Warning: Permanently added '[localhost]:51742' (ECDSA) to the list of known hosts. 2025/05/26 15:12:11 fuzzer started 2025/05/26 15:12:12 dialing manager at localhost:46087 syzkaller login: [ 111.676984] cgroup: Unknown subsys name 'net' [ 111.822981] cgroup: Unknown subsys name 'cpuset' [ 111.862487] cgroup: Unknown subsys name 'rlimit' 2025/05/26 15:12:28 syscalls: 203 2025/05/26 15:12:28 code coverage: enabled 2025/05/26 15:12:28 comparison tracing: enabled 2025/05/26 15:12:28 extra coverage: enabled 2025/05/26 15:12:28 setuid sandbox: enabled 2025/05/26 15:12:28 namespace sandbox: enabled 2025/05/26 15:12:28 Android sandbox: enabled 2025/05/26 15:12:28 fault injection: enabled 2025/05/26 15:12:28 leak checking: enabled 2025/05/26 15:12:28 net packet injection: enabled 2025/05/26 15:12:28 net device setup: enabled 2025/05/26 15:12:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 15:12:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 15:12:28 USB emulation: enabled 2025/05/26 15:12:28 hci packet injection: enabled 2025/05/26 15:12:28 wifi device emulation: enabled 2025/05/26 15:12:28 802.15.4 emulation: enabled 2025/05/26 15:12:28 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 15:12:30 starting 8 fuzzer processes 15:12:30 executing program 0: timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {r0, r1+10000000}}, &(0x7f0000000100)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80, 0x80800) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000280)={{0x80, 0x33}, 'port1\x00', 0x0, 0x401, 0x1f, 0x8, 0x8, 0x2, 0x4, 0x0, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfe2e}}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x800, 0xffffff81, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, @hci={0x1f, 0xffffffffffffffff, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, @llc={0x1a, 0x20a, 0x9, 0xdb, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)='hsr0\x00', 0x4, 0x7ff, 0xc4be}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = creat(&(0x7f0000000780)='./file0\x00', 0x53) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl1\x00', r3, 0x7, 0x7, 0x0, 0x0, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x7, 0x11, [@broadcast]}]}}}}}) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000880)={0x122, 0x29, 0x1, {0x9, [{{0x80, 0x3}, 0xfffffffffffffffe, 0x7, 0x7, './file0'}, {{0x20, 0x3, 0x6}, 0x900000000000000, 0xe0, 0x7, './file0'}, {{0x1, 0x4, 0x7}, 0x0, 0x8, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x7, 0x81, 0x7, './file0'}, {{0x0, 0x2, 0x6}, 0xfffffffffffffffe, 0x8, 0x7, './file0'}, {{0x0, 0x2, 0x6}, 0xffffffffffffff00, 0x6, 0x7, './file0'}, {{0x80, 0x2, 0x4}, 0x8001, 0x80, 0x7, './file0'}, {{0x1, 0x3, 0x4}, 0x5, 0x6, 0x7, './file0'}, {{0x80, 0x1, 0x2}, 0x7fffffff, 0x7f, 0x7, './file0'}]}}, 0x122) setns(r5, 0x2000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x70}, 0x1, 0x0, 0x0, 0x88c0}, 0xb9c92cdde1b0e474) pidfd_getfd(r4, r5, 0x0) 15:12:30 executing program 1: chmod(&(0x7f0000000000)='./file0\x00', 0x68) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2d00) r0 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x5, 0x20040) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r1 = accept4(r0, 0x0, &(0x7f0000000700), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) r3 = accept4(r0, &(0x7f0000000940)=@ax25={{0x3, @netrom}, [@rose, @netrom, @bcast, @netrom, @netrom, @netrom, @rose, @netrom]}, &(0x7f00000009c0)=0x80, 0x80800) recvmsg(r3, &(0x7f0000000c00)={&(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/38, 0x26}, {&(0x7f0000000ac0)=""/15, 0xf}], 0x2, &(0x7f0000000b40)=""/138, 0x8a}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000c80)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000f80)={'erspan0\x00', &(0x7f0000000f00)={'syztnl2\x00', r2, 0x7, 0x7, 0x4, 0x1, {{0xc, 0x4, 0x3, 0x8, 0x30, 0x64, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, {[@timestamp={0x44, 0x1c, 0x78, 0x0, 0x7, [0xdf7e, 0x5, 0xffffffff, 0x6, 0x4, 0x80000001]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000fc0)={'erspan0\x00', r4, 0x1, 0x7, 0x6, 0x7fffffff, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x66, 0x0, 0x8, 0x2f, 0x0, @empty, @multicast1, {[@generic={0x82, 0x6, "fe7f74fd"}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket$inet(0x2, 0x80000, 0x6) accept4(r0, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, &(0x7f00000010c0)=0x80, 0x800) mknod(&(0x7f0000001100)='./file0\x00', 0x8000, 0x4) getpeername$packet(r0, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001240)={'gretap0\x00', &(0x7f00000011c0)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x8, 0x8, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x68, 0x0, 0x20, 0x4, 0x0, @remote, @private=0xa010100, {[@cipso={0x86, 0x1a, 0xfffffffffffffffe, [{0x7, 0x5, "490294"}, {0x1, 0xf, "71ebda04b523e62368ba172fb2"}]}, @noop]}}}}}) listxattr(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)=""/116, 0x74) lremovexattr(&(0x7f0000001340)='\x00', &(0x7f0000001380)=@known='security.selinux\x00') 15:12:30 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x201040, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x400000) write$tcp_congestion(r2, &(0x7f0000000080)='htcp\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x9, 0x8, 0x10001, 0x739a, 0x5, 0x9}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000140)={{0x7, 0x72}, {0x9}, 0x7, 0x4, 0x6}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000002c0)=0x6, 0x4) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x424, 0x3f3, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0x1c, [0x7, 0x1, 0x2, 0x3, 0x1, 0x1f, 0x5, 0x401, 0xfffffe00, 0x10, 0x80000000, 0x4, 0x3, 0xfffeffff, 0x8, 0x301123ce, 0x6, 0x20000000, 0xbd3d, 0x5, 0x9, 0x7, 0x3, 0x8c3, 0x10000, 0x401, 0x1, 0x1, 0x4ab, 0x20, 0x0, 0x200, 0x8, 0x2, 0x7ff, 0x101, 0x2, 0x1, 0x8, 0xd4400000, 0x7fff, 0x975, 0x7, 0x2, 0x1, 0x3, 0xf5, 0xffffffe0, 0x400, 0x4, 0xd9, 0x20, 0x400, 0x7, 0x2, 0x6, 0x6, 0x9, 0xc48000, 0x0, 0xad42, 0x5559, 0x40], [0x401, 0x7, 0x3, 0x2, 0x1f, 0x6, 0x9, 0x3ff, 0xff, 0x2, 0x7ff, 0xfb8, 0x54f50a9, 0x0, 0x101, 0x2d, 0x8, 0x8e2c, 0x1000, 0x5, 0x100, 0x2, 0x3, 0x0, 0x6, 0x0, 0x3, 0xfffff001, 0x6, 0x7ff, 0x0, 0x1beb, 0x2, 0x8, 0x8000000, 0x29d2, 0x8, 0x10001, 0x5551, 0x800, 0xffffdd90, 0xe, 0x80000, 0x7, 0x6, 0xed8, 0x3, 0x7, 0x100, 0x6, 0xe5b, 0x5, 0x0, 0x6, 0x5, 0x2, 0x800, 0x3, 0x5, 0xffff8001, 0x3, 0x81, 0xfffffffa, 0x8], [0x101, 0x80, 0x9, 0x2, 0x9, 0x4, 0xfffffff7, 0x6, 0x3, 0x2, 0x8, 0x401, 0xff, 0x6, 0x0, 0x1000, 0x9, 0x401, 0xff, 0xa09a, 0x3, 0x1, 0x1, 0x800, 0x9, 0x3, 0x24, 0x1, 0x1, 0x2, 0x651581a1, 0x0, 0x81, 0x800, 0x5, 0x1, 0x3, 0x40, 0xfa3, 0x8, 0x10000, 0x4, 0x2, 0x7fff, 0x5, 0x1000, 0x6, 0x80000000, 0x4, 0x1, 0x9, 0x31ec00, 0x7, 0x3, 0x80000001, 0x6c3c00, 0x8, 0x80000001, 0x9, 0xdd, 0x81, 0x6, 0xfffffff9, 0xfffffffa], [0xed2, 0x6, 0x5, 0xa4, 0x1, 0x80, 0x2, 0x0, 0x2, 0x14b0, 0x8001, 0x499, 0xffffaa49, 0x8, 0xffffa278, 0x2, 0x6, 0x7, 0x7, 0x6, 0xfffffff8, 0x9, 0x3, 0x4, 0x0, 0x3, 0x15b, 0xf71, 0x4, 0x2000, 0x5, 0x4, 0x5, 0x20, 0xc153, 0x38, 0x3, 0x4, 0x3, 0x10001, 0x7, 0x80000000, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0x9, 0x2, 0x97bc, 0x7fffffff, 0xdca, 0x85, 0x8, 0x9, 0x7ff, 0x5, 0x1ff, 0xff, 0x7fffffff, 0x5, 0x1, 0x7, 0x100], 0x2, ['!\x00']}, ["", "", "", ""]}, 0x424}}, 0x8044) recvmsg(r0, &(0x7f0000000940)={&(0x7f0000000800)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, &(0x7f0000000900)=""/23, 0x17}, 0x20000100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000980)={0xcaef, 0x2, 0x80000001, 0xffffff7f, 0x2}) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000a40)='system_u:object_r:xen_device_t:s0\x00', 0x22) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) r7 = pidfd_getfd(r3, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) 15:12:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc090}, 0x4000400) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xaf) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc044404}, 0x40004) r2 = clone3(&(0x7f0000001680)={0x2a00, &(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, {0x15}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/246, &(0x7f0000001640)=[0x0, 0x0], 0x2, {r1}}, 0x58) r5 = gettid() r6 = clone3(&(0x7f0000002a00)={0x0, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900), {0x1e}, &(0x7f0000002940)=""/31, 0x1f, &(0x7f0000002980)=""/33, &(0x7f00000029c0)=[r3, r2, 0x0, r3, r2, r4], 0x6, {r1}}, 0x58) r7 = gettid() r8 = gettid() r9 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002ac0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) clone3(&(0x7f0000002b00)={0x20000800, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780), {0x38}, &(0x7f00000017c0)=""/4096, 0x1000, &(0x7f00000027c0)=""/186, &(0x7f0000002a80)=[r5, r3, r6, r4, r7, r8, r9, r4], 0x8, {r10}}, 0x58) syz_open_dev$vcsa(&(0x7f0000002b80), 0xffffffff, 0x92080) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r12, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) [ 129.505113] audit: type=1400 audit(1748272350.345:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:12:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x6, 0x7, 0x0, 'queue1\x00', 0x7ff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x7f, 0x81}, {0x40, 0x22}, 0x4, 0x6, 0x7}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in6=@empty}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000480)={0x8, 0x4, 0x1, 'queue0\x00', 0x2}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = getuid() setfsuid(r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000540)={0x100, 0xfffffff7, 0x4}) setfsuid(r1) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x240000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in6=@initdev}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x24d, 0x8, &(0x7f0000000d80)=[{&(0x7f0000000800)="eaa9c05e6e9db292e6a7a3", 0xb, 0xe5}, {&(0x7f0000000840)="af32", 0x2, 0x1}, {&(0x7f0000000880)="a6ad79775753550d17117ce30d1f7c62ca6f5244", 0x14, 0x3}, {&(0x7f00000008c0)="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", 0xfd, 0x400000008000000}, {&(0x7f00000009c0)="28a9b559d135caecf1600a9030a8581863fe3ec3f9030ba5006762ee17b2817e03f981405d73870836ab7818e4a3dac8499dffe702eb7d702023705ed5bc57f0ae0dc20c57d534acc8080c18be2ce4b850ccabb2dc1d9db4e34e2b35557648d4cb8ba26d42e54a9cb01daeeacdded2acdaed64a9072ae35b4f4c5c033eaf3778489621ea487f758d2e749bf0f5c8d01cf4b46900f93b86c8e299df13b396563a5b6a1b4ad11e25bddbb1ad2033682c5710ca401b880ddffac0d45287ac357cf0b5778f492c091cd0ccb322df4a6d9ff581831227fe16a817b6588c85cb13a85319f5", 0xe2, 0x3}, {&(0x7f0000000ac0)="35809de58103f8996573f0f89cd6fe1cc25f12f68fc41744315658e9da94916f8acb4ed6df4547722c480668a4df1e1f92db207be1b343c1245cac61ac95f24da3f8eb65f193246b1bfc3072a7447eb984c38dbe921d51209df20dff1467607e40a0d229450f9b31412946ab3ad28f0d83a61f3c630670fb25efb265ec01903f06871141b1d737ba09ee9f84fa695b02d0d354aa980bf04c5fd51ad967bf893a531d895af37f6b51b6df5f795cff6f0267328d607a1d64516dde2ccdf95183e14767b47766ad63a4433be1ff7bce2594e2519925e661a1d964f41d59ea73dbfc35733f3df8", 0xe5, 0x100}, {&(0x7f0000000bc0)="d5fdaafbc45e48086439a7fccb97525c85f1ca42aca0b8b461ac23d17ef5ce0a5703438757b0f488183bff8fac40482f727c4a78858281fee568b88b9c3b8ea26ba3b9c306e07c7eae4bac8cb152df9e9ceef7b026b8024c82aa492c8a1c194f07f9397efbb07b29dc3ffb63cfbead7c31569886e43d040fd67f5c20334574d77d1c56a0fb9e1d273745e79afb7b7626c3f01814d6c7947c69", 0x99, 0x8000}, {&(0x7f0000000c80)="a2f59ec4c22fdb313c494c120b03a0067ae9b7f78460558d4b47d80656d7e0adaab2f346b1e42d7814c23634ae08c7770f80f0ba45326e30fc1fbb496aae35d10c7cbd2bbf3b79ef46b17ec749177e4243cc1f78f8933b8f3e0efc483c46c2275938b1ee74702d6044c79db8b23cc849989bf18d2e64fd19a3a8f6071e1b3f1fd0ddf643f6f20fcbc76ea29c1b8ce509b164bbc0dd4c98e27c1b17b91f43f046ced225baff71b35cf801b7a6575e6e1ec6990d748072ff315ed48bc8faf654f57b7d7c3a6155667741150292d4b9343c7ad6647db374c342b3ec5b6b95ab98f3b6aa7c73011c5407d5b50a0dda064708e7a476dbe4649a64", 0xf8, 0x5}], 0x20040, &(0x7f0000000e40)={[{@oldalloc}, {@noinit_itable}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffff006}}, {}], [{@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}]}) syz_mount_image$ext4(&(0x7f0000000ec0)='ext3\x00', &(0x7f0000000f00)='./file0\x00', 0x80000001, 0x2, &(0x7f0000001040)=[{&(0x7f0000000f40)="554c166ea25a6e71063e164a1e2ebd54c0b62d931fae84a84bfbed3c581ebd6f03f7f682dde5357930a4194f159776b884e8df9b6559e864", 0x38, 0x9}, {&(0x7f0000000f80)="a56ddfc2e33fa441f9b7223f307c26fb6bab93b56af7d075ef58a1fc868785555cf05a975207a96d1d6b4020c75b4b89a2217f25fdd79974022dfa3f25ba0d0f1d9ec89490b1313e663f2d5c191a8af7567de5aca62e2a6bdd2580e81e37271e34eec3028948c00bd09d2cbc78c4d1875905cbafc3d25f2da49b0727e36c3b2cfe71e6840c9272f198af45a901ccee85f359", 0x92, 0xec8}], 0x18000, &(0x7f0000001080)={[{@debug}, {@jqfmt_vfsv0}], [{@fsuuid={'fsuuid', 0x3d, {[0xfe8fdb24c5a2672e, 0x34, 0x65, 0x6c, 0x65, 0x33, 0x63, 0x31], 0x2d, [0x0, 0x66, 0x32, 0x37], 0x2d, [0x39, 0x31, 0x58, 0x66], 0x2d, [0x38, 0x39, 0xa, 0x30], 0x2d, [0x57, 0x30, 0xfff105981cd837c9, 0x0, 0x36, 0x34, 0x32, 0x33]}}}, {@obj_role={'obj_role', 0x3d, 'queue0\x00'}}]}) r4 = syz_mount_image$ext4(&(0x7f0000001100)='ext3\x00', &(0x7f0000001140)='./file0\x00', 0x2, 0x9, &(0x7f0000001740)=[{&(0x7f0000001180)="0877f5b40b1826ba7afe504f24318af9649fb8fc2d6b1426fd8ecaf7eb5c265d83356edc7f9264a59eae2cdfe9194ce78b4ef6b591f52c6f25437d0d491849f61e646f9ada62066559c50e1b7c073ad991ecfeba822d53e86a74c49cbde8d61c198fd6ee896af14b7e77da83b56ac114097c9600272246c8adf22b921ec179c10bf4ba503724005efaf11feb0c3c3178dc21fb67efac712a0eb7f04cc69eaf5818f4", 0xa2, 0x3ff}, {&(0x7f0000001240)="a0871e4fcb39f5759ce017a4d199cdf784282accf69207c1a8a4717e90a00afa3015e7df2d19cab77d6ec1a1f7ccade2610d5b65db8ac9cc26c0b3b40c8eec27c339fea15b4f3899fb0a32486a14f873bcf438e978c905", 0x57, 0x3}, {&(0x7f00000012c0)="af697e9848a113e138f31cb076c4b970e4f620c413892bf5eb273e518a5b6fbe5096736408c8677e4b91b96622b3e3cb9b85c553ec464727b10804c4af94f404b6f5ae4bb0577653387efa9130dfeb12", 0x50}, {&(0x7f0000001340)="c1b02326d8b71b16ebf4bd84a88d8603d89254a875e26fbdfa41493ab05905c83bece9d22d25942d4db9859d83b671be6b0cc0a8d62a7d940e41e25f2bef7a28fc1927ee5981b16eac9572464f298302b43118d05a63426f8fd12f55ccf08fd7ac8fa024e18c71902776e0ab23e3eeb8c93ec80ac49dd10b219d139707f97faa5b4829ac73c091cb1c332aebc50395b4cf1afbc30941529235c1b851bc7b7b7207e371678a064b21e03fdbb11c3374d1ebf3cea1a4349c05ba2656", 0xbb, 0x400}, {&(0x7f0000001400)="fdf115de7c226da93aa5b1179efdee6bef6622c6b89c541be41b3eb1eae2df0b7de85711f12fa759a705353669bf0f7400473d601ede0d44983c5260ed48ed8913b7eb59e9624f176a1152915a79ac5191eddd19a5b5eba8e1ceeb0a39476e", 0x5f, 0x80000000}, {&(0x7f0000001480)="54fd41911632a17bc75995b971cac7cfb5ccac9023dba79a0bdc90d7591d5c5e6666c80c14fad4aa1bad6a1ce271312f2f2545", 0x33, 0x9}, {&(0x7f00000014c0)="afc1e66a54e5bf8d049854438fc84728541e835209ff6c9ca5faac848eff2ec5fbcbfc408920d438725ccb56b01859e4ea9f820d80f08a745baea8b437884c44aa8d688d6140700b47b4687d", 0x4c, 0x200}, {&(0x7f0000001540)="03dbe82906d9ad9c721222c43c0fb4576bc736b565eb64ae57209ee8e28b5f837b05a0813ce16a24af1fa373b0b3e0608e1a85778dea84ddea3ec5526b0965ec9b91917dfe3cd13bff866aaa8e0f875ca68d3a503498e0659d00d8715b3ee082142bf43d487d81b8fedbed5c9b6a3c2950b1a9366956ca00d5f6edbd52a9f0ec74209b4468421f36662a5b4d996f6678137f0d4300c8a1d639cbebc7a2d74c56e4b8932189bc3821ad6137c45510a0f6d9bdb6291e2fe6329584aa09a90230a4053fc556", 0xc4, 0x2}, {&(0x7f0000001640)="55a1d808f08db5de5b11076c2d652aab590a0cdea0b50f4e616e76f3450a9a0a539734f553cf1a0d7710dfc08492ec8fb33a5e97e22e30ffe3f34409a160ddf0c0fe5cd082e7e7caa0f344a1b7600fe32ee5da224c5f6546e111ae14112117b2690416b54b487e9a545056dd2e2ef17235a8716b321c0995f87f705beb68f08ae733abe51608ce066269f20a72df33226f65b56667b32ed95bfd658140628f16b6ed7dab8abcb9dc0cdb456beda765fdb31537bf580d6cef5b214b35d67ebe4dffaf815149947955d1ae28519437ad68bb6c777daa1150d26d3149", 0xdb, 0x8}], 0x800000, &(0x7f0000001840)={[{@noauto_da_alloc}, {@nobh}, {@min_batch_time}], [{@dont_hash}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000018c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000001b00)={'erspan0\x00', r0, 0x7800, 0x20, 0x6, 0x1, {{0x3a, 0x4, 0x0, 0x28, 0xe8, 0x65, 0x0, 0xf3, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x18, 0xcb, 0x0, 0x5, [0x80000000, 0xb34, 0x2, 0x5, 0x7]}, @ssrr={0x89, 0x23, 0x14, [@multicast1, @loopback, @local, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @broadcast]}, @ssrr={0x89, 0x7, 0x80, [@remote]}, @ssrr={0x89, 0x2b, 0xf4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @empty, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x3c, 0x1f, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@multicast2, 0x8}, {@multicast1, 0x3}, {@multicast2, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xf6}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x2}]}, @end, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xb, "754c90bec4ded3e84c"}, {0x5, 0xb, "b9a538ca917f15ba09"}]}, @rr={0x7, 0xb, 0x37, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001c80)={'wlan0\x00'}) 15:12:30 executing program 5: pidfd_send_signal(0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x3c, 0x1, 0xd007}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x40, &(0x7f0000000080)={0x31, 0x45c, 0x7a}, 0x0) r0 = clone3(&(0x7f0000000340)={0x100060900, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f0000000180), {0xb}, &(0x7f00000001c0)=""/120, 0x78, &(0x7f0000000240)=""/185, &(0x7f0000000300)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) pidfd_send_signal(r1, 0xd, &(0x7f00000003c0)={0x40, 0x1ff, 0x5}, 0x0) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x10b) r4 = pidfd_getfd(r1, r3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000004c0), 0x2, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000500), 0x9, 0x240840) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000580)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@private, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000c00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000740)={0x444, 0x3f3, 0x1, 0x70bd28, 0x25dfdbfd, {0x5, 0x0, 0x1e, [0xcba, 0x80, 0x8000, 0x57, 0x9, 0x8, 0x1ff, 0xf01cf13, 0x9, 0x2000, 0x7, 0x8, 0x1, 0x5, 0x5, 0x7ff, 0x238a, 0x6, 0xda, 0x200, 0x7d, 0x3, 0x6, 0xef51, 0x725, 0x80000001, 0x5, 0x8c, 0x3, 0x8001, 0xffffffff, 0x7505, 0x6, 0x5, 0xb6448b8, 0xfffffff7, 0xc1, 0x2, 0x200, 0xfffffc01, 0x2b87, 0x2, 0x2, 0xfffff933, 0x8, 0x7f, 0x5, 0x3ff, 0x5, 0x923a, 0x8319, 0x80000000, 0xffffffff, 0x2, 0xffffffff, 0x6, 0x41e, 0x3, 0x57, 0x5, 0xff, 0x4, 0x9, 0xffff0000], [0x7, 0x2, 0x265, 0x0, 0x7ff, 0x9, 0x1000, 0x1, 0x81, 0x1, 0x9, 0x5, 0xfffffff8, 0x2b2, 0x9, 0x6, 0x200, 0x4, 0x0, 0x5, 0xffffff2e, 0x8068, 0x3, 0x3, 0x3, 0x40, 0x1, 0x4, 0xfffffffd, 0xb880, 0x7f, 0x7853, 0x40, 0x2, 0x800, 0xc18, 0xfff, 0xc20, 0x7, 0x9, 0x101, 0xc000, 0x3f, 0x0, 0x10001, 0x80000000, 0x0, 0x1, 0x9, 0xe5c, 0x7de7, 0x0, 0x5, 0x8001, 0x4, 0x2679, 0x0, 0x1, 0x0, 0x1, 0x4, 0x3, 0x1e, 0x8], [0x800000, 0x96, 0x285, 0x6, 0x2, 0x101, 0xaf5b, 0x1, 0x0, 0x8, 0x8, 0xdf, 0x9, 0x9, 0x527c1b2c, 0x2, 0x4, 0x4, 0x5, 0x7b, 0x3, 0xffff, 0x4, 0x62800000, 0x3, 0x1, 0x101, 0x0, 0x3, 0x263, 0xd44, 0x7, 0x7ff, 0x0, 0x1, 0x100, 0x5, 0x3, 0x0, 0x1, 0x3, 0x1, 0x5e7, 0x400, 0x8, 0x7, 0x0, 0x80000000, 0x1f, 0x2, 0x2, 0x8, 0xf7, 0x2, 0x569, 0x42, 0x87a, 0x6, 0x2, 0x8, 0xd013, 0x8622, 0x204d, 0x7], [0x2, 0x3, 0x3, 0x9, 0xc91a, 0x0, 0x7, 0x9, 0x1f, 0x309f, 0x1, 0x6, 0xc8, 0xa9, 0x2a, 0x0, 0x1, 0x0, 0xfffffff8, 0x29, 0x2, 0x2, 0x0, 0x100, 0x2f56, 0x81, 0xff, 0x400, 0x10000, 0x2, 0x4b, 0x7f, 0x7f, 0x101, 0x3f, 0x7fff, 0x0, 0x5, 0x80000001, 0x8000, 0x995, 0x3, 0xfffffff9, 0x4, 0x5, 0x10001, 0xfffffffe, 0x0, 0x4, 0x1, 0x2, 0xf85d, 0x6, 0x4, 0x401, 0x82, 0x3, 0x800, 0xff, 0x1, 0x7, 0x1000, 0xfffff931, 0x7], 0x23, ['./cgroup/syz0\x00', '@{\x00', 'wlan0\x00', '%%(\x00', '+&$)^+@\x00']}, ["", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000c40)={'wlan0', 0x32, 0x36}, 0x8) clone3(&(0x7f0000000ec0)={0x1100000, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0, {0x15}, &(0x7f0000000d40)=""/69, 0x45, &(0x7f0000000dc0)=""/181, &(0x7f0000000e80)=[r0], 0x1, {r4}}, 0x58) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wpan1\x00', 0x0}) r10 = clone3(&(0x7f0000002200)={0x1000000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080), {0x3}, &(0x7f00000010c0)=""/239, 0xef, &(0x7f00000011c0)=""/4096, &(0x7f00000021c0)=[r7], 0x1}, 0x58) r11 = syz_open_dev$vcsa(&(0x7f0000002280), 0x27, 0x80000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x3c, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 15:12:30 executing program 6: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/246, 0xf6}, {&(0x7f0000001400)=""/207, 0xcf}, {&(0x7f0000001500)=""/32, 0x20}], 0x7, &(0x7f00000015c0)=""/137, 0x89}, 0x2001) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000016c0), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000001700)={0x5, 0x1, 0x0, 'queue0\x00', 0x1}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000017c0)={@mcast1, 0x0}, &(0x7f0000001800)=0x14) r3 = syz_open_dev$vcsu(&(0x7f0000001840), 0x100000000, 0x482) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000001880), &(0x7f00000018c0)=0x4) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x28081) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000001a40)={{0x40, 0x20}, 'port1\x00', 0x24, 0x100422, 0x1f, 0x101, 0x20, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001b40)={'tunl0\x00', &(0x7f0000001b00)={'gre0\x00', r2, 0x7, 0x7800, 0x6, 0x7fffffff, {{0x7, 0x4, 0x0, 0x2b, 0x1c, 0x64, 0x0, 0xff, 0x29, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x7, 0xdc, [@empty]}]}}}}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000001b80)={{0x80, 0xff}, {0x80, 0x1}, 0x0, 0x1, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c00)={'erspan0\x00', 0x0, 0x80, 0x1, 0x60e3, 0x1ff, {{0x29, 0x4, 0x0, 0x34, 0xa4, 0x68, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x9, [{@private=0xa010101, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x99, 0x1, 0x9, [{@rand_addr=0x64010100, 0x5}, {@private=0xa010100, 0x8}]}, @lsrr={0x83, 0x17, 0xc8, [@dev={0xac, 0x14, 0x14, 0x44}, @local, @loopback, @loopback, @local]}, @timestamp={0x44, 0x14, 0xae, 0x0, 0x5, [0x52, 0x3, 0xfffff4c0, 0x3ff]}, @lsrr={0x83, 0x17, 0xb0, [@empty, @rand_addr=0x64010100, @local, @remote, @multicast1]}, @ssrr={0x89, 0x2b, 0x61, [@private=0xa010101, @multicast2, @broadcast, @multicast2, @empty, @remote, @multicast1, @private=0xa010102, @rand_addr=0x64010100, @local]}]}}}}}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24048011) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000001e40)={0x0, 0x80000000, 0x1, 'queue0\x00', 0x2}) r4 = socket$inet(0x2, 0x6, 0x0) connect(r4, &(0x7f0000001f00)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x80}, 0x80) r5 = socket(0x9, 0x1, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001f80)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000002080)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002180)={'ip_vti0\x00', &(0x7f00000020c0)={'erspan0\x00', r6, 0x1, 0x80, 0x2, 0x8, {{0x20, 0x4, 0x2, 0x33, 0x80, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, {[@rr={0x7, 0x13, 0xd8, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xc6, [@multicast2, @remote, @empty, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}]}, @cipso={0x86, 0x13, 0x3, [{0x0, 0xd, "4d8af3bee9a6219d1ebc54"}]}, @timestamp={0x44, 0x24, 0x20, 0x0, 0xb, [0x7ff, 0x7fff, 0x0, 0x401, 0x8, 0x4a2b4f3, 0x5, 0x0]}]}}}}}) 15:12:30 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0xff, 0x1}, {0x5c, 0xf9}, 0x4, 0x4, 0x20}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_dgram(r2, &(0x7f0000000100)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x4, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000240), 0x0, 0xffffffffffff0001}, {&(0x7f0000000280)="f70a253d39a04771905d43494e7379032a33eef8c7cb088cd91d2ec458335d16a72f21d3e05c696c7af2df", 0x2b, 0x8}], 0xc0000, &(0x7f0000000300)={[{@delalloc}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', 0xee01}}, {@subj_role={'subj_role', 0x3d, ')%'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\!#{%!),\\\\'}}, {@euid_lt={'euid<', 0xee00}}, {@uid_gt={'uid>', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0xa464cacc33cdba9a, 0x31, 0x31, 0x66, 0x62, 0x63, 0x38, 0x34], 0x2d, [0x32, 0x37, 0x37, 0x38], 0x2d, [0x36, 0x64, 0x31, 0x63], 0x2d, [0x36, 0x33, 0x32, 0x66], 0x2d, [0x30, 0x38, 0x35, 0x61, 0x38, 0x37, 0x34, 0x66]}}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x20}}, './file0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x204080, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000480)={0xcc, 0x4, 0x0, 'queue1\x00', 0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000580)=""/4096) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) write$P9_RREADDIR(r0, &(0x7f0000001680)={0x2a, 0x29, 0x2, {0x9, [{{0x4, 0x0, 0x5}, 0x8, 0x5, 0x7, './file0'}]}}, 0x2a) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000016c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001700)={{{@in=@local, @in6=@empty}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001800)=0xe8) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001880)={0x5, &(0x7f0000001840)=[{0xffc0, 0xe0, 0x8, 0x2}, {0xdc, 0x1, 0x20, 0x200}, {0x1, 0x81, 0x20, 0x5}, {0x6, 0x86, 0x15, 0x9}, {0x8cb4, 0x0, 0x7, 0xfffff6fd}]}) init_module(&(0x7f00000018c0)='/dev/null\x00', 0xa, &(0x7f0000001900)='{%[/@@\x00') accept4(0xffffffffffffffff, &(0x7f0000001980)=@xdp, &(0x7f0000001a00)=0x80, 0x1800) [ 130.986546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.995817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.997843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.999154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.000809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.002776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.004972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.007498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.010070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.011613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.013184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.014993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.034473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.037977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.041616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.046566] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.050915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.054946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.059885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.062011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.066309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.068940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.076110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.078191] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.101381] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.185886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.203163] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.205910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.209045] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.218422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.226743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.242888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.245840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.248431] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.255835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.260864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.261912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.262782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.281746] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.283867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 133.077576] Bluetooth: hci0: command tx timeout [ 133.139527] Bluetooth: hci3: command tx timeout [ 133.140470] Bluetooth: hci4: command tx timeout [ 133.141091] Bluetooth: hci1: command tx timeout [ 133.141371] Bluetooth: hci2: command tx timeout [ 133.332709] Bluetooth: hci5: command tx timeout [ 133.332737] Bluetooth: hci7: command tx timeout [ 133.395592] Bluetooth: hci6: command tx timeout [ 135.123487] Bluetooth: hci0: command tx timeout [ 135.187825] Bluetooth: hci1: command tx timeout [ 135.187856] Bluetooth: hci2: command tx timeout [ 135.187901] Bluetooth: hci4: command tx timeout [ 135.187947] Bluetooth: hci3: command tx timeout [ 135.379575] Bluetooth: hci7: command tx timeout [ 135.382360] Bluetooth: hci5: command tx timeout [ 135.443411] Bluetooth: hci6: command tx timeout [ 137.172425] Bluetooth: hci0: command tx timeout [ 137.235861] Bluetooth: hci1: command tx timeout [ 137.236420] Bluetooth: hci3: command tx timeout [ 137.236873] Bluetooth: hci4: command tx timeout [ 137.237620] Bluetooth: hci2: command tx timeout [ 137.427712] Bluetooth: hci5: command tx timeout [ 137.429177] Bluetooth: hci7: command tx timeout [ 137.492359] Bluetooth: hci6: command tx timeout [ 139.220465] Bluetooth: hci0: command tx timeout [ 139.283632] Bluetooth: hci1: command tx timeout [ 139.283709] Bluetooth: hci2: command tx timeout [ 139.284978] Bluetooth: hci4: command tx timeout [ 139.286183] Bluetooth: hci3: command tx timeout [ 139.475718] Bluetooth: hci7: command tx timeout [ 139.476274] Bluetooth: hci5: command tx timeout [ 139.539611] Bluetooth: hci6: command tx timeout [ 193.775054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.777819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.780725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.795489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.798869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.926257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.928199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.929936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.933005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.935230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.961461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.962909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.978357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.979872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.989375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.989870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.992855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.994243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.996855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.000782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.001142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.004563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.004887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.007490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.008881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.014439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.018155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.033930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.047487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.053145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.094681] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.120092] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.124626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.151446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.172442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.209915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.215629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.218075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.222826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.225765] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.859573] Bluetooth: hci0: command tx timeout [ 195.987541] Bluetooth: hci1: command tx timeout [ 196.052868] Bluetooth: hci2: command tx timeout [ 196.180445] Bluetooth: hci3: command tx timeout [ 196.181522] Bluetooth: hci4: command tx timeout [ 196.307552] Bluetooth: hci5: command tx timeout [ 196.563827] Bluetooth: hci6: command tx timeout [ 196.564957] Bluetooth: hci7: command tx timeout [ 197.908007] Bluetooth: hci0: command tx timeout [ 198.035963] Bluetooth: hci1: command tx timeout [ 198.099376] Bluetooth: hci2: command tx timeout [ 198.227902] Bluetooth: hci4: command tx timeout [ 198.228768] Bluetooth: hci3: command tx timeout [ 198.355439] Bluetooth: hci5: command tx timeout [ 198.612743] Bluetooth: hci7: command tx timeout [ 198.613340] Bluetooth: hci6: command tx timeout [ 199.956439] Bluetooth: hci0: command tx timeout [ 200.084393] Bluetooth: hci1: command tx timeout [ 200.148081] Bluetooth: hci2: command tx timeout [ 200.275443] Bluetooth: hci4: command tx timeout [ 200.276019] Bluetooth: hci3: command tx timeout [ 200.403831] Bluetooth: hci5: command tx timeout [ 200.660427] Bluetooth: hci6: command tx timeout [ 200.661005] Bluetooth: hci7: command tx timeout [ 202.004677] Bluetooth: hci0: command tx timeout [ 202.131417] Bluetooth: hci1: command tx timeout [ 202.196542] Bluetooth: hci2: command tx timeout [ 202.325077] Bluetooth: hci3: command tx timeout [ 202.325348] Bluetooth: hci4: command tx timeout [ 202.453314] Bluetooth: hci5: command tx timeout [ 202.707428] Bluetooth: hci7: command tx timeout [ 202.707967] Bluetooth: hci6: command tx timeout [ 256.239993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.244237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.247101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.275993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.288792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.488090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.492558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.494736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.498624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.500712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.624040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.629653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.631043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.632595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.640058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.643649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.647622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.649775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.663566] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.670960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.710230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.713810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.716966] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.765041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.785633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.969872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.971241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.971867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.986722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.986815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.990712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.992913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.994004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.997090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.039668] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.041695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.052307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.054620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.054786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.075128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.323538] Bluetooth: hci0: command tx timeout [ 258.515431] Bluetooth: hci1: command tx timeout [ 258.707380] Bluetooth: hci3: command tx timeout [ 258.772674] Bluetooth: hci2: command tx timeout [ 258.899394] Bluetooth: hci4: command tx timeout [ 259.155468] Bluetooth: hci5: command tx timeout [ 259.156260] Bluetooth: hci6: command tx timeout [ 259.158033] Bluetooth: hci7: command tx timeout [ 260.373323] Bluetooth: hci0: command tx timeout [ 260.563427] Bluetooth: hci1: command tx timeout [ 260.755468] Bluetooth: hci3: command tx timeout [ 260.819447] Bluetooth: hci2: command tx timeout [ 260.947401] Bluetooth: hci4: command tx timeout [ 261.203753] Bluetooth: hci7: command tx timeout [ 261.204260] Bluetooth: hci6: command tx timeout [ 261.204850] Bluetooth: hci5: command tx timeout [ 262.419374] Bluetooth: hci0: command tx timeout [ 262.611461] Bluetooth: hci1: command tx timeout [ 262.804495] Bluetooth: hci3: command tx timeout [ 262.867350] Bluetooth: hci2: command tx timeout [ 262.995375] Bluetooth: hci4: command tx timeout [ 263.251779] Bluetooth: hci6: command tx timeout [ 263.253508] Bluetooth: hci7: command tx timeout [ 263.253964] Bluetooth: hci5: command tx timeout [ 264.468152] Bluetooth: hci0: command tx timeout [ 264.659654] Bluetooth: hci1: command tx timeout [ 264.851372] Bluetooth: hci3: command tx timeout [ 264.915375] Bluetooth: hci2: command tx timeout [ 265.043363] Bluetooth: hci4: command tx timeout [ 265.299533] Bluetooth: hci6: command tx timeout [ 265.300053] Bluetooth: hci5: command tx timeout [ 265.301439] Bluetooth: hci7: command tx timeout [ 318.906660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.910020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.913623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.916780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.918832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.052057] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.056681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.060644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.067092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.069269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.214646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.230147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.235495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.241752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.246393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.255899] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.265928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.270137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.301805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.306488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.319031] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.325668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.327655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.343457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.361055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.364251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.386863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.397664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.400573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.408690] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.417170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.450789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.457707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.471083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.480648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.487648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.489187] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.492510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.506580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.509048] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.979404] Bluetooth: hci0: command tx timeout [ 321.110753] Bluetooth: hci1: command tx timeout [ 321.299393] Bluetooth: hci2: command tx timeout [ 321.427406] Bluetooth: hci3: command tx timeout [ 321.491837] Bluetooth: hci4: command tx timeout [ 321.620088] Bluetooth: hci6: command tx timeout [ 321.620465] Bluetooth: hci5: command tx timeout [ 321.621724] Bluetooth: hci7: command tx timeout [ 323.027832] Bluetooth: hci0: command tx timeout [ 323.155487] Bluetooth: hci1: command tx timeout [ 323.347657] Bluetooth: hci2: command tx timeout [ 323.475393] Bluetooth: hci3: command tx timeout [ 323.540602] Bluetooth: hci4: command tx timeout [ 323.667479] Bluetooth: hci6: command tx timeout [ 323.668980] Bluetooth: hci5: command tx timeout [ 323.669026] Bluetooth: hci7: command tx timeout [ 325.075412] Bluetooth: hci0: command tx timeout [ 325.203531] Bluetooth: hci1: command tx timeout [ 325.395416] Bluetooth: hci2: command tx timeout [ 325.523542] Bluetooth: hci3: command tx timeout [ 325.587446] Bluetooth: hci4: command tx timeout [ 325.715384] Bluetooth: hci7: command tx timeout [ 325.716679] Bluetooth: hci6: command tx timeout [ 325.719327] Bluetooth: hci5: command tx timeout [ 327.123426] Bluetooth: hci0: command tx timeout [ 327.251540] Bluetooth: hci1: command tx timeout [ 327.443509] Bluetooth: hci2: command tx timeout [ 327.571572] Bluetooth: hci3: command tx timeout [ 327.635445] Bluetooth: hci4: command tx timeout [ 327.764673] Bluetooth: hci5: command tx timeout [ 327.764865] Bluetooth: hci6: command tx timeout [ 327.766512] Bluetooth: hci7: command tx timeout [ 381.537645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.540797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.543127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.549866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.554800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.859500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.862652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.866934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.877944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.881593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.884116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.894616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.906997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.918621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.930849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.933647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.943915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.945954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.961590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.962628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.977031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.985661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.990785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.000067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.006714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.009962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.027015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.041853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.047971] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.061207] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.077500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.081643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.084581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.089133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.096999] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.106017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.112483] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.120709] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.185659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.192081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.638453] Bluetooth: hci0: command tx timeout [ 383.956680] Bluetooth: hci2: command tx timeout [ 384.019361] Bluetooth: hci1: command tx timeout [ 384.083554] Bluetooth: hci3: command tx timeout [ 384.084537] Bluetooth: hci4: command tx timeout [ 384.212898] Bluetooth: hci5: command tx timeout [ 384.212942] Bluetooth: hci6: command tx timeout [ 384.275628] Bluetooth: hci7: command tx timeout [ 385.683631] Bluetooth: hci0: command tx timeout [ 386.003748] Bluetooth: hci2: command tx timeout [ 386.089155] Bluetooth: hci1: command tx timeout [ 386.131772] Bluetooth: hci3: command tx timeout [ 386.132719] Bluetooth: hci4: command tx timeout [ 386.260378] Bluetooth: hci5: command tx timeout [ 386.260911] Bluetooth: hci6: command tx timeout [ 386.325020] Bluetooth: hci7: command tx timeout [ 387.731607] Bluetooth: hci0: command tx timeout [ 388.052690] Bluetooth: hci2: command tx timeout [ 388.115372] Bluetooth: hci1: command tx timeout [ 388.180837] Bluetooth: hci3: command tx timeout [ 388.181822] Bluetooth: hci4: command tx timeout [ 388.308407] Bluetooth: hci6: command tx timeout [ 388.309089] Bluetooth: hci5: command tx timeout [ 388.372639] Bluetooth: hci7: command tx timeout [ 389.780392] Bluetooth: hci0: command tx timeout [ 390.099438] Bluetooth: hci2: command tx timeout [ 390.165787] Bluetooth: hci1: command tx timeout [ 390.229384] Bluetooth: hci4: command tx timeout [ 390.229448] Bluetooth: hci3: command tx timeout [ 390.356783] Bluetooth: hci5: command tx timeout [ 390.356892] Bluetooth: hci6: command tx timeout [ 390.420391] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:17:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800a4c0000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffffffff85c1d1c0 RSP=ffff88806ce08880 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=000000000000a167 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff81518c05 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f37ff466368 CR3=000000002d96f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353c4d RDI=ffff88806cf31850 RBP=ffffffff85c1d1c0 RSP=ffff888031317788 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=0000000000006be9 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff8880313178c0 RIP=ffffffff8151aff4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3b22a2c620 CR3=000000000d97f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000