Warning: Permanently added '[localhost]:39101' (ECDSA) to the list of known hosts. 2025/06/04 13:25:09 fuzzer started 2025/06/04 13:25:10 dialing manager at localhost:39055 syzkaller login: [ 116.915346] cgroup: Unknown subsys name 'net' [ 117.052823] cgroup: Unknown subsys name 'cpuset' [ 117.096438] cgroup: Unknown subsys name 'rlimit' 2025/06/04 13:25:26 syscalls: 224 2025/06/04 13:25:26 code coverage: enabled 2025/06/04 13:25:26 comparison tracing: enabled 2025/06/04 13:25:26 extra coverage: enabled 2025/06/04 13:25:26 setuid sandbox: enabled 2025/06/04 13:25:26 namespace sandbox: enabled 2025/06/04 13:25:26 Android sandbox: enabled 2025/06/04 13:25:26 fault injection: enabled 2025/06/04 13:25:26 leak checking: enabled 2025/06/04 13:25:26 net packet injection: enabled 2025/06/04 13:25:26 net device setup: enabled 2025/06/04 13:25:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 13:25:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 13:25:26 USB emulation: enabled 2025/06/04 13:25:26 hci packet injection: enabled 2025/06/04 13:25:26 wifi device emulation: enabled 2025/06/04 13:25:26 802.15.4 emulation: enabled 2025/06/04 13:25:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 13:25:28 starting 8 fuzzer processes 13:25:28 executing program 0: r0 = syz_io_uring_setup(0x708c, &(0x7f0000000000)={0x0, 0x4a0c, 0x0, 0x3, 0xd1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000f, 0x100013, r0, 0x10000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000100)=0x1, 0x0, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r5 = syz_io_uring_complete(r1) r6 = syz_io_uring_complete(r1) r7 = pidfd_getfd(r6, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r7, &(0x7f00000001c0)={0x180, 0x80}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) r8 = semget(0x3, 0x1, 0x90) semctl$GETZCNT(r8, 0x3, 0xf, &(0x7f0000000280)=""/166) r9 = openat$cgroup_type(r6, &(0x7f0000000340), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000380), 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000003c0)={0x1000, 0x0, {0x0, 0x2, 0x2, 0x0, 0x3}, 0x1919}) syz_genetlink_get_family_id$team(&(0x7f0000000440), r4) r10 = pidfd_getfd(r5, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@loopback, @in=@loopback}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000580)=0xe8) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r11, &(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000680)={0x3, 0x2c, 0x0, 'queue1\x00'}) 13:25:28 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x9, 0x6, 0x6, {0x101, 0xa6}, 0x2, 0x4}) r0 = syz_io_uring_setup(0x1107, &(0x7f0000000080)={0x0, 0x389, 0x10, 0x3, 0x151}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000180)=0x7, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f00000001c0)=0xf7d, 0x0, 0x4) r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4840) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000340)=0x1, 0x0, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x82000020}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x48800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000580)=0x80000001, 0x0, 0x4) r5 = syz_io_uring_complete(r1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4a040) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000700), 0x0, 0x4) r7 = pidfd_open(0x0, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000740), 0x440b00, 0x0) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) r10 = pidfd_open(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000800)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x20, &(0x7f00000007c0)=[r0, r7, r3, r0, r8, r0, r9, r10, r5], 0x9}, 0x0) 13:25:28 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r1 = semget$private(0x0, 0x0, 0x9) semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000000080)=""/4096) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xc4, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x879e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xba5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x124, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x70}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x23}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdb5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x64}]}, 0x124}, 0x1, 0x0, 0x0, 0x40085}, 0x40004) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000001480)=[{0x2, 0x9, 0x800}, {0x3, 0xa80, 0x1000}, {0x2, 0xffff, 0x1000}], 0x3, &(0x7f0000001500)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008080) r5 = semget$private(0x0, 0x1, 0x4) semctl$IPC_INFO(r5, 0x3, 0x3, &(0x7f0000001640)=""/98) semctl$SEM_INFO(r5, 0x1, 0x13, &(0x7f00000016c0)=""/182) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001780)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r6) r7 = semget(0x3, 0x2, 0x0) semctl$SEM_STAT(r7, 0x1, 0x12, &(0x7f0000001840)=""/192) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f0000001900)=""/194) 13:25:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x8, 0x2}, {0xff, 0x81}, 0x6, 0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000100)={0x7, 0x1, {0x2, 0x2, 0xfffffffa, 0x3, 0x3f}, 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000280)) write$sndseq(r1, &(0x7f00000002c0)=[{0x1, 0x5, 0x44, 0x3f, @tick=0x480, {0x3f, 0xc3}, {0x2, 0x8}, @raw32={[0x7f, 0x6, 0xf7ea]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000300)={0x1f, 0x1, {0x9df1908adfba3803, 0x3, 0x7, 0x2, 0x8}, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000380)={0x5, 0x7, 0xba0f, 0x20, 0x0, 0xffffffd3}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000400)={0x0, @tick=0x2, 0xff, {0x6}, 0x8}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {r5, 0xee01}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000480)={{0x80, 0x1f}, 'port0\x00', 0x40, 0x80000, 0x10001, 0x7ff, 0xee, 0x100, 0x11, 0x0, 0x3, 0x8}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x9, &(0x7f0000000540)=[{0x9, 0xdf, 0x0, 0xfffffffa}, {0x0, 0x8, 0xff, 0x6}, {0x9, 0x7, 0x1f, 0x3f}, {0xfff, 0x7, 0xc0, 0x8001}, {0x4, 0x19, 0x6, 0x2}, {0x73, 0x61, 0x80, 0x1e73}, {0x926, 0x1, 0xc0, 0x2}, {0x4f, 0x1, 0x5, 0x3ff}, {0x8, 0x10, 0x1f, 0x6}]}) r8 = pidfd_getfd(r1, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000600)={0x0, 0x2, r8, 0x9, 0x80000}) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r6) r10 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40088a4}, 0x0) 13:25:28 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x208400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r4 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r6, r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r6, r9}}, './file0\x00'}) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f00000001c0)=0x3) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048844}, 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) r13 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r10, {r12, r13}}, './file0\x00'}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r14, 0x80045300, &(0x7f0000000500)) sendmsg$IPVS_CMD_GET_SERVICE(r14, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r8, 0x0, 0x83, &(0x7f0000000700)={'filter\x00', 0x0, 0x3, 0x38, [0x2, 0x7f, 0x8, 0x6, 0xfe71, 0x7], 0x6, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=""/56}, &(0x7f0000000780)=0x78) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f00000007c0)={0xb5, 0x0, 0x4, {0x40000, 0x8}, 0x8, 0x7f}) socket$inet(0x2, 0x2, 0xffffffe1) [ 135.029447] audit: type=1400 audit(1749043528.373:7): avc: denied { execmem } for pid=276 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:25:28 executing program 5: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xd10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'sit0\x00'}}}, ["", ""]}, 0x2c}}, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0x3, 0x2, @l2={'eth', 0x3a, 'nr0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20040080) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1c, 0x3d0, @l2={'eth', 0x3a, 'sit0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x14000) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2d, 0x4, 0x7f, 0x31, 0x40, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7800, 0x3, 0x8}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_VERSION={0x8, 0x2, 0x5}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'erspan0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x70}, 0x8000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000006c0)={r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) process_mrelease(r0, 0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x100, 0x70bd27, 0x8, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe4, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff477}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffa46e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6e44}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x804}, 0x4081) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x27}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcde5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe79}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000800}, 0x20040098) socket$inet6_udp(0xa, 0x2, 0x0) 13:25:28 executing program 7: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x14) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0xf01, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0xa8, 0x80, 0x8, 0x1a, @private1, @mcast1, 0x8, 0x700, 0xfffffffd, 0xfffffffe}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x80, 0x8, 0x41, @mcast2, @local, 0x40, 0x8000, 0x3f, 0x63}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x5a, 0x0, 0x20, 0x100, 0x24, @dev={0xfe, 0x80, '\x00', 0x34}, @loopback, 0x10, 0x8000, 0x1ea, 0x1f}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x284, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff001}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x804}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r13, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r14 = pidfd_getfd(r2, r0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r14, &(0x7f0000001080)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)={0x228, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x4, 0x81, 0xfe, 0x80000001}, {0x7, 0x0, 0x4e, 0x1f}, {0x400, 0x40, 0x9, 0xfff}, {0x9, 0xeb, 0x40, 0x1}, {0x80, 0x40, 0xfe, 0x7}, {0x6, 0xff, 0x20, 0x2}, {0xc5, 0xa2, 0x0, 0x9}, {0x8e30, 0x4, 0x0, 0xfffffffc}, {0x8, 0x3a, 0x40, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x71, 0xdc, 0x7f, 0x6}, {0x2, 0x1, 0xff, 0x1}, {0x3ff, 0xde, 0x1, 0x7e5}, {0xfeff, 0x9, 0x7, 0xfff}, {0x1, 0x4, 0x1, 0x7}]}}}]}}]}, 0x228}}, 0x20000010) 13:25:28 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x8000, 0x3, 0xf0}, {0x400, 0x81, 0xba, 0xffff}, {0x1f, 0x2, 0x9e, 0x4}, {0x9, 0x10, 0x20, 0x3c5}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x5, 0x7f}, 'port0\x00', 0x8, 0x100000, 0x4, 0x2, 0x9a, 0x2, 0xe5b7, 0x0, 0x6, 0xff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000140)={{0x2b, 0x8}, 'port0\x00', 0x10, 0x10000, 0xff, 0x482, 0x1, 0xffff, 0x40, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000200)={0x8, 0x5, 0x0, 'queue0\x00', 0x33a20}) r1 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r1, 0x0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r2, 0x0, 0xa, &(0x7f0000000300)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000002) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000500)={0x2, 0x8000000, 0x3, 0x6, 0xfffff001, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000580)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {r1, r3}}, './file0\x00'}) r7 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, r1, r7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000006c0)={0x100, @tick=0x1ff, 0x5, {0x4}, 0x7f, 0x2, 0x3f}) keyctl$reject(0x13, r7, 0x5, 0x6, r7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000000800)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {r8, r6}}, './file0\x00'}) r9 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r7) request_key(&(0x7f0000000880)='cifs.idmap\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)='syz1\x00', r9) [ 136.390016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.392439] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.396438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.402250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.410923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.454303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.457613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.464971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.468504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.472291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.484211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.488187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.494182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.508938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.513453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.540954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.548169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.551029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.551145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.558503] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.565165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.567623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.572213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.578518] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.581116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.584826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.592398] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 136.604752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.608301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.610345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.612451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.619706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.622260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.625394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.635704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.639426] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.655811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.661259] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.663327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.667461] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 138.481310] Bluetooth: hci0: command tx timeout [ 138.545582] Bluetooth: hci1: command tx timeout [ 138.607028] Bluetooth: hci2: command tx timeout [ 138.608677] Bluetooth: hci6: command tx timeout [ 138.735064] Bluetooth: hci4: command tx timeout [ 138.736982] Bluetooth: hci3: command tx timeout [ 138.800107] Bluetooth: hci5: command tx timeout [ 138.801597] Bluetooth: hci7: command tx timeout [ 140.527981] Bluetooth: hci0: command tx timeout [ 140.590853] Bluetooth: hci1: command tx timeout [ 140.654938] Bluetooth: hci6: command tx timeout [ 140.656935] Bluetooth: hci2: command tx timeout [ 140.784298] Bluetooth: hci4: command tx timeout [ 140.786048] Bluetooth: hci3: command tx timeout [ 140.848013] Bluetooth: hci5: command tx timeout [ 140.849666] Bluetooth: hci7: command tx timeout [ 142.575086] Bluetooth: hci0: command tx timeout [ 142.639010] Bluetooth: hci1: command tx timeout [ 142.703103] Bluetooth: hci2: command tx timeout [ 142.704422] Bluetooth: hci6: command tx timeout [ 142.831575] Bluetooth: hci4: command tx timeout [ 142.832933] Bluetooth: hci3: command tx timeout [ 142.895093] Bluetooth: hci7: command tx timeout [ 142.896650] Bluetooth: hci5: command tx timeout [ 144.623120] Bluetooth: hci0: command tx timeout [ 144.687254] Bluetooth: hci1: command tx timeout [ 144.750873] Bluetooth: hci2: command tx timeout [ 144.753055] Bluetooth: hci6: command tx timeout [ 144.878945] Bluetooth: hci4: command tx timeout [ 144.880467] Bluetooth: hci3: command tx timeout [ 144.943581] Bluetooth: hci7: command tx timeout [ 144.945238] Bluetooth: hci5: command tx timeout [ 199.505688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.508332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.514157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.515658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.524225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.526722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.527809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.530720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.558890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.562590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.579491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.581386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.590579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.598708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.607471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.642193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.646167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.647537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.651440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.654147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.824833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.830697] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.833669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.838947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.840514] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.843212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.851526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.854759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.860416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.866228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.871468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.874214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.878190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.879981] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.882616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.889194] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.891406] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 199.901102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.947328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.985942] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.582896] Bluetooth: hci1: command tx timeout [ 201.647264] Bluetooth: hci0: command tx timeout [ 201.647362] Bluetooth: hci2: command tx timeout [ 201.713884] Bluetooth: hci3: command tx timeout [ 201.902862] Bluetooth: hci5: command tx timeout [ 201.966884] Bluetooth: hci6: command tx timeout [ 202.031977] Bluetooth: hci7: command tx timeout [ 202.032068] Bluetooth: hci4: command tx timeout [ 203.630937] Bluetooth: hci1: command tx timeout [ 203.695065] Bluetooth: hci2: command tx timeout [ 203.695471] Bluetooth: hci0: command tx timeout [ 203.758971] Bluetooth: hci3: command tx timeout [ 203.951474] Bluetooth: hci5: command tx timeout [ 204.016838] Bluetooth: hci6: command tx timeout [ 204.079143] Bluetooth: hci7: command tx timeout [ 204.079525] Bluetooth: hci4: command tx timeout [ 205.679129] Bluetooth: hci1: command tx timeout [ 205.742878] Bluetooth: hci0: command tx timeout [ 205.742923] Bluetooth: hci2: command tx timeout [ 205.806871] Bluetooth: hci3: command tx timeout [ 205.999870] Bluetooth: hci5: command tx timeout [ 206.063886] Bluetooth: hci6: command tx timeout [ 206.126877] Bluetooth: hci4: command tx timeout [ 206.128037] Bluetooth: hci7: command tx timeout [ 207.726978] Bluetooth: hci1: command tx timeout [ 207.792265] Bluetooth: hci0: command tx timeout [ 207.792405] Bluetooth: hci2: command tx timeout [ 207.854860] Bluetooth: hci3: command tx timeout [ 208.047923] Bluetooth: hci5: command tx timeout [ 208.112837] Bluetooth: hci6: command tx timeout [ 208.175013] Bluetooth: hci7: command tx timeout [ 208.176976] Bluetooth: hci4: command tx timeout [ 260.169422] syz-executor.0 (2389) used greatest stack depth: 24280 bytes left [ 262.087986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.094044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.099100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.107442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.114505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.420446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.426128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.429377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.432692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.436513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.437663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.439517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.442592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.444455] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.446298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.447280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.451133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.456969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.459951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.468189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.469711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.471373] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.473102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.475443] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.480506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.484988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.486547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.495413] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.500872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.503502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.525062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.533620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.546050] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.549120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.551752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.569321] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.581304] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.585106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.611398] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.615157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.174908] Bluetooth: hci0: command tx timeout [ 264.559874] Bluetooth: hci2: command tx timeout [ 264.561800] Bluetooth: hci3: command tx timeout [ 264.623067] Bluetooth: hci6: command tx timeout [ 264.623930] Bluetooth: hci5: command tx timeout [ 264.624502] Bluetooth: hci1: command tx timeout [ 264.625107] Bluetooth: hci4: command tx timeout [ 264.751016] Bluetooth: hci7: command tx timeout [ 266.222878] Bluetooth: hci0: command tx timeout [ 266.609102] Bluetooth: hci3: command tx timeout [ 266.610849] Bluetooth: hci2: command tx timeout [ 266.672290] Bluetooth: hci6: command tx timeout [ 266.674035] Bluetooth: hci1: command tx timeout [ 266.675575] Bluetooth: hci4: command tx timeout [ 266.675623] Bluetooth: hci5: command tx timeout [ 266.799233] Bluetooth: hci7: command tx timeout [ 268.270881] Bluetooth: hci0: command tx timeout [ 268.656875] Bluetooth: hci3: command tx timeout [ 268.656944] Bluetooth: hci2: command tx timeout [ 268.718975] Bluetooth: hci6: command tx timeout [ 268.719529] Bluetooth: hci4: command tx timeout [ 268.719605] Bluetooth: hci1: command tx timeout [ 268.720039] Bluetooth: hci5: command tx timeout [ 268.848973] Bluetooth: hci7: command tx timeout [ 270.319118] Bluetooth: hci0: command tx timeout [ 270.703030] Bluetooth: hci3: command tx timeout [ 270.705137] Bluetooth: hci2: command tx timeout [ 270.766927] Bluetooth: hci4: command tx timeout [ 270.767136] Bluetooth: hci1: command tx timeout [ 270.767446] Bluetooth: hci5: command tx timeout [ 270.768158] Bluetooth: hci6: command tx timeout [ 270.895811] Bluetooth: hci7: command tx timeout [ 325.000168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.010604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.015407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.019431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.022074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.024350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.030037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.034866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.035625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.038405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.045390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.057053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.059323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.064374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.065373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.081673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.085153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.088286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.101321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.105100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.148517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.150745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.158358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.160092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.160969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.166846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.171851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.176698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.203377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.215486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.283407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.287192] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.297272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.309594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.318501] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.513190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.521241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.534704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.564542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.614345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.088163] Bluetooth: hci0: command tx timeout [ 327.088420] Bluetooth: hci2: command tx timeout [ 327.150886] Bluetooth: hci1: command tx timeout [ 327.151894] Bluetooth: hci3: command tx timeout [ 327.279040] Bluetooth: hci4: command tx timeout [ 327.342850] Bluetooth: hci5: command tx timeout [ 327.727990] Bluetooth: hci6: command tx timeout [ 327.982882] Bluetooth: hci7: command tx timeout [ 329.135024] Bluetooth: hci0: command tx timeout [ 329.135924] Bluetooth: hci2: command tx timeout [ 329.199414] Bluetooth: hci3: command tx timeout [ 329.202364] Bluetooth: hci1: command tx timeout [ 329.326943] Bluetooth: hci4: command tx timeout [ 329.391111] Bluetooth: hci5: command tx timeout [ 329.776900] Bluetooth: hci6: command tx timeout [ 330.030950] Bluetooth: hci7: command tx timeout [ 331.183180] Bluetooth: hci0: command tx timeout [ 331.184806] Bluetooth: hci2: command tx timeout [ 331.247828] Bluetooth: hci1: command tx timeout [ 331.247874] Bluetooth: hci3: command tx timeout [ 331.375346] Bluetooth: hci4: command tx timeout [ 331.440251] Bluetooth: hci5: command tx timeout [ 331.823018] Bluetooth: hci6: command tx timeout [ 332.079936] Bluetooth: hci7: command tx timeout [ 333.231485] Bluetooth: hci2: command tx timeout [ 333.231705] Bluetooth: hci0: command tx timeout [ 333.295900] Bluetooth: hci3: command tx timeout [ 333.296436] Bluetooth: hci1: command tx timeout [ 333.424133] Bluetooth: hci4: command tx timeout [ 333.487733] Bluetooth: hci5: command tx timeout [ 333.870919] Bluetooth: hci6: command tx timeout [ 334.129324] Bluetooth: hci7: command tx timeout [ 387.527517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.537047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.540895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.547535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.557630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.652583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.656366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.662612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.671192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.688924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.917038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.924181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.929268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.945570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.955737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.000737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.011975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.020063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.051570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.055338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.060327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.064914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.072033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.080976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.082015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.098363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.105712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.122929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.147102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.157137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.229910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.242508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.247285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.284517] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.289194] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.493645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.498161] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.556217] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.579191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.586570] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.616008] Bluetooth: hci0: command tx timeout [ 389.743872] Bluetooth: hci1: command tx timeout [ 389.999034] Bluetooth: hci2: command tx timeout [ 390.257256] Bluetooth: hci3: command tx timeout [ 390.258220] Bluetooth: hci5: command tx timeout [ 390.321815] Bluetooth: hci4: command tx timeout [ 390.767136] Bluetooth: hci7: command tx timeout [ 390.830950] Bluetooth: hci6: command tx timeout [ 391.663989] Bluetooth: hci0: command tx timeout [ 391.794044] Bluetooth: hci1: command tx timeout [ 392.048185] Bluetooth: hci2: command tx timeout [ 392.303315] Bluetooth: hci3: command tx timeout [ 392.303911] Bluetooth: hci5: command tx timeout [ 392.367849] Bluetooth: hci4: command tx timeout [ 392.815907] Bluetooth: hci7: command tx timeout [ 392.880805] Bluetooth: hci6: command tx timeout [ 393.712286] Bluetooth: hci0: command tx timeout [ 393.840095] Bluetooth: hci1: command tx timeout [ 394.094870] Bluetooth: hci2: command tx timeout [ 394.350997] Bluetooth: hci3: command tx timeout [ 394.351568] Bluetooth: hci5: command tx timeout [ 394.416012] Bluetooth: hci4: command tx timeout [ 394.863397] Bluetooth: hci7: command tx timeout [ 394.927114] Bluetooth: hci6: command tx timeout [ 395.759932] Bluetooth: hci0: command tx timeout [ 395.886880] Bluetooth: hci1: command tx timeout [ 396.142921] Bluetooth: hci2: command tx timeout [ 396.400425] Bluetooth: hci5: command tx timeout [ 396.401913] Bluetooth: hci3: command tx timeout [ 396.465218] Bluetooth: hci4: command tx timeout [ 396.912812] Bluetooth: hci7: command tx timeout [ 396.975024] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:30:38 Registers: info registers vcpu 0 RAX=0000000000000a0d RBX=00007f035975f510 RCX=0000000000001003 RDX=00000000000008d5 RSI=0000000000000401 RDI=000000009d75e967 RBP=0000000000000002 RSP=00007ffe77599c20 R8 =00007ffe77599d60 R9 =00007f0359799440 R10=00007f03595efd00 R11=0000000000000007 R12=0000000000000007 R13=00007f0359760a90 R14=0000000000000001 R15=0000000000000000 RIP=00007f03597772e4 RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0359255540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f035972e000 CR3=0000000025a4d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=0000000000666c65735f646165726874 XMM04=5f5f006e6f7474736f685f7265687465 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800f358001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88800f357e01 RSI=ffff88800f357ef0 RDI=ffff88800f357748 RBP=ffff88800f357790 RSP=ffff88800f3576c8 R8 =0000000000000001 R9 =ffff88800f357778 R10=000000000003b6bd R11=00000000000083e7 R12=ffff88800f357798 R13=ffff88800f357780 R14=ffff88800f357ef0 R15=ffff88800f357738 RIP=ffffffff81355488 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff61f8f1f0 CR3=000000002cda2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000