Warning: Permanently added '[localhost]:53830' (ECDSA) to the list of known hosts. 2025/04/27 17:02:38 fuzzer started 2025/04/27 17:02:38 dialing manager at localhost:46629 syzkaller login: [ 87.189703] cgroup: Unknown subsys name 'net' [ 87.325344] cgroup: Unknown subsys name 'cpuset' [ 87.364470] cgroup: Unknown subsys name 'rlimit' 2025/04/27 17:02:55 syscalls: 202 2025/04/27 17:02:55 code coverage: enabled 2025/04/27 17:02:55 comparison tracing: enabled 2025/04/27 17:02:55 extra coverage: enabled 2025/04/27 17:02:55 setuid sandbox: enabled 2025/04/27 17:02:55 namespace sandbox: enabled 2025/04/27 17:02:55 Android sandbox: enabled 2025/04/27 17:02:55 fault injection: enabled 2025/04/27 17:02:55 leak checking: enabled 2025/04/27 17:02:55 net packet injection: enabled 2025/04/27 17:02:55 net device setup: enabled 2025/04/27 17:02:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 17:02:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 17:02:55 USB emulation: enabled 2025/04/27 17:02:55 hci packet injection: enabled 2025/04/27 17:02:55 wifi device emulation: enabled 2025/04/27 17:02:55 802.15.4 emulation: enabled 2025/04/27 17:02:55 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 17:02:57 starting 8 fuzzer processes 17:02:57 executing program 0: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0xffff8001, 0x3ff, 0x1f, 0x9, 0x79d4, 0x81, 0xfffffffffffffffd}) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = getegid() r3 = getgid() getgroups(0x7, &(0x7f0000000100)=[0xee01, r1, 0xee01, r2, 0x0, 0xee01, r3]) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80800) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x2000, &(0x7f0000000280)={r7, r8+60000000}) clock_settime(0x6, &(0x7f00000002c0)) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) getpeername$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x16fa) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) prctl$PR_SET_ENDIAN(0x14, 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) getgroups(0x4, &(0x7f0000000440)=[r0, r4, 0xee00, r0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x40010, r5, 0x5fea3000) 17:02:57 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x7ff, 0x7, 0x3, 0x3}, 0x10) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@phonet={0x23, 0x3f, 0xff, 0x9b}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="b7f8c01820e0df4428dac7d032c6f8a3ef221914ec00e36c544b3eeb9dd3f80316bcba088b8844a735d98fae15dc6cad95c766020ddc91d46d13e2598e2d0fb3317ff19e7e22aa9f5201ab4c3a2df90adcf992f287b25e44227d3a5209c48407bc0fa0309b5b25688bee3dd4ab5803d28d598a4f3aa4aae87a254b14eccb03ac3e4d84ebae47d4bbe9880ccd0cfa9913654714b6a7c582421e9b00b8d24061e3cc415af13e2cdd23b5d061ec9d95399169ee2dc36d41c8eea3923f045d468173005497d9", 0xc4}, {&(0x7f0000000240)="59b88e1aaa8406b095b826238a79ad2d72c12e278980503c49cedbadf644dcf083a016eca06e78727cea7243cb1f32f644a23a3bff5c1fca9b2c7dcc77c60dbef4b2a4de1e45dffe3f37cc138764bdb8d02879daf907024301b523668d501d053803cdc4f33892cef485a780e19bece108aa083fde64c5680f53490f9dd729dd751a2c07ffcf31dc0b6ee7208609e190c8f8d91155b7deb065457867494984012180df4df413f9fde1824f43b15ad52cac697f0dd2907674a22e1451c317436a2bff735a7b12741c523413415488afd14e", 0xd1}, {&(0x7f0000000340)="ef4903f16030926750415cd7619b6515b985b66e3aebdc645e5200d1eae21c8134c91783b96e02cc5e8ebd3107a2fa0bf6edf6d927e39cfbcf7c74cf66e5e21161695be09a227e7f86d845e99548e50317ef4c441c35aded84c5330f80f7614a099a9744ba89b8c77246c80fcc91f02dfe3ff3aaef97c5f40ef9ed559267ce0354", 0x81}, {&(0x7f0000000400)="f35ab7d3e41cd25048648c98ccc92c4d23b6ce76665158b0fb0d5a4cacaf925ed3798b16e4c9242e0e7c60a3e86849738add82937c78ac31a2f89b345f88aaf594042f004167e925b9a2bfa9431baf82a0875e8d53492cf0566dbecaebc70bfc149e3c57cf399e7d6185f92d22affd23096995165ea0a917d73fe1cde9a821284dd226b2bf77334f2350546fbb1c420dce59c385ee02a0a1f9dfd5b81f7d09be2a49", 0xa2}, {&(0x7f00000004c0)}], 0x5, &(0x7f0000000580)=[{0x68, 0x114, 0x101, "060238a5ac2ded0ef7c2f0a217756787aa17512fb8eef2b01d5c026f45e13734274b5b880830499dd657502f115d909e2bb1a257c450584ee79fd328ada9b77c35b40fb6b25ed1f58a44c067aa442f9efc"}, {0x70, 0x117, 0x100, "1a7d414c91494412778c15191c06761cfe64c5ba4241db5011fafabb25210e4845bd573517bf68d048b860000832e5a008aaf9598a36a0e446d7b9793e87ea2c6017b764fe1fb94d327cb8b1465fb037c3eeebdd704f65f42431b2"}, {0xb8, 0x0, 0x200, "276ac5d792e8170c77527832ee887d1e310447e19d1a852d9734f2acbca107fb47fd61a92699cda75247c10dce7304c121d92dcacb187beb407a8d3d67d6e524d2dde6f280a3026f182564bc694a6c64a41f8769206cde42d72bb7bc0f5ae99fd9db6fe1f9204d63a0d84888768323bc236e4603228dc68b1bedc2eef02c828d39e1d28d18fe228d97b075150af2e51759ac6ac7e2811de84a463fff1b712c312cf032e3e1e33b"}, {0xa0, 0x10a, 0x0, "f77ba304656022acc9ebe88aed52c1d3b25b03945269db98010d309efe268cf9c176b69ff3b2227c66fcb8f347dfc907b2492bd562e07b44e333fbd3364f681ed9cb4982dd948267063a543c36214a724e70de6195dc69790dd202e717ea2924880ead40dc5ba2e9f9e5f4aa9bb92017cd39a66a48101931c7353413a5c6c09d07a7a5c5d51b6d2fb1d41456fb"}, {0x90, 0x108, 0x3ff, "d25d77065347a9cb0a08a17dc70bd8ad3cc25d126144a486ed701141942b15fdde763343a90def2e4a2bfd3c2e1bbd635d378a16251c9bf82665802c4bf1d5a8fac3a86895e06659d1ff1be4e832a090027c174297914447ba6189d223355eb1cdea166ca1e5201ea04f3fe4528147d80fc14f751a820fd69551fb55"}, {0x28, 0x116, 0x7, "122c0143a2687b1784507d43e4adb5d9ebcab601fb60"}, {0xa0, 0x105, 0x1000, "2bd186a1e03c95c225808d1d7b61dfaaefe4668953b081cbcbf5977e12725c6c492c0482a425af37640819a77fbb72dde80fb672c1fcaa94f33f7fe13c9e66ef87b2e4f2323c79497e9933335f14f31ac058eb248653311e9db285a660587e6192a69728d7954ba89ac51992ae7ab26ea29df0b98a3e5e51e02b4bdb319248eb678b8b966e2b6007aa"}, {0x40, 0x6, 0x3, "aa8fd847f5c8c3f27dfb188b6b62e562998e8c67bd4c4c52a21d530057044d6bc684a73cb1cbb0dbcd6715fb"}], 0x3c8}, 0x0, 0x40}, 0x8) clock_getres(0x1, &(0x7f0000000a00)) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000a40)="bb7ef8e4b91941c4f512c8fa658735c9c40e85559299821949a5a3a6ab", 0x1d, 0x8841, &(0x7f0000000a80)={0x11, 0x7, r1, 0x1, 0x2, 0x6, @broadcast}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in6=@private0, @in=@multicast1}}, {{}, 0x0, @in=@local}}, &(0x7f0000000bc0)=0xe8) r3 = socket(0x28, 0x80000, 0x37) sendto$packet(r0, &(0x7f0000000c00)="e9a6f1d3a7ef40f43b749251a31dab82dd03bbd203c01ce3794c5c743844468bc605fb495f8192d2d39bb0a0f2953cbd3fdefbdcf8b1f79d46e03813333792c8280eea072799e155c9928ba2083dbf5c69ecd63632c855eed06a292cae94c7aa7e28c84bc29e3cc21c62932af83e8ca120ed0dfca90bbbfdd69ea90457b8c8eb9b6b8fcd3617bb5ae42ab3b5595a05d4c0d9fd21d8cae4d5fe29f795a2ca767dcacc5b085640b71c6ba64ea7567190c28d0c2810d87d6cacf20843505925f216b42d8a0bdfefad4a49de392b3ce1844e842800521226fb1245fa", 0xda, 0x1, &(0x7f0000000d00)={0x11, 0x1, r1, 0x1, 0x5, 0x6, @multicast}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000e40)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000e80)={'ip6tnl0\x00', r4, 0x29, 0x1a, 0xe, 0x9, 0x5c, @rand_addr=' \x01\x00', @private2, 0x1, 0x7, 0x6, 0xffffff65}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$packet(r3, &(0x7f0000000f40)="8b8df432a3d9a4dc5fdf174d817b80c9ba200c82c8e5727a73b28596fa0a3856fcb61e183ebd9f634d40bb6e251d87f3522a4f9aef363d0171080cd4061b858381a1afbdc44fd4c29987e9a0d817dc3939fb9ee0b9ab378ae6", 0x59, 0x90, &(0x7f0000000fc0)={0x11, 0x16, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$802154_dgram(r3, &(0x7f0000001000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xdb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs/custom1\x00', 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f00000011c0)="02cd534315900d81657bda1f774fd3cae19ebe5bd89b268b39847283c313edf11d7ed9e3629ab565cabccbab11c937e717ab9aee49666fc2d09530f45bd5ed7be23e5256a9a546a319b3a2931c138bb7bfdfe8f3743cfaa168617fc21ba13e67", 0x60) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001240)={'sit0\x00', r4, 0x0, 0x9, 0xff, 0x6, 0x35, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x8, 0x5, 0x5}}) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x94, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000085}, 0x44004) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480), 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xfd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffeee}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000010) 17:02:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x3) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1040}, 0x20040084) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000200)=""/207, &(0x7f0000000300)=0xcf) write$snapshot(r0, &(0x7f0000000340)="373997247bc9b96bbb7f27b9ebca96119b0db99b2bbe42c95d1fbfe45fd56b208730adbc7d8d5f5c85a006835f9c215b3c57496e3e4f56ba746c846c465d656f977241a60a3c22febb440c3e587f1fb521d025480e987fcd2ef8d21a870126deef103af5f25026f6e7ae31e0b8ff2a241373c60f9887a25121deb2f742d38b4d7fc509a58ad2dd004e877fa7e7fa28f6b1b329a67bdad4a702df0b516dce9ce7c188ce7d21c7", 0xa6) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x161102, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x46882, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r2) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xfffffffffffffd2d) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f00000004c0)="77d92cac303834ae37f1ff0f77afb7a1c8952ad640f7dda0f6e5426c53a1672c398c834b3340a042bb20437c486c2901dce4d682fe69ce49beed2df71659c563cf14558fb687d0386d7fca8213196f27ff46fc77ee0642a03c874e59eeeeb17a93d7c8ec541ca121054b5f6420187af864930e48a4c2c5c11f64cdebc27abe6e3a6a7fafdefe8480735f4b508a15005026f1", 0x92) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x60000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) mq_getsetattr(r2, &(0x7f00000005c0)={0x3, 0xfffffffffffffffa, 0x3, 0x2}, &(0x7f0000000600)) r4 = syz_open_dev$rtc(&(0x7f0000000640), 0x7, 0x2) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000680)={0x0, 0x1, {0x1a, 0x3b, 0x11, 0xa, 0x2, 0x20, 0x5, 0x89}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000006c0)={0x1, 0xe1c, 0x0, 'queue1\x00', 0x8}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000780)=@req3={0x8, 0x9, 0x9, 0xf4b, 0x8, 0x7ff, 0x7}, 0x1c) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000007c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) [ 105.558672] audit: type=1400 audit(1745773377.422:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:02:57 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x9, 0x1, 0x1000, 0xdc1, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x30eba38c, 0x1, {0x2, 0x0, 0x6, 0x0, 0x7}, 0xdf21}) r0 = gettid() clone3(&(0x7f0000000300)={0x4000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x4}, &(0x7f0000000180)=""/123, 0x7b, &(0x7f0000000200)=""/129, &(0x7f00000002c0)=[r0], 0x1}, 0x58) ptrace$cont(0x20, r0, 0x2, 0xffffffffffffffc0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x8010, 0xffffffffffffffff, 0xec) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000380)={0x401, 0x7, 0xe276, 0x800, 0x80000001, 0x6, 0x1ff}) rt_sigqueueinfo(r1, 0x3f, &(0x7f00000003c0)={0x11, 0x6, 0x80}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x463ec9ae) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/200, 0xc8}, {&(0x7f0000001700)=""/52, 0x34}], 0x5, &(0x7f00000017c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/227, 0xe3}, {&(0x7f0000002980)=""/122, 0x7a}, {&(0x7f0000002a00)=""/82, 0x52}, {&(0x7f0000002a80)=""/179, 0xb3}, {&(0x7f0000002b40)=""/208, 0xd0}, {&(0x7f0000002c40)=""/44, 0x2c}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x8, &(0x7f0000003d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003e00), 0x6e, &(0x7f0000004280)=[{&(0x7f0000003e80)=""/124, 0x7c}, {&(0x7f0000003f00)=""/223, 0xdf}, {&(0x7f0000004000)=""/175, 0xaf}, {&(0x7f00000040c0)=""/179, 0xb3}, {&(0x7f0000004180)=""/121, 0x79}, {&(0x7f0000004200)=""/82, 0x52}], 0x6, &(0x7f0000004300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004340)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/56, 0x38}, {&(0x7f0000004400)=""/140, 0x8c}, {&(0x7f00000044c0)=""/115, 0x73}, {&(0x7f0000004540)=""/63, 0x3f}, {&(0x7f0000004580)=""/225, 0xe1}], 0x5, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004840)=""/231, 0xe7}, {&(0x7f0000004940)=""/75, 0x4b}, {&(0x7f00000049c0)=""/22, 0x16}, {&(0x7f0000004a00)=""/44, 0x2c}, {&(0x7f0000004a40)=""/39, 0x27}, {&(0x7f0000004a80)=""/148, 0x94}, {&(0x7f0000004b40)=""/54, 0x36}, {&(0x7f0000004b80)=""/54, 0x36}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)=""/251, 0xfb}], 0xa, &(0x7f0000004e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004f40), 0x6e, &(0x7f0000005380)=[{&(0x7f0000004fc0)=""/221, 0xdd}, {&(0x7f00000050c0)=""/123, 0x7b}, {&(0x7f0000005140)=""/67, 0x43}, {&(0x7f00000051c0)=""/42, 0x2a}, {&(0x7f0000005200)=""/222, 0xde}, {&(0x7f0000005300)=""/70, 0x46}], 0x6}}], 0x6, 0x10142, &(0x7f0000005580)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000055c0)={0x16, 0x0, 'client0\x00', 0xffffffff80000002, "10f8fbb352d39ffc", "f143d8a6cb6212e1ad239d723396ce1050934c81a1a4cfbb36aa38b038f37088", 0x81, 0x4}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000005680)) r6 = semget(0x0, 0x1, 0x200) semctl$GETALL(r6, 0x0, 0xd, &(0x7f00000056c0)=""/2) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000005700), &(0x7f0000005740)=0x4) process_madvise(r4, &(0x7f0000005800)=[{&(0x7f0000005780)="5b59935e0aa4ff61de548fbe0588793a28250872f527ccf0c67c0c4203158f3d66c29465244f65e3e18bbeec290d13c36fb1717115dd1756e09f9f98ba48ffb68d3b354b7aec5ccfbd0afa45b80e674181cfd5ed8ff9cf14bbac4ce554c7f60e678ab2ca1e1d2c75ce", 0x69}], 0x1, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000008e40)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000008bc0)=[{{&(0x7f0000005840), 0x6e, &(0x7f0000005980)=[{&(0x7f00000058c0)=""/155, 0x9b}], 0x1}}, {{&(0x7f00000059c0), 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005a40)=""/237, 0xed}, {&(0x7f0000005b40)=""/222, 0xde}], 0x2}}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000005c80)=""/252, 0xfc}, {&(0x7f0000005d80)=""/185, 0xb9}, {&(0x7f0000005e40)=""/2, 0x2}, {&(0x7f0000005e80)=""/20, 0x14}, {&(0x7f0000005ec0)=""/228, 0xe4}], 0x5, &(0x7f0000006040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000060c0), 0x6e, &(0x7f00000074c0)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/128, 0x80}, {&(0x7f00000071c0)=""/33, 0x21}, {&(0x7f0000007200)=""/135, 0x87}, {&(0x7f00000072c0)=""/38, 0x26}, {&(0x7f0000007300)=""/226, 0xe2}, {&(0x7f0000007400)=""/158, 0x9e}], 0x7, &(0x7f0000007540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000007580)=@abs, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007600)=""/173, 0xad}, {&(0x7f00000076c0)=""/90, 0x5a}, {&(0x7f0000007740)}, {&(0x7f0000007780)=""/7, 0x7}], 0x4, &(0x7f0000007800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000007900), 0x6e, &(0x7f0000007d80)=[{&(0x7f0000007980)=""/179, 0xb3}, {&(0x7f0000007a40)=""/3, 0x3}, {&(0x7f0000007a80)=""/73, 0x49}, {&(0x7f0000007b00)=""/72, 0x48}, {&(0x7f0000007b80)=""/123, 0x7b}, {&(0x7f0000007c00)=""/39, 0x27}, {&(0x7f0000007c40)=""/167, 0xa7}, {&(0x7f0000007d00)=""/108, 0x6c}], 0x8, &(0x7f0000007e00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000007e40)=""/158, 0x9e}], 0x1, &(0x7f0000007f40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000007fc0)=@abs, 0x6e, &(0x7f0000008280)=[{&(0x7f0000008040)=""/228, 0xe4}, {&(0x7f0000008140)=""/17, 0x11}, {&(0x7f0000008180)=""/236, 0xec}], 0x3, &(0x7f00000082c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000008900)=[{&(0x7f0000008380)=""/208, 0xd0}, {&(0x7f0000008480)=""/9, 0x9}, {&(0x7f00000084c0)=""/189, 0xbd}, {&(0x7f0000008580)=""/4, 0x4}, {&(0x7f00000085c0)}, {&(0x7f0000008600)=""/33, 0x21}, {&(0x7f0000008640)=""/239, 0xef}, {&(0x7f0000008740)=""/136, 0x88}, {&(0x7f0000008800)=""/25, 0x19}, {&(0x7f0000008840)=""/135, 0x87}], 0xa, &(0x7f00000089c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000008a40), 0x6e, &(0x7f0000008b40)=[{&(0x7f0000008ac0)=""/117, 0x75}], 0x1, &(0x7f0000008b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0xa, 0x102, &(0x7f0000008e80)={r8, r9+10000000}) recvmmsg$unix(r10, &(0x7f000000b300)=[{{&(0x7f0000008ec0), 0x6e, &(0x7f000000a280)=[{&(0x7f0000008f40)=""/122, 0x7a}, {&(0x7f0000008fc0)=""/217, 0xd9}, {&(0x7f00000090c0)=""/107, 0x6b}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f000000a140)=""/57, 0x39}, {&(0x7f000000a180)=""/127, 0x7f}, {&(0x7f000000a200)=""/122, 0x7a}], 0x7, &(0x7f000000a300)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f000000a440), 0x6e, &(0x7f000000a5c0)=[{&(0x7f000000a4c0)=""/252, 0xfc}], 0x1, &(0x7f000000a600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f000000a700), 0x6e, &(0x7f000000ac00)=[{&(0x7f000000a780)=""/34, 0x22}, {&(0x7f000000a7c0)=""/204, 0xcc}, {&(0x7f000000a8c0)=""/230, 0xe6}, {&(0x7f000000a9c0)=""/165, 0xa5}, {&(0x7f000000aa80)=""/61, 0x3d}, {&(0x7f000000aac0)=""/221, 0xdd}, {&(0x7f000000abc0)=""/17, 0x11}], 0x7, &(0x7f000000ac80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f000000ad00)=@abs, 0x6e, &(0x7f000000afc0)=[{&(0x7f000000ad80)=""/98, 0x62}, {&(0x7f000000ae00)=""/27, 0x1b}, {&(0x7f000000ae40)=""/16, 0x10}, {&(0x7f000000ae80)=""/40, 0x28}, {&(0x7f000000aec0)=""/202, 0xca}], 0x5, &(0x7f000000b040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f000000b140), 0x6e, &(0x7f000000b2c0)=[{&(0x7f000000b1c0)=""/145, 0x91}, {&(0x7f000000b280)=""/9, 0x9}], 0x2}}], 0x5, 0x12061, 0x0) 17:02:57 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/memmap', 0x20001, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x0, 0x3ff, 0x4, 0xffc00000, 0x3, 0x1}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xc100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000100)={{0x1, 0xe6}, {0x1, 0xe1}, 0xff, 0x2, 0xfd}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x30082, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x441}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdbf}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x9, 0x2, 0x3f, 0x9]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0xa6af, 0x100, 0x4, 0xfffffff9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r4 = syz_io_uring_setup(0x720a, &(0x7f0000000440)={0x0, 0x7964, 0x0, 0x2, 0x27}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000540)=[r4, r3, r2, r3], 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0xc, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x5, 0x20]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9bd, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xec}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044051) r5 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f00000006c0)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0xe0000, 0x0) pidfd_getfd(r0, r6, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r7, 0x3305) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0xcf2bf000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee01}}, './file0\x00'}) read$snapshot(r8, &(0x7f00000007c0)=""/4096, 0x1000) 17:02:57 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0xf5, 0x8, 0xff}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0xd9, 0x1}, 'port1\x00', 0x53, 0x400, 0xb3e, 0xff, 0x8, 0x4, 0x40, 0x0, 0x4, 0x1}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000200)={0x81, 0x1, 0x1}) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_io_uring_setup(0x6ec, &(0x7f0000000300)={0x0, 0xa5a0, 0x4, 0x2, 0x1cd, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) io_uring_setup(0x7da8, &(0x7f0000000400)={0x0, 0x59a1, 0x2, 0x3, 0x1b, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000480)={0x7, 0x16, 0x1ed, {0xff}, 0x23, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000500)={{0xff, 0x8}, 0x0, 0x7, 0x9, {0xad, 0x20}, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000580)={{0x6, 0x66}, {0x0, 0x80}, 0x7, 0x2, 0xae}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000600)={{0x81, 0x8}, {0x8, 0xb1}, 0x86ec, 0x6, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000680)={{0xf9, 0x1f}, {0x7f, 0x65}, 0x4, 0x3, 0xf7}) recvmmsg$unix(r0, &(0x7f0000001a40)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000840)}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/100, 0x64}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/21, 0x15}], 0x5, &(0x7f0000000cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/192, 0xc0}, {&(0x7f0000000f00)=""/77, 0x4d}, {&(0x7f0000000f80)=""/207, 0xcf}, {&(0x7f0000001080)=""/189, 0xbd}, {&(0x7f0000001140)=""/35, 0x23}, {&(0x7f0000001180)=""/155, 0x9b}, {&(0x7f0000001240)=""/135, 0x87}], 0x9, &(0x7f00000013c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001500)=""/228, 0xe4}, {&(0x7f0000001600)=""/27, 0x1b}, {&(0x7f0000001640)=""/248, 0xf8}, {&(0x7f0000001740)=""/104, 0x68}, {&(0x7f00000017c0)=""/124, 0x7c}, {&(0x7f0000001840)=""/10, 0xa}, {&(0x7f0000001880)=""/88, 0x58}], 0x7, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x4, 0x100, &(0x7f0000001b40)) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x1f, 0x5, 0x8, 0x40, 0x0, 0x2, 0xc000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x2}, 0x1000, 0x3, 0x3ff, 0x5, 0x4, 0x9, 0x3ff, 0x0, 0x200, 0x0, 0x2}, r6, 0x0, r1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001b80)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa7446bc0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001c00)={0x3, 0x7}, 0x4) 17:02:57 executing program 6: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0x0, 0x3, {0xffffffffffffffff, 0x1, 0x9, 0x3, 0x3}, 0x40}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x3, 0x6}, 0x1, 0x0, 0x4, {0x8, 0x4}, 0x3, 0x6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/89, 0x59}], 0x5, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000a40)=""/59, 0x3b}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/141, 0x8d}], 0x3}}], 0x4, 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r14, 0x40605346, &(0x7f0000001c80)={0x7fff, 0x2, {0x2, 0x1, 0x4, 0x3, 0x3f}, 0x4}) r16 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/kernel/mm', 0x4000, 0x1c2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r16, 0xc0605345, &(0x7f0000001d40)={0x10001, 0x1, {0x1, 0x0, 0xfffffffc, 0x1, 0x6}, 0x7a6e}) semget(0x2, 0x3, 0x19faa734f4324ef7) ioctl$RTC_ALM_READ(r13, 0x80247008, &(0x7f0000001dc0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000001e00)={0x8, 0x1, {0x1, 0x2, 0x5, 0x3, 0xf7}, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, &(0x7f0000001e80)={{0x5}, {0xfa, 0x40}, 0xd, 0x0, 0xc1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r6, {r0, r3}}, './file0\x00'}) ioctl$RTC_SET_TIME(r17, 0x4024700a, &(0x7f0000001f40)={0x2a, 0x1c, 0xd, 0x17, 0x0, 0xff, 0x6, 0xe5}) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r18, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0x40a85323, &(0x7f0000002080)={{0x1f, 0x1}, 'port1\x00', 0x14, 0x61003, 0x3, 0x9, 0x7fff, 0x7, 0x4, 0x0, 0x0, 0x40}) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd32}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x40081) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x70, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x24000) clone3(&(0x7f0000002580)={0x8040c00, &(0x7f00000023c0)=0xffffffffffffffff, &(0x7f0000002400), &(0x7f0000002440), {0x25}, &(0x7f0000002480)=""/10, 0xa, &(0x7f00000024c0)=""/72, &(0x7f0000002540)=[r2, r15, r9, r15], 0x4}, 0x58) pidfd_getfd(r19, r5, 0x0) 17:02:57 executing program 7: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000)="a5323aa2c63a07672b1a85dea9ed3fc6296c0109b221a9d1cab5ed8d457f653035e520be26e7e236cb5894da54df1c4593935973b5125665695096e9ae2a1715927c4c4ad2a82915c3fd399078a38da4a5dc445dbc787d5b1a5d98a4575ba57df940879417cdca02fc7e6f9b5cea169c6c5c28eafe7c0b8c8bb8de5610268aac6124f3572783903614ceee4cc3adfcfd7eb326fcca8e9d7d1e4562af05ea8533cb9c3f1fca6d53eed3ebd3c2a6cc77fb01f998c6cf392e66a2d2", 0xba}, 0x68) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000780)=""/12, 0xc}, {&(0x7f00000007c0)=""/125, 0x7d}], 0x7, &(0x7f00000008c0)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/101, 0x65}, {&(0x7f0000002b00)=""/213, 0xd5}, {&(0x7f0000002c00)=""/64, 0x40}], 0x6, &(0x7f0000002cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002d00)=""/239, 0xef}, {&(0x7f0000002e00)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000003f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xd0}}, {{&(0x7f0000004000), 0x6e, &(0x7f0000004600)=[{&(0x7f0000004080)=""/201, 0xc9}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/106, 0x6a}, {&(0x7f00000042c0)=""/92, 0x5c}, {&(0x7f0000004340)=""/42, 0x2a}, {&(0x7f0000004380)=""/207, 0xcf}, {&(0x7f0000004480)=""/67, 0x43}, {&(0x7f0000004500)=""/148, 0x94}, {&(0x7f00000045c0)=""/10, 0xa}], 0x9, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000004740)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f00000047c0)}, {&(0x7f0000004800)=""/136, 0x88}], 0x2, &(0x7f0000004900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f00000049c0)=""/97, 0x61}, {&(0x7f0000004a40)=""/68, 0x44}, {&(0x7f0000004ac0)=""/213, 0xd5}], 0x3}}], 0x8, 0x400021c1, 0x0) mmap$perf(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x4010, r1, 0xeaf7) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000004e00)=0x7, 0x3f, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000004fc0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004e40)=""/177, 0xb1, 0x1, &(0x7f0000004f00)=""/175, 0xaf}, &(0x7f0000005000)=0x40) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, 0x110, 0xffffffffffffffff, 0x8000000) r14 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r7, 0x10000000) syz_io_uring_submit(r13, r14, &(0x7f0000005040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0x2, 0x4, 0x5, 0x3, 0x4, 0x1, {0x2}}, 0x1) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000005080), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f00000050c0)=[r12, r8, r9, r15, r5, r3], 0x6) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000005140)={0x9, 0x0, &(0x7f0000005100)=[r15, r8, r16, r17]}, 0x4) r18 = syz_genetlink_get_family_id$SEG6(&(0x7f00000051c0), r9) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000005280)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x30, r18, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x1, 0x401, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x81) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f00000052c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r0}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r19, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005300)=""/15, 0xf}, {&(0x7f0000005340)=""/134, 0x86}, {&(0x7f0000005400)=""/250, 0xfa}, {&(0x7f0000005500)=""/186, 0xba}], 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005600)='./cgroup/syz0\x00', 0x200002, 0x0) [ 107.072684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.078513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.083322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.091856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.102424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.134268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.142189] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.146013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.149141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.156478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.166116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.175658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.181432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.188307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.191250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.195464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.198440] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.204531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.219075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.225606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.239296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.245538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.261408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.278211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 107.285370] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 107.287479] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.293281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.295226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 107.303705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.305504] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 107.307692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 107.313914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.315574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.317102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 107.336691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 107.342251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 107.362097] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 107.368859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.387920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 107.399420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.215480] Bluetooth: hci0: command tx timeout [ 109.279066] Bluetooth: hci1: command tx timeout [ 109.343894] Bluetooth: hci4: command tx timeout [ 109.344017] Bluetooth: hci2: command tx timeout [ 109.344502] Bluetooth: hci3: command tx timeout [ 109.408827] Bluetooth: hci6: command tx timeout [ 109.470901] Bluetooth: hci5: command tx timeout [ 109.471029] Bluetooth: hci7: command tx timeout [ 111.263056] Bluetooth: hci0: command tx timeout [ 111.326883] Bluetooth: hci1: command tx timeout [ 111.392808] Bluetooth: hci3: command tx timeout [ 111.392833] Bluetooth: hci2: command tx timeout [ 111.392882] Bluetooth: hci4: command tx timeout [ 111.455448] Bluetooth: hci6: command tx timeout [ 111.519077] Bluetooth: hci5: command tx timeout [ 111.519308] Bluetooth: hci7: command tx timeout [ 113.311154] Bluetooth: hci0: command tx timeout [ 113.375006] Bluetooth: hci1: command tx timeout [ 113.439800] Bluetooth: hci4: command tx timeout [ 113.439859] Bluetooth: hci3: command tx timeout [ 113.440289] Bluetooth: hci2: command tx timeout [ 113.503264] Bluetooth: hci6: command tx timeout [ 113.567056] Bluetooth: hci7: command tx timeout [ 113.567130] Bluetooth: hci5: command tx timeout [ 115.362051] Bluetooth: hci0: command tx timeout [ 115.423028] Bluetooth: hci1: command tx timeout [ 115.487839] Bluetooth: hci3: command tx timeout [ 115.488267] Bluetooth: hci4: command tx timeout [ 115.488678] Bluetooth: hci2: command tx timeout [ 115.551285] Bluetooth: hci6: command tx timeout [ 115.614827] Bluetooth: hci5: command tx timeout [ 115.615892] Bluetooth: hci7: command tx timeout [ 167.203615] syz-executor.6 (283) used greatest stack depth: 24320 bytes left [ 169.338910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.343212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.344452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.347813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.349825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.358041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.367506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.375358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.389561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.395184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.477028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.478141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.484245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.486036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.492738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.493639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.509198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.510265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.521881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.530328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.584432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.599485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.626396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.638524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.643548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.655666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.658940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.665630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.674443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.691290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.695990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.697572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.719593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.748375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.810329] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.931350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.934045] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.935092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.937930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.940463] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.423116] Bluetooth: hci0: command tx timeout [ 171.424255] Bluetooth: hci1: command tx timeout [ 171.550849] Bluetooth: hci3: command tx timeout [ 171.743854] Bluetooth: hci2: command tx timeout [ 171.807791] Bluetooth: hci5: command tx timeout [ 171.998873] Bluetooth: hci7: command tx timeout [ 171.999655] Bluetooth: hci4: command tx timeout [ 172.126843] Bluetooth: hci6: command tx timeout [ 173.471163] Bluetooth: hci0: command tx timeout [ 173.471610] Bluetooth: hci1: command tx timeout [ 173.599135] Bluetooth: hci3: command tx timeout [ 173.791671] Bluetooth: hci2: command tx timeout [ 173.854826] Bluetooth: hci5: command tx timeout [ 174.047013] Bluetooth: hci4: command tx timeout [ 174.047439] Bluetooth: hci7: command tx timeout [ 174.174889] Bluetooth: hci6: command tx timeout [ 175.520046] Bluetooth: hci1: command tx timeout [ 175.520494] Bluetooth: hci0: command tx timeout [ 175.646858] Bluetooth: hci3: command tx timeout [ 175.838877] Bluetooth: hci2: command tx timeout [ 175.902856] Bluetooth: hci5: command tx timeout [ 176.095089] Bluetooth: hci4: command tx timeout [ 176.095518] Bluetooth: hci7: command tx timeout [ 176.222921] Bluetooth: hci6: command tx timeout [ 177.566914] Bluetooth: hci0: command tx timeout [ 177.567358] Bluetooth: hci1: command tx timeout [ 177.695188] Bluetooth: hci3: command tx timeout [ 177.888033] Bluetooth: hci2: command tx timeout [ 177.950830] Bluetooth: hci5: command tx timeout [ 178.143030] Bluetooth: hci7: command tx timeout [ 178.143478] Bluetooth: hci4: command tx timeout [ 178.271808] Bluetooth: hci6: command tx timeout [ 231.539260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.541251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.553285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.554952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.561503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.567175] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.580993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.584440] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.609381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.615529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.690387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.702394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.717620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.728957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.755663] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.758280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.770217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.772459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.778174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.783800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.795547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.803578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.821282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.828297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.839640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.881283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.895444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.897510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.918352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.925388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.997626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.006553] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.017281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.033331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.039672] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.045192] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.046722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.050548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.085259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.124252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.632055] Bluetooth: hci0: command tx timeout [ 233.695838] Bluetooth: hci1: command tx timeout [ 233.826015] Bluetooth: hci2: command tx timeout [ 233.887824] Bluetooth: hci4: command tx timeout [ 233.888509] Bluetooth: hci3: command tx timeout [ 234.014895] Bluetooth: hci5: command tx timeout [ 234.142854] Bluetooth: hci7: command tx timeout [ 234.208023] Bluetooth: hci6: command tx timeout [ 235.682136] Bluetooth: hci0: command tx timeout [ 235.742822] Bluetooth: hci1: command tx timeout [ 235.873877] Bluetooth: hci2: command tx timeout [ 235.935040] Bluetooth: hci4: command tx timeout [ 235.936424] Bluetooth: hci3: command tx timeout [ 236.063173] Bluetooth: hci5: command tx timeout [ 236.190975] Bluetooth: hci7: command tx timeout [ 236.254819] Bluetooth: hci6: command tx timeout [ 237.727515] Bluetooth: hci0: command tx timeout [ 237.791056] Bluetooth: hci1: command tx timeout [ 237.919058] Bluetooth: hci2: command tx timeout [ 237.984802] Bluetooth: hci3: command tx timeout [ 237.984862] Bluetooth: hci4: command tx timeout [ 238.111889] Bluetooth: hci5: command tx timeout [ 238.238826] Bluetooth: hci7: command tx timeout [ 238.302850] Bluetooth: hci6: command tx timeout [ 239.775114] Bluetooth: hci0: command tx timeout [ 239.839029] Bluetooth: hci1: command tx timeout [ 239.967104] Bluetooth: hci2: command tx timeout [ 240.031065] Bluetooth: hci4: command tx timeout [ 240.031108] Bluetooth: hci3: command tx timeout [ 240.159823] Bluetooth: hci5: command tx timeout [ 240.288080] Bluetooth: hci7: command tx timeout [ 240.351201] Bluetooth: hci6: command tx timeout [ 293.881004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.885532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.888969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.900299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.906422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.035721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.040401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.045833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.057247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.066245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.274977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.283322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.286562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.301249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.309818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.357585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.362457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.368442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.387461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.393170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.464462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.473114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.509741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.527244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.541735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.549538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.552374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.556419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.618254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.654195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.743337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.746612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.758708] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.771259] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.822247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.837579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.856274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.861430] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.867326] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.877404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.968965] Bluetooth: hci0: command tx timeout [ 296.095650] Bluetooth: hci1: command tx timeout [ 296.480588] Bluetooth: hci3: command tx timeout [ 296.481660] Bluetooth: hci2: command tx timeout [ 296.735968] Bluetooth: hci4: command tx timeout [ 296.862947] Bluetooth: hci5: command tx timeout [ 296.992014] Bluetooth: hci7: command tx timeout [ 297.055876] Bluetooth: hci6: command tx timeout [ 298.015865] Bluetooth: hci0: command tx timeout [ 298.144019] Bluetooth: hci1: command tx timeout [ 298.528087] Bluetooth: hci2: command tx timeout [ 298.528646] Bluetooth: hci3: command tx timeout [ 298.783961] Bluetooth: hci4: command tx timeout [ 298.911032] Bluetooth: hci5: command tx timeout [ 299.040113] Bluetooth: hci7: command tx timeout [ 299.104053] Bluetooth: hci6: command tx timeout [ 300.064203] Bluetooth: hci0: command tx timeout [ 300.192042] Bluetooth: hci1: command tx timeout [ 300.576099] Bluetooth: hci3: command tx timeout [ 300.576659] Bluetooth: hci2: command tx timeout [ 300.831816] Bluetooth: hci4: command tx timeout [ 300.959070] Bluetooth: hci5: command tx timeout [ 301.087147] Bluetooth: hci7: command tx timeout [ 301.151053] Bluetooth: hci6: command tx timeout [ 302.112235] Bluetooth: hci0: command tx timeout [ 302.240994] Bluetooth: hci1: command tx timeout [ 302.622947] Bluetooth: hci2: command tx timeout [ 302.623474] Bluetooth: hci3: command tx timeout [ 302.879866] Bluetooth: hci4: command tx timeout [ 303.006832] Bluetooth: hci5: command tx timeout [ 303.135878] Bluetooth: hci7: command tx timeout [ 303.198821] Bluetooth: hci6: command tx timeout [ 356.403272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.408041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.410521] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.443461] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.451197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.496711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.499639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.507074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.521297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.541362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.730184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.738319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.753444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.763320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.784869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.800631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.804159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.825299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.830419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.845676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.883390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.886188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.894039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.913229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.923082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.923580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.930699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.945291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.950093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.956302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.961985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.974288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 356.979104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.981207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.002394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.004493] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.055331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.079050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.087281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.101072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.495021] Bluetooth: hci0: command tx timeout [ 358.623855] Bluetooth: hci1: command tx timeout [ 358.815839] Bluetooth: hci2: command tx timeout [ 358.942879] Bluetooth: hci3: command tx timeout [ 359.006824] Bluetooth: hci6: command tx timeout [ 359.135168] Bluetooth: hci7: command tx timeout [ 359.199814] Bluetooth: hci4: command tx timeout [ 359.263006] Bluetooth: hci5: command tx timeout [ 360.542826] Bluetooth: hci0: command tx timeout [ 360.671481] Bluetooth: hci1: command tx timeout [ 360.863572] Bluetooth: hci2: command tx timeout [ 360.991152] Bluetooth: hci3: command tx timeout [ 361.054915] Bluetooth: hci6: command tx timeout [ 361.182934] Bluetooth: hci7: command tx timeout [ 361.246986] Bluetooth: hci4: command tx timeout [ 361.310838] Bluetooth: hci5: command tx timeout [ 362.591886] Bluetooth: hci0: command tx timeout [ 362.720130] Bluetooth: hci1: command tx timeout [ 362.910824] Bluetooth: hci2: command tx timeout [ 363.038953] Bluetooth: hci3: command tx timeout [ 363.102842] Bluetooth: hci6: command tx timeout [ 363.231152] Bluetooth: hci7: command tx timeout [ 363.294848] Bluetooth: hci4: command tx timeout [ 363.359798] Bluetooth: hci5: command tx timeout [ 364.639050] Bluetooth: hci0: command tx timeout [ 364.766854] Bluetooth: hci1: command tx timeout [ 364.959070] Bluetooth: hci2: command tx timeout [ 365.088090] Bluetooth: hci3: command tx timeout [ 365.151806] Bluetooth: hci6: command tx timeout [ 365.278844] Bluetooth: hci7: command tx timeout [ 365.343070] Bluetooth: hci4: command tx timeout [ 365.408133] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 17:08:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800960ff30 RCX=ffff88800960f81c RDX=0000000000000001 RSI=ffffffff85c1bac0 RDI=ffff8880095fa640 RBP=ffff888009608000 RSP=ffff88800960f838 R8 =0000000000000001 R9 =ffff88800960f908 R10=000000000003b0c2 R11=000000000000ac70 R12=ffff88800960f901 R13=ffff88800960f910 R14=ffff88800960ff00 R15=ffff88800960f8c8 RIP=ffffffff815b6cea RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46360d4269 CR3=000000002a9e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888026d7fcc8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81350bc2 RDI=ffff88806cf31850 RBP=ffffffff85c1bac0 RSP=ffff888026d7eea0 R8 =0000000000000001 R9 =ffff888026d7ef98 R10=000000000003b0c2 R11=0000000000022661 R12=ffffffff81350bc2 R13=ffff888026d7efa0 R14=ffff888026d7fc98 R15=ffff888026d7ef58 RIP=ffffffff815182c9 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffce7be7d50 CR3=0000000030326000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000