Warning: Permanently added '[localhost]:31048' (ECDSA) to the list of known hosts. 2025/06/07 01:10:12 fuzzer started 2025/06/07 01:10:12 dialing manager at localhost:40003 syzkaller login: [ 100.866079] cgroup: Unknown subsys name 'net' [ 100.971180] cgroup: Unknown subsys name 'cpuset' [ 101.008746] cgroup: Unknown subsys name 'rlimit' 2025/06/07 01:10:27 syscalls: 201 2025/06/07 01:10:27 code coverage: enabled 2025/06/07 01:10:27 comparison tracing: enabled 2025/06/07 01:10:27 extra coverage: enabled 2025/06/07 01:10:27 setuid sandbox: enabled 2025/06/07 01:10:27 namespace sandbox: enabled 2025/06/07 01:10:27 Android sandbox: enabled 2025/06/07 01:10:27 fault injection: enabled 2025/06/07 01:10:27 leak checking: enabled 2025/06/07 01:10:27 net packet injection: enabled 2025/06/07 01:10:27 net device setup: enabled 2025/06/07 01:10:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/07 01:10:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/07 01:10:27 USB emulation: enabled 2025/06/07 01:10:27 hci packet injection: enabled 2025/06/07 01:10:27 wifi device emulation: enabled 2025/06/07 01:10:27 802.15.4 emulation: enabled 2025/06/07 01:10:27 fetching corpus: 0, signal 0/0 (executing program) 2025/06/07 01:10:29 starting 8 fuzzer processes 01:10:29 executing program 0: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/33) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000040)={0x7fffffff, 0x2, 0x1000, 0x2, 0x800, 0x2}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x9, 0x4, 0xa05c, 0x20, 0x9, 0x9}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000000180)=""/125, 0x7d}], 0x2, &(0x7f0000000240)=""/134, 0x86}, 0x0) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14b7e98f20d42adf, 0x1010, 0xffffffffffffffff, 0x6) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000340)={0x7, 0x5, 0x1, 0x1f, 0x400, 0x9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380)="781fac3410c5f496cb721a82bfa94852cb", 0x11, r0}, 0x68) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0xa81, 0x440) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000480)=[r1, r0, 0xffffffffffffffff, r0, r0, r0, r0]}, 0x7) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x10001, 0x10000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10004001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c810}, 0x40044) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, 0x3f9, 0x20, 0x70bd2d, 0x25dfdbfb, {0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r2, 0x22, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004014}, 0x414) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x800, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000900)={0x198e, 0x2, 0x8000, 0xfff, 0x2, 0x2}) sendmsg$AUDIT_GET(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x10, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x400) syz_open_dev$evdev(&(0x7f0000000a40), 0xffffffffffffffff, 0x206000) 01:10:29 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20318c00}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x58}}, 0x4000) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000845}, 0x4000850) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000600)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r2, 0x34, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c1}, 0x50) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r6) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000091}, 0x80) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000e80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a00)={0x42c, 0x3f3, 0x106, 0x70bd25, 0x25dfdbfe, {0x0, 0x2, 0x17, [0x1, 0xb5, 0x7fffffff, 0x5, 0x1, 0x8, 0x10000, 0x2, 0x81, 0x255d0761, 0xfffffffb, 0x8, 0x7, 0xd1f8, 0x7be6, 0x6, 0x8001, 0x32, 0x0, 0x4, 0x80000001, 0x800, 0xffffff10, 0xffffffff, 0x8, 0x7, 0x3, 0x4, 0x5050daa1, 0x7, 0x3, 0x9, 0x7fffffff, 0x9, 0x3, 0x3f, 0xa8dc, 0x0, 0x0, 0x1, 0x33, 0x7ff, 0x8, 0x7, 0x0, 0x75, 0x9, 0xfffffffc, 0x2c035f75, 0x81, 0xffff, 0x7ff, 0x7, 0x9, 0x8, 0x200, 0x9, 0xfffffe01, 0x10000, 0x3, 0x3, 0x7fff, 0x7ff, 0x5], [0x0, 0x8, 0x0, 0x1, 0x80000001, 0x7, 0x2, 0xfffffff9, 0x5, 0x3, 0x4da, 0x7ff, 0x8, 0x2, 0x3, 0x401, 0xffffffff, 0x0, 0x5fe, 0x4, 0x0, 0x4, 0x5, 0x10000, 0x1000, 0x8, 0xd95, 0x2, 0x80, 0x5, 0x7fffffff, 0xffffffff, 0xe3, 0x3, 0xff, 0xffff8000, 0x7, 0x80000001, 0xfff, 0x6, 0xff, 0x2, 0x6, 0x0, 0x1, 0x2, 0x2, 0x80000000, 0x1, 0x3, 0x10001, 0x1f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x10001, 0x9, 0x3f, 0x7fff, 0xffff, 0xffebda9, 0xffffffff], [0x400, 0xc7c, 0x101, 0x200, 0x5, 0x8, 0x7, 0x7f, 0x6, 0x7, 0x1, 0x6, 0x51ba, 0x3, 0x0, 0x3, 0x3, 0x2e9, 0x9, 0x1000, 0x3, 0x9, 0x10a4000, 0x101, 0x2, 0x7, 0x7, 0x4, 0xff6, 0x7, 0x3f, 0x6, 0x7, 0x4, 0x1, 0x9, 0x9, 0xfffffa2b, 0x2, 0x0, 0x9, 0x2a11, 0x1e, 0x7, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xffd1, 0xfffffffa, 0x5, 0x9, 0x0, 0xf9, 0x68, 0x6, 0x6, 0x0, 0x5, 0x20000, 0x4, 0x1, 0x8000, 0x9, 0x3], [0x10001, 0x8001, 0x4c65, 0x0, 0x0, 0xfffffffc, 0x4, 0x4, 0xfffffffc, 0xffff8000, 0x101, 0x8, 0xfff, 0x2, 0x3ff, 0xe8, 0x101, 0x5, 0x9, 0x0, 0x8e, 0x1000, 0xffff, 0x8a3e, 0x1ff, 0xfffffffc, 0x8, 0x10000, 0x800, 0xd65, 0x7c000000, 0x6, 0x7b, 0xe59, 0x401, 0x3, 0x10aa, 0x3f, 0x0, 0x42, 0x79ed, 0x80, 0x2, 0x2, 0x3, 0x6, 0x0, 0x400, 0x1, 0x6, 0x1000, 0xfffffff6, 0x5, 0xfffffff9, 0x6bd8, 0x1e, 0xffffff00, 0x3, 0x278e, 0x5, 0x2, 0x6d24, 0xfffffffd, 0x10001], 0xc, ['.[\x00', 'wpan0\x00', '+}\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x1d5}, 0x24000050) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000ec0)) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 01:10:29 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x3, 0x7ff, 0x800}, {{}, 0x1, 0x6, 0x5c1}, {{0x77359400}, 0x15}, {{0x0, 0x2710}, 0x0, 0x800, 0x97a5}, {{0x0, 0xea60}, 0x0, 0x9, 0x9}, {{}, 0x16, 0x100, 0x7fffffff}, {{0x77359400}, 0x0, 0x1, 0x2}, {{}, 0x11, 0x3, 0x1}, {{}, 0x3, 0x6, 0xfffffff8}, {{}, 0x16, 0x4, 0x1}], 0xf0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f00000002c0)=""/127, 0x7f}], 0x3, &(0x7f0000000380)=""/132, 0x84}, 0x120) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/34, &(0x7f00000005c0)=0x22) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0xfffffbb7, 0x10, @mcast2, @private2, 0x700, 0x7, 0x0, 0x1}}) r3 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)=@delpolicy={0x30c, 0x14, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@broadcast, @in=@remote, 0x4e20, 0x2, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x73, r2, 0xffffffffffffffff}, 0x6e6bc0, 0x2}, [@algo_crypt={0xda, 0x2, {{'lrw-serpent-sse2\x00'}, 0x490, "41b3c5343521ea74eea0ffb9d979f4c1b0570b148bc2c13df4ed722fd785753a22f36d220a59d6c873da63bd846124b691735e0ce44cf3b52f5b2bbeda41ea79deace1f6e6521ba3f8df1f8b31d0ce24e929f0782bc09fb655200a95def1aba1401414ef64596d66d1c81fecc61fe2ae843c29f8932841a30418089effa5ade661809c81e231f58ddfa6300f16cbccc26f67"}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@empty, 0x4e24, 0xfff9, 0x4e22, 0x1f, 0x2, 0x0, 0x80, 0x62, 0x0, r3}, {0xfffffffffffffffa, 0x40, 0x9, 0x10001, 0xaed4, 0x1ff, 0x7, 0x20}, {0x1, 0x5, 0x6b, 0x7ff}, 0x10000, 0x6e6bb8, 0x2, 0x0, 0x2, 0x1}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x4e23, 0x1, 0x4e24, 0x2, 0x2, 0x80, 0x20, 0x2f, 0x0, 0xee00}, {0x1, 0x9, 0x0, 0x3, 0x6, 0x9, 0x8, 0x8}, {0x80000000, 0xff, 0x100000001, 0xfffffffffffffffa}, 0x6, 0x6e6bb1, 0x0, 0x1, 0x1, 0x2}}, @mark={0xc, 0x15, {0x350759, 0xeb74}}, @extra_flags={0x8, 0x18, 0x9}, @algo_crypt={0x5d, 0x2, {{'cbc(aes-ce)\x00'}, 0xa8, "928261055c91c67c0d588f75076c9ac5a058305faf"}}, @lastused={0xc, 0xf, 0x3f}, @proto={0x5, 0x19, 0x6c}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0xa40, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000f40)=""/22, &(0x7f0000000f80)=0x16) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/191, 0xbf, 0x0, &(0x7f0000001080)=""/108, 0x6c}, &(0x7f0000001140)=0x40) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000001180)={{0x2, 0x4e22, @broadcast}, {0x6, @multicast}, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}, 'wlan0\x00'}) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000001200)={{0x4, @rand_addr=0x64010102, 0x4e23, 0x3, 'sed\x00', 0x30, 0x0, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x75, 0x3, 0x3, 0x800, 0x8}}, 0x44) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20000044) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0xa00000, &(0x7f0000001400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '\\'}}, {@mmap}, {@cache_none}, {@version_L}, {@cache_none}], [{@obj_user={'obj_user', 0x3d, 'sed\x00'}}, {@euid_lt={'euid<', r5}}, {@smackfsroot={'smackfsroot', 0x3d, 'ip6tnl0\x00'}}, {@obj_type={'obj_type', 0x3d, ','}}]}}) 01:10:29 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x3, 0x0, 0xe, 0x0, "fe8c2769ff26d65805fad3a5ac7acdd4618a73e2f2ade0df6b1c65d999cc5ea35b6c5f1308a4f85c11af8c84388cadffd4b889ca61a0a265a2797d9df184bd2c", "0245393cc6c7046690ef234c02e88cfe6e348fb3f8915983e834fffdf5773c66", [0x8, 0x8]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2001) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xa8}}, 0x4000000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000006c0)) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000700)={0xcc1f}, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000900)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/233, 0xe9, 0x1, &(0x7f0000000840)=""/146, 0x92}, &(0x7f0000000940)=0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000980)=0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000009c0)={'wg0\x00'}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x80010, r2, 0x1fd18000) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000a00)) socketpair(0x33, 0x3, 0x40, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000010c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000b40)={0x53c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x4f8, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0a6f653c36c835a1950384356bb9c6986a36aa6d80e0a97c8155bc53ec58c6f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b515e609fe0a7234a3862d5c1c878979f9a62a1f9c38ff78a6fd256b0166540e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2839}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}]}, {0x474, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @mcast1, 0xffffffff}}, @WGPEER_A_ALLOWEDIPS={0x360, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @private2, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @mcast1, 0x8001}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffffffff, @local, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x53c}, 0x1, 0x0, 0x0, 0x20008080}, 0x48090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) accept(0xffffffffffffffff, &(0x7f0000001100)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000001180)=0x80) 01:10:29 executing program 4: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0xf8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3f, 0x2, 0x3f}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xff, 0x7f, 0x5, 0xff}, 0x49, &(0x7f00000000c0)={0x5, 0xf, 0x49, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "6bcce0261edd1465ed180038510ee6bf"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x2, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x29, 0x6, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0xac, 0x4, 0x800000, 0xff00, 0x5, [0x0, 0x3f00, 0x30, 0x410f]}]}, 0x5, [{0x71, &(0x7f0000000140)=@string={0x71, 0x3, "a2ff76cd2b9dfcd24ef3caaaf2dfdbee827d99dad26e989d64ce1671c336b5d3f07e9a3ab0a4be8dbdd0d74240e671b947f0d2889d290fae3d4ffd4fdab14b2847ea6a13cae7481a16df70c8a43f3eec3ed207eba0ab6d1bb5000f1359c1194cecc8d5a4827583785da6c807c6a7ce"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x9d, &(0x7f0000000200)=@string={0x9d, 0x3, "aab18993bfc3b9de014cddb87a2e3c42fb4a6251dd7bf09b335df9906483d6c2c65c41c7ae300a43274ffd6408aee671ca2c0420d7fa9f5c8af820e4f543cb33abfdb93b4f7f098efc46969141380f0cd6ea671880a8bab1718338a110ce963c8c30445d0c829ae452843e3abe5ed856f3da9334e39447f0960586c12bc1487543fa6341eea7dfe4b982a86b3360ba4777ce11fc183f7eab68bcc5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x8b, &(0x7f0000000300)=@string={0x8b, 0x3, "00c9ae8602c331f3f800b7210fe78fdd808971d0d3f3b674bcb2b9e3f209f91a1619657bee17eb1d19b7cef7de1837a87e976eed203b273ee1ad991dc999851c8d7f82cbedd0130a3ac7ac2299a7792ac6310699cb8a984af04ecf6ad19032c2bfe6371394c321d64fb6b91900ddb0fdbcd23f95722d92fc0a617d9ef0e11084d3dbf3e75f44048919"}}]}) r1 = eventfd2(0xfffffffc, 0x1) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x9}}, {@loose}, {@privport}, {@aname={'aname', 0x3d, '/proc/sys/net/ipv4/tcp_wmem\x00'}}, {@aname={'aname', 0x3d, '/proc/sys/net/ipv4/tcp_wmem\x00'}}], [{@uid_gt={'uid>', r2}}]}}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000600), 0x8) syz_usb_control_io$printer(r0, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x40, 0x8, 0x7e, {0x7e, 0x23, "164887ed529d71561c1a0abf64b3debb5effa75810018defac66c882b459460d895ad77ea533507629095484f30289982c354372c9e5412e390fc2f798fe90eec3daa7f564998a1d0d7532ab578bfca488079a2759543a866d78d851396f594f7a6aa8616cb63d8917551ac7901051424979b2926ed43da3715e264d"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, &(0x7f0000000940)={0x34, &(0x7f0000000780)={0x40, 0x10, 0x58, "2fce4f56dac69393cd60ba8929b4e0d36e5108b2ac2d117f5d64db8bbf6bab1ee7d1a23f9f93da41bcc6dba692a0680c833d246395b410d710eb8acb125c9f2333afe943fbf6bf67d4d4780be5026514b256ad597500bf2b"}, &(0x7f0000000800)={0x0, 0xa, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x6, "5ed16e7e1f5c"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x3f}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x8}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980), 0x131600, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) eventfd(0x5) r5 = geteuid() getgroups(0x3, &(0x7f00000009c0)=[0x0, 0xffffffffffffffff, 0x0]) r7 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x0, r5, r6, r2, 0x0, 0x2a, 0x5}, 0x0, 0x0, 0xfffffffffffffffa, 0x2, 0x80000001, 0x83b, 0x6, 0x7, 0x4, 0x89, r7, 0xffffffffffffffff}) msgrcv(0xffffffffffffffff, &(0x7f0000000a80)={0x0, ""/105}, 0x71, 0x0, 0x3800) eventfd2(0xffff, 0x80001) geteuid() [ 117.730497] audit: type=1400 audit(1749258629.742:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:10:29 executing program 5: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x5b71, &(0x7f0000000080)={0x0, 0xdcfb, 0x8, 0x0, 0x1c0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000001, 0x40010, r0, 0x10000000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = syz_io_uring_setup(0x38b1, &(0x7f0000000200)={0x0, 0x3162, 0x0, 0x1, 0x384, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x4010, r2, 0x10000000) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000, 0xb, &(0x7f0000ffa000/0x3000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/64, 0x40, 0x0, &(0x7f0000000340)=""/221, 0xdd}, &(0x7f0000000480)=0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) r3 = openat$cgroup_subtree(r1, &(0x7f00000004c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000500)=[r3, r1, r2, r0, r2, r0, r2]}, 0x7) alarm(0x4) io_uring_enter(r2, 0x599e, 0x632a, 0x1, &(0x7f0000000580)={[0x80000000]}, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/109, 0x6d, 0x0, &(0x7f0000000640)=""/146, 0x92}, &(0x7f0000000740)=0x40) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, &(0x7f00000007c0)={0x7, 0x20, 0x40, 0x20, 0x4}, 0x48) 01:10:29 executing program 6: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x5, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x325a00, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, r0, 0x0) r1 = syz_io_uring_setup(0x49ed, &(0x7f0000000040)={0x0, 0xc3d7, 0x4, 0x3, 0x392, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x10, r1, 0x10000000) pkey_mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1000004, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1ec, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x200) munmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000440)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x100010, r0, 0x8000000) pkey_alloc(0x0, 0x1) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7fffffff) mlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/119, 0x77, 0x1, &(0x7f0000000500)=""/186, 0xba}, &(0x7f0000000600)=0x40) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x300000c, r3) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000640)=0x1, 0x2, 0x2) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000680)=""/186) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000740)=r0, 0x1) 01:10:29 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x7d81210c7e4f8ce8, 0x0) ioctl$CDROMRESET(r0, 0x5312) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r0, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000100)={0x3, 0x1, 0x4, 0x3, 0x9, 0x3, @lba=0x3, @msf={0x40, 0x9, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x6, 0x1, 0x0, @msf={0x8, 0x0, 0x7}, @lba}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000001c0)=""/97, &(0x7f0000000240)=0x61) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x200200, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000002c0)={0x3, 0x1, 0x1, 0xf, 0x40, 0x1, @msf={0x1, 0xc1, 0x1}, @lba=0x100}) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000300)) r3 = syz_open_dev$hidraw(&(0x7f0000000340), 0x14a, 0x40) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000380)) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) ioctl$CDROM_SELECT_DISK(r4, 0x5322, 0x9) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x400, 0x70bd29, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5000}, 0x4000000) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000500)) [ 119.028003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.034014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.036141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.043165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.047576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.082534] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.087822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.090082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.096122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.099520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.144041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.147624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.149037] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.155317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.161736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.259051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.287611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.289365] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.296079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.307005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.309430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.336648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.345490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.350852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.356527] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.358657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.379521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.383571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.390722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.391983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.399997] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.406456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.409965] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.427148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.448734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.448788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.455151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.475346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.488625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.493647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.110001] Bluetooth: hci0: command tx timeout [ 121.173310] Bluetooth: hci1: command tx timeout [ 121.237356] Bluetooth: hci2: command tx timeout [ 121.366006] Bluetooth: hci3: command tx timeout [ 121.493524] Bluetooth: hci6: command tx timeout [ 121.494123] Bluetooth: hci4: command tx timeout [ 121.494144] Bluetooth: hci5: command tx timeout [ 121.557316] Bluetooth: hci7: command tx timeout [ 123.159352] Bluetooth: hci0: command tx timeout [ 123.222319] Bluetooth: hci1: command tx timeout [ 123.285394] Bluetooth: hci2: command tx timeout [ 123.414412] Bluetooth: hci3: command tx timeout [ 123.541646] Bluetooth: hci6: command tx timeout [ 123.541916] Bluetooth: hci4: command tx timeout [ 123.542511] Bluetooth: hci5: command tx timeout [ 123.607264] Bluetooth: hci7: command tx timeout [ 125.206324] Bluetooth: hci0: command tx timeout [ 125.269284] Bluetooth: hci1: command tx timeout [ 125.334315] Bluetooth: hci2: command tx timeout [ 125.461589] Bluetooth: hci3: command tx timeout [ 125.589429] Bluetooth: hci4: command tx timeout [ 125.592238] Bluetooth: hci5: command tx timeout [ 125.592670] Bluetooth: hci6: command tx timeout [ 125.653420] Bluetooth: hci7: command tx timeout [ 127.253844] Bluetooth: hci0: command tx timeout [ 127.317353] Bluetooth: hci1: command tx timeout [ 127.381719] Bluetooth: hci2: command tx timeout [ 127.511088] Bluetooth: hci3: command tx timeout [ 127.637476] Bluetooth: hci6: command tx timeout [ 127.637949] Bluetooth: hci5: command tx timeout [ 127.639248] Bluetooth: hci4: command tx timeout [ 127.701535] Bluetooth: hci7: command tx timeout [ 181.936055] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.939049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.939247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.940823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.943126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.944986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.947780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.951978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.952295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.969127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.993129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.997633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.006563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.014687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.021729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.062156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.068697] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.074467] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.082557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.084059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.090575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.092517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.094080] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.095721] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.105386] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.113008] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.115840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.117028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.124923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.134956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.138633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.141043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.166142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.169620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.169626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.186810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.203622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.207713] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.248170] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.252029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.021305] Bluetooth: hci1: command tx timeout [ 184.021995] Bluetooth: hci0: command tx timeout [ 184.085308] Bluetooth: hci3: command tx timeout [ 184.213492] Bluetooth: hci2: command tx timeout [ 184.214092] Bluetooth: hci4: command tx timeout [ 184.277372] Bluetooth: hci7: command tx timeout [ 184.277969] Bluetooth: hci5: command tx timeout [ 184.341286] Bluetooth: hci6: command tx timeout [ 186.071424] Bluetooth: hci0: command tx timeout [ 186.071944] Bluetooth: hci1: command tx timeout [ 186.133509] Bluetooth: hci3: command tx timeout [ 186.261536] Bluetooth: hci4: command tx timeout [ 186.262003] Bluetooth: hci2: command tx timeout [ 186.325715] Bluetooth: hci5: command tx timeout [ 186.326262] Bluetooth: hci7: command tx timeout [ 186.389300] Bluetooth: hci6: command tx timeout [ 188.117486] Bluetooth: hci1: command tx timeout [ 188.117981] Bluetooth: hci0: command tx timeout [ 188.181706] Bluetooth: hci3: command tx timeout [ 188.309885] Bluetooth: hci4: command tx timeout [ 188.310971] Bluetooth: hci2: command tx timeout [ 188.373319] Bluetooth: hci5: command tx timeout [ 188.373817] Bluetooth: hci7: command tx timeout [ 188.437312] Bluetooth: hci6: command tx timeout [ 190.165299] Bluetooth: hci0: command tx timeout [ 190.165850] Bluetooth: hci1: command tx timeout [ 190.230236] Bluetooth: hci3: command tx timeout [ 190.357328] Bluetooth: hci2: command tx timeout [ 190.357869] Bluetooth: hci4: command tx timeout [ 190.422282] Bluetooth: hci7: command tx timeout [ 190.422813] Bluetooth: hci5: command tx timeout [ 190.486261] Bluetooth: hci6: command tx timeout [ 244.206064] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.209132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.211387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.216788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.220166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.460783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.464777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.466861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.474097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.477020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.567545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.572974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.575660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.582086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.589618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.602549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.613728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.615082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.620626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.623966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.627051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.649489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.654633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.692801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.716931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.725045] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.726448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.728927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.732321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.740187] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.769007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.779519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.785127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.803486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.804879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.822597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.827414] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.838389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.845368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.885615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.293300] Bluetooth: hci0: command tx timeout [ 246.549457] Bluetooth: hci1: command tx timeout [ 246.678103] Bluetooth: hci3: command tx timeout [ 246.741264] Bluetooth: hci4: command tx timeout [ 246.805348] Bluetooth: hci2: command tx timeout [ 246.869387] Bluetooth: hci5: command tx timeout [ 246.933470] Bluetooth: hci7: command tx timeout [ 246.934801] Bluetooth: hci6: command tx timeout [ 248.342408] Bluetooth: hci0: command tx timeout [ 248.597499] Bluetooth: hci1: command tx timeout [ 248.725613] Bluetooth: hci3: command tx timeout [ 248.789585] Bluetooth: hci4: command tx timeout [ 248.854507] Bluetooth: hci2: command tx timeout [ 248.917763] Bluetooth: hci5: command tx timeout [ 248.981364] Bluetooth: hci7: command tx timeout [ 248.981927] Bluetooth: hci6: command tx timeout [ 250.389280] Bluetooth: hci0: command tx timeout [ 250.646479] Bluetooth: hci1: command tx timeout [ 250.774433] Bluetooth: hci3: command tx timeout [ 250.837599] Bluetooth: hci4: command tx timeout [ 250.902301] Bluetooth: hci2: command tx timeout [ 250.967274] Bluetooth: hci5: command tx timeout [ 251.029501] Bluetooth: hci7: command tx timeout [ 251.029976] Bluetooth: hci6: command tx timeout [ 252.437297] Bluetooth: hci0: command tx timeout [ 252.693576] Bluetooth: hci1: command tx timeout [ 252.822695] Bluetooth: hci3: command tx timeout [ 252.885330] Bluetooth: hci4: command tx timeout [ 252.949708] Bluetooth: hci2: command tx timeout [ 253.015287] Bluetooth: hci5: command tx timeout [ 253.077337] Bluetooth: hci6: command tx timeout [ 253.078075] Bluetooth: hci7: command tx timeout [ 306.668714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.675920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.678740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.689340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.694069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.817279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.820875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.823547] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.828972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.832952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.894368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.924788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.962863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.964769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.968170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.971827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.976891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.983564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.983733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.986857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.989811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.994866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.008783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.015914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.022627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.030652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.074557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.079304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.089983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.093732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.099755] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.130074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.132042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.142772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.169008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.170950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.173147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.186993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.199606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.289037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.757263] Bluetooth: hci0: command tx timeout [ 308.886374] Bluetooth: hci1: command tx timeout [ 309.077364] Bluetooth: hci3: command tx timeout [ 309.078090] Bluetooth: hci4: command tx timeout [ 309.141305] Bluetooth: hci2: command tx timeout [ 309.269447] Bluetooth: hci5: command tx timeout [ 309.333434] Bluetooth: hci7: command tx timeout [ 309.334328] Bluetooth: hci6: command tx timeout [ 310.808230] Bluetooth: hci0: command tx timeout [ 310.933314] Bluetooth: hci1: command tx timeout [ 311.125338] Bluetooth: hci4: command tx timeout [ 311.125844] Bluetooth: hci3: command tx timeout [ 311.190877] Bluetooth: hci2: command tx timeout [ 311.318908] Bluetooth: hci5: command tx timeout [ 311.381395] Bluetooth: hci7: command tx timeout [ 311.381854] Bluetooth: hci6: command tx timeout [ 312.854676] Bluetooth: hci0: command tx timeout [ 312.982695] Bluetooth: hci1: command tx timeout [ 313.174917] Bluetooth: hci4: command tx timeout [ 313.175826] Bluetooth: hci3: command tx timeout [ 313.238323] Bluetooth: hci2: command tx timeout [ 313.366293] Bluetooth: hci5: command tx timeout [ 313.430451] Bluetooth: hci6: command tx timeout [ 313.431015] Bluetooth: hci7: command tx timeout [ 314.901266] Bluetooth: hci0: command tx timeout [ 315.030257] Bluetooth: hci1: command tx timeout [ 315.221618] Bluetooth: hci3: command tx timeout [ 315.222095] Bluetooth: hci4: command tx timeout [ 315.286375] Bluetooth: hci2: command tx timeout [ 315.413260] Bluetooth: hci5: command tx timeout [ 315.478714] Bluetooth: hci7: command tx timeout [ 315.479145] Bluetooth: hci6: command tx timeout [ 369.000149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.005059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.010130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.020171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.032636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.081549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.084889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.089988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.095623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.101971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.289730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.302511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.320767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.323118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.327526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.329328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.331873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.337473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.345482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.348021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.351689] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.353613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.357052] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.392237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.407409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.414674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.426461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.439535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.457799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.461468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.494423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.508165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.513136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.528608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.538035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.704658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.737879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.772126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.838539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.864110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.095266] Bluetooth: hci0: command tx timeout [ 371.158632] Bluetooth: hci1: command tx timeout [ 371.413268] Bluetooth: hci3: command tx timeout [ 371.477274] Bluetooth: hci2: command tx timeout [ 371.477327] Bluetooth: hci4: command tx timeout [ 371.733756] Bluetooth: hci5: command tx timeout [ 371.861282] Bluetooth: hci6: command tx timeout [ 372.055258] Bluetooth: hci7: command tx timeout [ 373.142271] Bluetooth: hci0: command tx timeout [ 373.205252] Bluetooth: hci1: command tx timeout [ 373.462574] Bluetooth: hci3: command tx timeout [ 373.525378] Bluetooth: hci2: command tx timeout [ 373.525454] Bluetooth: hci4: command tx timeout [ 373.783248] Bluetooth: hci5: command tx timeout [ 373.910307] Bluetooth: hci6: command tx timeout [ 374.101268] Bluetooth: hci7: command tx timeout [ 375.189265] Bluetooth: hci0: command tx timeout [ 375.253307] Bluetooth: hci1: command tx timeout [ 375.509350] Bluetooth: hci3: command tx timeout [ 375.573540] Bluetooth: hci2: command tx timeout [ 375.574274] Bluetooth: hci4: command tx timeout [ 375.829397] Bluetooth: hci5: command tx timeout [ 375.958707] Bluetooth: hci6: command tx timeout [ 376.151261] Bluetooth: hci7: command tx timeout [ 377.238316] Bluetooth: hci0: command tx timeout [ 377.301740] Bluetooth: hci1: command tx timeout [ 377.560267] Bluetooth: hci3: command tx timeout [ 377.621484] Bluetooth: hci4: command tx timeout [ 377.621979] Bluetooth: hci2: command tx timeout [ 377.877390] Bluetooth: hci5: command tx timeout [ 378.006419] Bluetooth: hci6: command tx timeout [ 378.198323] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:15:31 Registers: info registers vcpu 0 RAX=ffff88802eb98001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802eb97901 RSI=ffff88802eb97958 RDI=ffff88802eb97598 RBP=ffff88802eb975e0 RSP=ffff88802eb97518 R8 =0000000000000001 R9 =ffff88802eb975c8 R10=000000000003b6cd R11=0000000000028bb9 R12=ffff88802eb975e8 R13=ffff88802eb975d0 R14=ffff88802eb97958 R15=ffff88802eb97588 RIP=ffffffff81355488 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff10bb75540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe6a1384620 CR3=0000000009c3d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81604870 RCX=ffff88802ea174fc RDX=0000000000000000 RSI=ffffffff85c1cbc0 RDI=ffff88802ea175a8 RBP=ffff88802ea17640 RSP=ffff88802ea175a0 R8 =0000000000000001 R9 =ffff88802ea175e8 R10=000000000003b6cd R11=00000000000232f2 R12=ffff88802ea17670 R13=0000000000000000 R14=ffff888025740000 R15=0000000000000cc0 RIP=ffffffff81353ac0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f18bd463028 CR3=000000000edc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000