Warning: Permanently added '[localhost]:33545' (ECDSA) to the list of known hosts. 2025/05/24 18:03:30 fuzzer started 2025/05/24 18:03:30 dialing manager at localhost:46087 syzkaller login: [ 105.200011] cgroup: Unknown subsys name 'net' [ 105.327683] cgroup: Unknown subsys name 'cpuset' [ 105.367589] cgroup: Unknown subsys name 'rlimit' 2025/05/24 18:03:52 syscalls: 200 2025/05/24 18:03:52 code coverage: enabled 2025/05/24 18:03:52 comparison tracing: enabled 2025/05/24 18:03:52 extra coverage: enabled 2025/05/24 18:03:52 setuid sandbox: enabled 2025/05/24 18:03:52 namespace sandbox: enabled 2025/05/24 18:03:52 Android sandbox: enabled 2025/05/24 18:03:52 fault injection: enabled 2025/05/24 18:03:52 leak checking: enabled 2025/05/24 18:03:52 net packet injection: enabled 2025/05/24 18:03:52 net device setup: enabled 2025/05/24 18:03:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 18:03:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 18:03:52 USB emulation: enabled 2025/05/24 18:03:52 hci packet injection: enabled 2025/05/24 18:03:52 wifi device emulation: enabled 2025/05/24 18:03:52 802.15.4 emulation: enabled 2025/05/24 18:03:52 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 18:03:53 starting 8 fuzzer processes 18:03:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000080) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x2c}}, 0x81) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x2000c814) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x18, {0x1, @bearer=@l2={'ib', 0x3a, 'wg2\x00'}}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfbc8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}}, 0x966142dc24dda7e8) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_genetlink_get_family_id$net_dm(&(0x7f0000000ac0), 0xffffffffffffffff) 18:03:53 executing program 1: r0 = getegid() getgroups(0x2, &(0x7f0000000080)=[0xee00, 0x0]) getgroups(0x5, &(0x7f00000000c0)=[0xee00, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'vxcan1\x00', @ifru_ivalue}) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r6, 0x3, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8, {0x101}}, './file0\x00'}) r10 = syz_io_uring_setup(0x33a2, &(0x7f0000000240)={0x0, 0x5d3f, 0x1, 0x2, 0x2c9}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r11, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index=0x7, 0x1, 0x4, 0x8001, 0x4, 0x0, {0x2}}, 0x8001) r12 = getegid() getgroups(0x8, &(0x7f0000000480)=[r12, r2, r2, r5, r0, 0xffffffffffffffff, r1, r1]) getgroups(0x3, &(0x7f00000004c0)=[r4, r13, r15]) getgroups(0x3, &(0x7f0000000500)=[r16, r14, r3]) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) syz_80211_inject_frame(&(0x7f0000000640), &(0x7f0000000680)=@mgmt_frame=@auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x6, 0x8}}, 0x1, 0x2, 0x6a, @val={0x10, 0x1, 0x1b}, [{0xdd, 0xe3, "1dd55dbbe98b479a8fca0fa2a647acfa164f231715c16af2f57eb004b969fdf8300a58b48f088fad703eb6f1555e5b10e3642487de47fec90fed6006012727b122258ab31d089c39107f69d3c5a80710f33095589a960d0fe0f04f16f38c755662be7f8e0d25a7705cc19ae65c37e2f15664b63eb69a562d310e4e739d758ffea6048502171ddab8ed33c5972629b84b1ba421d86db4b8179a6a7b2ad03b053c04fe0fd88f200ee9cf5f436245c4ee52eed8bf9bf4b91da0d284e95d1d47f0ff3809d67162a90c698b5cddd9a59d0a2992f46ea8900a7d17aaa4ce02b98ec8f8d1d5a4"}, {0xdd, 0x3e, "acabae97fe94871ef4bb70190e3d81e0ad4554411d68608ca07c7600b8c1cc2a503c2a2259d16dd30ef4e2332006991a65059e627af4ce7a6cefc1cb8052"}, {0xdd, 0x9f, "85e7ccf8ecda66790702aaaea5405dd7fbcdde99f939beb8eb968191b7d70920af1ed8cf53a9f5a3f34a1fcdf734238cae54ba0cb716b85d927158027401cc61f67f4ee4bee67b131b1871d8279ac15e79834c87a487438696bc46b1c1b7e5e53c8f650546759f9f41af396006ab240b59156439f4bbe64287c6e2ac0f1f52b1908b636e52b829ee7cdd2e529005958f3c3dc811115a7992d9b8351d2fd8e5"}, {0xdd, 0x3f, "6cc7c0e0ef30e601d514d1da0890af61cb49bdd539d7254147a90d30c521fac991ef6eedb57610fa74b034b7e78ebe25e7a2549ac345e279c7ebcdbc073748"}, {0xdd, 0x1a, "bbd3fd428c4c90b66f4f67e848604359d21485fe48047c006198"}, {0xdd, 0xa7, "9e628c7b975d33e514cd1f30b33658f5a8679e0d6c6cebe2b1806f2481d465cfb64fd4f0c2822a3b0e6916c89d5c2bc9ecd300fb9d72a7c0c8a7dab6837cbe1b79635cb3fec2b373e2956f18366bbf57752f539e27e37443257125682f296eceb83a3ddd03e25469fbe0ce8f08b5aff42af06c076e9c50c16639ed7e0f485e1bd87e38ff9dc2f636b85c3a47a52d629280db7961df2e80513a5dbd5fb6ad06ebfdd7af6d493d6a"}, {0xdd, 0x65, "74d3ca2f1205a40bdf643670eed6ea86d82befb5c07ee3276270e78e85f3c9622017c1e9dcbc6544bbc0aaf3f17b0e094c3f55c6d15d1d684ae818891633bb3862e086d9a70accbd615902c3fc7b95220218195cd173a43d1cfe701eae903c7225906c15b5"}, {0xdd, 0x9c, "644609605505bbb85c51eb5fe2078da6fb252b61275bfcbfbdf1052e1ab910d3b7347d63fea13bc62ae2f2ed9956eb46a46dceac6789f3e9ae74d0e9825d7ef4572b2e6bb2753f63e77287a7f0a7236d1b2d04a0eb76edd41665c507243cac5133779cbbcdeaeb8c98a5992965ceccf94416fc11909be1333122a29bf7b2d5e4354eb8fa55688fbbd03c130723e1e065995fddf24999c21384572114"}, {0xdd, 0x18, "857c36b1d0d4262fef302bb9af6ca26aaa525404d5b19e10"}, {0xdd, 0x7e, "50fa0ed6e31c1c1d562a164bd575723f6a7379681fd49774ea986fcfa9619a52d5e5020e262e7aa561ab62cf69d9673bc65a706477947d424932aafd51aaf4dd21a90c333eedfbf2384843efd8e68056568e107e3b79db52fc8070507a6bed1439791d07ef2ffa96e97044a022e88c79f83d77eebd4c8f8a32c0ef4b32f2"}]}, 0x48c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r17, 0x89f6, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x2f, 0x7f, 0xfa, 0x3, 0x6e, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x20, 0x7fffffff, 0xffffffd3}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000cc0)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x00'}, 0x16, 0x0) 18:03:53 executing program 2: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3733, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x4000084) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb524cf6cf8806832}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x505, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x2}}, './file0\x00'}) r6 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400881c}, 0x4000000) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000084}, 0x10000010) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x1c}}, 0x400c800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x48041}, 0x44004) 18:03:53 executing program 3: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) keyctl$get_persistent(0x16, 0xee01, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4e95}}, './file0\x00'}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000000c0)={'team0\x00', @ifru_map}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x7fff, 0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_io_uring_setup(0x5415, &(0x7f0000000180)={0x0, 0x9a97, 0x0, 0x0, 0x175}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) mmap$usbmon(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x0, 0x4010, r2, 0x200) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r5, 0x0) syz_io_uring_setup(0x6019, &(0x7f0000000300)={0x0, 0x3e53, 0x0, 0x2, 0x284, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x7fff}}, './file1\x00'}) syz_io_uring_submit(r7, r8, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x6, 0x4, 0x0, {0x0, 0x0, r9}}, 0x6) r10 = accept(0xffffffffffffffff, &(0x7f0000000480)=@caif=@util, &(0x7f0000000500)=0x80) accept$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) [ 127.586965] audit: type=1400 audit(1748109833.512:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:03:53 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000180)) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000001c0)={{0x0, 0x6644}, {0xb6f, 0x3}, 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x800, 0x5}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r3}}, './file0/../file0\x00'}) r6 = socket(0x1a, 0xa, 0x7) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x49142800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0/../file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r7, 0x80503d01, &(0x7f0000000400)) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6ce}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20004000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0/../file0\x00'}) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x1) r9 = accept(r7, 0x0, &(0x7f0000000600)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x5, 0x5, 0x4808e7ca, 0x1}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000001) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x6, 0x1000, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x29c, 0x0, 0xc14, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x95}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffe, @loopback, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @remote, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @mcast2}}}}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x530a}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x322}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x98c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd5f8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 18:03:53 executing program 7: keyctl$negate(0xd, 0x0, 0x3, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x0}, 0xfffffffffffffff8) keyctl$get_security(0x11, r0, &(0x7f0000000100)=""/4096, 0x1000) r1 = add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @desc2}, &(0x7f0000001180)={0x0, "94ec6212604cbbd2e8f3eaf7b3bf9ecc26b7fd9117cb445964ac2f4aef83d797824128875bff1315c811e62df70ca483368e69591292c2649ba9033124307b70", 0x33}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001200)={r1, 0x92, 0xc1}, &(0x7f0000001240)={'enc=', 'pkcs1', ' hash=', {'sha512-arm64\x00'}}, &(0x7f00000012c0)="81524f24e6789a0f70f7d671f3f162593cf1621af97e9c5ff0f76ee2959cfb3466b848c04218a9e925fdb16c6f1689df7ef0b0e97275ca79fde132baba375effff3f75b0e7b6a96ea4aef745b0faa3792665a8015de0a40d502d7a6fd1217c6c93875747bf4c42fa0ddeb7c558f6d281cb290add2b756bfe5f21eaecf76ed2791c63f9ee991e126aa3d05370810803e4c218", &(0x7f0000001380)="b8be5f292cdcccb2baf915266f007451879071fc00992d51ad25a5fa0e25ae5bb40be4916d4b4b754825f09687452fe6460aa99bfdcd9b19921339bbb97b5fa526c3c4b914daa668ca71a7fca772c624c63c27b0f690d754ee25363c5ca07365f5d22acde81c9aa585e0206de8bcf73559b1350492562d5cbfaa4949237245ed275ba74bf2512962a7f4adacd9ef6b34169618a895e1901ecd19d8f1d398c7cf5792690a99bbfd09be7c81c8b7db44e6cb9ebc5eb588885d774330771075c6a809") keyctl$revoke(0x3, r0) r2 = getuid() keyctl$get_persistent(0x16, r2, r1) getresuid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)) keyctl$search(0xa, r0, &(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x1}, r1) r3 = syz_open_dev$mouse(&(0x7f00000015c0), 0x1, 0x40601) r4 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001600)={{0x1, 0x1, 0x18, r3, {r4, 0xffffffffffffffff}}, './file0\x00'}) keyctl$get_persistent(0x16, r2, r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001640)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000001680)={0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = add_key$fscrypt_v1(&(0x7f0000001700), &(0x7f0000001740)={'fscrypt:', @desc4}, &(0x7f0000001780)={0x0, "8fdf2943a9e8c330225414bd3b601568cba99a56a697cec9e9aca4d07b08abed053345fcc30fb53964c6ad3672ea8496fc62795bc48d3a142cc448989287ff8b", 0x2b}, 0x48, r1) keyctl$get_security(0x11, r6, &(0x7f0000001800)=""/91, 0x5b) 18:03:53 executing program 6: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x4, 0x0, 0x81, 0x80, 0x20}) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x93d3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket(0x27, 0x6, 0x5866) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40082}, 0x8080) syz_io_uring_setup(0x2639, &(0x7f0000000d40)={0x0, 0xc1c7, 0x1, 0x5, 0xe7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000e80)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000e40)="e3806f8e4562b9b848e495a8280306", 0xf, 0xc}, 0x7f0a) syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r3, {0x10001, 0x7}}, './file0\x00'}) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf8, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x74219d3a8f9077c3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001100)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) write$char_usb(r6, &(0x7f0000001140)="5b580c59497bd211b42d9287c343a570617123719b64d317a3d9f15b97be7ed01389caae03b515443b9fa24d2b8f757e5df65f218c4089d305c4336196337fddd0", 0x41) syz_open_dev$mouse(&(0x7f00000011c0), 0x9, 0x420240) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001300)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) 18:03:53 executing program 5: ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@hsc={0x1, 0x3, "64501cead3b4e0127eb6"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000080)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f00000000c0)={0x1, 0x1}) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000100)) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x10000) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000b80)={0xbf, 0x20, 0x0, 0x5f}) ioctl$CDROM_DEBUG(r0, 0x5330, 0x1) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001640)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$CDROM_DEBUG(r3, 0x5330, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file1\x00'}) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xaa1ca) ioctl$CDROMRESET(r4, 0x5312) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) ioctl$CDROM_LAST_WRITTEN(r6, 0x5395, &(0x7f0000001740)) ioctl$CDROMRESET(r3, 0x5312) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001880)={0xc, 0x0, &(0x7f0000001780)=[@free_buffer], 0x93, 0x0, &(0x7f00000017c0)="f6df3de412aceb100b9a595269a19c688205b8f66d683caf8c5e18086bd533ada5102dfdb71138c7252ea612fd7a36f1315ba58e2c6a0f800a49f6ec19a406638b52c966c76948bdc6ec24c07daeb7a3f58aacda0dc101c5eadf1940e17f14e8fe05b6bf4c33bd12c72e808df73b1fb0c34671cc7a89a6f7990a9251541da875cd6a308261264c5c8b4127caee4fb2ca83e337"}) [ 128.982138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.985586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.989775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.998689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.003958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.055987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.059881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.061994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.068315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.071559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.113556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.115566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.117548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.120846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.123622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.127280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.132958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.134919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.141832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.143538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.148620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.161599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.179474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.189659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.195946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.198986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.201906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.206179] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.210643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.224454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.227671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.253267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.258902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.269227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.271001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.297531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.306113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.309540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.330463] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.343584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.065126] Bluetooth: hci0: command tx timeout [ 131.129501] Bluetooth: hci1: command tx timeout [ 131.193579] Bluetooth: hci4: command tx timeout [ 131.256149] Bluetooth: hci3: command tx timeout [ 131.320586] Bluetooth: hci5: command tx timeout [ 131.320773] Bluetooth: hci6: command tx timeout [ 131.386089] Bluetooth: hci2: command tx timeout [ 131.386315] Bluetooth: hci7: command tx timeout [ 133.112233] Bluetooth: hci0: command tx timeout [ 133.177121] Bluetooth: hci1: command tx timeout [ 133.240274] Bluetooth: hci4: command tx timeout [ 133.304264] Bluetooth: hci3: command tx timeout [ 133.368227] Bluetooth: hci5: command tx timeout [ 133.369098] Bluetooth: hci6: command tx timeout [ 133.432528] Bluetooth: hci7: command tx timeout [ 133.433611] Bluetooth: hci2: command tx timeout [ 135.160390] Bluetooth: hci0: command tx timeout [ 135.225050] Bluetooth: hci1: command tx timeout [ 135.290063] Bluetooth: hci4: command tx timeout [ 135.352537] Bluetooth: hci3: command tx timeout [ 135.416093] Bluetooth: hci5: command tx timeout [ 135.417293] Bluetooth: hci6: command tx timeout [ 135.480321] Bluetooth: hci7: command tx timeout [ 135.481233] Bluetooth: hci2: command tx timeout [ 137.209569] Bluetooth: hci0: command tx timeout [ 137.272100] Bluetooth: hci1: command tx timeout [ 137.338397] Bluetooth: hci4: command tx timeout [ 137.400255] Bluetooth: hci3: command tx timeout [ 137.464217] Bluetooth: hci6: command tx timeout [ 137.464296] Bluetooth: hci5: command tx timeout [ 137.528248] Bluetooth: hci2: command tx timeout [ 137.528460] Bluetooth: hci7: command tx timeout [ 189.129520] syz-executor.4 (296) used greatest stack depth: 25120 bytes left [ 191.500549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.510646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.515748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.523938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.531649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.602781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.607597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.623627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.626965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.638696] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.656407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.659247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.670704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.683402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.685508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.689549] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.691546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.694172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.695804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.704529] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.708576] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.710430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.711530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.737667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.742994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.745581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.748864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.757950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.768704] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.810722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.851852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.854374] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.865603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.899570] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.915661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.918342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.951821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.954513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.960378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.976653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.594077] Bluetooth: hci0: command tx timeout [ 193.848113] Bluetooth: hci1: command tx timeout [ 193.848860] Bluetooth: hci5: command tx timeout [ 193.849437] Bluetooth: hci3: command tx timeout [ 193.913131] Bluetooth: hci2: command tx timeout [ 193.913249] Bluetooth: hci4: command tx timeout [ 193.976229] Bluetooth: hci6: command tx timeout [ 194.040378] Bluetooth: hci7: command tx timeout [ 195.640150] Bluetooth: hci0: command tx timeout [ 195.896668] Bluetooth: hci5: command tx timeout [ 195.897733] Bluetooth: hci1: command tx timeout [ 195.897764] Bluetooth: hci3: command tx timeout [ 195.960464] Bluetooth: hci4: command tx timeout [ 195.961755] Bluetooth: hci2: command tx timeout [ 196.024206] Bluetooth: hci6: command tx timeout [ 196.088708] Bluetooth: hci7: command tx timeout [ 197.690044] Bluetooth: hci0: command tx timeout [ 197.944410] Bluetooth: hci3: command tx timeout [ 197.944538] Bluetooth: hci1: command tx timeout [ 197.945383] Bluetooth: hci5: command tx timeout [ 198.008519] Bluetooth: hci2: command tx timeout [ 198.009422] Bluetooth: hci4: command tx timeout [ 198.072201] Bluetooth: hci6: command tx timeout [ 198.136460] Bluetooth: hci7: command tx timeout [ 199.737622] Bluetooth: hci0: command tx timeout [ 199.992405] Bluetooth: hci3: command tx timeout [ 199.993388] Bluetooth: hci5: command tx timeout [ 199.993833] Bluetooth: hci1: command tx timeout [ 200.056151] Bluetooth: hci4: command tx timeout [ 200.056619] Bluetooth: hci2: command tx timeout [ 200.120508] Bluetooth: hci6: command tx timeout [ 200.184469] Bluetooth: hci7: command tx timeout [ 251.487285] syz-executor.1 (2953) used greatest stack depth: 24992 bytes left [ 253.766061] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.769609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.774595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.782231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.786619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.893422] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.900747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.902572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.908488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.913083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.029647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.033877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.037405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.063509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.066733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.135725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.144304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.146119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.160846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.165451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.168353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.170583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.178844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.202370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.205946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.279756] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.292707] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.311438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.336686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.373263] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.381582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.387392] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.391382] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.397702] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.399567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.462697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.473421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.475346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.518780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.524577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.864173] Bluetooth: hci0: command tx timeout [ 255.993058] Bluetooth: hci1: command tx timeout [ 256.120080] Bluetooth: hci2: command tx timeout [ 256.312158] Bluetooth: hci4: command tx timeout [ 256.377114] Bluetooth: hci3: command tx timeout [ 256.441124] Bluetooth: hci6: command tx timeout [ 256.504493] Bluetooth: hci5: command tx timeout [ 256.632555] Bluetooth: hci7: command tx timeout [ 257.912743] Bluetooth: hci0: command tx timeout [ 258.041129] Bluetooth: hci1: command tx timeout [ 258.168126] Bluetooth: hci2: command tx timeout [ 258.361112] Bluetooth: hci4: command tx timeout [ 258.424066] Bluetooth: hci3: command tx timeout [ 258.488384] Bluetooth: hci6: command tx timeout [ 258.553156] Bluetooth: hci5: command tx timeout [ 258.681091] Bluetooth: hci7: command tx timeout [ 259.960237] Bluetooth: hci0: command tx timeout [ 260.089123] Bluetooth: hci1: command tx timeout [ 260.219423] Bluetooth: hci2: command tx timeout [ 260.409063] Bluetooth: hci4: command tx timeout [ 260.473060] Bluetooth: hci3: command tx timeout [ 260.536096] Bluetooth: hci6: command tx timeout [ 260.601079] Bluetooth: hci5: command tx timeout [ 260.730363] Bluetooth: hci7: command tx timeout [ 262.009105] Bluetooth: hci0: command tx timeout [ 262.137254] Bluetooth: hci1: command tx timeout [ 262.265102] Bluetooth: hci2: command tx timeout [ 262.456054] Bluetooth: hci4: command tx timeout [ 262.521055] Bluetooth: hci3: command tx timeout [ 262.585071] Bluetooth: hci6: command tx timeout [ 262.649103] Bluetooth: hci5: command tx timeout [ 262.777074] Bluetooth: hci7: command tx timeout [ 314.107820] syz-executor.4 (5608) used greatest stack depth: 24704 bytes left [ 316.170397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.177554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.180339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.189632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.195961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.427083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.432813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.437077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.446847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.455999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.577387] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.581732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.588760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.611475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.629457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.678296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.722148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.724865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.726958] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.731506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.734612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.746423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.746978] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.751496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.758818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.762355] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.773513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.779826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.798541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.798793] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.806674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.810561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.814598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.834662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.834699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.839862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.842619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.845761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.863548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.898717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.267299] Bluetooth: hci0: command tx timeout [ 318.520114] Bluetooth: hci1: command tx timeout [ 318.712106] Bluetooth: hci2: command tx timeout [ 318.840156] Bluetooth: hci6: command tx timeout [ 318.904136] Bluetooth: hci3: command tx timeout [ 318.969437] Bluetooth: hci4: command tx timeout [ 318.970553] Bluetooth: hci7: command tx timeout [ 318.971114] Bluetooth: hci5: command tx timeout [ 320.312390] Bluetooth: hci0: command tx timeout [ 320.569335] Bluetooth: hci1: command tx timeout [ 320.760282] Bluetooth: hci2: command tx timeout [ 320.888314] Bluetooth: hci6: command tx timeout [ 320.952136] Bluetooth: hci3: command tx timeout [ 321.016175] Bluetooth: hci4: command tx timeout [ 321.016688] Bluetooth: hci7: command tx timeout [ 321.016725] Bluetooth: hci5: command tx timeout [ 322.360315] Bluetooth: hci0: command tx timeout [ 322.618171] Bluetooth: hci1: command tx timeout [ 322.808219] Bluetooth: hci2: command tx timeout [ 322.936569] Bluetooth: hci6: command tx timeout [ 323.002172] Bluetooth: hci3: command tx timeout [ 323.064283] Bluetooth: hci5: command tx timeout [ 323.064799] Bluetooth: hci4: command tx timeout [ 323.065611] Bluetooth: hci7: command tx timeout [ 324.409268] Bluetooth: hci0: command tx timeout [ 324.665321] Bluetooth: hci1: command tx timeout [ 324.858038] Bluetooth: hci2: command tx timeout [ 324.985552] Bluetooth: hci6: command tx timeout [ 325.048062] Bluetooth: hci3: command tx timeout [ 325.112097] Bluetooth: hci7: command tx timeout [ 325.112119] Bluetooth: hci5: command tx timeout [ 325.113061] Bluetooth: hci4: command tx timeout [ 378.518758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.526709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.529280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.540807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.553851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.708049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.722217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.723977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.730320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.733320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.741588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.741586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.749745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.760861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.765553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.914599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.931858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.949176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.978583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.991691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.105383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.128146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.136702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.173872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.178664] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.182391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.191759] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.199162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.203624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.208823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.220678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.229242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.248105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.248500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.262288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.297345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.312837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.333847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.360587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.361851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.602068] Bluetooth: hci0: command tx timeout [ 380.792116] Bluetooth: hci1: command tx timeout [ 380.792511] Bluetooth: hci2: command tx timeout [ 381.048100] Bluetooth: hci3: command tx timeout [ 381.368277] Bluetooth: hci7: command tx timeout [ 381.432098] Bluetooth: hci6: command tx timeout [ 381.432122] Bluetooth: hci5: command tx timeout [ 381.497179] Bluetooth: hci4: command tx timeout [ 382.648175] Bluetooth: hci0: command tx timeout [ 382.841035] Bluetooth: hci1: command tx timeout [ 382.841503] Bluetooth: hci2: command tx timeout [ 383.097166] Bluetooth: hci3: command tx timeout [ 383.416274] Bluetooth: hci7: command tx timeout [ 383.481059] Bluetooth: hci5: command tx timeout [ 383.481121] Bluetooth: hci6: command tx timeout [ 383.544276] Bluetooth: hci4: command tx timeout [ 384.696085] Bluetooth: hci0: command tx timeout [ 384.888448] Bluetooth: hci2: command tx timeout [ 384.888947] Bluetooth: hci1: command tx timeout [ 385.146258] Bluetooth: hci3: command tx timeout [ 385.464462] Bluetooth: hci7: command tx timeout [ 385.528199] Bluetooth: hci5: command tx timeout [ 385.528223] Bluetooth: hci6: command tx timeout [ 385.596028] Bluetooth: hci4: command tx timeout [ 386.744380] Bluetooth: hci0: command tx timeout [ 386.936083] Bluetooth: hci2: command tx timeout [ 386.937090] Bluetooth: hci1: command tx timeout [ 387.192169] Bluetooth: hci3: command tx timeout [ 387.513173] Bluetooth: hci7: command tx timeout [ 387.577042] Bluetooth: hci5: command tx timeout [ 387.577200] Bluetooth: hci6: command tx timeout [ 387.641185] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 18:08:59 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff812c7ef0 RDX=ffff88802b1e8000 RSI=0000000000000000 RDI=0000000000000004 RBP=0000000000000000 RSP=ffff888024027ef0 R8 =0000000000000000 R9 =ffffed100563d000 R10=0000000000000000 R11=0000000000000001 R12=ffff888024027f58 R13=00007f9c14b0c438 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812c7ef0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9c14b0c438 CR3=000000002991a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff85c75280 RCX=ffffffff8174075f RDX=0000000000000000 RSI=ffffffff81740865 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88806cf08a28 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=00007f713f2c1b84 R13=0000000000000000 R14=ffff888018c5b700 R15=0000000000000000 RIP=ffffffff8174086c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f713f2a4020 CR3=000000002c7ad000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000