Warning: Permanently added '[localhost]:24218' (ECDSA) to the list of known hosts. 2025/01/05 19:39:03 fuzzer started 2025/01/05 19:39:03 dialing manager at localhost:34561 syzkaller login: [ 68.206736] cgroup: Unknown subsys name 'net' [ 68.302012] cgroup: Unknown subsys name 'cpuset' [ 68.338336] cgroup: Unknown subsys name 'rlimit' 2025/01/05 19:39:20 syscalls: 202 2025/01/05 19:39:20 code coverage: enabled 2025/01/05 19:39:20 comparison tracing: enabled 2025/01/05 19:39:20 extra coverage: enabled 2025/01/05 19:39:20 setuid sandbox: enabled 2025/01/05 19:39:20 namespace sandbox: enabled 2025/01/05 19:39:20 Android sandbox: enabled 2025/01/05 19:39:20 fault injection: enabled 2025/01/05 19:39:20 leak checking: enabled 2025/01/05 19:39:20 net packet injection: enabled 2025/01/05 19:39:20 net device setup: enabled 2025/01/05 19:39:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/05 19:39:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/05 19:39:20 USB emulation: enabled 2025/01/05 19:39:20 hci packet injection: enabled 2025/01/05 19:39:20 wifi device emulation: enabled 2025/01/05 19:39:20 802.15.4 emulation: enabled 2025/01/05 19:39:20 fetching corpus: 0, signal 0/0 (executing program) 2025/01/05 19:39:23 starting 8 fuzzer processes 19:39:23 executing program 0: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004841}, 0x48040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4044) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000001) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x20c, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3c050f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0xc042}, 0x2) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40048c0}, 0x8000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2f}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r3, 0x810, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x20040805) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004884}, 0x8800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x2f, 0xfb, 0x8, 0x8, 0x20, @empty, @remote, 0x7800, 0x700, 0x6, 0xff}}) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r6, 0x8a0, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x80}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20004120) 19:39:23 executing program 2: r0 = fork() r1 = getpgid(r0) rt_sigqueueinfo(r1, 0x31, &(0x7f0000000000)={0xd, 0x8, 0x35}) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0x99bb, 0xa9e}, &(0x7f00000000c0)) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, r2) tgkill(0x0, r1, 0x2f) ptrace$peekuser(0x3, r1, 0x0) r3 = fork() tgkill(r0, r3, 0x2d) r4 = fork() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = fork() prlimit64(r5, 0xa, &(0x7f0000000100)={0x36, 0x3ff}, &(0x7f0000000140)) prlimit64(r4, 0xb, &(0x7f0000000180)={0x10000, 0x5}, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x0, 0x101, 0x2, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x20, 0x700, 0x5, 0xfffffc00}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', r6, 0x29, 0x1, 0xc, 0x0, 0x8, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x8, 0xd16, 0x3}}) sched_getattr(r3, &(0x7f0000000380)={0x38}, 0x38, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x400c800) 19:39:23 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xdf, 0x3, 0x10, @mcast2, @private0, 0x20, 0x8, 0x4e6, 0x7}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x260000, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x2, 0x2, 0x8}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', r0, 0x40, 0x40, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x2a, 0x64, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x27, 0x3, [{0x5, 0x12, "45b301ea7f49e43c7437742485d2cb4a"}, {0x6, 0x6, 'JvR&'}, {0x2, 0x6, "f36bb697"}, {0x1, 0x3, "9b"}]}, @noop, @timestamp_addr={0x44, 0xc, 0x1d, 0x1, 0x7, [{@private=0xa010101, 0x70}]}, @end, @ssrr={0x89, 0x1b, 0xd5, [@remote, @local, @multicast1, @loopback, @loopback, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x7800, 0x1, 0x20, 0x40000, {{0xb, 0x4, 0x3, 0x2, 0x2c, 0x66, 0x0, 0x0, 0x52, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x38}, {[@cipso={0x86, 0x13, 0x1, [{0x1, 0xd, "1b4690c2b73540b6fc58ce"}]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r3, 0x2f, 0xfe, 0x4, 0xff, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x20, 0x40, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', r4, 0x8000, 0x40, 0x200, 0x1f, {{0x3a, 0x4, 0x0, 0x7, 0xe8, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x6, [{@loopback, 0x5}, {@local, 0x66}, {@remote, 0x1}, {@empty, 0xfffffffd}]}, @end, @rr={0x7, 0x17, 0x8d, [@multicast1, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}, @empty]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x8, [0x8, 0x1, 0xe24c, 0x7f]}, @cipso={0x86, 0x3e, 0x0, [{0x6, 0x8, "72eb0f7747ab"}, {0x7, 0x12, "0c65d00f133c9b7eadd08bb94453cdfa"}, {0x7, 0xd, "b4636d27ba10440ccd3ebb"}, {0x0, 0x3, 'm'}, {0x7, 0x9, "9ce9d15c73b82c"}, {0x2, 0x5, 's(x'}]}, @timestamp_addr={0x44, 0x44, 0xab, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010100, 0x4}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@empty, 0x54a}, {@multicast2, 0x2}, {@loopback, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'erspan0\x00', r0, 0x10, 0x8, 0x0, 0x0, {{0x1f, 0x4, 0x3, 0xd, 0x7c, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x31, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0x1}, {@multicast2, 0x2}]}, @generic={0x44, 0xf, "eba5aa88437042d864bfc43ada"}, @lsrr={0x83, 0x23, 0x54, [@multicast2, @private=0xa010102, @multicast1, @empty, @multicast1, @multicast1, @empty, @empty]}, @lsrr={0x83, 0x13, 0xd6, [@local, @multicast1, @private=0xa010102, @broadcast]}, @rr={0x7, 0x7, 0x91, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', r5, 0x8, 0x40, 0x18, 0x6, {{0x1b, 0x4, 0x3, 0x1e, 0x6c, 0x66, 0x0, 0xfc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, {[@cipso={0x86, 0x14, 0x3, [{0x7, 0x7, "b820fa4e14"}, {0x2, 0x7, "239ad07f0f"}]}, @lsrr={0x83, 0x17, 0xd1, [@private=0xa010102, @multicast2, @loopback, @multicast1, @remote]}, @generic={0x94, 0x6, "46e31f01"}, @generic={0x0, 0x4, "f2f3"}, @ssrr={0x89, 0x7, 0x74, [@broadcast]}, @ssrr={0x89, 0xf, 0x62, [@dev={0xac, 0x14, 0x14, 0xf}, @remote, @loopback]}, @timestamp_addr={0x44, 0xc, 0x98, 0x1, 0xe, [{@multicast1, 0x2}]}, @noop]}}}}}) pipe2$9p(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLINK(r6, &(0x7f0000000840)={0x7, 0x47, 0x2}, 0x7) prctl$PR_MCE_KILL_GET(0x22) write$P9_ROPEN(r6, &(0x7f0000000880)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x7}, 0x3e}}, 0x18) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RCREATE(r7, &(0x7f0000000900)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x3}, 0x8}}, 0x18) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000084) 19:39:23 executing program 3: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x1c}}, 0x24000084) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "0e5a5ff5b63fee1d0c894f73a4c099e1e2782cc77bdbd4961ea36683d1baff3a"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x4004) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x302bc4ac}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xde00000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x64}, 0x1, 0x0, 0x0, 0x2051}, 0x4000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) io_uring_setup(0x3df3, &(0x7f00000007c0)={0x0, 0x3d84, 0x10, 0x3, 0x333}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6044}, 0x200080c1) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x18}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x39}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20008c00) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r5, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008800) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x18080) 19:39:23 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="92abf65f8611141810bb960af314b19c441a361e025d6bca93e8dc5feab4f76c6c0fe63e9f24fe9cd001ce598cca2772fcf3d01ff0aa44628328fbd9569d1a7f6a37b01ff3d7d8e38f031c26c36e54b02e4f4f64d2e59cf08fef1275ead9621429ec5dc2670062be392696ed5eae14824f9e1127d1a01c4370ddaae33337b1", 0x7f, 0x40086}, 0x800000) times(&(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0x9, 0x38, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x9, 0x80}}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x49, 0x1, {0x20, 0x1}}, 0x14) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREADDIR(r1, &(0x7f0000000240)={0x122, 0x29, 0x1, {0x9, [{{0x80, 0x0, 0x8}, 0x3, 0xfb, 0x7, './file0'}, {{0xa2, 0x0, 0x8}, 0x4b, 0x51, 0x7, './file0'}, {{0x40, 0x3, 0x8}, 0x508, 0x2, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0x100000000, 0x8, 0x7, './file0'}, {{0x40, 0x1, 0x8}, 0x6, 0x1, 0x7, './file0'}, {{0x2}, 0x7, 0x7f, 0x7, './file0'}, {{0x80, 0x0, 0x3}, 0xffff, 0x2, 0x7, './file0'}, {{0x40, 0x1}, 0x8000, 0x0, 0x7, './file0'}, {{0x40, 0x1, 0x7}, 0x5, 0x80, 0x7, './file0'}]}}, 0x122) write$P9_RXATTRWALK(r1, &(0x7f0000000380)={0xf, 0x1f, 0x1, 0x3}, 0xf) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x1000) write$P9_RSTAT(r1, &(0x7f00000003c0)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x9, 0xa41f, {0x0, 0x2, 0x2}, 0x82000000, 0x81, 0x40, 0x1, 0x0, '', 0x1, '\x00', 0x10, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd, 'e*@.\\#[[]]--\xdb'}}, 0x58) times(&(0x7f0000000440)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', r0, 0x2f, 0xff, 0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x7800, 0x0, 0x7, 0xc72}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKNOD(r3, &(0x7f00000005c0)={0x14, 0x13, 0x179, {0x1, 0x2, 0x8}}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', r0, 0x29, 0x5, 0xfe, 0xfffffff8, 0x69, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x10, 0x5, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x4, 0x51, 0x2, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x80, 0xc00, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', r0, 0x2f, 0x0, 0x12, 0xe000, 0x10, @mcast2, @local, 0x700, 0x7800, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x0, 0x20, 0x9, 0x0, 0x0, @remote, @rand_addr=' \x01\x00', 0x80, 0x1, 0x7, 0x9}}) 19:39:23 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) timerfd_create(0x0, 0xc00) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x12, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "dd1c7cc8d55b594171da8629adcda26a"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008045}, 0x20000000) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x4000014) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xd5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x35}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x44) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040853}, 0xc000) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000600), &(0x7f0000000640)) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x21, 0x1}, 0x7) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x404000, 0x0) write$P9_RAUTH(r4, &(0x7f0000000700)={0x14, 0x67, 0x2, {0x40, 0x2, 0x3}}, 0x14) socketpair(0x1e, 0x800, 0x40, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x1ff, 0x3, {{0x5, 0x4, 0x0, 0x11, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @local}}}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000800)) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}}, 0x40800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b40)={'gre0\x00', r6, 0x1, 0x7800, 0x6, 0xc93, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @remote, {[@end]}}}}}) [ 86.772884] audit: type=1400 audit(1736105963.362:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:39:23 executing program 7: delete_module(&(0x7f0000000000)='[].\x00', 0x200) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) write$9p(r0, &(0x7f0000000080)="4a7e9bd1fd0f10d699af726a4792ac0201ed87760a74998e53cb834f77391b9fe7b1addf36b8", 0x26) syz_io_uring_setup(0x70aa, &(0x7f00000000c0)={0x0, 0xce1e, 0x0, 0x3, 0x9e, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd=r0, 0x80000001, 0x4b, 0x1f, 0x1f, 0x0, {0x2}}, 0x7) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x2, 0x0, 0xff, 0x2, "023757b4369d3ddf5f494ebd8b1ddf12642fcc2fd9472ab19e51c2da29ebf7b0158bb510de33d0eeaf4c287c2340ef0fcc8d0612c9ab615997592c9d347e61", 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="29296c7aea5794669eeaaee51632e562b5813e11ea54577fe19f2d8f32961731", 0x20}, {&(0x7f00000002c0)="8b147d279712700db52d41beef725d94d5f6e48ecb2a6a8dd67cdfebc4a3a17d6010f0a8d56f0c59e458c4abf2096e0c69f4898c48a90b02b11d9496150180c50af44e7ebd2e20f682e54e56aaaac2045a48c8c6634f8e8b14ac4f7d8766f57369ffe1a84dc1364957200ba84b6ba04174932373549f53e602241e484ee36672b1578bda211381adf30db98f467a9392be4b340f230361de1d76f25d61b413847e", 0xa1}], 0x2, &(0x7f00000003c0)=[{0x30, 0x117, 0x9, "286b03f870bc16ce2ad3a54a74cd5b5f89c9925aebfb3eedc880d2"}], 0x30}, 0x0, 0x44090}, 0x2) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x52}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4809c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x110, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r0, 0x10000000) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RMKNOD(r2, &(0x7f00000005c0)={0x14, 0x13, 0x1, {0x20, 0x0, 0x7}}, 0x14) write$P9_RCREATE(r0, &(0x7f0000000600)={0x18, 0x73, 0x1, {{0x4, 0x2, 0x8}, 0x10001}}, 0x18) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80400) write$P9_RMKNOD(r3, &(0x7f0000000680)={0x14, 0x13, 0x1, {0x48, 0x0, 0x8}}, 0x14) write$P9_RRENAME(r3, &(0x7f00000006c0)={0x7, 0x15, 0x1}, 0x7) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x234003, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x10000000) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSETATTR(r5, &(0x7f0000000780)={0x7, 0x1b, 0x2}, 0x7) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000008c0)={0x60, 0x7d, 0x2, {{0x0, 0x48, 0x5, 0x20, {0x10, 0x1, 0x5}, 0x4040000, 0x3, 0x48, 0x80, 0x9, '*/}\xb9&V#}-', 0xb, '/dev/nvram\x00', 0x0, '', 0x1, '\x00'}, 0x3, '&:\\', 0x0, 0x0, 0xee00}}, 0x60) 19:39:23 executing program 6: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x6768, &(0x7f0000000000)={0x0, 0x840a, 0x8, 0x2, 0x9d}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x100, 0x81, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x68, 0x0, 0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp_addr={0x44, 0x1c, 0xb8, 0x1, 0x7, [{@loopback, 0xfff}, {@loopback, 0x80000000}, {@local, 0xc6}]}, @rr={0x7, 0x1f, 0xc4, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast]}, @timestamp={0x44, 0x14, 0x6e, 0x0, 0x4, [0x3, 0x81, 0x400, 0x10000000]}, @timestamp_addr={0x44, 0x14, 0x45, 0x1, 0xc, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @timestamp={0x44, 0x18, 0xb6, 0x0, 0xa, [0xe074, 0xfffffffb, 0x4, 0xff, 0x3ff]}, @ra={0x94, 0x4}, @generic={0x88, 0x12, "c006dbad003adcbc921c48c9927e836d"}, @end]}}}}}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x0) syz_io_uring_setup(0x55dd, &(0x7f0000000240)={0x0, 0x6874, 0x0, 0x2, 0x27, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x5}, 0x5) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20) r3 = io_uring_setup(0x5cd0, &(0x7f00000004c0)={0x0, 0xb121, 0x20, 0x1, 0x2cc, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r3, 0x0) get_mempolicy(&(0x7f0000000540), &(0x7f0000000580), 0x6, &(0x7f0000ffb000/0x3000)=nil, 0x5) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000005c0)) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000600)={0x7, 0x21, 0x2}, 0x7) get_mempolicy(&(0x7f0000000640), &(0x7f0000000680), 0x3f, &(0x7f0000ffa000/0x3000)=nil, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f00000006c0)=@can, &(0x7f0000000740)=0x80, 0xc0000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) bind$bt_sco(r4, &(0x7f0000000780)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x0, 0x6, 0x48, @empty, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8, 0x8000, 0x5, 0x81}}) [ 88.100799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.108030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.116835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.119525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.122638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.125555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.127637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.131712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.134008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.138813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.145374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.148076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.149663] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.151735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.157733] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.164025] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.165755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.170827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.180075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.183629] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.185764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.197709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.215766] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.220981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.240642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.260587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.274963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.281625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.283293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.290654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.292587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.294294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.296652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.298207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.299960] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.309967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.312724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.314657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.316427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.321734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.333848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.337847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.349002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.359598] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.361923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.366866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.369415] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.378049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.239676] Bluetooth: hci1: command tx timeout [ 90.240435] Bluetooth: hci2: command tx timeout [ 90.240790] Bluetooth: hci0: command tx timeout [ 90.304202] Bluetooth: hci3: command tx timeout [ 90.368024] Bluetooth: hci4: command tx timeout [ 90.368072] Bluetooth: hci5: command tx timeout [ 90.432258] Bluetooth: hci7: command tx timeout [ 90.432300] Bluetooth: hci6: command tx timeout [ 92.288232] Bluetooth: hci0: command tx timeout [ 92.288294] Bluetooth: hci1: command tx timeout [ 92.288719] Bluetooth: hci2: command tx timeout [ 92.353208] Bluetooth: hci3: command tx timeout [ 92.415235] Bluetooth: hci4: command tx timeout [ 92.416249] Bluetooth: hci5: command tx timeout [ 92.479446] Bluetooth: hci7: command tx timeout [ 92.482315] Bluetooth: hci6: command tx timeout [ 94.337196] Bluetooth: hci1: command tx timeout [ 94.337693] Bluetooth: hci0: command tx timeout [ 94.338174] Bluetooth: hci2: command tx timeout [ 94.400724] Bluetooth: hci3: command tx timeout [ 94.465155] Bluetooth: hci5: command tx timeout [ 94.465631] Bluetooth: hci4: command tx timeout [ 94.528272] Bluetooth: hci6: command tx timeout [ 94.528744] Bluetooth: hci7: command tx timeout [ 96.383228] Bluetooth: hci2: command tx timeout [ 96.383732] Bluetooth: hci0: command tx timeout [ 96.383770] Bluetooth: hci1: command tx timeout [ 96.450149] Bluetooth: hci3: command tx timeout [ 96.511181] Bluetooth: hci4: command tx timeout [ 96.511204] Bluetooth: hci5: command tx timeout [ 96.576170] Bluetooth: hci7: command tx timeout [ 96.576233] Bluetooth: hci6: command tx timeout [ 150.416051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.418900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.422634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.425408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.429453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.432047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.432450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.439802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.442366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.442508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.446730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.447979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.483409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.492268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.494015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.495466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.504742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.506061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.507356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.518779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.521820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.523718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.526501] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.531410] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.540804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.542760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.544883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.547207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.548437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.567704] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.576025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.580729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.581860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.584492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.589197] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.590539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.594602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.595581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.597735] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.598595] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.599923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.602209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.634067] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.644555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.646742] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.658480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.663484] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.665269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.511256] Bluetooth: hci0: command tx timeout [ 152.512017] Bluetooth: hci1: command tx timeout [ 152.575189] Bluetooth: hci2: command tx timeout [ 152.639340] Bluetooth: hci4: command tx timeout [ 152.642137] Bluetooth: hci3: command tx timeout [ 152.703288] Bluetooth: hci7: command tx timeout [ 152.703383] Bluetooth: hci6: command tx timeout [ 152.704828] Bluetooth: hci5: command tx timeout [ 154.559338] Bluetooth: hci0: command tx timeout [ 154.560145] Bluetooth: hci1: command tx timeout [ 154.624809] Bluetooth: hci2: command tx timeout [ 154.687566] Bluetooth: hci3: command tx timeout [ 154.687600] Bluetooth: hci4: command tx timeout [ 154.751386] Bluetooth: hci5: command tx timeout [ 154.751558] Bluetooth: hci7: command tx timeout [ 154.752187] Bluetooth: hci6: command tx timeout [ 156.607506] Bluetooth: hci0: command tx timeout [ 156.609128] Bluetooth: hci1: command tx timeout [ 156.671261] Bluetooth: hci2: command tx timeout [ 156.737201] Bluetooth: hci3: command tx timeout [ 156.737968] Bluetooth: hci4: command tx timeout [ 156.801271] Bluetooth: hci7: command tx timeout [ 156.801779] Bluetooth: hci6: command tx timeout [ 156.802341] Bluetooth: hci5: command tx timeout [ 158.655353] Bluetooth: hci0: command tx timeout [ 158.656807] Bluetooth: hci1: command tx timeout [ 158.719227] Bluetooth: hci2: command tx timeout [ 158.785264] Bluetooth: hci4: command tx timeout [ 158.785762] Bluetooth: hci3: command tx timeout [ 158.847292] Bluetooth: hci5: command tx timeout [ 158.847816] Bluetooth: hci7: command tx timeout [ 158.848411] Bluetooth: hci6: command tx timeout [ 210.613513] syz-executor.7 (3532) used greatest stack depth: 23296 bytes left [ 212.947627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.951134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.953326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.958873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.961861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.965485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.158017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.160385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.161565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.167825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.169713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.170939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.197209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.203503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.214833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.233637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.242562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.248574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.331057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.341486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.359635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.389988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.395363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.397689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.399025] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.406028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.411346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.413635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.416468] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.420493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.505933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.507906] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.520972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.535438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.546017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.549395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.557490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.558978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.635697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.640806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.642810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.657415] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.663492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.676747] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.677949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.721973] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.735294] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.783557] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.039263] Bluetooth: hci0: command tx timeout [ 215.231242] Bluetooth: hci1: command tx timeout [ 215.295182] Bluetooth: hci2: command tx timeout [ 215.487211] Bluetooth: hci3: command tx timeout [ 215.488040] Bluetooth: hci4: command tx timeout [ 215.871214] Bluetooth: hci5: command tx timeout [ 215.872027] Bluetooth: hci7: command tx timeout [ 215.873004] Bluetooth: hci6: command tx timeout [ 217.087207] Bluetooth: hci0: command tx timeout [ 217.279612] Bluetooth: hci1: command tx timeout [ 217.343198] Bluetooth: hci2: command tx timeout [ 217.535227] Bluetooth: hci4: command tx timeout [ 217.535739] Bluetooth: hci3: command tx timeout [ 217.919456] Bluetooth: hci6: command tx timeout [ 217.920407] Bluetooth: hci7: command tx timeout [ 217.921405] Bluetooth: hci5: command tx timeout [ 219.136214] Bluetooth: hci0: command tx timeout [ 219.327356] Bluetooth: hci1: command tx timeout [ 219.391141] Bluetooth: hci2: command tx timeout [ 219.583379] Bluetooth: hci4: command tx timeout [ 219.583882] Bluetooth: hci3: command tx timeout [ 219.967194] Bluetooth: hci7: command tx timeout [ 219.967701] Bluetooth: hci5: command tx timeout [ 219.968726] Bluetooth: hci6: command tx timeout [ 221.183572] Bluetooth: hci0: command tx timeout [ 221.375231] Bluetooth: hci1: command tx timeout [ 221.440226] Bluetooth: hci2: command tx timeout [ 221.632171] Bluetooth: hci3: command tx timeout [ 221.633191] Bluetooth: hci4: command tx timeout [ 222.015299] Bluetooth: hci6: command tx timeout [ 222.016360] Bluetooth: hci5: command tx timeout [ 222.017405] Bluetooth: hci7: command tx timeout [ 275.368935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.372383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.374668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.383280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.387275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.390894] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.393037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.397483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.399658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.423019] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.425940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.427755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.485443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.490904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.496405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.502433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.505036] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.507457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.572250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.590583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.627739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.646997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.650447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.652256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.656551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.657989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.662294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.663772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.668293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.679953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.692290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.699604] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.704461] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.707610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.710457] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.713689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.824753] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.852362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.860835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.898247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.909922] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.916905] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.929943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.936448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.941530] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.977583] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.007412] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.033487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.440446] Bluetooth: hci1: command tx timeout [ 277.503278] Bluetooth: hci0: command tx timeout [ 277.568515] Bluetooth: hci2: command tx timeout [ 277.759296] Bluetooth: hci5: command tx timeout [ 277.760744] Bluetooth: hci3: command tx timeout [ 277.951232] Bluetooth: hci4: command tx timeout [ 278.079594] Bluetooth: hci7: command tx timeout [ 278.143851] Bluetooth: hci6: command tx timeout [ 279.487175] Bluetooth: hci1: command tx timeout [ 279.551218] Bluetooth: hci0: command tx timeout [ 279.615148] Bluetooth: hci2: command tx timeout [ 279.808090] Bluetooth: hci5: command tx timeout [ 279.808571] Bluetooth: hci3: command tx timeout [ 279.999147] Bluetooth: hci4: command tx timeout [ 280.127172] Bluetooth: hci7: command tx timeout [ 280.191185] Bluetooth: hci6: command tx timeout [ 281.535304] Bluetooth: hci1: command tx timeout [ 281.602292] Bluetooth: hci0: command tx timeout [ 281.663246] Bluetooth: hci2: command tx timeout [ 281.855681] Bluetooth: hci5: command tx timeout [ 281.856917] Bluetooth: hci3: command tx timeout [ 282.047130] Bluetooth: hci4: command tx timeout [ 282.175285] Bluetooth: hci7: command tx timeout [ 282.239203] Bluetooth: hci6: command tx timeout [ 283.584081] Bluetooth: hci1: command tx timeout [ 283.647310] Bluetooth: hci0: command tx timeout [ 283.711145] Bluetooth: hci2: command tx timeout [ 283.903211] Bluetooth: hci3: command tx timeout [ 283.903684] Bluetooth: hci5: command tx timeout [ 284.095153] Bluetooth: hci4: command tx timeout [ 284.223138] Bluetooth: hci7: command tx timeout [ 284.287197] Bluetooth: hci6: command tx timeout [ 337.679754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.684740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.686994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.693965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.698791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.701399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.819256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.825288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.828369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.836025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.839547] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.843526] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.003877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.007796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.015703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.041620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.045559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.058950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.062226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.078133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.088537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.094260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.098400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.111010] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.121408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.122279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.127003] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.128367] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.129158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.134230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.134933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.139564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.144279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.156368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.158451] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.160888] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.162922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.164555] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.164835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.165906] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.170215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.185153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.203785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.221354] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.223190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.248718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.250862] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.251767] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.776163] Bluetooth: hci0: command tx timeout [ 339.904125] Bluetooth: hci1: command tx timeout [ 340.159203] Bluetooth: hci2: command tx timeout [ 340.223376] Bluetooth: hci4: command tx timeout [ 340.224344] Bluetooth: hci3: command tx timeout [ 340.224588] Bluetooth: hci6: command tx timeout [ 340.287261] Bluetooth: hci5: command tx timeout [ 340.287389] Bluetooth: hci7: command tx timeout [ 341.824137] Bluetooth: hci0: command tx timeout [ 341.952103] Bluetooth: hci1: command tx timeout [ 342.207345] Bluetooth: hci2: command tx timeout [ 342.271260] Bluetooth: hci6: command tx timeout [ 342.272221] Bluetooth: hci3: command tx timeout [ 342.273165] Bluetooth: hci4: command tx timeout [ 342.335417] Bluetooth: hci7: command tx timeout [ 342.336329] Bluetooth: hci5: command tx timeout [ 343.871483] Bluetooth: hci0: command tx timeout [ 343.999185] Bluetooth: hci1: command tx timeout [ 344.256414] Bluetooth: hci2: command tx timeout [ 344.321402] Bluetooth: hci4: command tx timeout [ 344.322390] Bluetooth: hci3: command tx timeout [ 344.323348] Bluetooth: hci6: command tx timeout [ 344.383539] Bluetooth: hci5: command tx timeout [ 344.384547] Bluetooth: hci7: command tx timeout [ 345.919387] Bluetooth: hci0: command tx timeout [ 346.047376] Bluetooth: hci1: command tx timeout [ 346.303266] Bluetooth: hci2: command tx timeout [ 346.367268] Bluetooth: hci3: command tx timeout [ 346.368458] Bluetooth: hci6: command tx timeout [ 346.368650] Bluetooth: hci4: command tx timeout [ 346.431573] Bluetooth: hci7: command tx timeout [ 346.432457] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 19:44:32 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=1ffff11005221e90 RCX=ffffffff81503e2e RDX=1ffffffff0b82d88 RSI=0000000000000008 RDI=0000000000000000 RBP=ffffffff863fda34 RSP=ffff88802910f470 R8 =0000000000000001 R9 =fffffbfff0c7f992 R10=ffffffff863fcc97 R11=0000000000000003 R12=ffffffff85c16c40 R13=ffffffff81724e96 R14=ffff888026ee0000 R15=0000000000092cc0 RIP=ffffffff81503f01 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fda8ab3d8e0 CR3=0000000018f50000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=000000000000002c RCX=ffffffff814f583e RDX=fffffbfff0fdfbe5 RSI=0000000000000008 RDI=ffffffff87efdf20 RBP=ffff88802ded3780 RSP=ffff8880258ef868 R8 =0000000000000000 R9 =fffffbfff0fdfbe4 R10=ffffffff87efdf27 R11=0000000000000000 R12=0000000000000000 R13=ffff88802ded428a R14=0000000000000000 R15=ffff88802ded4268 RIP=ffffffff84aa6a40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f78d0d695d0 CR3=0000000028b8c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000