Warning: Permanently added '[localhost]:55271' (ECDSA) to the list of known hosts. 2025/01/19 06:08:49 fuzzer started 2025/01/19 06:08:49 dialing manager at localhost:44245 syzkaller login: [ 73.405427] cgroup: Unknown subsys name 'net' [ 73.463463] cgroup: Unknown subsys name 'cpuset' [ 73.480762] cgroup: Unknown subsys name 'rlimit' [ 79.474301] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 90.472350] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 06:09:07 syscalls: 200 2025/01/19 06:09:07 code coverage: enabled 2025/01/19 06:09:07 comparison tracing: enabled 2025/01/19 06:09:07 extra coverage: enabled 2025/01/19 06:09:07 setuid sandbox: enabled 2025/01/19 06:09:07 namespace sandbox: enabled 2025/01/19 06:09:07 Android sandbox: enabled 2025/01/19 06:09:07 fault injection: enabled 2025/01/19 06:09:07 leak checking: enabled 2025/01/19 06:09:07 net packet injection: enabled 2025/01/19 06:09:07 net device setup: enabled 2025/01/19 06:09:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 06:09:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 06:09:07 USB emulation: enabled 2025/01/19 06:09:07 hci packet injection: enabled 2025/01/19 06:09:07 wifi device emulation: enabled 2025/01/19 06:09:07 802.15.4 emulation: enabled 2025/01/19 06:09:07 fetching corpus: 0, signal 0/0 (executing program) 2025/01/19 06:09:10 starting 8 fuzzer processes 06:09:10 executing program 0: socketpair(0xb, 0x4, 0x1000, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0xffffffffffffffff}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000480)={{0x3, 0x6}, {0xb1}, 0x9, 0x0, 0x5}) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000540)={0x8a, @tick=0x4, 0x8, {0x1f, 0x3}, 0x6, 0x0, 0x40}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000580)={'veth1_to_batadv\x00', @ifru_ivalue}) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000600)={0x3, 0x0, 0x1, 'queue0\x00', 0x80000000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x73}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x7d}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffa, 0x3b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000a80)={&(0x7f0000000980)="edc578d2011abfa4b92da2b3f241819249adaf6cfdfda607fdeaa53fa3fe1a9d30f1662283d39cc4c3db4cc92f1632b687deb0121939d2db7bb4d4b7458e9d55bda3c106efcda3205fd8eb40719fc1732d2b8322fb5fe3c786861e973ec1876b3746d3fa12c6fd54a99a90990af06a02e44b245cfdb0cb2086536e84b1a245ab905ce425a49568fcca66df7910a1d7693dc750cdb2e116d4014664bddcc87da8d0f796e2f1c9cc3f42533c959f8e1b3fb0b2e516a7824ea044a973b6cf9066b714ed502ffee372438175419588d6cfd5c3f6d13c7427d8c33a56", 0xda}, 0x1, 0x0, 0x0, 0x90}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000b00)={0x6, 0x2, {0xffffffffffffffff, 0x2, 0x2, 0x2, 0x7}, 0x2}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000bc0)={0x2, 0x7f, 0x80, {0xd6, 0xffffff9c}, 0x10000, 0xfc0100}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d00), r5) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) 06:09:10 executing program 1: eventfd(0xfffffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socketpair(0x1d, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r4 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x1, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x261bc4f9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0x80, 0x4, 0x1, 'queue0\x00', 0xf8}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'syzkaller0\x00', {0x2, 0x0, @dev}}) ioctl$sock_ifreq(r0, 0x3, &(0x7f0000000340)={'geneve1\x00', @ifru_flags}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)) recvmmsg(r2, &(0x7f0000001ec0)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/187, 0xbb}], 0x5, &(0x7f0000001800)=""/100, 0x64}, 0x6}, {{&(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001900)=""/180, 0xb4}, {&(0x7f00000019c0)=""/170, 0xaa}, {&(0x7f0000001a80)=""/32, 0x20}], 0x3, &(0x7f0000001b00)=""/22, 0x16}, 0x5}, {{&(0x7f0000001b40)=@l2tp6, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/140, 0x8c}, {&(0x7f0000001d40)=""/166, 0xa6}, {&(0x7f0000001e00)=""/126, 0x7e}], 0x4}, 0x10001}], 0x3, 0x10, &(0x7f0000001f80)) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000001fc0)=0x1, 0x4) pipe2(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f0000002040)={0x8, 0x3, 0x1, {0x57, 0xfffffffa}, 0x0, 0x5a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002480)={0x124, 0x0, &(0x7f0000002300)=[@acquire_done={0x40106309, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000020c0)={@flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x0, 0x3}}, &(0x7f0000002140)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002180)={@fda={0x66646185, 0x3, 0x1, 0x1d}, @flat=@handle={0x73682a85, 0x2000, 0x1}, @flat=@handle={0x73682a85, 0x10a}}, &(0x7f0000002200)={0x0, 0x20, 0x38}}, 0x1400}, @clear_death={0x400c630f, 0x1}, @register_looper, @register_looper, @enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002240)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @fda={0x66646185, 0xa, 0x0, 0x30}}, &(0x7f00000022c0)={0x0, 0x18, 0x30}}, 0x1000}, @request_death={0x400c630e, 0x3}], 0x13, 0x0, &(0x7f0000002440)="447a755238560f29dc1606dcfb6d0ec03e1f97"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x60}}, 0x20040000) 06:09:10 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x8d58, 0x0, 0x0, 0x363, 0x0, r0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0xf, 0x80000, 0x577, &(0x7f0000006480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000006500), 0xffffffffffffffff) pipe2(&(0x7f0000006540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000006600)={&(0x7f00000064c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000065c0)={&(0x7f0000006580)={0x2c, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x2c}}, 0x884) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000006640)=""/71) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000066c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000006700)={0x1, 0x5, 0x36f, {0x7, 0x80000001}, 0x2, 0x100}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006780)='/proc/key-users\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f00000067c0)={0x10, @time={0x8, 0x1000}, 0x5, {0x3, 0x2}, 0x18, 0x1, 0x3f}) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000006800)={0x1, 0x2, 0xffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000006880)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000006ac0)={&(0x7f0000006840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006900)={0x16c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000006b00)={0x1f, 0xf08, 0x1, 'queue1\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000006bc0)={{0x8, 0x20}, {0xe1, 0x4}, 0xf03, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000006c40)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000006d00)={0x2}) 06:09:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x4, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x110b}) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f00000000c0)={0x1, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x8, 0x0, {0x3, 0x3, 0x400, 0x2, 0xd7}, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x201, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000001c0)={0x200, 0x1, 0x800, {0x5, 0x2}, 0x9d7a, 0x1ff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) write$cgroup_int(r2, &(0x7f0000000280), 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x18b}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/209, 0xd1, 0x0, 0x32}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x400}], 0x35, 0x0, &(0x7f0000000500)="ab08a8753cf09336c2c5b00f3382f290f002538fdf03541bd08222d6359a6c31c30cd80b81db48751709681c59ada04f9e9cd0ce45"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)) write$tcp_congestion(r1, &(0x7f00000005c0)='reno\x00', 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair(0xa, 0x1, 0x9, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb3a}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x153c}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4c004}, 0x2257c48f71dc2b59) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000880)={0x40, @tick=0x7, 0x4d, {0x8, 0xad}, 0x4, 0x2, 0x8}) 06:09:10 executing program 4: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000080)=""/178) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$bt_hci(r0, &(0x7f0000000200)={0x1, @disconnect={{0x406, 0x3}, {0xc8, 0xb8}}}, 0x7) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000240)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000280)=0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000012c0)=@get={0x1, &(0x7f00000002c0)=""/4096, 0x3}) r2 = socket(0x8, 0x4, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001300)="5bc4f417fdb48da9fba469484743bd25", 0x10) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001340)) pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000013c0)={0x1f, 0x1, {0x0, 0x2, 0xfffffffa}, 0x200}) recvmmsg(r4, &(0x7f0000002c00)=[{{&(0x7f0000001440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/181, 0xb5}, {&(0x7f0000001580)=""/81, 0x51}], 0x2, &(0x7f0000001640)=""/221, 0xdd}, 0xfffffff9}, {{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000017c0)=""/183, 0xb7}, {&(0x7f0000001880)=""/223, 0xdf}, {&(0x7f0000001980)=""/50, 0x32}, {&(0x7f00000019c0)=""/245, 0xf5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/26, 0x1a}], 0x6, &(0x7f0000002b80)=""/85, 0x55}, 0x5f9}], 0x2, 0x10020, &(0x7f0000002c80)) bind$802154_raw(r5, &(0x7f0000002cc0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000002d00)) r6 = getpgid(0x0) rt_sigqueueinfo(r6, 0x38, &(0x7f0000002d40)={0x18, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000002e00)={0x1000, 0xe, 0x0, {0x9, 0xffffffff}, 0xffffffff, 0x81}) [ 93.406806] audit: type=1400 audit(1737266950.323:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:09:10 executing program 5: syz_io_uring_setup(0xbbf, &(0x7f0000000000)={0x0, 0xe0cb, 0x20, 0x1, 0x360}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x8, &(0x7f0000000740)=[{&(0x7f0000000180)="c5aab15870d8f68f1af52f4e0fa408f6910692a5f79377a810f68d3c2d2059d7c16d75d433e3a3891f8aee4133338ee012e305a406ae7853388d4a3ddc01ccf1da62116adf946361fdf662a17832d13ddfb0b46947b38dc13cd54a913762f9b6abea5ace89891a4505eece9ad4fbfe924fb0cde8fd47eb56446dbdbc1d95adc4db377921e45e5fceecb40d94ed8264b1319ef31709fdb139998bdb08f058cb4a92492d20d91a2527423ae633d1343303ae01f3f87f06a83486e251a93b385263ade4cef55bec", 0xc6, 0xee0}, {&(0x7f0000000280)="5165601de48360d6905cd5866328adf417807f4d37b5eece25930e6dd660ec396bd49cb84b5efb1ead96", 0x2a, 0x3ff}, {&(0x7f00000002c0)="da19031ce9fefef34c309e13e4b31e8d275d5f007b7014efc38265e28932349cdd752e7c925d80f955a55f333ec7ac0d8d9513778fd077a4266bf1dcc5a0d97db936ca2f83958633133298db0c79ecbb3e3aa79fb91feecd349604782fb93812a49afcfd75106c9479121f077ac6ec73e9de4eb1dbec97b62dbf74ccb24bedac21e725d7fb198e6a288f28d0f1e38d4b10a3df4ab60dfcb7a3056205dcd6bb1a74367bd9025e9e02fa83ed7c7d12f211e0f26c884428841c41bfab57a78ff880fc4c1f4994b761cfae926d1da32348b89817ac3ba7349ae960c8f7ea06ca", 0xde, 0x40}, {&(0x7f00000003c0)="21110a507c9c8cff074981e7d33cd65e8567c8343e9da2773ba42cec3e34008c8e8b2e72d394a01b53980e61e1e3c07c5c2a7e0e3630d32f154d99", 0x3b, 0x6}, {&(0x7f0000000400)="90a994a7b64a42e45b30bd288663fb87ecaec7878ff16084e5cd156d3f9b9906dd8ee5811158863cfcb14fa08ec190df832f5fa1b72b442b163036baaf4f3cdcd99efa09364bdd0a3711a40d6c9da8c29a6cf7c8e73cc0a6cd82d7d065dad8e9604d55df965191b2cf60790f8963cb46295b1aaa53f4f72aa4074047ad6f9d30d5d69fe58c8a256227c33d16d8a82f3a5d7da328686cc19a6a0db18d32f61ff03cbe3ea6575ce17e4437758e01741dec443f31f8db9c699cf6777a285c422ed6e22ca81ba5bd1ff5da8663f29a18441269d69a0ee5ba1fe064a7", 0xda, 0x6}, {&(0x7f0000000500)="fc38ec9f9670bbaad420c4175235cac481d680786e11af85ab1c5fc991411afdba398895334dfad1fa624860b4990c033d9eab273598799a4affe3bc94d1d1e8d9e8325c2caaace2e0ebc2046dea975f36e69fc7f032a040189a4d9f810dc07d961413bf4452a28a16aca7ce9e12bf41bb282d3dd2285338b3a4028e65f24e22ceabbe74f4c956ba4512a8480a0044db3c13f6b8140ac87dffe30e", 0x9b, 0x3}, {&(0x7f00000005c0)="94970e3232d243c060367ba434354d06581d9f2ebf5f24394d826d22425964f76a14db56a0e91be89d25e923de6509708994047dc8a41c338e1c6b9cac151431148626ac0d7b402e882414e63438e8087fd7c0325671b489c1909c13c7ffe654ac01f79a114cecec", 0x68, 0xfff}, {&(0x7f0000000640)="e52092bcdaf468d725e600c737e124fac83106285bc15251f9b2f20911e7c10390811022242a09a08382c5a45c7fd92aaa2e7e19606d87d64142fc9a0626778baa97d0d6982015ec4f92f8180a32cb86bb1b88400222fc5bcafbab8bcfb4c6e742d592ec2f421a8aba7779a269d563de777fb78484f6dc2a6689eddffde9553ab0d478ae23cfb25243e110ded3c0bd244e3f510779cd9f71d0269bfa2d3fa61fbfdb39496309fe6faf72577ed22f573ca3fba966d10332a5ea2a2fbcae502cdea7d5822422c0ec", 0xc7, 0x4f}], 0x0, &(0x7f0000000800)={[{@huge_never}], [{@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '::)*'}}, {@pcr={'pcr', 0x3d, 0x31}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@euid_gt={'euid>', 0xee00}}]}) syz_io_uring_submit(0x0, r0, &(0x7f0000000900)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r1, 0x0, &(0x7f00000008c0)='./file0\x00', 0x80, 0x101000, 0x23456}, 0xffffffff) fchmodat(r1, &(0x7f0000000940)='./file0\x00', 0x40) statx(r1, &(0x7f0000000dc0)='./file0\x00', 0x4000, 0x400, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_mount_image$nfs4(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x9, 0x5, &(0x7f0000000d40)=[{&(0x7f0000000a00)="17221b537babb8e52c3e855cbd9ae0b343f5cc", 0x13, 0x4}, {&(0x7f0000000a40)="0c15a946093c5c1a90d064e6928a7b3f54847ce007808a140ff951cf83d999bf375ad5b8e51cb1675a805b8f0e92b6bf2d787015b960851480df911f131b3ef2dde7199041526564127ec4600fb0cc0ec1329939fb5d950ecc4ee11a7506c10add78528a5a0fa1d2712b3c69356934587942aec03fb1a11ae5ee354c0c2cc27868e792ca6fc455923caf2395d51dbe579cf57a091130eb3438bd817e53fc4cce8c0130d53c0e23986f637b20079c9f085197ea457fca2e00a18f43f327de9fd5e9efe958387d6025443f493dce5e0dc3795dc0bc3f39db26f306e99f3249ad40cb8f9415cea48fb67fdb5cce", 0xec, 0x3}, {&(0x7f0000000b40)="8b3a05f837b5d72d6f14900b133e4d939fbedb7c74fcf526cf3f6f7c78de162790070ccdde2bb3f58eef320efd04f8e0fbb9322bb992295abf56591bdbbbd160fc3071c7493731197ca4fae248b84682a2e0401ba09dc1e1b41c6ee63a9e68b7cd5729953bf7fead077a9a6a4488649b6f9ddad415c651d2d7f6a06c4af8bc763cdf95c0764a1f4e0c1b87ad166957166e7e63ffe16bec6702eb7dfc", 0x9c, 0x793}, {&(0x7f0000000c00)="85132c9345cc30ae1ac8aa604dd4e6de9e8e85b1f8e776fe48b081021ab5f81a94863b0c55149ddbd6c4a52e86a554b7eeb8611fe3d08888aff71a17bd86de77955405c5aa56cf083568988ad443d8494d20986993b36c173cd437238abd524883fa5a48ccd4d715ce33dd253529bfd68ccc7df27edd4ee78354fb7abe72af42f995fdb9ee03a401b34ce2936ecd7d56165c7dab93ebd6923372d78a7916f5c975ebc94354edef7554679f0f4793e29cb3ddd261d13967a575e063562435e86aacad0036e25bf25047aec00a", 0xcc}, {&(0x7f0000000d00)="92f6d9bec80544a3f027eee40e172155b1905fa3a5cd755b5991fc1af7a6af5d9fd246db8ed96cd0cf037880c0fd0c7b1e2a70dad02df35623d6f497af91e5", 0x3f, 0x793}], 0x102830, &(0x7f0000000f00)={[{'smackfstransmute'}, {'\xa5*'}, {}, {'#@.\\\'!}:%:,'}, {}, {'smackfstransmute'}, {'mask'}, {'tmpfs\x00'}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@obj_role={'obj_role', 0x3d, '@%\\#'}}, {@dont_measure}, {@euid_gt={'euid>', r2}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@dont_appraise}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'pcr'}}]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x202000) fchmodat(r4, &(0x7f0000001040)='./file0\x00', 0x52) write$rfkill(0xffffffffffffffff, &(0x7f0000001080)={0x7fffffff}, 0x8) socketpair(0x0, 0x80000, 0x400, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000001100)=@generic={0x1, 0x9, 0x3}) fchmodat(r3, &(0x7f0000001140)='./file0\x00', 0x91) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000001180)={0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000001200)={0x7}) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, &(0x7f0000001240)=""/91, &(0x7f00000012c0)=0x5b) r7 = getpgid(0xffffffffffffffff) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x164, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4010}, 0x14000810) fchmodat(r3, &(0x7f0000001540)='./file0\x00', 0x1) 06:09:10 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x3f, 0x4}, 0x1, 0x5, 0x400, {0x1}, 0x81, 0x3ff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x20, 0x8, 0x20, 0x5}, {0x1, 0x5, 0x4e, 0x7}, {0x5, 0x1, 0x3, 0x6}, {0x7ff, 0x1, 0x3f, 0x2}, {0xffff, 0x5f, 0x5, 0x1}, {0x1ff, 0x1, 0x95, 0x6d00}, {0xccb, 0x3, 0x1}, {0xfbff, 0xc5, 0x0, 0x101}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xf2, 0x9, 0x0, 'queue0\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000280)={{0x7, 0x4}, {0x7, 0x4}, 0x97, 0x2}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000003c0)={r5, 0x0, 0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000400)={0x1, 0x2, 'client0\x00', 0x7, "bb88bc65e068281e", "a4563fb12efe2258e4841edc707b7f23af85618d433db75a94f4e4ce96173aa8", 0x2, 0x7fffffff}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000004c0)={0x2, 0x200, 0xb0}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000500)=r5) io_uring_setup(0x5183, &(0x7f0000000540)={0x0, 0x4335, 0x8, 0x3, 0x84, 0x0, r3}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000600)={0x4, 0x3, 0x10001, {0x4, 0x3380000}, 0x6, 0x400}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000800)={0x101, @tick=0x4, 0x1f, {0x2, 0x9a}, 0x56, 0x0, 0x5}) 06:09:10 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={0x3cfc, 0x2, 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x11, @time={0x10000, 0xfffffffc}, 0x0, {0x4, 0x2f}, 0x3a, 0x1, 0x40}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={0x0, 0x1, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x1f, 0x1}, 0x0, 0x8, 0x0, {0x1f}, 0x4, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)={0x1}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socketpair(0x2b, 0x5, 0x5, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/102, 0x66}], 0x2, &(0x7f00000004c0)=""/44, 0x2c}, 0x1f}, {{&(0x7f0000000500)=@tipc=@id, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/5, 0x5}, {&(0x7f0000001600)=""/236, 0xec}, {&(0x7f0000001700)=""/167, 0xa7}, {&(0x7f00000017c0)=""/12, 0xc}, {&(0x7f0000001800)=""/252, 0xfc}, {&(0x7f0000001900)=""/232, 0xe8}, {&(0x7f0000001a00)=""/98, 0x62}], 0x9, &(0x7f0000001b40)=""/79, 0x4f}, 0x7086}, {{&(0x7f0000001bc0)=@un=@abs, 0x80, &(0x7f0000002040)=[{&(0x7f0000001c40)=""/181, 0xb5}, {&(0x7f0000001d00)=""/18, 0x12}, {&(0x7f0000001d40)=""/111, 0x6f}, {&(0x7f0000001dc0)=""/21, 0x15}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/140, 0x8c}, {&(0x7f0000001f40)=""/226, 0xe2}], 0x7, &(0x7f00000020c0)=""/234, 0xea}, 0xfff}, {{&(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002240)=""/27, 0x1b}, {&(0x7f0000002280)=""/78, 0x4e}, {&(0x7f0000002300)=""/15, 0xf}], 0x3, &(0x7f0000002380)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003400)=""/214, 0xd6}, {&(0x7f0000003500)=""/60, 0x3c}], 0x2}, 0x3}, {{&(0x7f0000003580)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003600)=""/78, 0x4e}, {&(0x7f0000003680)=""/110, 0x6e}, {&(0x7f0000003700)=""/21, 0x15}, {&(0x7f0000003740)=""/236, 0xec}, {&(0x7f0000003840)=""/42, 0x2a}, {&(0x7f0000003880)=""/154, 0x9a}, {&(0x7f0000003940)=""/206, 0xce}], 0x7}}, {{&(0x7f0000003ac0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/79, 0x4f}, {&(0x7f0000003bc0)=""/115, 0x73}], 0x2, &(0x7f0000003c80)=""/248, 0xf8}, 0x7}, {{&(0x7f0000003d80)=@rc, 0x80, &(0x7f0000004180)=[{&(0x7f0000003e00)=""/216, 0xd8}, {&(0x7f0000003f00)=""/166, 0xa6}, {&(0x7f0000003fc0)=""/109, 0x6d}, {&(0x7f0000004040)=""/34, 0x22}, {&(0x7f0000004080)=""/253, 0xfd}], 0x5, &(0x7f0000004200)=""/219, 0xdb}, 0xffffff80}], 0x8, 0x40, &(0x7f0000004500)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000004600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004540)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000004640)) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000004740)={'batadv_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000047c0)={0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004800)='/proc/asound/seq/clients\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004840)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000004940)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004900)={&(0x7f0000004880)={0x64, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x64}}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004a40)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, &(0x7f0000004980)="f68571d7d48b9723a69f855be4ea2de7529e207545945fc22ab1ab34d403ccc577e37f94ae96154da1aabad7de73339d9e8f7a8dfd1fc86fc0466a4069bbf75e8f84c4ed9defe9a7c9d7a3d1e2608220aff019ac7bb46088b6c5829f9b51c8e7a5fcb28a4f53809c06fbecd0570c361d567dec3454d5bb04b0bdf33dd05a61ec5af97d8ad8cd28baeba2e654bde459c49d5b7220f6f27f0b6471bf32a2", 0x9d, 0x40011}, 0x800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000004a80)) [ 94.910473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.912796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.913876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.916124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.917519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.918551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.926014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.947236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.950411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.960549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.965000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.975302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.070562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.076309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.092082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.098469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.107384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.110068] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.127900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.131376] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.132643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.137036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.148146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.158261] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.163218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.169056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.184360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.228184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.236051] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.237642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.242493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.248949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.251694] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.259417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.263390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.299724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.305602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.309176] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.316143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.319674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.323053] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.324261] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.332967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.344942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.355233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.355267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.359155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.360481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.991586] Bluetooth: hci0: command tx timeout [ 97.055176] Bluetooth: hci1: command tx timeout [ 97.182989] Bluetooth: hci2: command tx timeout [ 97.247375] Bluetooth: hci3: command tx timeout [ 97.310985] Bluetooth: hci4: command tx timeout [ 97.375007] Bluetooth: hci5: command tx timeout [ 97.375311] Bluetooth: hci6: command tx timeout [ 97.438945] Bluetooth: hci7: command tx timeout [ 99.039201] Bluetooth: hci0: command tx timeout [ 99.103912] Bluetooth: hci1: command tx timeout [ 99.232881] Bluetooth: hci2: command tx timeout [ 99.296078] Bluetooth: hci3: command tx timeout [ 99.358931] Bluetooth: hci4: command tx timeout [ 99.423958] Bluetooth: hci5: command tx timeout [ 99.424045] Bluetooth: hci6: command tx timeout [ 99.487952] Bluetooth: hci7: command tx timeout [ 101.088262] Bluetooth: hci0: command tx timeout [ 101.151954] Bluetooth: hci1: command tx timeout [ 101.279977] Bluetooth: hci2: command tx timeout [ 101.343969] Bluetooth: hci3: command tx timeout [ 101.407912] Bluetooth: hci4: command tx timeout [ 101.472099] Bluetooth: hci6: command tx timeout [ 101.472355] Bluetooth: hci5: command tx timeout [ 101.534987] Bluetooth: hci7: command tx timeout [ 103.136017] Bluetooth: hci0: command tx timeout [ 103.198994] Bluetooth: hci1: command tx timeout [ 103.326902] Bluetooth: hci2: command tx timeout [ 103.391877] Bluetooth: hci3: command tx timeout [ 103.454964] Bluetooth: hci4: command tx timeout [ 103.521076] Bluetooth: hci5: command tx timeout [ 103.521168] Bluetooth: hci6: command tx timeout [ 103.583880] Bluetooth: hci7: command tx timeout [ 157.488502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.490681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.492418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.499498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.504439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.507544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.570983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.572405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.573587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.579021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.580679] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.581655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.586012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.591704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.598118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.608517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.615969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.616146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.624989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.627343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.628396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.633965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.658666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.662292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.663669] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.663721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.666982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.667898] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.669687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.675154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.749580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.753004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.753565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.758990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.759754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.764877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.771507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.776726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.783635] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.791701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.799608] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.800951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.814928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.818895] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.819325] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.823433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.824910] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.826114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.584138] Bluetooth: hci0: command tx timeout [ 159.646879] Bluetooth: hci3: command tx timeout [ 159.711023] Bluetooth: hci2: command tx timeout [ 159.711331] Bluetooth: hci4: command tx timeout [ 159.774917] Bluetooth: hci1: command tx timeout [ 159.902923] Bluetooth: hci5: command tx timeout [ 159.903859] Bluetooth: hci7: command tx timeout [ 159.904002] Bluetooth: hci6: command tx timeout [ 161.631424] Bluetooth: hci0: command tx timeout [ 161.696885] Bluetooth: hci3: command tx timeout [ 161.760181] Bluetooth: hci2: command tx timeout [ 161.760316] Bluetooth: hci4: command tx timeout [ 161.822936] Bluetooth: hci1: command tx timeout [ 161.953308] Bluetooth: hci6: command tx timeout [ 161.953629] Bluetooth: hci7: command tx timeout [ 161.953780] Bluetooth: hci5: command tx timeout [ 163.679943] Bluetooth: hci0: command tx timeout [ 163.742968] Bluetooth: hci3: command tx timeout [ 163.807038] Bluetooth: hci4: command tx timeout [ 163.808240] Bluetooth: hci2: command tx timeout [ 163.871907] Bluetooth: hci1: command tx timeout [ 163.999747] Bluetooth: hci5: command tx timeout [ 164.001540] Bluetooth: hci7: command tx timeout [ 164.001630] Bluetooth: hci6: command tx timeout [ 165.727856] Bluetooth: hci0: command tx timeout [ 165.791032] Bluetooth: hci3: command tx timeout [ 165.854933] Bluetooth: hci4: command tx timeout [ 165.855032] Bluetooth: hci2: command tx timeout [ 165.918938] Bluetooth: hci1: command tx timeout [ 166.047032] Bluetooth: hci6: command tx timeout [ 166.048079] Bluetooth: hci5: command tx timeout [ 166.048224] Bluetooth: hci7: command tx timeout [ 219.306200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.314341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.317913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.334071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.337650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.340710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.431215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.436169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.438376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.443673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.448036] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.450554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.562996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.571161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.573310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.578517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.582620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.585749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.697253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.703176] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.712068] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.721139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.729375] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.734030] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.825117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.835107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.837345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.845666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.848269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.850150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.857595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.877921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.893700] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.958159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.960984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.962525] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.966024] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.974194] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.979173] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.980829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.981839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.982205] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.001535] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.008335] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.026106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.074952] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.098095] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.111635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.406921] Bluetooth: hci0: command tx timeout [ 221.470920] Bluetooth: hci1: command tx timeout [ 221.662938] Bluetooth: hci2: command tx timeout [ 221.792874] Bluetooth: hci3: command tx timeout [ 221.918968] Bluetooth: hci4: command tx timeout [ 222.111124] Bluetooth: hci6: command tx timeout [ 222.112212] Bluetooth: hci5: command tx timeout [ 222.239869] Bluetooth: hci7: command tx timeout [ 223.455139] Bluetooth: hci0: command tx timeout [ 223.518981] Bluetooth: hci1: command tx timeout [ 223.710938] Bluetooth: hci2: command tx timeout [ 223.838949] Bluetooth: hci3: command tx timeout [ 223.967137] Bluetooth: hci4: command tx timeout [ 224.159885] Bluetooth: hci5: command tx timeout [ 224.161316] Bluetooth: hci6: command tx timeout [ 224.287214] Bluetooth: hci7: command tx timeout [ 225.504854] Bluetooth: hci0: command tx timeout [ 225.566873] Bluetooth: hci1: command tx timeout [ 225.760905] Bluetooth: hci2: command tx timeout [ 225.887840] Bluetooth: hci3: command tx timeout [ 226.016847] Bluetooth: hci4: command tx timeout [ 226.206899] Bluetooth: hci6: command tx timeout [ 226.207004] Bluetooth: hci5: command tx timeout [ 226.334877] Bluetooth: hci7: command tx timeout [ 227.551917] Bluetooth: hci0: command tx timeout [ 227.616008] Bluetooth: hci1: command tx timeout [ 227.808836] Bluetooth: hci2: command tx timeout [ 227.935052] Bluetooth: hci3: command tx timeout [ 228.065854] Bluetooth: hci4: command tx timeout [ 228.256840] Bluetooth: hci5: command tx timeout [ 228.256939] Bluetooth: hci6: command tx timeout [ 228.383863] Bluetooth: hci7: command tx timeout [ 282.220691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.229997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.233346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.235956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.237550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.238917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.348073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.353140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.354395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.362103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.365547] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.368869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.419132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.422103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.424015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.425238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.428301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.429827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.430907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.441248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.460327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.499592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.500172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.509222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.511462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.516163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.559026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.564986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.570214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.575952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.591713] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.609612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.618237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.626729] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.645315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.687477] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.706274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.713248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.716497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.717141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.717528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.728413] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.729410] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.742298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.743448] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.746260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.747669] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.748649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.256027] Bluetooth: hci0: command tx timeout [ 284.383039] Bluetooth: hci1: command tx timeout [ 284.447842] Bluetooth: hci2: command tx timeout [ 284.641858] Bluetooth: hci3: command tx timeout [ 284.702934] Bluetooth: hci4: command tx timeout [ 284.830977] Bluetooth: hci6: command tx timeout [ 284.832567] Bluetooth: hci7: command tx timeout [ 284.832946] Bluetooth: hci5: command tx timeout [ 286.304039] Bluetooth: hci0: command tx timeout [ 286.431922] Bluetooth: hci1: command tx timeout [ 286.495913] Bluetooth: hci2: command tx timeout [ 286.687983] Bluetooth: hci3: command tx timeout [ 286.750841] Bluetooth: hci4: command tx timeout [ 286.880278] Bluetooth: hci6: command tx timeout [ 286.880367] Bluetooth: hci5: command tx timeout [ 286.880400] Bluetooth: hci7: command tx timeout [ 288.351850] Bluetooth: hci0: command tx timeout [ 288.479935] Bluetooth: hci1: command tx timeout [ 288.542851] Bluetooth: hci2: command tx timeout [ 288.735798] Bluetooth: hci3: command tx timeout [ 288.798945] Bluetooth: hci4: command tx timeout [ 288.927094] Bluetooth: hci5: command tx timeout [ 288.927185] Bluetooth: hci7: command tx timeout [ 288.927224] Bluetooth: hci6: command tx timeout [ 290.399232] Bluetooth: hci0: command tx timeout [ 290.527038] Bluetooth: hci1: command tx timeout [ 290.591262] Bluetooth: hci2: command tx timeout [ 290.783251] Bluetooth: hci3: command tx timeout [ 290.847041] Bluetooth: hci4: command tx timeout [ 290.975219] Bluetooth: hci7: command tx timeout [ 290.975839] Bluetooth: hci6: command tx timeout [ 290.975947] Bluetooth: hci5: command tx timeout [ 344.495097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.502260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.505181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.516163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.522222] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.524948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.556425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.561262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.563016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.568567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.571525] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.572479] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.887456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.897369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.899187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.906393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.910399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.919263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.919376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.938079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.938392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.956254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.960069] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.962266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.009914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.013907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.017249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.045436] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.048476] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.050479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.052712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.069634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.098213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.139723] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.187323] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.222178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.228335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.233304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.238137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.256278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.258494] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.277222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.282174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.314201] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.323417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.330450] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.338025] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.342904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.590901] Bluetooth: hci0: command tx timeout [ 346.654833] Bluetooth: hci1: command tx timeout [ 347.038936] Bluetooth: hci2: command tx timeout [ 347.102949] Bluetooth: hci3: command tx timeout [ 347.230872] Bluetooth: hci5: command tx timeout [ 347.361010] Bluetooth: hci4: command tx timeout [ 347.422819] Bluetooth: hci7: command tx timeout [ 347.486826] Bluetooth: hci6: command tx timeout [ 348.638838] Bluetooth: hci0: command tx timeout [ 348.704888] Bluetooth: hci1: command tx timeout [ 349.087799] Bluetooth: hci2: command tx timeout [ 349.150844] Bluetooth: hci3: command tx timeout [ 349.278826] Bluetooth: hci5: command tx timeout [ 349.407794] Bluetooth: hci4: command tx timeout [ 349.470851] Bluetooth: hci7: command tx timeout [ 349.535838] Bluetooth: hci6: command tx timeout [ 350.686873] Bluetooth: hci0: command tx timeout [ 350.750939] Bluetooth: hci1: command tx timeout [ 351.135000] Bluetooth: hci2: command tx timeout [ 351.198825] Bluetooth: hci3: command tx timeout [ 351.329451] Bluetooth: hci5: command tx timeout [ 351.455193] Bluetooth: hci4: command tx timeout [ 351.518802] Bluetooth: hci7: command tx timeout [ 351.583813] Bluetooth: hci6: command tx timeout [ 352.734847] Bluetooth: hci0: command tx timeout [ 352.799538] Bluetooth: hci1: command tx timeout [ 353.183826] Bluetooth: hci2: command tx timeout [ 353.246843] Bluetooth: hci3: command tx timeout [ 353.374857] Bluetooth: hci5: command tx timeout [ 353.502850] Bluetooth: hci4: command tx timeout [ 353.566849] Bluetooth: hci7: command tx timeout [ 353.632821] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:14:18 Registers: info registers vcpu 0 RAX=ffffffff819a9ac1 RBX=ffffffff815ec430 RCX=0000000000000001 RDX=1ffff11004d83f14 RSI=ffffffff819a9ac1 RDI=ffffffff819a9ac1 RBP=ffff888026c1f8e0 RSP=ffff888026c1f848 R8 =0000000000000001 R9 =ffff888026c1f888 R10=000000000003ab4d R11=000000000002099b R12=ffff888026c1f910 R13=0000000000000000 R14=ffff88802f3f1bc0 R15=0000000000000cc0 RIP=ffffffff812d1b40 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f59f2c63540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ff5a2ba008 CR3=000000002ad62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000fe0 RCX=ffffffff81af15c0 RDX=ffff88800a531bc0 RSI=0000000000000010 RDI=0000000000000007 RBP=ffff88800f3fb200 RSP=ffff88802e207cd8 R8 =0000000000000001 R9 =ffffed1001e7f63f R10=ffff88800f3fa220 R11=0000000000000000 R12=ffff88800f3fa220 R13=0000000000000000 R14=ffff88800f3fb1ff R15=0000000000000fe0 RIP=ffffffff81719ab6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f82ca1ae540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005615958864c8 CR3=0000000034bd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000