/11/13 22:28:24 comparison tracing: enabled 2024/11/13 22:28:24 extra coverage: enabled 2024/11/13 22:28:24 setuid sandbox: enabled 2024/11/13 22:28:24 namespace sandbox: enabled 2024/11/13 22:28:24 Android sandbox: enabled 2024/11/13 22:28:24 fault injection: enabled 2024/11/13 22:28:24 leak checking: enabled 2024/11/13 22:28:24 net packet injection: enabled 2024/11/13 22:28:24 net device setup: enabled 2024/11/13 22:28:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 22:28:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 22:28:24 USB emulation: enabled 2024/11/13 22:28:24 hci packet injection: enabled 2024/11/13 22:28:24 wifi device emulation: enabled 2024/11/13 22:28:24 802.15.4 emulation: enabled 2024/11/13 22:28:24 fetching corpus: 0, signal 0/0 (executing program) 2024/11/13 22:28:25 starting 8 fuzzer processes 22:28:25 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x6, 0x404, 0x0, 'queue1\x00', 0x8}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10c, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x48, 0x78}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400000c}, 0x1) process_mrelease(r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x3, 0x3, 0x8, 0xcb, 0x7, 0x4}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0xff, 0x0, {0x2, 0x2, 0xff, 0x3, 0x4}, 0x562}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000480)={0x3ff, 0x2, 0x40, {0x4, 0x1}, 0x4, 0x2}) r6 = syz_open_dev$rtc(&(0x7f0000000500), 0x101, 0x202180) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000540)={0x0, 0x0, {0x3, 0x2b, 0xd, 0x9, 0x2, 0xe29d, 0x1, 0x10e}}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000580)={0x2e, 0x16, 0xe, 0xd, 0x8, 0x8, 0x1, 0xaf, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x20, 0x93b, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7820, 0x7, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000006c0)={0xf, 0x30, 0x1, 0x4, 0xb, 0x7fff, 0x3, 0x148, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, r6, {0x4, 0x10000}}, './file0\x00'}) ioctl$RTC_VL_READ(r8, 0x80047013, &(0x7f0000000740)) 22:28:25 executing program 2: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f00000000c0)={0x6, 0x10000, 0x401, 0x80, 0xdf99, 0x51}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000140)) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f00000001c0)=""/179) r3 = syz_open_dev$rtc(&(0x7f0000000280), 0xf3d1, 0x2000) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$RTC_UIE_ON(r2, 0x7003) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0xfd, 0x2}], "09fc0192f1d0e977"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x0, 0x4}, {0x3}, {0x6, 0x4}, {0x1, 0x4}, {0x8, 0x2}, {0x7f, 0x3}, {0x6e, 0x5}, {0x0, 0x6}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x9, 0x1}, {0xff, 0x3}], "3ac7fcd7f9296e41"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x7}, {0xee, 0x5}, {0xfc, 0x6}, {0x0, 0x5}, {0x9}, {0x1, 0x6}, {0x3f, 0x1}], "35174bb031c8c8f0"}}]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x10) 22:28:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0x4, 0x62, @dev={0xfe, 0x80, '\x00', 0xb}, @private0, 0x7800, 0x80, 0x7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', r6, 0x2f, 0xb, 0x0, 0x9, 0x5e, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x40, 0xfffffeff, 0x3}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffe01}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff}]}, 0x50}}, 0x40004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'sit0\x00', r7, 0x29, 0x2, 0x5, 0x7, 0x3, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x40, 0xfff, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x97}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) 22:28:25 executing program 3: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0xffffffff, 0x100, 0x0, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x3e1, 0x0, {0x1, 0x1, 0x6, 0x3, 0x3}, 0x4}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x8, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000240)={0x3, 0x3, 0x1, 'queue0\x00', 0xffffffc1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x101000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x2, 0x8001, 0xc7, 0x3ff, 0x8, 0xa2d9}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000380)={{0x2, 0x5}, {0x9, 0x43}, 0x64e7d5b, 0x2, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x2, 0x4, 0x1, 'queue0\x00', 0x1d}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000580)={0xd21, 0x1, 0x2, 0x0, 0xff, 0xffff}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000600)={0x7, 0x1, {0x2, 0x1, 0x400, 0x1, 0x3}, 0x3}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000700)={0x7fffffff, 0xfffff9f4, 0x4, 0x1, 0xcf82, 0x100, 0x9}) getpeername(r4, &(0x7f0000000740)=@nfc, &(0x7f00000007c0)=0x80) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000800)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000880)) 22:28:25 executing program 5: rt_sigsuspend(&(0x7f0000000000)={[0x1000]}, 0x8) rt_sigsuspend(&(0x7f0000000040), 0x8) rt_sigsuspend(&(0x7f0000000080)={[0x8]}, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000801}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x22}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x1371) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x100548c5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r6, {0x1f, 0x9}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x6, 0x400, 0x5b, @private1, @mcast1, 0x40, 0x7, 0x7fff, 0x5}}) ioctl$RTC_WIE_OFF(r3, 0x7010) 22:28:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010805}, 0x20008880) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xf}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x6844) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc801) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000500)={0x2c, 0xe, 0xe, 0x1d, 0x6, 0xf8c, 0x6, 0x11e, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x2c}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x81949d97790bc8b9}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x20008040) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r0) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1040) [ 89.429605] audit: type=1400 audit(1731536905.863:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:28:25 executing program 6: getitimer(0x1, &(0x7f0000000000)) syslog(0x1, &(0x7f0000000040)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000140)={{0x6, 0x3f}, {0x3, 0xf4}, 0x1, 0x4, 0x6c}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000200)={{0x9, 0x40}, 'port0\x00', 0x4, 0x90002, 0x8, 0x9, 0x4, 0x1, 0x400, 0x0, 0x4, 0x40}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = pidfd_getfd(r1, r0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x801) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000440)={0x2, 0x9, 0x0, 'queue1\x00', 0x100}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = pidfd_getfd(r4, r2, 0x0) timerfd_gettime(r5, &(0x7f0000000540)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) getpeername(r6, &(0x7f00000005c0)=@nfc, &(0x7f0000000640)=0x80) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r8}}, './file0/file0\x00'}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setuid(r8) 22:28:25 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000080)={0x7fc, r0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2ebd, 0x17}}}}, [@NL80211_ATTR_IE={0x2d6, 0x2a, [@cf={0x4, 0x6, {0xff, 0x3, 0x20, 0x207}}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x3, 0x0, {0x1, 0x7f, 0x0, 0x3, 0x0, 0x1}, 0x400, 0x1, 0x5}}, @random_vendor={0xdd, 0xb1, "007ab392d0a3ab96d07905e95be2e4358161d290391c15598f6b872acdf3587fc9a3229f10ec9b586ff24eb8d1e2a4a873bae7c573f9a4f0e7c390f85c263dcb527a1011bd49a7869a6fdda723e7ed4a9686b1e2da205b40d225082ddebd023d9849e9c3b21fac4d0f016d1241e515d9b6c58c3eaa71e94633a6f9a46d3b8e6bdf761ee71fc5d55a3e8e9d22b401d4abdebe02bdd50833c9a2299c7379c1e013712a6562b6617b2b6ed6163e5791cacb5a"}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x0, 0x0, {0x0, 0x1f81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x80000000, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x60, 0x9, @broadcast, 0x6, 0x85, 0x1f}}, @fast_bss_trans={0x37, 0xdc, {0x1f, 0x6, "290a97bb66b0fd85627ab88981d660fb", "44b0a879a8ff091777df403fdb48dd9061db3e4b3708e65b5132b01f950220bd", "82893fbf7abfe27b764970dba81cb1619ffdf03c30bb5d69386eab2f18d5b168", [{0x1, 0x22, "0700ccf8854f3baf37a5ae9cce95aa4d753a61db8681f080974b472de636f60d5e93"}, {0x3, 0x1e, "81161c98a8c623e48137881153fc766dda29c798431f8ca1d42285cc491d"}, {0x2, 0xc, "637c26b58b8828d7e50daa32"}, {0x3, 0x2, "92fb"}, {0x4, 0x28, "2bc735e6f4779e52ca4a25c4d806a2c2821f7227ca906d9683aac85256764ff28ce7a553da20708b"}, {0x3, 0x8, "8c6c4446a5971fa3"}]}}, @dsss={0x3, 0x1, 0x8}, @random_vendor={0xdd, 0xe5, "cd78830fce897bc394624059ef963ab3e51f0f5486ba0da1c23705b620ad5f0ff786a0a156ec029b707e047a2d1f103980a93e5e5a7ff13d7aadea7db55680a7b8e52a5c90ee75d23a74c25471097f5462e349a5ba4a7bbbb4bdf949e09f1e693f942abce818c7b472ed44ca970732bb25d50a1ee458f51a32b60410ce77068a2caef5da9ae65f6dcd44eaa7bda00c78dbed6aacad1cd5512d13ccf7b69050b654575efdf315106123218241fc0fca16c6f99a0f7fdd4379eaee2b8053b1b62138067573f789753f2e333f581dda7602dd743d864269ac975a289732f2584ce421c1760f32"}]}, @NL80211_ATTR_IE={0x218, 0x2a, [@measure_req={0x26, 0x63, {0x7, 0x1, 0x0, "645a0c6ec0602a83069625065f75d37af99b60adee45bf6855932604b56ffbdd89fdccdd639a7a7312f7eb04870264b4428ba2c4b4945db5a7af32785f8f709c412df4a2d1ae23e738eb3c886516ada32baa70e02f0f09288e4526733419ba83"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x4, @device_b, 0x81, @broadcast, 0xffff8000, 0x101, @device_a, 0x8}}, @dsss={0x3, 0x1, 0xe}, @random={0x20, 0x1, '\n'}, @tim={0x5, 0xfe, {0x4, 0x4b, 0xe0, "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"}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0xff, 0x6, @broadcast, 0xb56, 0x81, 0x6}}, @mesh_chsw={0x76, 0x6, {0x0, 0x1f, 0x27, 0x1000}}, @peer_mgmt={0x75, 0x8, {0x0, 0x2, @val=0x3, @val=0xe, @void}}, @preq={0x82, 0x57, @ext={{0x0, 0x1, 0x1}, 0x27, 0x6c, 0x1, @broadcast, 0x0, @device_a, 0x6, 0xff, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x1000}, {{0x1}, @broadcast, 0x8}, {{}, @device_b, 0xd0}, {{0x1, 0x0, 0x1}, @device_a, 0x40}, {{}, @device_a, 0x100}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x2bc, 0x2a, [@cf={0x4, 0x6, {0x80, 0x81, 0x7, 0x8001}}, @fast_bss_trans={0x37, 0xd7, {0x5, 0x6, "0190940219f515be616d356f65f399ee", "f979028efd9f1e195aaa940174f92324a8ec3a837e2c96cd91b60203cea77055", "e698fcc241a305698748f8b7e3020707b08e3df259e05446ae3b66d17bd22d82", [{0x4, 0x1d, "2a0f92c80dc1eb97bae3300496d00dbf2c1d4c6b2f0639fd6488dfa7a6"}, {0x3, 0x1, "87"}, {0x3, 0x4, "df80bec6"}, {0x3, 0x17, "48a4de9885173f0b7cff09185987d97adc2bf9d2a109ff"}, {0x1, 0x28, "1e7ac5a7acdfbc73b08462ad17f9997bd3bd7aadbf1d63c52d45c817405c571f279bcdb7a5a71808"}, {0x4, 0x18, "7f440e868d00e855a41ad4e35a764d6d33ce44eaafe63c2f"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @tim={0x5, 0xfe, {0x0, 0x15, 0x6, "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"}}, @measure_req={0x26, 0xaa, {0xff, 0x81, 0x40, "ca165832249cd7286b68f9c7d31178eef14f69be5a10d5d9e6677d3cb5f0943a552c42d4b568cb970733132e9c455bfe373e7df4cb5d8bba296b35252fdb18cb63d06d5565c7d8d6e18949025fc080d2d2c24b61b0262d83e346175551ae4091228a4cf7971fa91a655b697ba68b2fbc531e19d66eba5d59df28d2e343e3737b1070aa5bcc68110030672bed6028dca385a7b12b6d53216ede09ea0dc6c0e975ee8c16fa5e243d"}}, @challenge={0x10, 0x1, 0x10}, @chsw_timing={0x68, 0x4, {0xfff, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x9, 0x4, @broadcast, 0x576, 0x3, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7fff}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40008a4}, 0x8040) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000c00)="aee2104c0c31af0f130e5d9d8018222da791dc68840fbc2c142b3f0c") sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x208d0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000d40)={0x42, @tick=0x200, 0x1f, {0x1, 0x80}, 0x9f, 0x1, 0x3d}) ioctl$RTC_AIE_ON(r2, 0x7001) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c010) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x78, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x140, 0x49}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9c}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x18}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x2c, 0x3, 0x1000) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x94, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x3, 0x0, {0x8, 0x81, 0x0, 0x2, 0x0, 0x1}, 0x800, 0x9, 0xcd}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x20, 0x8000, 0x3, 0x545, 0x39f9, 0x4, 0xff, 0x81, 0x1f, 0x57a, 0x7, 0xcc, 0xfffe, 0x0, 0x8]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x5, 0x1, 0x1, 0x6}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x2, 0x7, 0x8, 0x7ff, 0xfff, 0xd7a7, 0x7, 0x9, 0x1, 0x1ff, 0x1, 0x100, 0x6, 0x3, 0x7]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0x6, 0x60, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x40, 0x2, 0xcab}}) r6 = timerfd_create(0x0, 0x80000) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) timerfd_settime(r6, 0xa04158b94548f27a, &(0x7f00000012c0)={{0x77359400}, {r7, r8+60000000}}, &(0x7f0000001300)) [ 90.819449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.822939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.825001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.826108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.827400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.829655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.835883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.837764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.839588] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.841025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.847076] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.849207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.894209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.897830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.901538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.903715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.908917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.911550] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.914711] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.917045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.927633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.935679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.937693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.941210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.947989] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.949212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.955174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.958074] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.960576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.960589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.964677] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.970483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.972011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.974601] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.976108] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.978075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.986432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.990455] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.992145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.993838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.995784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.000481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.008535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.018526] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.020687] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.048023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.052536] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.056513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.904029] Bluetooth: hci0: command tx timeout [ 92.904037] Bluetooth: hci1: command tx timeout [ 93.032080] Bluetooth: hci2: command tx timeout [ 93.032130] Bluetooth: hci4: command tx timeout [ 93.096898] Bluetooth: hci3: command tx timeout [ 93.097206] Bluetooth: hci6: command tx timeout [ 93.098144] Bluetooth: hci7: command tx timeout [ 93.098690] Bluetooth: hci5: command tx timeout [ 94.951331] Bluetooth: hci0: command tx timeout [ 94.952355] Bluetooth: hci1: command tx timeout [ 95.081424] Bluetooth: hci2: command tx timeout [ 95.081954] Bluetooth: hci4: command tx timeout [ 95.143567] Bluetooth: hci3: command tx timeout [ 95.144099] Bluetooth: hci5: command tx timeout [ 95.145331] Bluetooth: hci7: command tx timeout [ 95.145894] Bluetooth: hci6: command tx timeout [ 96.999669] Bluetooth: hci1: command tx timeout [ 97.000404] Bluetooth: hci0: command tx timeout [ 97.127345] Bluetooth: hci4: command tx timeout [ 97.127838] Bluetooth: hci2: command tx timeout [ 97.191397] Bluetooth: hci7: command tx timeout [ 97.191888] Bluetooth: hci6: command tx timeout [ 97.192419] Bluetooth: hci3: command tx timeout [ 97.192870] Bluetooth: hci5: command tx timeout [ 99.048317] Bluetooth: hci0: command tx timeout [ 99.048876] Bluetooth: hci1: command tx timeout [ 99.175407] Bluetooth: hci2: command tx timeout [ 99.175957] Bluetooth: hci4: command tx timeout [ 99.239361] Bluetooth: hci5: command tx timeout [ 99.239893] Bluetooth: hci7: command tx timeout [ 99.241046] Bluetooth: hci3: command tx timeout [ 99.241565] Bluetooth: hci6: command tx timeout [ 153.397733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.403704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.407424] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.422440] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.426161] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.427752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.595894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.605223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.606396] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.615682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.619978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.626527] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.627830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.630584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.652570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.653661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.657932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.659460] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.662466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.663899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.665066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.675551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.676589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.679082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.683055] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.685970] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.686759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.687702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.696147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.697999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.702641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.706623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.711443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.714648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.715403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.716947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.721548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.739677] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.751029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.756369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.760080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.760168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.761140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.761705] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.763513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.767658] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.775534] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.776635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.495302] Bluetooth: hci0: command tx timeout [ 155.687381] Bluetooth: hci1: command tx timeout [ 155.751404] Bluetooth: hci4: command tx timeout [ 155.816444] Bluetooth: hci5: command tx timeout [ 155.817101] Bluetooth: hci2: command tx timeout [ 155.817898] Bluetooth: hci3: command tx timeout [ 155.880292] Bluetooth: hci7: command tx timeout [ 155.880931] Bluetooth: hci6: command tx timeout [ 157.543294] Bluetooth: hci0: command tx timeout [ 157.736321] Bluetooth: hci1: command tx timeout [ 157.799338] Bluetooth: hci4: command tx timeout [ 157.865269] Bluetooth: hci2: command tx timeout [ 157.865741] Bluetooth: hci5: command tx timeout [ 157.866187] Bluetooth: hci3: command tx timeout [ 157.927470] Bluetooth: hci6: command tx timeout [ 157.927943] Bluetooth: hci7: command tx timeout [ 159.592797] Bluetooth: hci0: command tx timeout [ 159.784415] Bluetooth: hci1: command tx timeout [ 159.847359] Bluetooth: hci4: command tx timeout [ 159.911809] Bluetooth: hci3: command tx timeout [ 159.913050] Bluetooth: hci5: command tx timeout [ 159.913567] Bluetooth: hci2: command tx timeout [ 159.976625] Bluetooth: hci7: command tx timeout [ 159.977102] Bluetooth: hci6: command tx timeout [ 161.640444] Bluetooth: hci0: command tx timeout [ 161.832420] Bluetooth: hci1: command tx timeout [ 161.896284] Bluetooth: hci4: command tx timeout [ 161.960360] Bluetooth: hci5: command tx timeout [ 161.960837] Bluetooth: hci2: command tx timeout [ 161.961411] Bluetooth: hci3: command tx timeout [ 162.024367] Bluetooth: hci6: command tx timeout [ 162.024869] Bluetooth: hci7: command tx timeout [ 215.734850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.739272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.741487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.745136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.748049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.752428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.865038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.868442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.869626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.873860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.877466] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.878736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.927065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.928895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.929965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.935910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.937546] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.938695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.031739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.033160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.036545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.041603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.044452] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.063700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.064773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.087484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.091757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.102524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.133055] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.139888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.142889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.144302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.174127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.177349] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.181647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.183073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.184115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.185540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.235462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.255774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.261271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.278500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.288291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.289455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.296343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.326474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.366771] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.395425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.770274] Bluetooth: hci0: command tx timeout [ 217.895450] Bluetooth: hci1: command tx timeout [ 217.960307] Bluetooth: hci2: command tx timeout [ 218.090498] Bluetooth: hci3: command tx timeout [ 218.279346] Bluetooth: hci6: command tx timeout [ 218.280376] Bluetooth: hci4: command tx timeout [ 218.343550] Bluetooth: hci5: command tx timeout [ 218.535520] Bluetooth: hci7: command tx timeout [ 219.815666] Bluetooth: hci0: command tx timeout [ 219.943287] Bluetooth: hci1: command tx timeout [ 220.007313] Bluetooth: hci2: command tx timeout [ 220.135357] Bluetooth: hci3: command tx timeout [ 220.328246] Bluetooth: hci4: command tx timeout [ 220.328365] Bluetooth: hci6: command tx timeout [ 220.392425] Bluetooth: hci5: command tx timeout [ 220.586282] Bluetooth: hci7: command tx timeout [ 221.864472] Bluetooth: hci0: command tx timeout [ 221.992005] Bluetooth: hci1: command tx timeout [ 222.057319] Bluetooth: hci2: command tx timeout [ 222.184304] Bluetooth: hci3: command tx timeout [ 222.377287] Bluetooth: hci6: command tx timeout [ 222.377318] Bluetooth: hci4: command tx timeout [ 222.439556] Bluetooth: hci5: command tx timeout [ 222.631308] Bluetooth: hci7: command tx timeout [ 223.911830] Bluetooth: hci0: command tx timeout [ 224.039286] Bluetooth: hci1: command tx timeout [ 224.103288] Bluetooth: hci2: command tx timeout [ 224.231318] Bluetooth: hci3: command tx timeout [ 224.423492] Bluetooth: hci6: command tx timeout [ 224.423677] Bluetooth: hci4: command tx timeout [ 224.488380] Bluetooth: hci5: command tx timeout [ 224.679412] Bluetooth: hci7: command tx timeout [ 278.221048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.225402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.227667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.231766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.234465] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.242753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.403681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.413698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.424498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.452691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.455551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.460931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.461010] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.465485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.469757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.483443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.490763] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.492997] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.579689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.584910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.588477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.595091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.600848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.603096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.650939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.664401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.671689] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.680257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.697301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.705258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.708966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.721327] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.723991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.727535] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.730394] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.732114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.733598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.743914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.760546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.776068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.816342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.821497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.864997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.926476] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.931508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.941432] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.953569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.975161] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.302851] Bluetooth: hci0: command tx timeout [ 280.551355] Bluetooth: hci1: command tx timeout [ 280.553708] Bluetooth: hci2: command tx timeout [ 280.679291] Bluetooth: hci3: command tx timeout [ 280.744459] Bluetooth: hci6: command tx timeout [ 280.809260] Bluetooth: hci4: command tx timeout [ 280.935433] Bluetooth: hci5: command tx timeout [ 281.063891] Bluetooth: hci7: command tx timeout [ 282.344262] Bluetooth: hci0: command tx timeout [ 282.600312] Bluetooth: hci2: command tx timeout [ 282.602067] Bluetooth: hci1: command tx timeout [ 282.728266] Bluetooth: hci3: command tx timeout [ 282.792140] Bluetooth: hci6: command tx timeout [ 282.856264] Bluetooth: hci4: command tx timeout [ 282.985205] Bluetooth: hci5: command tx timeout [ 283.111304] Bluetooth: hci7: command tx timeout [ 284.392351] Bluetooth: hci0: command tx timeout [ 284.648313] Bluetooth: hci2: command tx timeout [ 284.649983] Bluetooth: hci1: command tx timeout [ 284.775396] Bluetooth: hci3: command tx timeout [ 284.839245] Bluetooth: hci6: command tx timeout [ 284.904323] Bluetooth: hci4: command tx timeout [ 285.031275] Bluetooth: hci5: command tx timeout [ 285.160855] Bluetooth: hci7: command tx timeout [ 286.439598] Bluetooth: hci0: command tx timeout [ 286.695351] Bluetooth: hci2: command tx timeout [ 286.697132] Bluetooth: hci1: command tx timeout [ 286.825976] Bluetooth: hci3: command tx timeout [ 286.887252] Bluetooth: hci6: command tx timeout [ 286.952376] Bluetooth: hci4: command tx timeout [ 287.080281] Bluetooth: hci5: command tx timeout [ 287.207741] Bluetooth: hci7: command tx timeout [ 340.730816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.733395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.735170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.740624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.743577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.745789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.848669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.852940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.856666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.860118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.865499] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.866718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.984624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.986879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.988465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.997469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.001670] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.012305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.053293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.057279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.058457] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.064797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.069749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.070715] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.072597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.094239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.100468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.113343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.115505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.135690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.142482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.146364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.147348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.149690] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.150771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.152463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.153650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.155198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.161998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.169847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.235631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.240603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.242909] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.247506] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.268335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.268431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.273054] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.274462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.823279] Bluetooth: hci0: command tx timeout [ 342.888451] Bluetooth: hci1: command tx timeout [ 343.080466] Bluetooth: hci2: command tx timeout [ 343.146228] Bluetooth: hci4: command tx timeout [ 343.208821] Bluetooth: hci3: command tx timeout [ 343.273367] Bluetooth: hci5: command tx timeout [ 343.336234] Bluetooth: hci7: command tx timeout [ 343.337098] Bluetooth: hci6: command tx timeout [ 344.872243] Bluetooth: hci0: command tx timeout [ 344.936357] Bluetooth: hci1: command tx timeout [ 345.129833] Bluetooth: hci2: command tx timeout [ 345.192259] Bluetooth: hci4: command tx timeout [ 345.255225] Bluetooth: hci3: command tx timeout [ 345.319749] Bluetooth: hci5: command tx timeout [ 345.384348] Bluetooth: hci7: command tx timeout [ 345.385666] Bluetooth: hci6: command tx timeout [ 346.920500] Bluetooth: hci0: command tx timeout [ 346.984245] Bluetooth: hci1: command tx timeout [ 347.176320] Bluetooth: hci2: command tx timeout [ 347.240211] Bluetooth: hci4: command tx timeout [ 347.304213] Bluetooth: hci3: command tx timeout [ 347.368229] Bluetooth: hci5: command tx timeout [ 347.431328] Bluetooth: hci6: command tx timeout [ 347.432495] Bluetooth: hci7: command tx timeout [ 348.968432] Bluetooth: hci0: command tx timeout [ 349.031467] Bluetooth: hci1: command tx timeout [ 349.224304] Bluetooth: hci2: command tx timeout [ 349.287465] Bluetooth: hci4: command tx timeout [ 349.352686] Bluetooth: hci3: command tx timeout [ 349.415371] Bluetooth: hci5: command tx timeout [ 349.479328] Bluetooth: hci7: command tx timeout [ 349.479837] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 22:33:36 Registers: info registers vcpu 0 RAX=ffff888023487d98 RBX=1ffff11004690fa9 RCX=ffffffff817a8852 RDX=ffff888031851b80 RSI=0000000000000001 RDI=0000000000000007 RBP=0000000000000010 RSP=ffff888023487d10 R8 =0000000000000001 R9 =ffff8880318525b8 R10=0000000000000010 R11=0000000000000001 R12=ffff88800b9f8d90 R13=ffff88800b9f8d20 R14=0000000000000000 R15=ffffffff816a8970 RIP=ffffffff817a885f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f617a77b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f617a92f478 CR3=0000000028662000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000006d69747465 XMM04=006d6f72667663657200796164666f65 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000f RBX=ffff8880165ddd38 RCX=ffff888030abfb58 RDX=0000000000000004 RSI=ffffffff863fb188 RDI=ffff8880165ddd38 RBP=0000000000000003 RSP=ffff888030abfab8 R8 =0000000000000001 R9 =ffff8880165ddcb8 R10=ffffffff863f7797 R11=00000000eac0c6e6 R12=ffff8880165ddd38 R13=ffffffff863fb188 R14=ffff888030abfb58 R15=ffff8880165dd280 RIP=ffffffff84838e9a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f704d021368 CR3=000000001b232000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000