syzkaller login: [ 58.302677] sshd (230) used greatest stack depth: 24232 bytes left Warning: Permanently added '[localhost]:48162' (ECDSA) to the list of known hosts. 2025/01/15 08:37:52 fuzzer started 2025/01/15 08:37:53 dialing manager at localhost:33219 [ 61.704696] cgroup: Unknown subsys name 'net' [ 61.785352] cgroup: Unknown subsys name 'cpuset' [ 61.810073] cgroup: Unknown subsys name 'rlimit' [ 67.430481] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/15 08:38:10 syscalls: 202 2025/01/15 08:38:10 code coverage: enabled 2025/01/15 08:38:10 comparison tracing: enabled 2025/01/15 08:38:10 extra coverage: enabled 2025/01/15 08:38:10 setuid sandbox: enabled 2025/01/15 08:38:10 namespace sandbox: enabled 2025/01/15 08:38:10 Android sandbox: enabled 2025/01/15 08:38:10 fault injection: enabled 2025/01/15 08:38:10 leak checking: enabled 2025/01/15 08:38:10 net packet injection: enabled 2025/01/15 08:38:10 net device setup: enabled 2025/01/15 08:38:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/15 08:38:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/15 08:38:10 USB emulation: enabled 2025/01/15 08:38:10 hci packet injection: enabled 2025/01/15 08:38:10 wifi device emulation: enabled 2025/01/15 08:38:10 802.15.4 emulation: enabled 2025/01/15 08:38:10 fetching corpus: 0, signal 0/0 (executing program) 2025/01/15 08:38:12 starting 8 fuzzer processes 08:38:12 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{0x0, 0x9d, 0xf5df, 0x2, 0x1ff, 0x0, 0x5, 0xe70, 0x3f, 0x80000001, 0x1, 0xe72a, 0x4, 0x1f, 0xbb}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getgroups(0x5, &(0x7f0000000280)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) r8 = syz_open_dev$vcsu(&(0x7f0000000340), 0xfffffffffffffffe, 0x14202) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0xb8000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {0x729e1448}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r11, 0x0, 0x1, &(0x7f0000000440)=0x400, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000004c0)={0x9, [{r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {}, {}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3, 0x0}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {}, {r3}, {r3}, {}, {}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}, {r3}], 0x1f, "7aac957164c9c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f00000014c0)={r12, r3, "1c580792bfac85473280bf536a00cda4937b9dbaea0b396b307a964679c80bc6c47658a8b1ddace7bf65c5c47b2bf5bb7b087e49fec43e05b9f5dc4b0e54f5de17cb324a4e9eb19d6e2e4e574be0e7220917885c0c3042aa26a214d36a3ac74c542bd3ba2ddeb328222cffdee4061966021d9f23fdf7b8218e1fabe808f92fd94cd9b9ec823bae70a12641fb6ce337514945e5b607bb8f099e36389c3b285fecd421b3b9d45790391aedf55ec0ba2f7d27c7b830cc328bdc92fa613fc80df0f4246fef3581b19f62a5d97e32169de892436733fd562f260a7a25d5c6b055fa0f258a9070d313957f8b3b99a7b863c7dad3ceb4f6093bca003be83f084d18deac", "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"}) epoll_create(0x8000) write$bt_hci(r8, &(0x7f00000024c0)={0x1, @read_stored_link_key={{0xc0d, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}}}, 0xb) 08:38:12 executing program 1: r0 = syz_io_uring_setup(0x4f4d, &(0x7f0000000000)={0x0, 0x2f5e, 0x4, 0x0, 0x1c2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) r3 = syz_io_uring_setup(0x68a9, &(0x7f0000000140)={0x0, 0x9846, 0x0, 0x2, 0x14e, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5, @out_args}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x596e}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x4010, r5, 0x0) socket$unix(0x1, 0x2, 0x0) write$bt_hci(r5, &(0x7f0000000740)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@none, 0x8, 0x493c441e, 0x172c, 0x7, 0x3f, 0x7fff}}}, 0x19) ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000000780)={0x0, 0x1, "7a7e9c", 0x6, 0x79}) recvmmsg$unix(r9, &(0x7f0000006340)=[{{&(0x7f00000007c0), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001940)=""/66, 0x42}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001a40)=""/204, 0xcc}, {&(0x7f0000001b40)=""/24, 0x18}, {&(0x7f0000001b80)=""/112, 0x70}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x4, &(0x7f0000002c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002c80)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002d00)=""/62, 0x3e}, {&(0x7f0000002d40)=""/51, 0x33}, {&(0x7f0000002d80)=""/66, 0x42}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/114, 0x72}], 0x5, &(0x7f0000003f00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003f80), 0x6e, &(0x7f0000004140)=[{&(0x7f0000004000)=""/23, 0x17}, {&(0x7f0000004040)=""/228, 0xe4}], 0x2, &(0x7f0000004180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000004240)=@abs, 0x6e, &(0x7f0000004600)=[{&(0x7f00000042c0)=""/148, 0x94}, {&(0x7f0000004380)=""/181, 0xb5}, {&(0x7f0000004440)=""/49, 0x31}, {&(0x7f0000004480)=""/114, 0x72}, {&(0x7f0000004500)=""/100, 0x64}, {&(0x7f0000004580)=""/42, 0x2a}, {&(0x7f00000045c0)=""/54, 0x36}], 0x7, &(0x7f0000004680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000004780)=@abs, 0x6e, &(0x7f0000005d00)=[{&(0x7f0000004800)=""/220, 0xdc}, {&(0x7f0000004900)=""/184, 0xb8}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/107, 0x6b}, {&(0x7f0000005a40)=""/90, 0x5a}, {&(0x7f0000005ac0)=""/179, 0xb3}, {&(0x7f0000005b80)=""/73, 0x49}, {&(0x7f0000005c00)=""/233, 0xe9}], 0x8, &(0x7f0000005d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006280)=[{&(0x7f0000005e80)=""/159, 0x9f}, {&(0x7f0000005f40)=""/9, 0x9}, {&(0x7f0000005f80)=""/16, 0x10}, {&(0x7f0000005fc0)=""/233, 0xe9}, {&(0x7f00000060c0)=""/185, 0xb9}, {&(0x7f0000006180)=""/206, 0xce}], 0x6, &(0x7f0000006300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x8, 0x40, &(0x7f0000006540)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000006580)={0x2, 0x0, 0xf2, 0x3, 0xb76}) syz_io_uring_submit(r1, r2, &(0x7f0000006600)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd, 0x9, 0x5, 0xe86, 0x10, 0x1, {0x2}}, 0x0) 08:38:12 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0xc, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x41) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r5, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x1f, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8091}, 0x4000041) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x6, 0x3f, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000007c0)=[@window={0x3, 0x6, 0x2}, @mss, @window={0x3, 0x80, 0xfff}, @mss, @sack_perm, @sack_perm, @timestamp], 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x80000000}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4050) sendmsg$802154_raw(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)="5d5b5b432f9c80bd983aaf6f64c61dde88d879e0b24cba951193fa3c09d4ece73b7a931d061b1a04d043757f55144f4055fd960b3608197cc33cd6462cbfebb00e6addd1d427dbb60c3103c5211b6072f9d57492b26f467f3c0f6362003bcadf2598e3d2ff16a5202b8ea91f7c7ec620c4243a20fe4b", 0x76}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$bt_hci(r4, &(0x7f0000000a40)={0x1f, 0x4, 0x3}, 0x6) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 08:38:12 executing program 3: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0xa1e, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x78500, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x410, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@fsname={'fsname', 0x3d, '!['}}, {@smackfsdef={'smackfsdef', 0x3d, '*\'^@'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ',,'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '-,]\'$'}}, {@subj_type={'subj_type', 0x3d, '\'-['}}]}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000002c0)=0xca, 0x4) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000380)={0x401, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "47956119d057ea"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001380)={{r4, 0x8, 0xc0, 0x1000, 0xfffffffffffff001, 0x7, 0x3, 0x1f, 0x8, 0x2, 0x0, 0xf2, 0x8, 0xfe2, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001540)={'syztnl2\x00', &(0x7f0000001400)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x8, 0x4, {{0x3f, 0x4, 0x0, 0x9, 0xfc, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0x83, [@empty, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @multicast2, @private=0xa010100]}, @cipso={0x86, 0x56, 0x0, [{0x2, 0xa, "a29d7ad1442e6c4e"}, {0x6, 0xb, "023f1bc82ec767e07d"}, {0x6, 0x8, "4e538e15453d"}, {0x5, 0x11, "bea13a70a87ebda46c477000c75b54"}, {0x0, 0x10, "01cbde5ff2f39d222cb7194f2181"}, {0x7, 0x3, "c5"}, {0x2, 0xf, "3f82adfecbb051087dee0875eb"}]}, @ssrr={0x89, 0x1b, 0x92, [@local, @private=0xa010100, @multicast1, @rand_addr=0x64010100, @local, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0xce, [@broadcast, @empty]}, @lsrr={0x83, 0xb, 0xef, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x28, 0xa3, 0x0, 0x9, [0x1, 0x8, 0x62, 0x80, 0x9, 0xffffffff, 0xfffff801, 0x0, 0xb2]}, @ssrr={0x89, 0x1f, 0x80, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast1, @empty]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001580)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r5, {0x10001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001640)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000001880)={0x0, @phonet={0x23, 0x20, 0x9, 0x1f}, @nl=@kern={0x10, 0x0, 0x0, 0x19020ac0}, @vsock={0x28, 0x0, 0x0, @host}, 0x266e, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)='veth0_to_hsr\x00', 0x3, 0x3, 0x9}) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) openat$urandom(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0, {0xe6e}}, './file1\x00'}) [ 79.833366] audit: type=1400 audit(1736930292.520:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:38:12 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20050050) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40180008}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000040) openat$random(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x121400) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r7 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000780), 0x402040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {r8}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa0, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) 08:38:12 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8050) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24088060) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7ff, 0x7f, 0x401, 0xae8}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x40040) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700), 0x0, 0xfffffffffffffffa) r11 = request_key(&(0x7f0000000740)='id_resolver\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)='wpan4\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800)={0x0, r10, r11}, &(0x7f0000000840)=""/84, 0x54, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r6) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r12, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4010) keyctl$search(0xa, r10, &(0x7f0000000a00)='logon\x00', &(0x7f0000000a40)={'syz', 0x2}, r11) 08:38:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r8 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {r8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100c, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@dfltgid}], [{@smackfsdef={'smackfsdef', 0x3d, 'udp:syz0\x00'}}, {@pcr={'pcr', 0x3d, 0x12}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '@!,)]'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x65, 0x62, 0x63, 0x61, 0x38, 0x39, 0x35], 0x2d, [0x31, 0x31, 0x62, 0x30], 0x2d, [0x0, 0x34, 0x66, 0x34], 0x2d, [0x37, 0x38, 0x39, 0x34], 0x2d, [0x38, 0x0, 0x35, 0x35, 0x30, 0x64, 0x39, 0x36]}}}, {@euid_lt={'euid<', 0xee01}}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) recvmmsg$unix(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/15, 0xf}], 0x3, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000900)=""/22, 0x16}, {&(0x7f0000000940)=""/79, 0x4f}, {&(0x7f00000009c0)=""/50, 0x32}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/247, 0xf7}, {&(0x7f0000000b40)=""/72, 0x48}, {&(0x7f0000000bc0)=""/170, 0xaa}], 0x8, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/231, 0xe7}, {&(0x7f0000000ec0)=""/5, 0x5}], 0x2, &(0x7f0000000f40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x3, 0x2, &(0x7f00000010c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000001100)={{0x1, 0x1, 0x18, r9, {0x5, 0x91}}, './file0\x00'}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x78, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000001280)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r14}, './file0\x00'}) 08:38:12 executing program 6: socketpair(0x2, 0xc, 0x10000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xffff, 0x4) r2 = epoll_create1(0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f00000001c0)="de754cdf983af4d9fb7c83a060ee6c2b7a9d7b55acdc688466af08431bc6c4badf558058a594719cf1b845bee42900cabcd195a50ef191046f7c3d856d3ef993ba7beb866b3d61336043e1b23f2daee4674135a2186388e11f29a5d357579894342f56708e0833d22bd38a2a24ee9c7d343dfe64d220ef3fcba9f16f8aec5b8073ae39404c3cee6d2d62910afefe05d63a20bb5026910aec5097d4eb93bb69620d301f93c8133a5732507aa97c19709cca918ff16f604828ed9f9a283d85f338ccd69841f31fb1d7503db98f658767734c02709b4967cc2eea68a93f") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) bind$802154_raw(r5, &(0x7f0000000300)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000340)) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {0x9, 0x14}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_io_uring_setup(0x5e9f, &(0x7f0000000680)={0x0, 0xf581, 0x0, 0x0, 0x58, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000780)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe90) bind$bt_hci(r5, &(0x7f00000007c0)={0x1f, 0x4}, 0x6) recvmmsg$unix(r7, &(0x7f0000003140)=[{{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/107, 0x6b}, {&(0x7f00000019c0)=""/198, 0xc6}, {&(0x7f0000001ac0)=""/86, 0x56}, {&(0x7f0000001b40)=""/147, 0x93}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/208, 0xd0}, {&(0x7f0000002d00)=""/125, 0x7d}], 0x9, &(0x7f0000002e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000002ec0)=@abs, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f40)=""/32, 0x20}, {&(0x7f0000002f80)=""/38, 0x26}, {&(0x7f0000002fc0)=""/182, 0xb6}], 0x3, &(0x7f00000030c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x2, 0x2142, &(0x7f00000031c0)={0x0, 0x989680}) pipe2$9p(&(0x7f0000003200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000003240)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) [ 81.242120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.245153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.245654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.247653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.248388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.253067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.253452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.255177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.255654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.262437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.267215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.267844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.298287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.305904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.307391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.310517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.318129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.319582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.364444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.389151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.390541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.392489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.393657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.394234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.396000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.408041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.414065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.419041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.420330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.424859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.427417] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.432997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.440394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.458294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.475705] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.479683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.486144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.490132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.503601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.505069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.515356] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.521925] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.522224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.535950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.537220] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.537916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.551290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.553088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.332364] Bluetooth: hci1: command tx timeout [ 83.332379] Bluetooth: hci0: command tx timeout [ 83.396851] Bluetooth: hci2: command tx timeout [ 83.459650] Bluetooth: hci3: command tx timeout [ 83.526932] Bluetooth: hci4: command tx timeout [ 83.527046] Bluetooth: hci5: command tx timeout [ 83.651103] Bluetooth: hci6: command tx timeout [ 83.651146] Bluetooth: hci7: command tx timeout [ 85.381056] Bluetooth: hci0: command tx timeout [ 85.381433] Bluetooth: hci1: command tx timeout [ 85.445816] Bluetooth: hci2: command tx timeout [ 85.507911] Bluetooth: hci3: command tx timeout [ 85.571103] Bluetooth: hci4: command tx timeout [ 85.571143] Bluetooth: hci5: command tx timeout [ 85.700678] Bluetooth: hci7: command tx timeout [ 85.700709] Bluetooth: hci6: command tx timeout [ 87.426950] Bluetooth: hci1: command tx timeout [ 87.426983] Bluetooth: hci0: command tx timeout [ 87.491006] Bluetooth: hci2: command tx timeout [ 87.555810] Bluetooth: hci3: command tx timeout [ 87.619536] Bluetooth: hci4: command tx timeout [ 87.619571] Bluetooth: hci5: command tx timeout [ 87.747324] Bluetooth: hci7: command tx timeout [ 87.747384] Bluetooth: hci6: command tx timeout [ 89.474856] Bluetooth: hci0: command tx timeout [ 89.474900] Bluetooth: hci1: command tx timeout [ 89.540048] Bluetooth: hci2: command tx timeout [ 89.603954] Bluetooth: hci3: command tx timeout [ 89.667104] Bluetooth: hci5: command tx timeout [ 89.669287] Bluetooth: hci4: command tx timeout [ 89.796825] Bluetooth: hci7: command tx timeout [ 89.796936] Bluetooth: hci6: command tx timeout [ 141.386203] syz-executor.0 (281) used greatest stack depth: 24080 bytes left [ 144.086016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.087381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.088436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.091057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.093178] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.094335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.095504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.110076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.110915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.113058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.114192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.114993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.151461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.152908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.153954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.156958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.158681] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.159491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.218140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.236941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.245389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.251307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.253392] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.254268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.270570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.273149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.282691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.296268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.308813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.311818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.316599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.317966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.318598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.325930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.327186] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.328134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.329324] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.335269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.336692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.342184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.352516] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.354377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.355626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.362103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.365947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.367027] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.379682] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.387070] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.115814] Bluetooth: hci0: command tx timeout [ 146.179821] Bluetooth: hci2: command tx timeout [ 146.180043] Bluetooth: hci1: command tx timeout [ 146.307823] Bluetooth: hci4: command tx timeout [ 146.371852] Bluetooth: hci3: command tx timeout [ 146.435847] Bluetooth: hci5: command tx timeout [ 146.436175] Bluetooth: hci6: command tx timeout [ 146.500005] Bluetooth: hci7: command tx timeout [ 148.163924] Bluetooth: hci0: command tx timeout [ 148.226906] Bluetooth: hci2: command tx timeout [ 148.227019] Bluetooth: hci1: command tx timeout [ 148.355782] Bluetooth: hci4: command tx timeout [ 148.419826] Bluetooth: hci3: command tx timeout [ 148.483854] Bluetooth: hci6: command tx timeout [ 148.483934] Bluetooth: hci5: command tx timeout [ 148.546846] Bluetooth: hci7: command tx timeout [ 150.211290] Bluetooth: hci0: command tx timeout [ 150.274904] Bluetooth: hci2: command tx timeout [ 150.275014] Bluetooth: hci1: command tx timeout [ 150.403587] Bluetooth: hci4: command tx timeout [ 150.466814] Bluetooth: hci3: command tx timeout [ 150.530868] Bluetooth: hci5: command tx timeout [ 150.530994] Bluetooth: hci6: command tx timeout [ 150.595961] Bluetooth: hci7: command tx timeout [ 152.259817] Bluetooth: hci0: command tx timeout [ 152.323841] Bluetooth: hci1: command tx timeout [ 152.323928] Bluetooth: hci2: command tx timeout [ 152.452386] Bluetooth: hci4: command tx timeout [ 152.515865] Bluetooth: hci3: command tx timeout [ 152.578839] Bluetooth: hci6: command tx timeout [ 152.578935] Bluetooth: hci5: command tx timeout [ 152.643856] Bluetooth: hci7: command tx timeout [ 206.284859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.287404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.288686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.293939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.303953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.309865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.480051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.483309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.488215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.492474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.495125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.498129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.500022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.530234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.534962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.551505] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.554060] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.555976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.634689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.638446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.640540] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.644911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.647332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.648293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.695261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.712808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.761813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.792889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.793700] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.822931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.823067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.825219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.839889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.860174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.887004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.909847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.929115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.930980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.937020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.947188] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.952974] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.969645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.971533] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.009146] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.010815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.013404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.025033] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.037463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 208.451836] Bluetooth: hci0: command tx timeout [ 208.579062] Bluetooth: hci1: command tx timeout [ 208.643266] Bluetooth: hci2: command tx timeout [ 208.707819] Bluetooth: hci3: command tx timeout [ 208.899876] Bluetooth: hci4: command tx timeout [ 209.026816] Bluetooth: hci5: command tx timeout [ 209.155906] Bluetooth: hci6: command tx timeout [ 209.218853] Bluetooth: hci7: command tx timeout [ 210.498845] Bluetooth: hci0: command tx timeout [ 210.628797] Bluetooth: hci1: command tx timeout [ 210.691851] Bluetooth: hci2: command tx timeout [ 210.755865] Bluetooth: hci3: command tx timeout [ 210.946802] Bluetooth: hci4: command tx timeout [ 211.076041] Bluetooth: hci5: command tx timeout [ 211.204427] Bluetooth: hci6: command tx timeout [ 211.267893] Bluetooth: hci7: command tx timeout [ 212.547831] Bluetooth: hci0: command tx timeout [ 212.675999] Bluetooth: hci1: command tx timeout [ 212.738832] Bluetooth: hci2: command tx timeout [ 212.802895] Bluetooth: hci3: command tx timeout [ 212.994882] Bluetooth: hci4: command tx timeout [ 213.124012] Bluetooth: hci5: command tx timeout [ 213.250957] Bluetooth: hci6: command tx timeout [ 213.316504] Bluetooth: hci7: command tx timeout [ 214.594859] Bluetooth: hci0: command tx timeout [ 214.722984] Bluetooth: hci1: command tx timeout [ 214.786881] Bluetooth: hci2: command tx timeout [ 214.850860] Bluetooth: hci3: command tx timeout [ 215.042824] Bluetooth: hci4: command tx timeout [ 215.171019] Bluetooth: hci5: command tx timeout [ 215.298888] Bluetooth: hci6: command tx timeout [ 215.362817] Bluetooth: hci7: command tx timeout [ 268.567534] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.572050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.574231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.579206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.579563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.586006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.594273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.597181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.600245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.602392] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 268.602800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.612848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.688631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.696421] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.700457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.707284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.721490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.723672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.770653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.801165] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.808580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.834522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.854072] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.866552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.870867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.874954] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.881848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 268.885326] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 268.894450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.895016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 268.904347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.913495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.919217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 268.926006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.932998] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 268.933417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 268.939673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 268.960498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.964028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.966495] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 268.993175] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.998428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.999188] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.003877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.015186] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.029642] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.040413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.048242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.658858] Bluetooth: hci1: command tx timeout [ 270.658982] Bluetooth: hci0: command tx timeout [ 270.786905] Bluetooth: hci2: command tx timeout [ 271.042855] Bluetooth: hci6: command tx timeout [ 271.043252] Bluetooth: hci3: command tx timeout [ 271.106831] Bluetooth: hci7: command tx timeout [ 271.106937] Bluetooth: hci4: command tx timeout [ 271.170998] Bluetooth: hci5: command tx timeout [ 272.706817] Bluetooth: hci1: command tx timeout [ 272.706840] Bluetooth: hci0: command tx timeout [ 272.834864] Bluetooth: hci2: command tx timeout [ 273.090805] Bluetooth: hci3: command tx timeout [ 273.091429] Bluetooth: hci6: command tx timeout [ 273.154974] Bluetooth: hci7: command tx timeout [ 273.155071] Bluetooth: hci4: command tx timeout [ 273.218841] Bluetooth: hci5: command tx timeout [ 274.754809] Bluetooth: hci0: command tx timeout [ 274.754971] Bluetooth: hci1: command tx timeout [ 274.883844] Bluetooth: hci2: command tx timeout [ 275.138876] Bluetooth: hci3: command tx timeout [ 275.139829] Bluetooth: hci6: command tx timeout [ 275.204011] Bluetooth: hci7: command tx timeout [ 275.204039] Bluetooth: hci4: command tx timeout [ 275.269785] Bluetooth: hci5: command tx timeout [ 276.802875] Bluetooth: hci0: command tx timeout [ 276.802909] Bluetooth: hci1: command tx timeout [ 276.930868] Bluetooth: hci2: command tx timeout [ 277.187047] Bluetooth: hci6: command tx timeout [ 277.187221] Bluetooth: hci3: command tx timeout [ 277.251826] Bluetooth: hci4: command tx timeout [ 277.251867] Bluetooth: hci7: command tx timeout [ 277.315482] Bluetooth: hci5: command tx timeout [ 330.702755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.707200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.708956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.715995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.718070] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.719977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.770810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.775103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.780190] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.787977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.789626] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.791090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.968245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.970753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.972258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.978055] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.985448] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.987106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.089975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.108934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.117657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.150433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.161277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.165636] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.168956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.173978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.175183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.175897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.187462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.201986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.209258] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.215991] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.220437] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.221007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.224146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.234371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.234604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.235647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.240949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.248046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 331.260121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 331.260155] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 331.263846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.272191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.283167] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.363897] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 331.380066] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 331.384422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.739763] Bluetooth: hci0: command tx timeout [ 332.802832] Bluetooth: hci1: command tx timeout [ 333.059989] Bluetooth: hci2: command tx timeout [ 333.314910] Bluetooth: hci6: command tx timeout [ 333.315417] Bluetooth: hci3: command tx timeout [ 333.379097] Bluetooth: hci5: command tx timeout [ 333.379160] Bluetooth: hci4: command tx timeout [ 333.506849] Bluetooth: hci7: command tx timeout [ 334.786849] Bluetooth: hci0: command tx timeout [ 334.850909] Bluetooth: hci1: command tx timeout [ 335.106956] Bluetooth: hci2: command tx timeout [ 335.362908] Bluetooth: hci3: command tx timeout [ 335.364069] Bluetooth: hci6: command tx timeout [ 335.428797] Bluetooth: hci4: command tx timeout [ 335.428836] Bluetooth: hci5: command tx timeout [ 335.554823] Bluetooth: hci7: command tx timeout [ 336.836763] Bluetooth: hci0: command tx timeout [ 336.900740] Bluetooth: hci1: command tx timeout [ 337.154807] Bluetooth: hci2: command tx timeout [ 337.410823] Bluetooth: hci6: command tx timeout [ 337.410860] Bluetooth: hci3: command tx timeout [ 337.476797] Bluetooth: hci5: command tx timeout [ 337.476946] Bluetooth: hci4: command tx timeout [ 337.602886] Bluetooth: hci7: command tx timeout [ 338.882948] Bluetooth: hci0: command tx timeout [ 338.947017] Bluetooth: hci1: command tx timeout [ 339.202931] Bluetooth: hci2: command tx timeout [ 339.459007] Bluetooth: hci3: command tx timeout [ 339.459154] Bluetooth: hci6: command tx timeout [ 339.522846] Bluetooth: hci4: command tx timeout [ 339.522955] Bluetooth: hci5: command tx timeout [ 339.650899] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:43:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000c000b RCX=00000000000c000c RDX=ffff88800eab2780 RSI=ffffea00003aac80 RDI=000000000008d310 RBP=ffff888024eefab0 RSP=ffff888024eefa10 R8 =0000000000000001 R9 =00000000000c000b R10=ffffea00003aac01 R11=0000000000000001 R12=ffffea00003aac80 R13=0000000000000000 R14=0000000000000000 R15=ffff888009432c80 RIP=ffffffff81a4775f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f970ded4008 CR3=000000002b210000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888035517b80 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888035517801 RSI=ffff8880355178c8 RDI=ffff8880355172e8 RBP=ffff8880355172f0 RSP=ffff888035517228 R8 =0000000000000001 R9 =ffff8880355172d8 R10=000000000003ab2c R11=0000000000021ea0 R12=ffff8880355172f8 R13=ffff8880355172e0 R14=ffff8880355178c8 R15=ffff888035517298 RIP=ffffffff81349b2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb0c2911570 CR3=000000002935a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000