Warning: Permanently added '[localhost]:26485' (ECDSA) to the list of known hosts. 2025/01/16 10:22:49 fuzzer started 2025/01/16 10:22:50 dialing manager at localhost:37863 syzkaller login: [ 77.029225] cgroup: Unknown subsys name 'net' [ 77.146408] cgroup: Unknown subsys name 'cpuset' [ 77.161260] cgroup: Unknown subsys name 'rlimit' [ 82.843750] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 93.313594] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/16 10:23:07 syscalls: 200 2025/01/16 10:23:07 code coverage: enabled 2025/01/16 10:23:07 comparison tracing: enabled 2025/01/16 10:23:07 extra coverage: enabled 2025/01/16 10:23:07 setuid sandbox: enabled 2025/01/16 10:23:07 namespace sandbox: enabled 2025/01/16 10:23:07 Android sandbox: enabled 2025/01/16 10:23:07 fault injection: enabled 2025/01/16 10:23:07 leak checking: enabled 2025/01/16 10:23:07 net packet injection: enabled 2025/01/16 10:23:07 net device setup: enabled 2025/01/16 10:23:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/16 10:23:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/16 10:23:07 USB emulation: enabled 2025/01/16 10:23:07 hci packet injection: enabled 2025/01/16 10:23:07 wifi device emulation: enabled 2025/01/16 10:23:07 802.15.4 emulation: enabled 2025/01/16 10:23:07 fetching corpus: 0, signal 0/0 (executing program) 2025/01/16 10:23:09 starting 8 fuzzer processes 10:23:09 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x1, 0x2b}, @fd, @fd}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x400}], 0x3e, 0x0, &(0x7f0000000140)="383dea3d856298925ad1da68191334e923c1091c9879b51f71e699a0354baed3162ee437918069d73d47f2df06474fabb4fb9690313e83c1a5bcafdb77d5"}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x70}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x914) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6fe0000000000000) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)={'hsr0', 0x32, 0x31}, 0x7) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000280)="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", 0xfe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/237, 0xed}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/54, 0x36}], 0x4, &(0x7f00000007c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000009c0)=""/86, 0x56}, {&(0x7f0000000a40)=""/24, 0x18}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/194, 0xc2}, {&(0x7f0000000c80)=""/123, 0x7b}, {&(0x7f0000000d00)=""/210, 0xd2}, {&(0x7f0000000e00)=""/104, 0x68}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x8, &(0x7f0000001f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x3, 0x40000021, &(0x7f0000002000)) read$usbmon(r3, &(0x7f0000002040)=""/83, 0x53) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000020c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000002100)={'wg0\x00', 0x0}) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000002140)={0x1, 0x8000, 0x9, 0x80000000, 0x5, 0xfb}) connect$packet(r4, &(0x7f0000002180)={0x11, 0xa, r8, 0x1, 0x8, 0x6, @local}, 0x14) getsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f00000021c0), &(0x7f0000002200)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002240)={@in6={{0xa, 0x4e24, 0x4, @mcast2, 0x1f}}, 0x0, 0x0, 0x2d, 0x0, "92345fa325173e42b7c9f6506d04a84abc22598c9ecf7fa817bf58e36e5c538177e686f8e6a5e56205ec242272d6e95d2587c44e0325ce0ac9a26f728ac0260bfd5b59b91afad8be54fe9ee4c8936188"}, 0xd8) recvmsg$unix(r3, &(0x7f0000002580)={&(0x7f0000002340), 0x6e, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/253, 0xfd}], 0x1, &(0x7f0000002500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000025c0)='hsr0') getsockname(r1, &(0x7f0000002600)=@alg, &(0x7f0000002680)=0x80) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000003ec0)=""/223, &(0x7f0000003fc0)=0xdf) 10:23:09 executing program 0: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002580)={@local, 0xc}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000026c0)={0x40, 0x0, &(0x7f00000025c0)=[@increfs_done, @increfs={0x40046304, 0x3}, @dead_binder_done, @increfs_done={0x40106308, 0x3}, @register_looper], 0xbe, 0x0, &(0x7f0000002600)="601c12850d6578c289656544c29a898ba74056ceedd680e9855241f6336cba3afdcdd0cfb0db8a6976e4e28b858e8c4e56aa9371ad7a17d256cfd0af9a7587e6bad99eb554e5db4b946515dc3b801e6a71532e2b9689440ce913f3798fd403a6afe4f18ab007ef25072646a74872703465d1867cbbcddbe7ad23268eef990acba824606062da8d5849a3a70f602fcd9ab859fe110017cfa02968c51faadc9eda2ce4a5c19891e928cff693952d8bea75f141dc8f87e4fa05ebc08a690a04"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname(r1, &(0x7f0000002700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000002780)=0x80) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000027c0)=""/113, &(0x7f0000002840)=0x71) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r3, &(0x7f0000002880)=@ax25={{0x3, @netrom}, [@default, @remote, @netrom, @bcast, @default, @bcast]}, &(0x7f0000002900)=0x80) r4 = accept$inet6(r2, &(0x7f0000002940)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002980)=0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000029c0)="4ab50a9f5fa311aca81412dfe105fbc4", 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002a00)={{{@in6=@private1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000002b00)=0xe8) getsockname$packet(r2, &(0x7f0000002b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002b80)=0x14) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002bc0)={0x0, 0x8000, 0x700, 0x8, 0x6, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000002c00)=@gcm_256={{0x303}, "d2e26274f7ac0cc9", "83ab2a84ddde258cc26c207782bd1855577effbb8ae2bb92474b2c05d06cff0c", "f1989f42", "169b48680c885ceb"}, 0x38) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x6020}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x4881) accept$inet6(r4, 0x0, &(0x7f0000002d40)) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000005280)) 10:23:09 executing program 4: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x20a4b91d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3f2) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)="98dcf5b2534e51f06a14173763c44d59cac01c176b1545c834445437b90399a9d1eb3de300426bf35b612e5f2373a41d093623b8613a6d1bc3d278133f1130281a15e12d3ebe174ff25bb38b2c417be5e82d38ab33c9c25b85e7897cffa219476082706bb455cb73fe8b246d88eca6dcc49d4ea5c21dca5251d6524302c521150d9a91ce4446300ad86fa59d2e9cd3068e84f8a846a24e355e5332d95805e83165", 0xa1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0xcdab, 0x0, {{0xf, 0x4, 0x3, 0x5, 0x3c, 0x68, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x28, 0x31, 0x0, 0x8, [0x1ff, 0x6f1, 0xab, 0x15c3, 0x8, 0x886, 0x2, 0x0, 0x0]}]}}}}}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xe9a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x4e21, 0x45a1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3d6}}, {{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x108) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "e6953e56da04a86d", "d9792c29cce9d3cf25d90b1a38a8a560", "1c37ce79", "1267822e20b6f688"}, 0x28) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000300)={0x2, 0x80, 0x21, 0x1, 0x9, 0x1f, 0x0, 0x81, 0x84010, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x95a5, 0x2, @perf_config_ext={0x80, 0x9}, 0x632, 0x5, 0x1f, 0x6, 0x2, 0x401, 0x40, 0x0, 0x3, 0x0, 0xc11c}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x74, 0x0, &(0x7f0000000480)=[@enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@handle={0x73682a85, 0xe05ab60a611680f2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x400}, @dead_binder_done, @request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x2}], 0xfb, 0x0, &(0x7f0000000500)="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"}) connect$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x6, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) clock_gettime(0x0, &(0x7f0000001fc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000680), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/148, 0x94}, {&(0x7f00000007c0)=""/29, 0x1d}, {&(0x7f0000000800)=""/161, 0xa1}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/243, 0xf3}], 0x7}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000cc0)=""/129, 0x81}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/56, 0x38}, {&(0x7f0000001dc0)=""/16, 0x10}, {&(0x7f0000001e00)=""/47, 0x2f}], 0x5, &(0x7f0000001ec0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x2, 0x2000, &(0x7f0000002000)={r2, r3+60000000}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000002040), 0x4) 10:23:09 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x62, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x294, @mcast2}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000000c0)={0x1, {{0xa, 0x4e21, 0x2d5, @rand_addr=' \x01\x00', 0x7f}}, {{0xa, 0x4e24, 0x10001, @empty, 0x100}}}, 0x108) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000200)={@mcast1}, &(0x7f0000000240)=0x14) r0 = socket$inet6(0xa, 0x3, 0x773fd592) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14) sendto$inet6(r0, &(0x7f0000000300)="d7d29a5925d72955efe6fd0f75d17275fd5f2f7da5b97478a81087f30044a8b155f8695935b04d1604cf44199106a553f1c0e379a67f43b0f5e73d65dc7177c978a8bae2b0ede13a12e82db422ee50f2577b7b85cd7e8e35ba52a3fbe5e80e827f10c30e50c4f8513224f6bd964a70a96a82582b000819c0c9cb035819ae1be5989c5a62ab898f1171", 0x89, 0x40080c0, &(0x7f00000003c0)={0xa, 0x4e22, 0x2, @private0, 0x8}, 0x1c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/207, 0xcf}], 0x3, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40010000) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000800)=""/87, &(0x7f0000000880)=0x57) r3 = accept$inet6(r2, &(0x7f0000000a40), &(0x7f0000000a80)=0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000ac0)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000b00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'ip6gre0\x00', r4, 0x29, 0x7, 0x20, 0x7, 0x0, @mcast1, @mcast1, 0x10, 0x7800, 0x1, 0x3}}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000c00)=""/28, &(0x7f0000000c40)=0x1c) recvmsg$unix(r2, &(0x7f0000000e40)={&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/75, 0x4b}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x20000101) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000e80)={@private1}, &(0x7f0000000ec0)=0x14) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) sendto$inet6(r5, &(0x7f0000001040)="7b0484c8da0abb447a794f086c712b02deebe9cb23526fbd7633572591138c6b0de4c9045049b4db7b1ee7ec98b2d27da4d3e008a45290f00a268079e328cb5416457acfe06bd61dea662867f497a2cf0aafae9446772a887a1e6a992d30c61908ca4cd9e94c7fb95115cd4324aab318b0711c99e866f58f3110ae73039fff8b3cab64a3db8829d31bdab9c470793205e88b2357746e0aad701ec8fd37ca156c0c512dc30e5097cb0f02a6616ed30b225137b96aefcc433b36873094456a37b4acf46a8acbbed7589caaf628e37e67b9cca657ca98f5d8d2882b8f1f72174903eb042dc739170cff7ee6ffd9d824", 0xee, 0x830, &(0x7f0000001140)={0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 10:23:09 executing program 6: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x2, 0x1, 0x81, 0x5, 0x0, 0x3, 0x2}, 0x1c) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r1 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='-,)\x00', r0) keyctl$link(0x8, r0, r1) keyctl$link(0x8, r0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="d941f981411a800c48f0b859bd2387a1ccbf4c25909b692b36b7e8eaa96e9d2abccc358ba51e02ffd0f608e3ffc0992ae32c2dd14b169d70c700c8d34fb808c4bbe517e3cadb9386312a4ddcd783c76f1c964add70c13a67a2c57aba6971b9a39e0e05d9e1121ea1491a588a6c9be94aa52cdaa7316d1dc3756f2587f7d39cb6f175ff9417", 0x85, r1) r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "80c5a07df8174bf042c5a88a945109af96d70d70ea4d42d03cc5053e840f7336f69a5c1bca4c6de610ec4a24e6f37a0b30590b75c2f66bd43520ec3cb5363831", 0x3c}, 0x48, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x0, 0x2, 0x3f}, @fda={0x66646185, 0x7, 0x2, 0x10}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, &(0x7f0000000480)={0x0, 0x20, 0x40}}}], 0x9, 0x0, &(0x7f0000000540)="94c26f9de12283638d"}) socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='./binderfs/binder0\x00', r4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000700), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/30, 0x1e}, {&(0x7f00000008c0)=""/246, 0xf6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/14, 0xe}], 0x5, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}], 0x1, 0x10002, &(0x7f0000001b40)={0x0, 0x989680}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000001b80)=@req={0x9, 0x3, 0xfffffffa, 0x1}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000001bc0)={0xa, 0x4e24, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}, 0x1c) keyctl$clear(0x7, r4) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x400) 10:23:09 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @remote}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000480)={r0, 0x1, 0x6, @random="65688d38e6ce"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000500)=0x200, 0x4) getsockname(r2, &(0x7f00000005c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000640)=0x80) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="c08fb329fb4f255bb871ecc42171361307019925911a8f9973e1e3e7ea627e35c356c4b5b641fcdcf3b42ab100127d7a7cc68fd8e3f07777f507bb92b09925ce174f6fdb6f5acabec8ccd82d1644345e635fdb890d8cdeb54112aab5d23667e5cf8c69a767faa7e83e1cbf082fd38feadb6344fe", 0x74, 0x8000, &(0x7f0000000680)={0x11, 0x16, r3, 0x1, 0x1, 0x6, @local}, 0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000700)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', r1, 0x7800, 0x8, 0x2, 0x1, {{0x8, 0x4, 0x1, 0x9, 0x20, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @loopback, {[@end, @noop, @ssrr={0x89, 0x7, 0x69, [@local]}]}}}}}) modify_ldt$write2(0x11, &(0x7f0000000740)={0x7fff, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x0, 0x81, 0x0, 0x1}, {0x1ff, 0x5, 0x6}]}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000800)={0x0, 0x1000}, 0x4) getsockname$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) r7 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@loopback, @in=@remote, 0x4e24, 0xff, 0x4e24, 0x81, 0x0, 0x80, 0x80, 0x67, r6, r7}, {0x9a, 0x6, 0xffffffffffff8000, 0x31, 0x288d1b33, 0x3, 0x0, 0x8}, {0x90d, 0x8, 0x80000001, 0x40}, 0x7ff, 0x6e6bbb, 0x0, 0x0, 0x6, 0x2}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010102, 0x3503, 0x3, 0x0, 0x7f, 0xfffffffa, 0x7fff, 0x8}}, 0xe8) 10:23:09 executing program 3: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8000) getcwd(&(0x7f0000000140)=""/205, 0xcd) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x448c1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008038}, 0x400) keyctl$session_to_parent(0x12) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r3) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048011}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000940)}], 0x1, &(0x7f00000009c0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000b80)=""/77, 0x4d}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000d00)=""/118, 0x76}, {&(0x7f0000000d80)=""/111, 0x6f}, {&(0x7f0000000e00)=""/155, 0x9b}, {&(0x7f0000000ec0)=""/222, 0xde}, {&(0x7f0000000fc0)=""/47, 0x2f}, {&(0x7f0000001000)=""/188, 0xbc}, {&(0x7f00000010c0)=""/247, 0xf7}], 0x9, &(0x7f0000001280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001400)=""/127, 0x7f}, {&(0x7f0000001480)=""/69, 0x45}], 0x2}}, {{&(0x7f0000001540), 0x6e, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/21, 0x15}, {&(0x7f0000001600)=""/209, 0xd1}, {&(0x7f0000001700)=""/145, 0x91}], 0x3}}], 0x4, 0x10022, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000001900)={0x0, 0x1, 0x6, @random="7cee8bfff066"}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 10:23:09 executing program 7: recvmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/schedstat\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001140)=0x3, 0x4) recvmmsg$unix(r0, &(0x7f0000003dc0)=[{{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000001200)=""/180, 0xb4}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/16, 0x10}, {&(0x7f00000013c0)=""/156, 0x9c}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x5, &(0x7f0000002500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f00000026c0)=""/136, 0x88}, {&(0x7f0000002780)=""/32, 0x20}, {&(0x7f00000027c0)=""/138, 0x8a}], 0x3, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/36, 0x24}, {&(0x7f0000002a00)=""/182, 0xb6}], 0x2, &(0x7f0000002b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000003d00)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/112, 0x70}], 0x2, &(0x7f0000003d40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x4, 0x142, &(0x7f0000003ec0)={0x0, 0x989680}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000003f00)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x14, 0x0, "070d6f18c11d8bfb07028992f318668587c8ed55634058625c7e9fb01095a134c417b61512c7de124a88e54bdfb015d3488a1a914adf79c69b10e772a4c9da33945415bcc76ee1722773f007f26478d7"}, 0xd8) recvmsg$unix(r3, &(0x7f0000004300)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000040c0)}, {&(0x7f0000004100)=""/201, 0xc9}], 0x2, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x80000023) setsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000004340)=0x4c, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000004380)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000004500)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000043c0)=""/48, 0x30, 0x1, &(0x7f0000004400)=""/227, 0xe3}, &(0x7f0000004540)=0x40) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x80010, r4, 0x100000000) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3800003, 0x1010, r7, 0x8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000004580)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004640)={0x28, 0x0, &(0x7f00000045c0)=[@request_death={0x400c630e, 0x3}, @request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x3}], 0x35, 0x0, &(0x7f0000004600)="117bad1791ccf908d0d2b8b056d71f8bf87c7a794211df813c40ccab38e35a5d1b3a9079c4c9bbc368ce86fb5763f1b2f8cc162a8c"}) recvmmsg$unix(r5, &(0x7f0000005e40)=[{{&(0x7f0000004680), 0x6e, &(0x7f0000004800)=[{&(0x7f0000004700)=""/203, 0xcb}], 0x1}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f0000005980)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/163, 0xa3}], 0x2, &(0x7f00000059c0)}}, {{&(0x7f0000005a00), 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005a80)=""/135, 0x87}, {&(0x7f0000005b40)=""/187, 0xbb}], 0x2, &(0x7f0000005c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000005cc0)=@abs, 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005d40)=""/81, 0x51}, {&(0x7f0000005dc0)=""/52, 0x34}], 0x2}}], 0x4, 0x1, &(0x7f0000005f40)) getsockopt$inet6_tcp_int(r9, 0x6, 0x28, &(0x7f0000005f80), &(0x7f0000005fc0)=0x4) socket$inet6_udplite(0xa, 0x2, 0x88) modify_ldt$write2(0x11, &(0x7f0000006000)={0x0, 0x20000000, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000006040)='westwood\x00', 0x9) clock_gettime(0x0, &(0x7f0000006080)) [ 96.062619] audit: type=1400 audit(1737022989.822:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 97.484435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.490290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.492270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.495565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.499166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.500359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.549031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.556913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.558167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.561845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.562968] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.570187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.610633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.612230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.612780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.616365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.617351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.617841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.698298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.702136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.706353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.708225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.741928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.742454] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.742875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.748853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.755161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.760853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.765274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.768176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.776076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.776800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.786886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.787346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.789135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.790287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.791615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.792467] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.803145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.804276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.809540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.869805] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.873505] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.892806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.898487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.902662] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.909110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.926869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.558519] Bluetooth: hci0: command tx timeout [ 99.626076] Bluetooth: hci1: command tx timeout [ 99.814160] Bluetooth: hci2: command tx timeout [ 99.878129] Bluetooth: hci3: command tx timeout [ 100.005661] Bluetooth: hci6: command tx timeout [ 100.069077] Bluetooth: hci7: command tx timeout [ 100.069410] Bluetooth: hci4: command tx timeout [ 100.134162] Bluetooth: hci5: command tx timeout [ 101.606290] Bluetooth: hci0: command tx timeout [ 101.674989] Bluetooth: hci1: command tx timeout [ 101.861093] Bluetooth: hci2: command tx timeout [ 101.926018] Bluetooth: hci3: command tx timeout [ 102.053257] Bluetooth: hci6: command tx timeout [ 102.133166] Bluetooth: hci7: command tx timeout [ 102.133278] Bluetooth: hci4: command tx timeout [ 102.181024] Bluetooth: hci5: command tx timeout [ 103.654017] Bluetooth: hci0: command tx timeout [ 103.717539] Bluetooth: hci1: command tx timeout [ 103.910017] Bluetooth: hci2: command tx timeout [ 103.974123] Bluetooth: hci3: command tx timeout [ 104.101063] Bluetooth: hci6: command tx timeout [ 104.165095] Bluetooth: hci4: command tx timeout [ 104.165212] Bluetooth: hci7: command tx timeout [ 104.229159] Bluetooth: hci5: command tx timeout [ 105.705050] Bluetooth: hci0: command tx timeout [ 105.765034] Bluetooth: hci1: command tx timeout [ 105.957034] Bluetooth: hci2: command tx timeout [ 106.021987] Bluetooth: hci3: command tx timeout [ 106.149046] Bluetooth: hci6: command tx timeout [ 106.213059] Bluetooth: hci4: command tx timeout [ 106.213728] Bluetooth: hci7: command tx timeout [ 106.286091] Bluetooth: hci5: command tx timeout [ 141.300489] hrtimer: interrupt took 5721032 ns [ 157.137039] syz-executor.2 (289) used greatest stack depth: 24584 bytes left [ 157.725603] syz-executor.5 (286) used greatest stack depth: 24528 bytes left [ 160.055609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.057361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.058695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.061181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.063103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.064425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.175204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.190827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.192460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.198115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.225252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.227057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.258313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.276787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.279137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.296174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.301415] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.303881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.381525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.390197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.393636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.417897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.435977] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.437476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.439752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.441418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.445093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.451755] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.453453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.456819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.457509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.462480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.470413] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.472247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.487187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.492488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.495671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.497268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.498498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.501313] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.505614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.508763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.514816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.516555] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.518100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.520131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 160.537563] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.560223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.086894] Bluetooth: hci0: command tx timeout [ 162.277028] Bluetooth: hci1: command tx timeout [ 162.342091] Bluetooth: hci2: command tx timeout [ 162.470875] Bluetooth: hci6: command tx timeout [ 162.534287] Bluetooth: hci5: command tx timeout [ 162.609019] Bluetooth: hci7: command tx timeout [ 162.609401] Bluetooth: hci3: command tx timeout [ 162.661025] Bluetooth: hci4: command tx timeout [ 164.133024] Bluetooth: hci0: command tx timeout [ 164.325045] Bluetooth: hci1: command tx timeout [ 164.389160] Bluetooth: hci2: command tx timeout [ 164.517052] Bluetooth: hci6: command tx timeout [ 164.583053] Bluetooth: hci5: command tx timeout [ 164.646037] Bluetooth: hci3: command tx timeout [ 164.646111] Bluetooth: hci7: command tx timeout [ 164.710125] Bluetooth: hci4: command tx timeout [ 166.181059] Bluetooth: hci0: command tx timeout [ 166.373221] Bluetooth: hci1: command tx timeout [ 166.437434] Bluetooth: hci2: command tx timeout [ 166.567066] Bluetooth: hci6: command tx timeout [ 166.629047] Bluetooth: hci5: command tx timeout [ 166.693209] Bluetooth: hci3: command tx timeout [ 166.693309] Bluetooth: hci7: command tx timeout [ 166.757046] Bluetooth: hci4: command tx timeout [ 168.230764] Bluetooth: hci0: command tx timeout [ 168.422009] Bluetooth: hci1: command tx timeout [ 168.486985] Bluetooth: hci2: command tx timeout [ 168.613090] Bluetooth: hci6: command tx timeout [ 168.678011] Bluetooth: hci5: command tx timeout [ 168.741030] Bluetooth: hci3: command tx timeout [ 168.741658] Bluetooth: hci7: command tx timeout [ 168.806032] Bluetooth: hci4: command tx timeout [ 222.430586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.444441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.460962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.465295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.473883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.475116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.767396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.771833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.773404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.791441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.792273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.807200] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.808536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.817223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.823205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.841400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.844691] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.845879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.919534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.928517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.931196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.941432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.944640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.947896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.962584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.967288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.973832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.974309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.999827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.000218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.005775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.014884] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.015285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.017402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.018236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.019584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.094741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.106760] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.146659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.176455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.184995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.186270] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.190801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.192216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.194223] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.195648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.198652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.200144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.677243] Bluetooth: hci0: command tx timeout [ 224.869018] Bluetooth: hci1: command tx timeout [ 224.933086] Bluetooth: hci2: command tx timeout [ 224.997026] Bluetooth: hci3: command tx timeout [ 225.125525] Bluetooth: hci4: command tx timeout [ 225.126036] Bluetooth: hci5: command tx timeout [ 225.255064] Bluetooth: hci6: command tx timeout [ 225.328990] Bluetooth: hci7: command tx timeout [ 226.725037] Bluetooth: hci0: command tx timeout [ 226.917013] Bluetooth: hci1: command tx timeout [ 226.981137] Bluetooth: hci2: command tx timeout [ 227.045082] Bluetooth: hci3: command tx timeout [ 227.173141] Bluetooth: hci5: command tx timeout [ 227.173244] Bluetooth: hci4: command tx timeout [ 227.302519] Bluetooth: hci6: command tx timeout [ 227.365048] Bluetooth: hci7: command tx timeout [ 228.773148] Bluetooth: hci0: command tx timeout [ 228.965296] Bluetooth: hci1: command tx timeout [ 229.032974] Bluetooth: hci2: command tx timeout [ 229.093041] Bluetooth: hci3: command tx timeout [ 229.221068] Bluetooth: hci5: command tx timeout [ 229.221191] Bluetooth: hci4: command tx timeout [ 229.349261] Bluetooth: hci6: command tx timeout [ 229.461241] Bluetooth: hci7: command tx timeout [ 230.821179] Bluetooth: hci0: command tx timeout [ 231.014942] Bluetooth: hci1: command tx timeout [ 231.077031] Bluetooth: hci2: command tx timeout [ 231.141947] Bluetooth: hci3: command tx timeout [ 231.270345] Bluetooth: hci4: command tx timeout [ 231.270614] Bluetooth: hci5: command tx timeout [ 231.397229] Bluetooth: hci6: command tx timeout [ 231.526204] Bluetooth: hci7: command tx timeout [ 285.039727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.049075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.051847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.059533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.086443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.107345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.120386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.122303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.131350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.136004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.137649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.139306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.247334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.249212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.263196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.270165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.272258] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.272972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.328830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.339272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.339876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.364354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.414643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.501568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.501829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.502536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.513599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.515655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.516629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.516858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.518847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.523068] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.551238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.562551] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.567995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.568961] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.569475] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.577506] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.579518] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 285.580042] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.589508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.595195] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.598215] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.632302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.633204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.643120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.667520] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.679420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.141122] Bluetooth: hci0: command tx timeout [ 287.205427] Bluetooth: hci1: command tx timeout [ 287.334030] Bluetooth: hci2: command tx timeout [ 287.653023] Bluetooth: hci3: command tx timeout [ 287.653453] Bluetooth: hci5: command tx timeout [ 287.717197] Bluetooth: hci6: command tx timeout [ 287.717997] Bluetooth: hci4: command tx timeout [ 287.718168] Bluetooth: hci7: command tx timeout [ 289.189988] Bluetooth: hci0: command tx timeout [ 289.252970] Bluetooth: hci1: command tx timeout [ 289.382189] Bluetooth: hci2: command tx timeout [ 289.702054] Bluetooth: hci5: command tx timeout [ 289.702212] Bluetooth: hci3: command tx timeout [ 289.765019] Bluetooth: hci7: command tx timeout [ 289.765124] Bluetooth: hci4: command tx timeout [ 289.765144] Bluetooth: hci6: command tx timeout [ 291.238051] Bluetooth: hci0: command tx timeout [ 291.301175] Bluetooth: hci1: command tx timeout [ 291.430005] Bluetooth: hci2: command tx timeout [ 291.749983] Bluetooth: hci3: command tx timeout [ 291.750093] Bluetooth: hci5: command tx timeout [ 291.812994] Bluetooth: hci4: command tx timeout [ 291.814019] Bluetooth: hci6: command tx timeout [ 291.814111] Bluetooth: hci7: command tx timeout [ 293.286043] Bluetooth: hci0: command tx timeout [ 293.351933] Bluetooth: hci1: command tx timeout [ 293.478035] Bluetooth: hci2: command tx timeout [ 293.809962] Bluetooth: hci5: command tx timeout [ 293.810073] Bluetooth: hci3: command tx timeout [ 293.866965] Bluetooth: hci7: command tx timeout [ 293.867078] Bluetooth: hci6: command tx timeout [ 293.867181] Bluetooth: hci4: command tx timeout [ 347.467385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.470392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.472275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.474038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.476540] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.478008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.709603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.711173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.721024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.733397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.745595] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.752637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.791706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.795211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.800272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.806811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.818305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.819541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.834281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.843556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.846156] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.847378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.849148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.856468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.863901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.898483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.898514] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.901330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.914308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.915635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.922261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.937542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.940733] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.943182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.964800] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 347.968816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.990449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.991418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.991955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.993728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.994781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 347.995285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.021473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.049352] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.069250] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.165041] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.195977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.234179] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.541978] Bluetooth: hci0: command tx timeout [ 349.798095] Bluetooth: hci1: command tx timeout [ 349.928058] Bluetooth: hci3: command tx timeout [ 349.928467] Bluetooth: hci2: command tx timeout [ 349.989136] Bluetooth: hci4: command tx timeout [ 350.061287] Bluetooth: hci6: command tx timeout [ 350.061692] Bluetooth: hci5: command tx timeout [ 350.381431] Bluetooth: hci7: command tx timeout [ 351.589004] Bluetooth: hci0: command tx timeout [ 351.844963] Bluetooth: hci1: command tx timeout [ 351.974109] Bluetooth: hci2: command tx timeout [ 351.974391] Bluetooth: hci3: command tx timeout [ 352.038256] Bluetooth: hci4: command tx timeout [ 352.102062] Bluetooth: hci5: command tx timeout [ 352.102180] Bluetooth: hci6: command tx timeout [ 352.421923] Bluetooth: hci7: command tx timeout [ 353.648966] Bluetooth: hci0: command tx timeout [ 353.892964] Bluetooth: hci1: command tx timeout [ 354.022053] Bluetooth: hci2: command tx timeout [ 354.022166] Bluetooth: hci3: command tx timeout [ 354.086685] Bluetooth: hci4: command tx timeout [ 354.149204] Bluetooth: hci5: command tx timeout [ 354.149570] Bluetooth: hci6: command tx timeout [ 354.470939] Bluetooth: hci7: command tx timeout [ 355.685793] Bluetooth: hci0: command tx timeout [ 355.940951] Bluetooth: hci1: command tx timeout [ 356.069995] Bluetooth: hci3: command tx timeout [ 356.070108] Bluetooth: hci2: command tx timeout [ 356.133996] Bluetooth: hci4: command tx timeout [ 356.197986] Bluetooth: hci6: command tx timeout [ 356.198099] Bluetooth: hci5: command tx timeout [ 356.518038] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:28:19 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000020000 RCX=1ffffffff0fe149a RDX=dffffc0000000000 RSI=0000000000000200 RDI=ffffffff87f0a4d0 RBP=ffff88802eea8a50 RSP=ffff888027eff678 R8 =0000000000000000 R9 =fffffbfff0fe11e4 R10=ffffffff87f08f27 R11=0000000000000000 R12=ffff88802eea8000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000005 RIP=ffffffff84ab3040 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f462d528540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561bbc849868 CR3=0000000012bd6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800c5bfc58 RCX=ffffffff818a0802 RDX=ffff8880230e3780 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff8880091623c0 RSP=ffff88800c5bfaf8 R8 =0000000000000000 R9 =fffff9400003a500 R10=0000000000000000 R11=0000000000000000 R12=ffffea00001d2800 R13=0000000000000000 R14=0000000000000001 R15=ffff88800c5bfd98 RIP=ffffffff84ab3040 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6650159b80 CR3=000000003430c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000