Warning: Permanently added '[localhost]:46934' (ECDSA) to the list of known hosts. 2024/10/18 14:18:19 fuzzer started 2024/10/18 14:18:19 dialing manager at localhost:45639 syzkaller login: [ 69.579338] cgroup: Unknown subsys name 'net' [ 69.658199] cgroup: Unknown subsys name 'cpuset' [ 69.676655] cgroup: Unknown subsys name 'rlimit' 2024/10/18 14:18:36 syscalls: 202 2024/10/18 14:18:36 code coverage: enabled 2024/10/18 14:18:36 comparison tracing: enabled 2024/10/18 14:18:36 extra coverage: enabled 2024/10/18 14:18:36 setuid sandbox: enabled 2024/10/18 14:18:36 namespace sandbox: enabled 2024/10/18 14:18:36 Android sandbox: enabled 2024/10/18 14:18:36 fault injection: enabled 2024/10/18 14:18:36 leak checking: enabled 2024/10/18 14:18:36 net packet injection: enabled 2024/10/18 14:18:36 net device setup: enabled 2024/10/18 14:18:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/18 14:18:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/18 14:18:36 USB emulation: enabled 2024/10/18 14:18:36 hci packet injection: enabled 2024/10/18 14:18:36 wifi device emulation: enabled 2024/10/18 14:18:36 802.15.4 emulation: enabled 2024/10/18 14:18:36 fetching corpus: 0, signal 0/0 (executing program) 2024/10/18 14:18:38 starting 8 fuzzer processes 14:18:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x1, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x8000, 0x6, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', r5, 0x7, 0x700, 0x2, 0x7, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x65, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@lsrr={0x83, 0x7, 0xed, [@loopback]}, @timestamp_prespec={0x44, 0x3c, 0x25, 0x3, 0x9, [{@multicast2, 0xfffffff7}, {@multicast1, 0x4}, {@multicast1}, {@private=0xa010101, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x4}, {@empty, 0x5}]}]}}}}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000940)={&(0x7f0000000480), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x424, 0x3f4, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x2, 0xa, [0x200, 0x7, 0x81, 0x4, 0xffff9791, 0x10000, 0xcb, 0x2, 0x5, 0x0, 0x7fff, 0x5, 0x8001, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0x47fc, 0x0, 0x9, 0x5, 0x6, 0x100, 0xffffff9b, 0x7fffffff, 0x2c0, 0xffffffff, 0x0, 0x3, 0x8, 0x1, 0x5, 0x9, 0x1f, 0x6, 0x7a43dcd2, 0x5b8f, 0x5, 0x9, 0xcc, 0x7fffffff, 0xffffff87, 0x81, 0x3, 0x2, 0x7f, 0xe6, 0x3, 0x5, 0x20, 0x9, 0x9, 0x1000, 0x10000, 0x1, 0x1, 0x10000, 0x5cbf, 0x6, 0x80000000, 0xf65, 0x40], [0x7, 0x8, 0x3, 0x7, 0x2, 0x7, 0x70, 0x7, 0xa417, 0x7, 0x7ff, 0x7, 0x1ef, 0x1, 0x3, 0x5e, 0x1, 0x6, 0xff, 0x5, 0x5b6e, 0xfffffc00, 0x40, 0x9, 0x0, 0x45, 0x9, 0xde, 0x0, 0x7fffffff, 0xfff, 0x1ff, 0x6, 0x100, 0x100, 0x34, 0xfffffffa, 0x7, 0x9179, 0x0, 0x81, 0x401, 0x0, 0x9, 0x9, 0x2, 0x7, 0x0, 0xc0000000, 0x1, 0x1, 0x800, 0xa1, 0x3, 0x6000, 0x7, 0xffff8001, 0xa4c, 0x52, 0x0, 0xfff, 0x6, 0x7ee7, 0x4], [0x7, 0xbbd, 0x1000, 0x6, 0x9, 0xfff, 0x1, 0x2, 0x80, 0x3, 0x0, 0x81, 0x5, 0x5, 0x100, 0x6, 0x5, 0x7, 0x800, 0x3, 0x5f, 0x7, 0x4, 0x3f, 0xde1, 0x52a, 0x100, 0x101, 0x0, 0x1000, 0x5d715685, 0x6cb, 0x5, 0x0, 0x8001, 0xfe, 0x4, 0x9, 0x767, 0x1ff, 0xb4cb, 0x8001, 0x16ee, 0x2, 0x400, 0x2, 0x5, 0x7, 0x9, 0x9, 0x3, 0xfff, 0x5, 0x3, 0xd9, 0x8, 0x7e, 0x9db8, 0x8, 0x1, 0x400, 0xac, 0x0, 0x400], [0x665, 0x7, 0x8, 0x1, 0x7, 0x2, 0x5, 0x0, 0x90, 0x400, 0x4, 0x3, 0x4, 0xfff, 0x3, 0xfffffe01, 0xffffffff, 0x6, 0x1800, 0xa56d, 0x2, 0x0, 0x4, 0x7fff, 0x80, 0x583, 0x4, 0x4, 0x40, 0xff, 0x3ff, 0x2, 0x5, 0x94b, 0x1, 0xe2, 0x8, 0x8, 0x400, 0x1, 0x5, 0x0, 0x9f51, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x7fff, 0x93c, 0x4, 0x200, 0x9, 0x2, 0x3f, 0x6, 0x8, 0x6, 0x40, 0x7ff, 0xfffffff7, 0x5, 0xa6, 0x9], 0x1, ['\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x13, r4, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000a40)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r4, &(0x7f0000000980)=0x80, &(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, 0x800}, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8e}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffc000/0x2000)=nil) r11 = gettid() sendmsg$AUDIT_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x3e9, 0x0, 0x70bd27, 0x25dfdbff, {0x12, 0x0, 0x0, r11, 0x4, 0xcf0, 0x8, 0x100, 0x0, 0x200}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x488c1}, 0x4000040) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb05f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3fadd0d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040820) 14:18:38 executing program 3: sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c005}, 0x40000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7c5cd876e6d6a983}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24008090) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x6008010}, 0x4008841) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80011) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r7 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) epoll_pwait(r9, &(0x7f0000000680)=[{}], 0x1, 0x3, &(0x7f00000006c0)={[0x80000000]}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r11, 0x204, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r11, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}]}, 0x70}, 0x1, 0x0, 0x0, 0x3248bc944b4de624}, 0x80) 14:18:38 executing program 1: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x453, 0x800, 0x70bd2a, 0x25dfdbfd, "3d9f40667f5279021b5952aafe8d37c7d518b8a9f10485033fedfe8672c6c56564a78993bbffddd1e62cffcc8ebf6c25190379f4ee50b5845844248b858e82b628b411b443489a25a0567a7624bf7c3736d126afef2882ee84b714e66e37902dc1e73abc8e1e86e797f14b4a93897ea4", [""]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$AUDIT_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x3e9, 0x100, 0x70bd2d, 0x25dfdbfb, {0x51, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4107, 0x7ff, 0x5, 0x0, 0x62}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xffff1d42}}, './file0/file0\x00'}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x3f9, 0x0, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x2, 0x3d039ddf11ee3687, @fd=r0, 0x2, &(0x7f00000004c0)="e2fafcb5d7eac8a32d52183fb6fefd752eab1a1e4b12e7c84a768f543a6509ae7d51d6fb3f65a2151642038b4106d49d758db403874b7fc9d8b280cef56d4ee8318e56c192b92cd42ab0a01580aebd44a1df9000036415f645e730ec0a3d35752bcbcd", 0x63, 0x11}, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x268000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x80302, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x10000}}, './file0/file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x4004000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001800)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/119, 0x77, 0x0, &(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001840)=0x40) getpgrp(0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r4, 0x63bc9000) bind$802154_dgram(r4, &(0x7f0000001880)={0x24, @long={0x3, 0xffff}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001940)={0x60002000}) 14:18:38 executing program 4: r0 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, 0xffffffffffffffff}}, './file0\x00'}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a000, 0x0) r7 = syz_io_uring_setup(0xa9d, &(0x7f0000000100)={0x0, 0x524a, 0x2, 0x1, 0x207, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r8 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {r8, r5}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000240)={0x18}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {r4, r5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r12, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r13}, './file1\x00'}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x78}}, 0x20000040) ioctl$RNDADDENTROPY(r12, 0x40085203, &(0x7f0000000500)={0x9, 0x40, "cff140939160bdecdbe733266bde9776a5892831bd458390261edc4ccbbd18b4af134180f7e63e7679d8b255ced632a58e3535fd13858676ad6cfe94ed1b1830"}) epoll_create(0x7) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000005c0)={0x424, 0x3f3, 0x100, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x37, [0x7fff, 0x2, 0x9, 0xff, 0xffff, 0x1000, 0x1, 0x4, 0x400, 0x1, 0x7, 0x0, 0x100, 0x9e1, 0x1, 0x0, 0x1, 0x3f, 0x7, 0x1, 0x609, 0xfffffffd, 0x3, 0xffffb87d, 0x7, 0x7, 0x2, 0x5, 0xe8cf, 0x1, 0x1f, 0x0, 0xc19, 0x80000001, 0x0, 0x2, 0x1, 0x1f, 0x1, 0xdb, 0x7fff, 0x4, 0x1, 0x10001, 0x1, 0x200, 0x4, 0x9, 0x3, 0xffffffc0, 0x0, 0x7, 0x9, 0x800, 0x200000, 0x7fffffff, 0xeb, 0x3ff, 0x2, 0x1, 0xfffffdcc, 0x100, 0x8000, 0x3], [0x1, 0xaa, 0x277, 0x387, 0x0, 0x1, 0x4, 0xfffffffa, 0x10001, 0xe61, 0x7, 0x0, 0x275, 0x800, 0x4, 0x700000, 0x8, 0x8, 0x0, 0x1000, 0x9, 0x10000, 0xcd99, 0x5, 0x7, 0x3c, 0x800, 0x101, 0xfffffffe, 0x10000, 0x7fffffff, 0x6, 0xf48f, 0xc14b, 0x4, 0x7, 0x1, 0x3, 0x7, 0x0, 0x5, 0xfffffff8, 0xfffff445, 0x0, 0x9, 0x4, 0xffffffff, 0x7, 0xe35, 0x0, 0x0, 0x7ff, 0x0, 0x9, 0x7fff, 0x7ff, 0xfff, 0x3, 0xff, 0x5, 0x6, 0xe, 0x3, 0x3], [0x5, 0x8, 0x4, 0xe75e, 0x1, 0x9, 0xd28, 0x3, 0x7, 0x3, 0x1f, 0xf81, 0x85e, 0x9, 0x3f, 0x8, 0xffffffff, 0x3, 0x1ff, 0x4, 0x3b, 0x3d8027e7, 0x1, 0x4, 0x7, 0x8, 0x0, 0x6, 0x10001, 0x0, 0x9, 0xfa, 0xffff, 0x9, 0xe420, 0x9, 0x8000, 0x3, 0x9, 0x4, 0x6, 0xa496, 0x7f, 0x4, 0x1ff, 0x1, 0x8, 0x8, 0x3, 0x4, 0x7, 0x5, 0x4, 0x1, 0x0, 0x7fffffff, 0x4, 0x2f87, 0x0, 0xd0, 0x9, 0x9, 0xa88, 0x7], [0x3, 0x97e, 0xfff, 0x7, 0x5, 0x8b, 0xba2f, 0x0, 0x3, 0x88eb, 0x0, 0x3ff, 0xaa2, 0x5, 0x9, 0x1, 0x401, 0x8, 0xc94, 0x5, 0x0, 0x0, 0x2, 0x80000000, 0x7f, 0x2012, 0x200, 0x0, 0x6dee4ab8, 0x9, 0xbe, 0x2, 0x6, 0x1, 0x2, 0x9, 0x80, 0x7f, 0x8, 0x8001, 0x3, 0xffffffff, 0x20000000, 0x4, 0xbb05, 0x9, 0x7f86, 0x0, 0x8, 0x83, 0x9, 0x7f, 0x8001, 0xfffffffb, 0x1f, 0x200, 0x3ec, 0xffffff55, 0x800, 0x1, 0x2, 0x7, 0xff, 0x7fff], 0x3, ['*\x00', '\x00']}, ["", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x40080}, 0x11) r14 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r14, &(0x7f0000000a80)={0xb0000000}) [ 87.391198] audit: type=1400 audit(1729261118.157:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:18:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x4000080) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8008010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x23}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc401}, 0x240400d0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x841}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}}, 0x4048000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfd, {0x55, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x8000, 0x5, 0x0, 0x2}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4805}, 0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040814}, 0x20008001) 14:18:38 executing program 5: r0 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f9}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = gettid() sendmsg$AUDIT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x8, 0x70bd29, 0x25dfdbfb, {0x1, 0x1, 0x1, r2, 0x2, 0x0, 0x8, 0x3, 0x0, 0x7ff}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4008001) sched_rr_get_interval(r2, &(0x7f0000000140)) sched_rr_get_interval(0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40041) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1f, 0x9}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb4, 0x453, 0x20, 0x70bd29, 0x25dfdbfb, "12290bcfaff9747d0ded2ca2bca32472638e60712426366d0d25d49cd66906405797865ec3adde0d590e6e18e791a34351fbefd91f4e77b61ed87f10f99bafe6985c7c7e8a41d0dce1563b92be6df727d9c6c8788ab6763d79f0dde9bfc2561e2a9be3fc218980679e3b385a3521786b73b1cfe66013b9bb613c481703444077a0f7b05c25e2b2a450bc21fb6f19c04d66fead0b32eec6d9b587819f9ca67fc7e9ff3441", ["", "", "", "", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x105) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r0, 0x7, r1, &(0x7f00000005c0)={r5, r5, 0xbe6f}) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) clock_gettime(0x6, &(0x7f0000000840)) 14:18:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_io_uring_setup(0x1359, &(0x7f0000000040)={0x0, 0x6922, 0x10, 0x3, 0xe6, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r4 = syz_io_uring_setup(0x5fad, &(0x7f0000000180)={0x0, 0x752c, 0x1, 0x1, 0xc6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r4, 0xcfcb7000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x40200, 0x0) connect$802154_dgram(r3, &(0x7f00000002c0)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xffffff7f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) r12 = perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2, 0x1f, 0x5, 0x81, 0x0, 0x2, 0x1600, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x1}, 0x800, 0xffff, 0x800, 0x6, 0x617, 0x81, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x3, r3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000540)={0x200d}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) 14:18:38 executing program 7: r0 = syz_io_uring_setup(0x73b1, &(0x7f0000000000)={0x0, 0x1749, 0x26, 0x1, 0x5c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x100010, r0, 0x383b8000) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000001c0), 0x4) socketpair(0x6, 0xa, 0x6, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1f}}, './file0\x00'}) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0, &(0x7f00000013c0)=""/157, 0x9d}, &(0x7f00000014c0)=0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000001500)={{0x1, 0x1, 0x18, r4, {0x1, 0x6}}, './file0\x00'}) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000001540)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x40010, r6, 0x2c913000) write$hidraw(0xffffffffffffffff, &(0x7f0000001600)="841ab2839abfa13bec22d00796d5857a7f62acddfdcefa0436c9427db413ee3b83436aa88c23ba11aad7fa92388f0dfa1eb015502052beb6722016ecc9be6e85ac67171591957b776ab975cc4a96c175f16173be7a400444f71165a16805c4dc2f00aceefc46ee354f0b86afad6e6941cdc3d3185316cca8699a15923724c9b1e45821be0868d7d5a02ee7f62e6997893ec2ebd050ae08dd855b445f42321234a15c3275023e41d61cf9aee0b1ff763f3cb94e5160e294164195fe6c", 0xbc) [ 88.906943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.908689] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.911727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.912687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.913820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.915369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.917123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.920610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.920629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.923166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.923638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.925066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.926189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.926784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.927668] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.929950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.930260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.932817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.934132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.935502] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.938429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.940639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.941239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.941795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.942123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.947751] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.948656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.949749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.950047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.951812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.953911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.954820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.955630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.957370] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.960838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.966090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.968226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.971405] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.973734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.976872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.977869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.979067] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.981592] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.983748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.990902] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.993037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.995130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.010223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.048867] Bluetooth: hci6: command tx timeout [ 91.049712] Bluetooth: hci4: command tx timeout [ 91.050281] Bluetooth: hci7: command tx timeout [ 91.050625] Bluetooth: hci1: command tx timeout [ 91.051225] Bluetooth: hci2: command tx timeout [ 91.051928] Bluetooth: hci0: command tx timeout [ 91.051937] Bluetooth: hci3: command tx timeout [ 91.052060] Bluetooth: hci5: command tx timeout [ 93.097615] Bluetooth: hci5: command tx timeout [ 93.097672] Bluetooth: hci2: command tx timeout [ 93.098109] Bluetooth: hci6: command tx timeout [ 93.098644] Bluetooth: hci0: command tx timeout [ 93.098698] Bluetooth: hci3: command tx timeout [ 93.098735] Bluetooth: hci1: command tx timeout [ 93.098771] Bluetooth: hci7: command tx timeout [ 93.098812] Bluetooth: hci4: command tx timeout [ 95.144615] Bluetooth: hci6: command tx timeout [ 95.147516] Bluetooth: hci4: command tx timeout [ 95.147545] Bluetooth: hci7: command tx timeout [ 95.148120] Bluetooth: hci1: command tx timeout [ 95.148614] Bluetooth: hci3: command tx timeout [ 95.149620] Bluetooth: hci0: command tx timeout [ 95.150143] Bluetooth: hci2: command tx timeout [ 95.151101] Bluetooth: hci5: command tx timeout [ 97.193225] Bluetooth: hci5: command tx timeout [ 97.193298] Bluetooth: hci6: command tx timeout [ 97.193786] Bluetooth: hci3: command tx timeout [ 97.193841] Bluetooth: hci2: command tx timeout [ 97.193885] Bluetooth: hci0: command tx timeout [ 97.193921] Bluetooth: hci1: command tx timeout [ 97.193958] Bluetooth: hci7: command tx timeout [ 97.193994] Bluetooth: hci4: command tx timeout [ 151.346205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.349112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.352288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.363058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.374218] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.379690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.411669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.415696] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.421699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.425429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.442016] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.450026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.495855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.503235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.507659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.509858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.517620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.520696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.520763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.525731] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.530665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.538561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.546678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.549068] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.554492] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.562154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.568539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.569767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.575016] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.577440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.588586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.596556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.604566] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.606339] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.610154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.610691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.612140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.647425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.649813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.675617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.678193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.680773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.683195] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.685760] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.688439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.701783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.704297] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.706333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.448746] Bluetooth: hci0: command tx timeout [ 153.513524] Bluetooth: hci1: command tx timeout [ 153.576622] Bluetooth: hci3: command tx timeout [ 153.640842] Bluetooth: hci2: command tx timeout [ 153.704555] Bluetooth: hci5: command tx timeout [ 153.706722] Bluetooth: hci4: command tx timeout [ 153.769921] Bluetooth: hci6: command tx timeout [ 153.771799] Bluetooth: hci7: command tx timeout [ 155.497520] Bluetooth: hci0: command tx timeout [ 155.561587] Bluetooth: hci1: command tx timeout [ 155.624673] Bluetooth: hci3: command tx timeout [ 155.689997] Bluetooth: hci2: command tx timeout [ 155.754854] Bluetooth: hci5: command tx timeout [ 155.755395] Bluetooth: hci4: command tx timeout [ 155.817691] Bluetooth: hci6: command tx timeout [ 155.817854] Bluetooth: hci7: command tx timeout [ 157.544563] Bluetooth: hci0: command tx timeout [ 157.608701] Bluetooth: hci1: command tx timeout [ 157.673653] Bluetooth: hci3: command tx timeout [ 157.737565] Bluetooth: hci2: command tx timeout [ 157.802543] Bluetooth: hci4: command tx timeout [ 157.802573] Bluetooth: hci5: command tx timeout [ 157.864613] Bluetooth: hci7: command tx timeout [ 157.864656] Bluetooth: hci6: command tx timeout [ 159.593566] Bluetooth: hci0: command tx timeout [ 159.657808] Bluetooth: hci1: command tx timeout [ 159.721521] Bluetooth: hci3: command tx timeout [ 159.785525] Bluetooth: hci2: command tx timeout [ 159.850550] Bluetooth: hci5: command tx timeout [ 159.850625] Bluetooth: hci4: command tx timeout [ 159.913406] Bluetooth: hci7: command tx timeout [ 159.913620] Bluetooth: hci6: command tx timeout [ 213.688992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.690492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.691478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.695733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.697118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.698261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.824414] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.826421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.828625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.831543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.833766] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.837171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.872846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.876704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.877698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.885863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.887389] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.888396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.963098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.964315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.982810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.982850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.985420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.989006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.990864] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.994010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.999217] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.015271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.018175] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.019812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.076267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.093726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.098992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.134826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.135201] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.138836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.141942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.153327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.210727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.236230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.256704] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.281191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.282900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.301792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.305713] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.324733] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.337833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.338957] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.721556] Bluetooth: hci0: command tx timeout [ 215.913565] Bluetooth: hci2: command tx timeout [ 215.914360] Bluetooth: hci1: command tx timeout [ 216.041658] Bluetooth: hci4: command tx timeout [ 216.105540] Bluetooth: hci3: command tx timeout [ 216.169546] Bluetooth: hci5: command tx timeout [ 216.361536] Bluetooth: hci6: command tx timeout [ 216.424599] Bluetooth: hci7: command tx timeout [ 217.769713] Bluetooth: hci0: command tx timeout [ 217.961520] Bluetooth: hci1: command tx timeout [ 217.962021] Bluetooth: hci2: command tx timeout [ 218.088634] Bluetooth: hci4: command tx timeout [ 218.153514] Bluetooth: hci3: command tx timeout [ 218.218492] Bluetooth: hci5: command tx timeout [ 218.408590] Bluetooth: hci6: command tx timeout [ 218.473512] Bluetooth: hci7: command tx timeout [ 219.816656] Bluetooth: hci0: command tx timeout [ 220.010483] Bluetooth: hci2: command tx timeout [ 220.010984] Bluetooth: hci1: command tx timeout [ 220.137642] Bluetooth: hci4: command tx timeout [ 220.201501] Bluetooth: hci3: command tx timeout [ 220.264534] Bluetooth: hci5: command tx timeout [ 220.457602] Bluetooth: hci6: command tx timeout [ 220.520534] Bluetooth: hci7: command tx timeout [ 221.864526] Bluetooth: hci0: command tx timeout [ 222.057522] Bluetooth: hci1: command tx timeout [ 222.058904] Bluetooth: hci2: command tx timeout [ 222.187595] Bluetooth: hci4: command tx timeout [ 222.249745] Bluetooth: hci3: command tx timeout [ 222.332537] Bluetooth: hci5: command tx timeout [ 222.505655] Bluetooth: hci6: command tx timeout [ 222.569600] Bluetooth: hci7: command tx timeout [ 276.217610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.219196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.221490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.223804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.225300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.226894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.254665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.269360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.277526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.285941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.289054] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.291376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.338750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.344334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.346398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.349773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.353510] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.360929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.367696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.390547] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.392347] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.396260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.407065] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.410944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.485535] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.492336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.494725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.500297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.502303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.510386] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.512712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.520274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.522731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.531660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.539354] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.541683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.603128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.611165] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.613314] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.621922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.628675] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.630990] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.770010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.779724] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.788781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.822663] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.845800] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.858316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.249781] Bluetooth: hci1: command tx timeout [ 278.312609] Bluetooth: hci0: command tx timeout [ 278.441312] Bluetooth: hci2: command tx timeout [ 278.443288] Bluetooth: hci3: command tx timeout [ 278.760804] Bluetooth: hci7: command tx timeout [ 278.762496] Bluetooth: hci5: command tx timeout [ 278.762685] Bluetooth: hci4: command tx timeout [ 278.952611] Bluetooth: hci6: command tx timeout [ 280.296505] Bluetooth: hci1: command tx timeout [ 280.361630] Bluetooth: hci0: command tx timeout [ 280.488841] Bluetooth: hci2: command tx timeout [ 280.489509] Bluetooth: hci3: command tx timeout [ 280.808525] Bluetooth: hci4: command tx timeout [ 280.809525] Bluetooth: hci7: command tx timeout [ 280.809986] Bluetooth: hci5: command tx timeout [ 281.000495] Bluetooth: hci6: command tx timeout [ 282.344686] Bluetooth: hci1: command tx timeout [ 282.408534] Bluetooth: hci0: command tx timeout [ 282.537474] Bluetooth: hci3: command tx timeout [ 282.537541] Bluetooth: hci2: command tx timeout [ 282.857107] Bluetooth: hci5: command tx timeout [ 282.857870] Bluetooth: hci4: command tx timeout [ 282.858324] Bluetooth: hci7: command tx timeout [ 283.066047] Bluetooth: hci6: command tx timeout [ 284.392610] Bluetooth: hci1: command tx timeout [ 284.456571] Bluetooth: hci0: command tx timeout [ 284.584668] Bluetooth: hci3: command tx timeout [ 284.584701] Bluetooth: hci2: command tx timeout [ 284.904606] Bluetooth: hci4: command tx timeout [ 284.905159] Bluetooth: hci7: command tx timeout [ 284.905704] Bluetooth: hci5: command tx timeout [ 285.096638] Bluetooth: hci6: command tx timeout [ 338.556219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.558035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.559183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.564156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.565744] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.568680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.611201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.613581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.614743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.619650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.623702] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.626636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.677790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.682577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.691657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.699976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.703657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.705045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.753196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.762154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.777754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.791215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.799742] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.805780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.829169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.830853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.843718] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.870873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.871922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.875622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.880003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.881167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.888186] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.893606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.893865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.894614] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.895882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.915726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.916714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.925771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.929908] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.931069] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.931911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.932831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.937531] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.940143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.941908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.945275] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.649561] Bluetooth: hci1: command tx timeout [ 340.650729] Bluetooth: hci0: command tx timeout [ 340.777526] Bluetooth: hci2: command tx timeout [ 340.840731] Bluetooth: hci3: command tx timeout [ 340.968552] Bluetooth: hci7: command tx timeout [ 340.969590] Bluetooth: hci6: command tx timeout [ 341.033704] Bluetooth: hci4: command tx timeout [ 341.034768] Bluetooth: hci5: command tx timeout [ 342.697620] Bluetooth: hci0: command tx timeout [ 342.698168] Bluetooth: hci1: command tx timeout [ 342.825538] Bluetooth: hci2: command tx timeout [ 342.889531] Bluetooth: hci3: command tx timeout [ 343.017490] Bluetooth: hci7: command tx timeout [ 343.017566] Bluetooth: hci6: command tx timeout [ 343.081676] Bluetooth: hci4: command tx timeout [ 343.081748] Bluetooth: hci5: command tx timeout [ 344.744479] Bluetooth: hci0: command tx timeout [ 344.745544] Bluetooth: hci1: command tx timeout [ 344.872716] Bluetooth: hci2: command tx timeout [ 344.937433] Bluetooth: hci3: command tx timeout [ 345.064633] Bluetooth: hci7: command tx timeout [ 345.065754] Bluetooth: hci6: command tx timeout [ 345.128817] Bluetooth: hci4: command tx timeout [ 345.129293] Bluetooth: hci5: command tx timeout [ 346.792955] Bluetooth: hci1: command tx timeout [ 346.792982] Bluetooth: hci0: command tx timeout [ 346.920537] Bluetooth: hci2: command tx timeout [ 346.984524] Bluetooth: hci3: command tx timeout [ 347.112649] Bluetooth: hci6: command tx timeout [ 347.112763] Bluetooth: hci7: command tx timeout [ 347.176599] Bluetooth: hci4: command tx timeout [ 347.176644] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:23:39 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8115d65d RDX=ffff88800efa5280 RSI=ffffffff8115d69b RDI=0000000000000006 RBP=000000000e87f520 RSP=ffff88802d90fbc0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000800 R11=00000000000c2f81 R12=ffff88807ffd8680 R13=ffff88807ffd8680 R14=0000000000000000 R15=ffff888033ec1180 RIP=ffffffff8115d6a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562bb60b24c8 CR3=000000002d828000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000001147 RBX=0000000000000286 RCX=1ffffffff0fdcfe4 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8484521c RBP=ffffffff85cfbde0 RSP=ffff88802ba778c0 R8 =0000000000000001 R9 =fffffbfff0fda9da R10=ffffffff87ed4ed7 R11=00000000000c2f81 R12=ffff88800d18e800 R13=0000000000000100 R14=0000000000000001 R15=0000000000000286 RIP=ffffffff84845224 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1154c9a540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1154e85620 CR3=0000000032a52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000