syzkaller login: [ 63.777305] scp (237) used greatest stack depth: 24072 bytes left Warning: Permanently added '[localhost]:18896' (ECDSA) to the list of known hosts. 2024/12/19 13:13:13 fuzzer started 2024/12/19 13:13:14 dialing manager at localhost:44037 [ 67.670000] cgroup: Unknown subsys name 'net' [ 67.883465] cgroup: Unknown subsys name 'cpuset' [ 67.929779] cgroup: Unknown subsys name 'rlimit' 2024/12/19 13:13:31 syscalls: 203 2024/12/19 13:13:31 code coverage: enabled 2024/12/19 13:13:31 comparison tracing: enabled 2024/12/19 13:13:31 extra coverage: enabled 2024/12/19 13:13:31 setuid sandbox: enabled 2024/12/19 13:13:31 namespace sandbox: enabled 2024/12/19 13:13:31 Android sandbox: enabled 2024/12/19 13:13:31 fault injection: enabled 2024/12/19 13:13:31 leak checking: enabled 2024/12/19 13:13:31 net packet injection: enabled 2024/12/19 13:13:31 net device setup: enabled 2024/12/19 13:13:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/19 13:13:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/19 13:13:31 USB emulation: enabled 2024/12/19 13:13:31 hci packet injection: enabled 2024/12/19 13:13:31 wifi device emulation: enabled 2024/12/19 13:13:31 802.15.4 emulation: enabled 2024/12/19 13:13:31 fetching corpus: 0, signal 0/0 (executing program) 2024/12/19 13:13:32 starting 8 fuzzer processes 13:13:32 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x20000004) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x3, 0x8, @loopback, @mcast1, 0x8, 0x8, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r2, 0x29, 0x3, 0xc2, 0x7ff, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x20, 0x610, 0xfffffff8}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1, 0x8}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000005c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000600)={{0xb6, 0x8}, 'port0\x00', 0x7, 0x440, 0x6, 0x6, 0x6, 0x3, 0x5, 0x0, 0x5, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000006c0)={{0x4, 0x8}, 'port1\x00', 0x17, 0x21449, 0x6, 0x9, 0x1f, 0x7ff, 0x8, 0x0, 0x4, 0x1}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000780)=""/115, 0x73) write$sndseq(r3, &(0x7f0000000840)=[{0x1, 0xd9, 0xff, 0xf7, @time={0x40, 0x6}, {0x4, 0x9}, {0x6, 0x63}, @queue={0x4, {0x78a, 0x1}}}, {0x7f, 0x8, 0x40, 0x5, @time={0x4, 0x20}, {0x9, 0x40}, {0x9, 0x1f}, @note={0x80, 0x80, 0x4, 0x2, 0xfffff295}}, {0x0, 0x20, 0x1, 0x9, @time={0x7ff}, {0x3f, 0x7f}, {0x3f, 0x3}, @note={0x2, 0xed, 0xd4, 0x7, 0x2}}, {0xfa, 0x90, 0x24, 0x0, @time={0x2, 0x1}, {0x9, 0x9b}, {0xff, 0x6}, @connect={{0x7, 0xdf}, {0x40}}}, {0x0, 0x8a, 0x53, 0x7f, @tick=0x1, {0x1, 0x5}, {0x9, 0x9}, @note={0x7, 0xff, 0xff, 0x3, 0xede}}, {0x0, 0x4, 0x4, 0x75, @tick=0x7f, {0x0, 0x6}, {0x3f, 0x8}, @quote={{0x81, 0x9}, 0x7ff, &(0x7f0000000800)={0x5, 0x3, 0x7, 0x40, @tick=0x593, {0x8, 0x8}, {0x1, 0x6}, @note={0x3, 0x7f, 0x3, 0x20, 0x4}}}}, {0x3f, 0x6, 0x0, 0x40, @time={0x4, 0xffff}, {0x40, 0x81}, {}, @note={0x0, 0x0, 0x2, 0x2c, 0x101}}], 0xc4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x12000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000980)={0x1, 0x3f, 0x7fff, 0x0, 0x7, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000a00)={0x0, 0x2, r5, 0x8000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000a40)={{0x6, 0x7}, 'port1\x00', 0x8, 0x10, 0x8000000, 0x800, 0x4, 0xf20000, 0xfffffbff, 0x0, 0x2, 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000b40)) 13:13:32 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x436b}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r0, &(0x7f00000000c0)={0x2540, 0x1, 0x1}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1f) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @acquire_done={0x40106309, 0x3}, @decrefs], 0x7b, 0x0, &(0x7f00000001c0)="49f62b993f98424949b830bf62df77e03d6f04825d17ae49e18ca55678559c49f83e7227859270ad37e3880221aecf02ab9e000075617f2077ca872801d653640bcc426e8b3c58c0bb7ccffa0e77a7d1f1946d8e820da5596f8342d40656de980e346107414fb69ed8be732683399a9185a7e38f0dff13dc932778"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x10) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x6, 0x7}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@flushsa={0x14, 0x1c, 0x2, 0x70bd2c, 0x25dfdbff, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4000001) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000005c0)) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000600)={0x0, 0x1, 0x200}) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$802154_dgram(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x24, @short}, 0x14, &(0x7f0000000780)={&(0x7f0000000700)="f7bad5e256479e5faaab9f75b8db3eb7d4a3d65397cad2bb283ee368377bbddc933a9ab68c1d0d4c2d27cae47bd41b5efdd8266f2bd26514d16f0cf8dd24f40b67fd410c055896b25fb9ba606ca7b85347436c7307e3928c72fe70d9e6", 0x5d}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004004) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3e8, 0x836fda3cdaef6d7f, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000980)={0x0, 0x6, 0x6}) 13:13:32 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x3, 0x7ff, 0x1, 'queue0\x00', 0x10001}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r0, 0x20, 0x80000}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x2d, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x7, 0x7800, 0xae0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x4, 0xd1, 0x4, 0x7ff, 0x10, @local, @private2, 0x20, 0x7, 0x81, 0x3}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x8c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x9, 0x2, 0x17}, @flat=@weak_handle={0x77682a85, 0x101, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x39}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}}, @exit_looper, @request_death={0x400c630e, 0x1}, @request_death, @decrefs={0x40046307, 0x1}, @exit_looper, @clear_death], 0x1b, 0x0, &(0x7f0000000440)="23ce7385c0d2667aaa317bf298190defb8078bf9e06ce04736c19c"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x4, 0x1, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8000, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl0\x00', r2, 0x29, 0x81, 0x3f, 0xffffffff, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x1, 0x700, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x2f, 0x9, 0x4, 0x10000, 0x4, @remote, @remote, 0x80, 0x7, 0x5ae0af, 0x9}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000780)={0x8, 0x1, 'client1\x00', 0xffffffff80000000, "80be4c9929e7f2e3", "7a0957c15e7c44cf8965cb21b0b76c2d2ffcb6f9bb85729e4448d2cfcb8a0e0f", 0x4, 0x40}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'sit0\x00', r3, 0x2f, 0xa3, 0x5, 0x2, 0x60, @remote, @mcast2, 0x7800, 0x8000, 0xfffffffa, 0x400}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x10000, 0x0) getsockname$inet(r5, &(0x7f0000000940)={0x2, 0x0, @broadcast}, &(0x7f0000000980)=0x10) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000009c0)={0x7, 0xd5, 0x7f}) prctl$PR_GET_TSC(0x19, &(0x7f0000000a00)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000a80)={0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000ac0)={0x1ff, 0x0, {0x0, 0x1, 0x7fffffff, 0x1, 0x7}, 0x9}) 13:13:32 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfa00}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@empty, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x1, 0x5080, {{0x1b, 0x4, 0x3, 0x9, 0x6c, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x2c, 0xdc, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@remote, 0x8}, {@broadcast, 0x3ff}, {@empty, 0x5}, {@local, 0x6}]}, @generic={0x88, 0xf, "27aec9b6a73c35dc6716509c2c"}, @timestamp={0x44, 0x18, 0xc5, 0x0, 0xb, [0x7, 0x81, 0xfffffffa, 0xfffffe00, 0x4]}]}}}}}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6gre0\x00', r2, 0x4, 0x3, 0xb1, 0x9, 0x1d587425c361a1d3, @remote, @local, 0x40, 0x700, 0x1f, 0x57}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9e36edfcfd4d"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x90) r5 = accept(r0, &(0x7f00000005c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x80) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r1) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r7 = accept(r1, &(0x7f00000008c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000940)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @broadcast}, 0x2, 0x1, 0x1, 0x1}}}, 0xfffffffc) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'sit0\x00', r8, 0x2f, 0x3, 0x2f, 0x6, 0x4b, @dev={0xfe, 0x80, '\x00', 0x3f}, @remote, 0x80, 0x40, 0x1, 0x3}}) io_uring_setup(0x6be8, &(0x7f0000000c40)={0x0, 0xee11, 0x2, 0x0, 0x15a, 0x0, r0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', r10, 0x2f, 0x1, 0x40, 0x9, 0x2, @loopback, @mcast2, 0x20, 0x7, 0x9, 0x1}}) 13:13:32 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x30, 0x1, 0x5, 0x11, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x40, 0x0, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0xba, 0x9f, 0x7, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x1, 0x1, 0x4}}) epoll_create(0x8) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000240)={&(0x7f0000000200)="26dae7911eb276bd0fa903267bc9ce6ae507c5a60dbc1bab0e271ccbdfd0352a2b365b32880b426a6e0f025033ef899f461be8fdc51676b7", 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) syz_io_uring_setup(0x9df, &(0x7f00000002c0)={0x0, 0x8cf7, 0x2, 0x0, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file0\x00', 0x1a, 0x1002, 0x12345}, 0xcabb) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000440)={0x24, @none={0x0, 0xffff}}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x24, @short={0x2, 0x2}}, 0x14, &(0x7f0000000600)={&(0x7f0000000500)="ff0db52c4e9e6a5a02cf55403add457cbbd60cd29ea9e8fedd21eba9b325a276f7e4a12cf5c7c8e2b308906c937ba1ea36fcc1bec523d2526b78012b0b4b07f68783b31cf8dee62f3f0bc92bc8a073371b6113c369f6afb11d6fc846d9a2e354322d62f5435b0a1958ab458d52adb43c348d03207979903027b032e761a592e38cb5daf464dc34b9b951ce8e139dba8bd3ec4525b7824f649834c51dc262afa434eb0b5f1e594aaa95fa16ff2077a94b44b5edaafbe1db0621c5a1b0c3aa6f9a704c69bfe175fea7d400c041949b9de1929b4c3d5284ce717394cbc74cd6574fe01be7b6979232af50a1561906db7286eaef2f53315ef13a", 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x4000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x218001, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0xa, 0xffffffffffff6fa2, 0x0, 0x6, 0x3, 0x1}, 0x1) r6 = fork() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000780)={r6, 0x1, 0x10000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000000) [ 85.783789] audit: type=1400 audit(1734614012.870:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:13:32 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x1f, 0x13}, {0x6, 0x1f}, 0xc0, 0x6, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000180)={0x8, 0xea, 0x0, {0x8, 0x80000001}, 0xffff, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000200)={0x308, 0x0, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000380)={{0x2, 0x8}, 'port1\x00', 0x63, 0x80c10, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x2, 0x81}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000480)={{0x98}, 'port1\x00', 0x60, 0x140008, 0x10001, 0x874c, 0x2, 0xff, 0x2, 0x0, 0x5, 0xfa}) r3 = openat$sndseq(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2) write$sndseq(r3, &(0x7f0000000580)=[{0x7, 0x1, 0x3, 0x3f, @time={0x0, 0x6}, {0x9, 0x3}, {0x5d, 0x80}, @quote={{0x4, 0x7f}, 0x6, &(0x7f0000000540)={0x3, 0x9, 0x1f, 0x3, @time={0xc09f, 0x91f}, {0xfe, 0x40}, {0x0, 0x64}, @result={0x7ff, 0x1}}}}], 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000600)={0x5b83, 0x10001, 0x8, 0x4, 0x7, 0x80000001}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x84001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f00000006c0)={0x6b491eb5fe257a9c, @tick=0x7, 0x7, {0xd8, 0x2d}, 0x7, 0x1, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000700)={0x400, 0x1, 'client1\x00', 0x5, "f102501acfc227e0", "198f6a2876484762a4d44d218073aa80212e5e1c614323249a90615b721b062a", 0x8d, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000007c0)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000880)={0xd916, 0x8f05, 0x1, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000940)={{0x3, 0x6}, 'port1\x00', 0x9, 0x1002c, 0x7, 0x4, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x80}) 13:13:32 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x5dde17be, 0xfff, 0x0, 'queue1\x00', 0x5aa}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000000c0)={0x7ff, 0x6, 0x1, 'queue1\x00', 0x3ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x8, 0xffffff01, 0x0, 'queue1\x00', 0x5}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f8, 0x10, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x90) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000003c0)={{0x8e, 0x9}, {0x0, 0x12}, 0xffffffc0, 0x2, 0x2}) getsockname(0xffffffffffffffff, &(0x7f0000000440)=@in={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x80) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000500)={{0x7, 0x6}, 'port1\x00', 0xa0, 0x0, 0x7f, 0x3ff, 0x2, 0x8, 0x7f, 0x0, 0x4, 0x80}) r0 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@qipcrtr, &(0x7f0000000640)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000680)=""/181, &(0x7f0000000740)=0xb5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x2a8, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35ce2787}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce2f577}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b2afed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6032896f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x754a985a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf9abeaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55d81615}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25cbbe3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26b5da9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x774578e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c248f41}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c0296ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d86c498}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa46}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c0d393}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb6105f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31d0bcb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2210}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3757d6da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7555046d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f383a56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17b2f390}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ceeb7e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bc66ad8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20787763}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaac4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1576}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c222232}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1233ac35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24c3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2aba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3975}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d6e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7be19bcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7262}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x394b8942}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d3d4542}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbd5d7c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x902a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3891}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x237e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x113b87cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9256ef5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7872}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}}, 0x40) getsockname$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @local}, &(0x7f0000000cc0)=0x10) r3 = accept(r0, &(0x7f0000000d00)=@caif=@dbg, &(0x7f0000000d80)=0x80) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x3f9, 0x2, 0x70bd27, 0x25dfdbff, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x850) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000f00)={0x10000, 0x8e4b, 0x35df, 0x0, 0xc259, 0x6c0}) 13:13:32 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x8, 0x7}, 'port1\x00', 0x40, 0x40020, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x9}) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x8010, 0xffffffffffffffff, 0x79) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x0, 0x1, 'client1\x00', 0xffffffff80000000, "a61dd04618c76143", "4aa6a96f6edce86ef9a92b2726993bb231313a4faf384cb0312285370cb57dd8", 0x1d7, 0x4}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x4, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x7800, 0x8000, 0x5, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r2, 0x2f, 0x7f, 0x3, 0xa963, 0x47, @rand_addr=' \x01\x00', @loopback, 0x1, 0x7, 0x400, 0x6}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000480)={{0x1, 0x20}, 0x0, 0x7, 0x9, {0x4f}, 0x6, 0xe3b0}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000005c0)={&(0x7f0000000500), &(0x7f0000000540)=""/85, 0x55}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x610000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000680)={0x7, 0xbaa5, 0x5, 0x6, 0x200, 0x200000}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000700)={'custom0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000840)={0x24e, 0x6, 0x0, 'queue1\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000900)={0x8000, 0x6, 0x8001, 0x9, 0x7d, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000980)={{0x80, 0x6}, 'port1\x00', 0x9c, 0x100000, 0x7, 0x3, 0x8, 0x3, 0x9, 0x0, 0x3, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000a40)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x40, 0x10001, 0x62, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0x9, 0x7642}}) [ 87.065087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.068405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.069580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.074807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.076907] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.078025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.116796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.125408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.129510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.134816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.146382] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.147690] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.176362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.181479] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.183707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.263762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.279817] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.281246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.307599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.308929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.310696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.311874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.313334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.314525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.317352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.319108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.321057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.321813] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.323982] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.325406] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.326112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.327103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.328430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.336131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.337711] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.338884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.339922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.342507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.345714] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.347830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.367392] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.372364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.372384] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.396573] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.398723] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.399853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.404405] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.405470] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.155300] Bluetooth: hci0: command tx timeout [ 89.217292] Bluetooth: hci1: command tx timeout [ 89.347278] Bluetooth: hci2: command tx timeout [ 89.409360] Bluetooth: hci3: command tx timeout [ 89.411007] Bluetooth: hci7: command tx timeout [ 89.473433] Bluetooth: hci5: command tx timeout [ 89.475045] Bluetooth: hci6: command tx timeout [ 89.475684] Bluetooth: hci4: command tx timeout [ 91.201304] Bluetooth: hci0: command tx timeout [ 91.265263] Bluetooth: hci1: command tx timeout [ 91.393470] Bluetooth: hci2: command tx timeout [ 91.457391] Bluetooth: hci7: command tx timeout [ 91.457937] Bluetooth: hci3: command tx timeout [ 91.521316] Bluetooth: hci5: command tx timeout [ 91.521909] Bluetooth: hci4: command tx timeout [ 91.522568] Bluetooth: hci6: command tx timeout [ 93.249776] Bluetooth: hci0: command tx timeout [ 93.314259] Bluetooth: hci1: command tx timeout [ 93.442287] Bluetooth: hci2: command tx timeout [ 93.505418] Bluetooth: hci7: command tx timeout [ 93.505952] Bluetooth: hci3: command tx timeout [ 93.569341] Bluetooth: hci4: command tx timeout [ 93.569876] Bluetooth: hci5: command tx timeout [ 93.570971] Bluetooth: hci6: command tx timeout [ 95.297411] Bluetooth: hci0: command tx timeout [ 95.361280] Bluetooth: hci1: command tx timeout [ 95.489268] Bluetooth: hci2: command tx timeout [ 95.553312] Bluetooth: hci3: command tx timeout [ 95.553807] Bluetooth: hci7: command tx timeout [ 95.617396] Bluetooth: hci5: command tx timeout [ 95.617894] Bluetooth: hci6: command tx timeout [ 95.618449] Bluetooth: hci4: command tx timeout [ 149.775137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.776903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.779513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.783368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.785435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.791704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.909354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.914779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.917067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.919816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.921483] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.926517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.977643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.004465] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.030837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.031954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.033047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.036943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.039869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.045493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.046278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.047138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.047909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.053671] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.057077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.058305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.061820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.063440] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.065766] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.067721] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.075676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.076619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.077689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.078871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.081028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.083157] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.083194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.089283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.091607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.096906] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.097970] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.099809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.131717] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.136009] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.139750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.140846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.141734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.142986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.873287] Bluetooth: hci0: command tx timeout [ 151.937279] Bluetooth: hci1: command tx timeout [ 152.130279] Bluetooth: hci7: command tx timeout [ 152.130317] Bluetooth: hci6: command tx timeout [ 152.193256] Bluetooth: hci2: command tx timeout [ 152.194315] Bluetooth: hci5: command tx timeout [ 152.321258] Bluetooth: hci3: command tx timeout [ 152.577288] Bluetooth: hci4: command tx timeout [ 153.921265] Bluetooth: hci0: command tx timeout [ 153.985372] Bluetooth: hci1: command tx timeout [ 154.177276] Bluetooth: hci7: command tx timeout [ 154.180233] Bluetooth: hci6: command tx timeout [ 154.241335] Bluetooth: hci5: command tx timeout [ 154.241808] Bluetooth: hci2: command tx timeout [ 154.372330] Bluetooth: hci3: command tx timeout [ 154.625347] Bluetooth: hci4: command tx timeout [ 155.969272] Bluetooth: hci0: command tx timeout [ 156.033291] Bluetooth: hci1: command tx timeout [ 156.226323] Bluetooth: hci6: command tx timeout [ 156.226467] Bluetooth: hci7: command tx timeout [ 156.289279] Bluetooth: hci2: command tx timeout [ 156.289369] Bluetooth: hci5: command tx timeout [ 156.417325] Bluetooth: hci3: command tx timeout [ 156.673343] Bluetooth: hci4: command tx timeout [ 158.017295] Bluetooth: hci0: command tx timeout [ 158.081325] Bluetooth: hci1: command tx timeout [ 158.273381] Bluetooth: hci7: command tx timeout [ 158.274892] Bluetooth: hci6: command tx timeout [ 158.338245] Bluetooth: hci5: command tx timeout [ 158.338270] Bluetooth: hci2: command tx timeout [ 158.465252] Bluetooth: hci3: command tx timeout [ 158.723202] Bluetooth: hci4: command tx timeout [ 212.240977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.242760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.244364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.247355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.249044] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.252453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.302263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.304105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.305338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.307720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.309564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.310701] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.404444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.407624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.410492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.419758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.424503] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.427382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.454208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.458414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.460530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.464108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.468843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.476938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.480353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.486122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.495386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.496794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.511446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.518513] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.518574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.524263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.528979] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.552563] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.561957] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.563497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.564543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.570485] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.574638] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.577121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.587832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.603412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.604438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.619856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.619876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.690543] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.718248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.720465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.338278] Bluetooth: hci1: command tx timeout [ 214.339229] Bluetooth: hci0: command tx timeout [ 214.467340] Bluetooth: hci2: command tx timeout [ 214.595229] Bluetooth: hci3: command tx timeout [ 214.595258] Bluetooth: hci4: command tx timeout [ 214.657518] Bluetooth: hci7: command tx timeout [ 214.721252] Bluetooth: hci5: command tx timeout [ 214.785424] Bluetooth: hci6: command tx timeout [ 216.386376] Bluetooth: hci0: command tx timeout [ 216.386550] Bluetooth: hci1: command tx timeout [ 216.513299] Bluetooth: hci2: command tx timeout [ 216.641231] Bluetooth: hci3: command tx timeout [ 216.642769] Bluetooth: hci4: command tx timeout [ 216.705282] Bluetooth: hci7: command tx timeout [ 216.769213] Bluetooth: hci5: command tx timeout [ 216.833331] Bluetooth: hci6: command tx timeout [ 218.434199] Bluetooth: hci0: command tx timeout [ 218.434347] Bluetooth: hci1: command tx timeout [ 218.563285] Bluetooth: hci2: command tx timeout [ 218.689280] Bluetooth: hci3: command tx timeout [ 218.690775] Bluetooth: hci4: command tx timeout [ 218.753310] Bluetooth: hci7: command tx timeout [ 218.817324] Bluetooth: hci5: command tx timeout [ 218.881252] Bluetooth: hci6: command tx timeout [ 220.481349] Bluetooth: hci1: command tx timeout [ 220.482961] Bluetooth: hci0: command tx timeout [ 220.609251] Bluetooth: hci2: command tx timeout [ 220.739226] Bluetooth: hci4: command tx timeout [ 220.740693] Bluetooth: hci3: command tx timeout [ 220.801383] Bluetooth: hci7: command tx timeout [ 220.865408] Bluetooth: hci5: command tx timeout [ 220.929672] Bluetooth: hci6: command tx timeout [ 274.571792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.573750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.577787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.583809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.586357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.592521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.766629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.767811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.769764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.770644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.772282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.772683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.776270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.778958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.780649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.782200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.793315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.799480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.833818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.838367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.839455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.842030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.848977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.849054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.852764] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.856397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.858406] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.896880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.900403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.901246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.903055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.908495] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.911549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.912892] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.913831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.924365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.925858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.943508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.957479] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.958449] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.970844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.976408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.991527] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.998411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.023937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.040358] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.041608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.075737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.610366] Bluetooth: hci0: command tx timeout [ 276.801333] Bluetooth: hci2: command tx timeout [ 276.868280] Bluetooth: hci1: command tx timeout [ 276.971920] Bluetooth: hci4: command tx timeout [ 276.993335] Bluetooth: hci3: command tx timeout [ 277.057334] Bluetooth: hci6: command tx timeout [ 277.185261] Bluetooth: hci7: command tx timeout [ 277.185311] Bluetooth: hci5: command tx timeout [ 278.657338] Bluetooth: hci0: command tx timeout [ 278.850346] Bluetooth: hci2: command tx timeout [ 278.914343] Bluetooth: hci1: command tx timeout [ 278.979232] Bluetooth: hci4: command tx timeout [ 279.041271] Bluetooth: hci3: command tx timeout [ 279.105290] Bluetooth: hci6: command tx timeout [ 279.233268] Bluetooth: hci7: command tx timeout [ 279.234764] Bluetooth: hci5: command tx timeout [ 280.705245] Bluetooth: hci0: command tx timeout [ 280.897296] Bluetooth: hci2: command tx timeout [ 280.961222] Bluetooth: hci1: command tx timeout [ 281.025272] Bluetooth: hci4: command tx timeout [ 281.089310] Bluetooth: hci3: command tx timeout [ 281.153395] Bluetooth: hci6: command tx timeout [ 281.281284] Bluetooth: hci5: command tx timeout [ 281.281821] Bluetooth: hci7: command tx timeout [ 282.755251] Bluetooth: hci0: command tx timeout [ 282.945369] Bluetooth: hci2: command tx timeout [ 283.010598] Bluetooth: hci1: command tx timeout [ 283.073461] Bluetooth: hci4: command tx timeout [ 283.137439] Bluetooth: hci3: command tx timeout [ 283.201380] Bluetooth: hci6: command tx timeout [ 283.330304] Bluetooth: hci7: command tx timeout [ 283.330332] Bluetooth: hci5: command tx timeout [ 308.269335] hrtimer: interrupt took 2727538 ns [ 337.236034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.254482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.259182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.264325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.266971] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.268099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.304092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.313641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.315507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.324383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.326877] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.328307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.369608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.382021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.384591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.407345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.423566] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.428361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.440804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.447284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.452465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.459074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.511468] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.514518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.565845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.570412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.573846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.582468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.601500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.611001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.613838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.619422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.622308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.624402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.631007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.633828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.687926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.692925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.696418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.697989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.698888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.702810] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.706760] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.715477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.716513] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.720480] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.722459] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.731688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.333881] Bluetooth: hci0: command tx timeout [ 339.395393] Bluetooth: hci1: command tx timeout [ 339.457292] Bluetooth: hci2: command tx timeout [ 339.586523] Bluetooth: hci3: command tx timeout [ 339.715217] Bluetooth: hci4: command tx timeout [ 339.842504] Bluetooth: hci7: command tx timeout [ 339.843535] Bluetooth: hci6: command tx timeout [ 339.844240] Bluetooth: hci5: command tx timeout [ 341.377328] Bluetooth: hci0: command tx timeout [ 341.442470] Bluetooth: hci1: command tx timeout [ 341.506244] Bluetooth: hci2: command tx timeout [ 341.634181] Bluetooth: hci3: command tx timeout [ 341.762213] Bluetooth: hci4: command tx timeout [ 341.890305] Bluetooth: hci7: command tx timeout [ 341.890843] Bluetooth: hci5: command tx timeout [ 341.891364] Bluetooth: hci6: command tx timeout [ 343.425289] Bluetooth: hci0: command tx timeout [ 343.490227] Bluetooth: hci1: command tx timeout [ 343.554351] Bluetooth: hci2: command tx timeout [ 343.681189] Bluetooth: hci3: command tx timeout [ 343.810187] Bluetooth: hci4: command tx timeout [ 343.938226] Bluetooth: hci6: command tx timeout [ 343.939671] Bluetooth: hci5: command tx timeout [ 343.941002] Bluetooth: hci7: command tx timeout [ 345.474360] Bluetooth: hci0: command tx timeout [ 345.538336] Bluetooth: hci1: command tx timeout [ 345.603255] Bluetooth: hci2: command tx timeout [ 345.730297] Bluetooth: hci3: command tx timeout [ 345.858254] Bluetooth: hci4: command tx timeout [ 345.986244] Bluetooth: hci5: command tx timeout [ 345.987725] Bluetooth: hci7: command tx timeout [ 345.988926] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:18:43 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81a4897f RDX=0000000000000001 RSI=ffffffff86839b08 RDI=ffffffff864c44dc RBP=ffffffff864c44dc RSP=ffff88803422f590 R8 =ffffffff86839b08 R9 =ffff88803422f688 R10=000000000003aa55 R11=0000000000022ae0 R12=ffffffff864c44dc R13=ffffffff864c44dc R14=ffffffff864c44dc R15=dffffc0000000000 RIP=ffffffff8134924d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f126b0b18e0 CR3=000000002e5d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff812a8b07 RBX=ffffffff815ede20 RCX=0000000000000001 RDX=1ffff110063f0eb8 RSI=ffffffff812a8b07 RDI=ffffffff812a8b07 RBP=ffff888031f87600 RSP=ffff888031f87568 R8 =0000000000000001 R9 =ffff888031f875a8 R10=000000000003aa55 R11=000000000002108f R12=ffff888031f87630 R13=0000000000000000 R14=ffff888016bd1bc0 R15=0000000000000000 RIP=ffffffff812d1bf0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcaa0700910 CR3=000000002fd80000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000