Warning: Permanently added '[localhost]:50728' (ECDSA) to the list of known hosts. 2025/05/25 09:25:45 fuzzer started 2025/05/25 09:25:46 dialing manager at localhost:46087 syzkaller login: [ 93.258140] cgroup: Unknown subsys name 'net' [ 93.400656] cgroup: Unknown subsys name 'cpuset' [ 93.442063] cgroup: Unknown subsys name 'rlimit' 2025/05/25 09:26:03 syscalls: 201 2025/05/25 09:26:03 code coverage: enabled 2025/05/25 09:26:03 comparison tracing: enabled 2025/05/25 09:26:03 extra coverage: enabled 2025/05/25 09:26:03 setuid sandbox: enabled 2025/05/25 09:26:03 namespace sandbox: enabled 2025/05/25 09:26:03 Android sandbox: enabled 2025/05/25 09:26:03 fault injection: enabled 2025/05/25 09:26:03 leak checking: enabled 2025/05/25 09:26:03 net packet injection: enabled 2025/05/25 09:26:03 net device setup: enabled 2025/05/25 09:26:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 09:26:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 09:26:03 USB emulation: enabled 2025/05/25 09:26:03 hci packet injection: enabled 2025/05/25 09:26:03 wifi device emulation: enabled 2025/05/25 09:26:03 802.15.4 emulation: enabled 2025/05/25 09:26:03 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 09:26:04 starting 8 fuzzer processes 09:26:04 executing program 0: r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9) r1 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="abc2630b0c892cdf6885bc440d2d27593f93ebc03962fe43f4fba89716cbdc37604b50bab867161f2578e068c2784d04f4fb0c94715a1b79ba4956220f382598cdbb6a6e08be992e7e8c8ecaa472cbda27c9fbf18ace73659f6d47202183b707b613bdada725587b1f91247d64d8e9dd6bce837633cc59cf329079f5d2168f723db71ae173a0879b408c35f9c1df3227a405587edef76fce370537e1f283d6ed85ef6ee8ab2342fa7d7bc9e1a0f58f23874ab6beb8b4232ff97800e2f66bc68d0c3eaf1803574fd85a72bed1f22cfd3b506b2787023a0ff62e40cf6d4cc11b885b34", 0xe2, 0xfffffffffffffffa) keyctl$negate(0xd, r0, 0x0, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "e22186336db9add85a3bd7787622a0416f57898a835f00deac9da64eca55d642ccd5a93b6b0ca094fed611a74a17e9af1b56553a02d1e5bdcb99d0119bf412ff", 0x1a}, 0x48, r1) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000850) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000580)={r1, 0xa2, 0x19}, &(0x7f00000005c0)={'enc=', 'raw', ' hash=', {'crc32c-intel\x00'}}, &(0x7f0000000640)="1d4cd7a348f9e31c3c634a9f5ebbbe13ce68b2b5467724a860332e8c24f5bad978915fa93628f05c27892f2b6e0e8a68dcbdd4325e8ebf3b334a4b2c24e1cdd7ed4bae4df6fc875b622057fcf5cb35aca04e2f89537fc05041049dc40ce16d5d72fbdab4487c9908e211c7976e6dc5015f1116346e98c17dd51e4a91ec884a969b270d3778fbc26b346ec0abdc78ac54fa7921cff03ff7315b99903da0ae7bc41942", &(0x7f0000000700)=""/25) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0xfffffffffffffffe, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x63, 0x62, 0x38, 0x61, 0x38, 0x30, 0x36, 0x64, 0xfc, 0x35, 0x61, 0x39, 0x32, 0x52, 0x30, 0x3]}, &(0x7f00000008c0)={0x0, "313ed200f908c1bd653dbd381ad7a2ddebdea904ce1d6a1d20a393d361804a43638db3fe9350f1395a7bed13a067fa64be8b2170ce8f981cd976ca3e793b16f1", 0x2c}, 0x48, r2) r5 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x61, 0x64, 0x34, 0x64, 0x61, 0x38, 0x34, 0x33, 0x61, 0x39, 0x66, 0x33, 0x37, 0x37, 0x63, 0x61]}, &(0x7f00000009c0)={0x0, "d45c8d437926d0f6e6d398d69b67a6217a3e10e35d58fb0e9f5c68803aedf4af9db1c442c18ea96cbf6f782886afc82bf59c95ab6cdd8e3465d35b626897881a", 0x35}, 0x48, r1) keyctl$link(0x8, r4, r5) r6 = request_key(&(0x7f0000000b00)='syzkaller\x00', &(0x7f0000000b40)={'syz', 0x2}, &(0x7f0000000b80)='syz', 0xfffffffffffffff9) request_key(&(0x7f0000000a40)='blacklist\x00', &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)='.request_key_auth\x00', r6) r7 = add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f0000000bc0)='cifs.spnego\x00', &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000c40)='fscrypt:', r7) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c1}, 0x20040000) request_key(&(0x7f0000000e40)='cifs.idmap\x00', &(0x7f0000000e80)={'syz', 0x0}, &(0x7f0000000ec0)='[%\x00', 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @desc3}, &(0x7f0000000f80)={0x0, "e5e66068d2095a06395b3fb4f08c7954421289de59f36b65c795583b74a3122f12640bcae4f4ca955a0f5e45e5920a06edec2118e83d679a507cfec068ed53bb", 0x21}, 0x48, r5) 09:26:04 executing program 1: semget$private(0x0, 0x5, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)) r0 = semget(0x3, 0x3, 0x280) semop(r0, &(0x7f0000000040)=[{0x4, 0x7}], 0x1) r1 = semget(0x0, 0x3, 0x10) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000080)=0x101) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f00000000c0)=""/153) semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f0000000180)=""/143) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x404c810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000400)={r4}) connect$802154_dgram(r3, &(0x7f0000000440)={0x24, @long={0x3, 0x1}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x7) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xaf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xcf0a76d6800bc8b}, 0x0) 09:26:04 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0xe41, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x822}, 0x4004000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x18c011c8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x402, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40058d4}, 0x48840) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x61}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x5c}}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x62fa726fa47f7ed2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x4c085) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r10, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8045) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004800) 09:26:04 executing program 3: r0 = fork() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = mmap$binder(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x1, 0x11, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r2}, @register_looper], 0x5c, 0x0, &(0x7f00000000c0)="288bbdafda620da7b222b814871d501379cfe149ba3499e9814b026ac3954e6b02bc4e467ab0310cd3c196ad507c03eba3d39bd65e879629362cc0f1740fa8b7782d1ae72ff242064b0bdabe16fa815258b62afaeda726e5608e5f77"}) recvmsg$unix(r1, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/224, 0xe0}, {&(0x7f0000001280)=""/151, 0x97}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/57, 0x39}], 0x7, &(0x7f0000004400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x400001c1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) r10 = getpgid(r6) setpriority(0x0, r10, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000004500)={{0x1, 0x1, 0x18, r9, {0x7f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f0000004540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) socket$packet(0x11, 0x6, 0x300) fcntl$getownex(r4, 0x10, &(0x7f0000004580)) r12 = fork() getpgrp(r12) fcntl$getownex(r3, 0x10, &(0x7f00000045c0)={0x0, 0x0}) ptrace$cont(0x1f, r10, 0x0, 0x2) sched_getscheduler(r13) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000004700)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3b1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c004}, 0x80080) [ 111.195464] audit: type=1400 audit(1748165164.570:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:26:04 executing program 4: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, 0x0, 0x419, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000084}, 0x4008890) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x850) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xbf}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4084) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x24000081) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5b}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x5f341d0f0e291972}, 0xd0) 09:26:04 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff47}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x274ec50e}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000845) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/234, 0xea}], 0x1, &(0x7f00000003c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x158}, 0x10002) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x73}}, './file0\x00'}) prctl$PR_MCE_KILL_GET(0x22) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7, {0x7ff}}, './file0\x00'}) r17 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r3) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r17, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x44}}, 0x8014) mmap$binder(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x11, r2, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) prctl$PR_MCE_KILL_GET(0x22) r18 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff) mount_setattr(r12, &(0x7f0000000900)='./file0\x00', 0x8800, &(0x7f0000000940)={0x1, 0x1, 0x180000, {r10}}, 0x20) r19 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r19, &(0x7f0000000980)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5, {r15, r16}}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r20, 0x0, 0x2, &(0x7f0000000a00)=0x1, 0x4) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r18, 0x11, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r8, {r21, r22}}, './file0\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r14, 0x0, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 09:26:04 executing program 6: init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)='\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2240, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee00, r3}}, './file0\x00'}) ioctl$RTC_AIE_ON(r0, 0x7001) getgid() ptrace$setregs(0xd, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="699e67bfce12f8ac46a85d96a0ee4c0e65e25a0872f4faa6d51e85506e7e815fd74a916562c077b8cb8a3c3b999b52683994a7763f16c2b3c7015081dcfcf1de1f0255e3881fdd393deb057e1f89c70f950f886c906541138b1b9b35de62c8e253045fe9845e904c869e072ed9108c40f14992806c984723c191050f965f1e200797ad4400335542712efe09497a46524b0f6a0cffe2bc219c7155b0cc6cdf8c46c9cc645d3ce879744643c3fb0efd8325d8f18a7450bf6fdad8d7cebc7d0f194c7d10623dfad6") setregid(r5, r3) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000240), 0x1000, 0x1) ioctl$RTC_VL_CLR(r7, 0x7014) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/1, 0x1}, {&(0x7f0000001400)=""/71, 0x47}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x5, &(0x7f0000002500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000002580)='./file0\x00', 0x800, &(0x7f0000002600)={0x70, 0x4, 0x40000, {r8}}, 0x20) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000002640)) recvmsg$unix(r2, &(0x7f0000002900)={&(0x7f0000002680), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002700)=""/26, 0x1a}, {&(0x7f0000002740)=""/8, 0x8}, {&(0x7f0000002780)=""/118, 0x76}], 0x3, &(0x7f0000002840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2022) setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f0000002940), 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f0000002980)={{0x1, 0x1, 0x18, r10, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002a40)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:26:04 executing program 7: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfa}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x59}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048880}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x830}, 0x24000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x40000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x14}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044014}, 0x891) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b40), r1) sched_yield() r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8090) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) [ 112.433311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.435211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.438518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.442125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.444370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.501381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.504251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.512950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.524032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.528003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.626608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.630078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.636930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.652301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.662245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.701927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.705777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.706999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.711236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.712887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.756422] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.765929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.768708] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.783987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.792408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.793509] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.833184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.838370] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.844525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.853298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.870066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.886110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.896458] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.902928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.904381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.947636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.950934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.951959] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.954417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.991942] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.466191] Bluetooth: hci0: command tx timeout [ 114.594629] Bluetooth: hci1: command tx timeout [ 114.721664] Bluetooth: hci3: command tx timeout [ 114.722431] Bluetooth: hci2: command tx timeout [ 114.913680] Bluetooth: hci5: command tx timeout [ 114.977895] Bluetooth: hci4: command tx timeout [ 115.041560] Bluetooth: hci6: command tx timeout [ 115.105802] Bluetooth: hci7: command tx timeout [ 116.514259] Bluetooth: hci0: command tx timeout [ 116.641763] Bluetooth: hci1: command tx timeout [ 116.770363] Bluetooth: hci2: command tx timeout [ 116.770889] Bluetooth: hci3: command tx timeout [ 116.961632] Bluetooth: hci5: command tx timeout [ 117.025580] Bluetooth: hci4: command tx timeout [ 117.089572] Bluetooth: hci6: command tx timeout [ 117.153557] Bluetooth: hci7: command tx timeout [ 118.561717] Bluetooth: hci0: command tx timeout [ 118.689847] Bluetooth: hci1: command tx timeout [ 118.817607] Bluetooth: hci2: command tx timeout [ 118.818088] Bluetooth: hci3: command tx timeout [ 119.010553] Bluetooth: hci5: command tx timeout [ 119.073587] Bluetooth: hci4: command tx timeout [ 119.138220] Bluetooth: hci6: command tx timeout [ 119.201660] Bluetooth: hci7: command tx timeout [ 120.610848] Bluetooth: hci0: command tx timeout [ 120.737578] Bluetooth: hci1: command tx timeout [ 120.865763] Bluetooth: hci2: command tx timeout [ 120.866252] Bluetooth: hci3: command tx timeout [ 121.057842] Bluetooth: hci5: command tx timeout [ 121.121546] Bluetooth: hci4: command tx timeout [ 121.185814] Bluetooth: hci6: command tx timeout [ 121.249591] Bluetooth: hci7: command tx timeout [ 174.837068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.840855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.845729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.856945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.861990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.898297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.901425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.907279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.911138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.914242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.077129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.090569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.092716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.099261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.104610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.241520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.247092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.249074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.266223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.283301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.284594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.286116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.298402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.343321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.347885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.357999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.366657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.367546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.393949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.394907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.407066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.423563] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.446279] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.491428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.492351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.494319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.504745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.531285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.555055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.560840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.929669] Bluetooth: hci0: command tx timeout [ 176.994617] Bluetooth: hci1: command tx timeout [ 177.185631] Bluetooth: hci2: command tx timeout [ 177.378137] Bluetooth: hci3: command tx timeout [ 177.441677] Bluetooth: hci4: command tx timeout [ 177.635574] Bluetooth: hci6: command tx timeout [ 177.636350] Bluetooth: hci7: command tx timeout [ 177.697722] Bluetooth: hci5: command tx timeout [ 178.977677] Bluetooth: hci0: command tx timeout [ 179.041848] Bluetooth: hci1: command tx timeout [ 179.233837] Bluetooth: hci2: command tx timeout [ 179.425757] Bluetooth: hci3: command tx timeout [ 179.489883] Bluetooth: hci4: command tx timeout [ 179.681829] Bluetooth: hci6: command tx timeout [ 179.682306] Bluetooth: hci7: command tx timeout [ 179.745549] Bluetooth: hci5: command tx timeout [ 181.025648] Bluetooth: hci0: command tx timeout [ 181.089601] Bluetooth: hci1: command tx timeout [ 181.281729] Bluetooth: hci2: command tx timeout [ 181.473974] Bluetooth: hci3: command tx timeout [ 181.537606] Bluetooth: hci4: command tx timeout [ 181.731223] Bluetooth: hci6: command tx timeout [ 181.731935] Bluetooth: hci7: command tx timeout [ 181.794552] Bluetooth: hci5: command tx timeout [ 183.073714] Bluetooth: hci0: command tx timeout [ 183.137576] Bluetooth: hci1: command tx timeout [ 183.329578] Bluetooth: hci2: command tx timeout [ 183.522637] Bluetooth: hci3: command tx timeout [ 183.585600] Bluetooth: hci4: command tx timeout [ 183.777622] Bluetooth: hci7: command tx timeout [ 183.778116] Bluetooth: hci6: command tx timeout [ 183.841735] Bluetooth: hci5: command tx timeout [ 237.316160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.320649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.326794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.330261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.332512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.502322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.506425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.511800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.518134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.522124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.524164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.528338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.529817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.558942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.568619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.699375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.709273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.715165] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.716447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.717555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.721384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.724958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.726718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.738416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.745008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.748778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.750208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.751225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.757083] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.759293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.782773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.787433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.801125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.832866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.833788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.843329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.855915] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.856687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.940823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.965916] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.394116] Bluetooth: hci0: command tx timeout [ 239.585992] Bluetooth: hci2: command tx timeout [ 239.586144] Bluetooth: hci1: command tx timeout [ 239.841707] Bluetooth: hci3: command tx timeout [ 239.842848] Bluetooth: hci6: command tx timeout [ 239.906711] Bluetooth: hci4: command tx timeout [ 239.970617] Bluetooth: hci5: command tx timeout [ 240.033769] Bluetooth: hci7: command tx timeout [ 241.441777] Bluetooth: hci0: command tx timeout [ 241.633715] Bluetooth: hci2: command tx timeout [ 241.634616] Bluetooth: hci1: command tx timeout [ 241.891573] Bluetooth: hci3: command tx timeout [ 241.891594] Bluetooth: hci6: command tx timeout [ 241.953575] Bluetooth: hci4: command tx timeout [ 242.017841] Bluetooth: hci5: command tx timeout [ 242.083658] Bluetooth: hci7: command tx timeout [ 243.491512] Bluetooth: hci0: command tx timeout [ 243.681950] Bluetooth: hci1: command tx timeout [ 243.682318] Bluetooth: hci2: command tx timeout [ 243.937561] Bluetooth: hci3: command tx timeout [ 243.939500] Bluetooth: hci6: command tx timeout [ 244.003040] Bluetooth: hci4: command tx timeout [ 244.066744] Bluetooth: hci5: command tx timeout [ 244.129762] Bluetooth: hci7: command tx timeout [ 245.538545] Bluetooth: hci0: command tx timeout [ 245.729859] Bluetooth: hci2: command tx timeout [ 245.732720] Bluetooth: hci1: command tx timeout [ 245.986714] Bluetooth: hci6: command tx timeout [ 245.986751] Bluetooth: hci3: command tx timeout [ 246.050581] Bluetooth: hci4: command tx timeout [ 246.114584] Bluetooth: hci5: command tx timeout [ 246.178672] Bluetooth: hci7: command tx timeout [ 299.770588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.774889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.787442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.812150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.818115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.831145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.837398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.840724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.852797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.860365] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.913621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.922687] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.925852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.933712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.946403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.192056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.212391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.226271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.233276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.236772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.283261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.296985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.300955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.325160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.332105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.434575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.442964] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.448916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.464017] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.476370] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.583633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.646863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.659178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.664748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.672052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.674030] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.682115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.686946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.689309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.697172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.858654] Bluetooth: hci0: command tx timeout [ 301.921716] Bluetooth: hci1: command tx timeout [ 301.987969] Bluetooth: hci2: command tx timeout [ 302.306212] Bluetooth: hci3: command tx timeout [ 302.434196] Bluetooth: hci4: command tx timeout [ 302.561659] Bluetooth: hci5: command tx timeout [ 302.753575] Bluetooth: hci7: command tx timeout [ 302.818562] Bluetooth: hci6: command tx timeout [ 303.905599] Bluetooth: hci0: command tx timeout [ 303.969737] Bluetooth: hci1: command tx timeout [ 304.033805] Bluetooth: hci2: command tx timeout [ 304.355780] Bluetooth: hci3: command tx timeout [ 304.481577] Bluetooth: hci4: command tx timeout [ 304.609751] Bluetooth: hci5: command tx timeout [ 304.803353] Bluetooth: hci7: command tx timeout [ 304.865582] Bluetooth: hci6: command tx timeout [ 305.953567] Bluetooth: hci0: command tx timeout [ 306.017763] Bluetooth: hci1: command tx timeout [ 306.081765] Bluetooth: hci2: command tx timeout [ 306.401792] Bluetooth: hci3: command tx timeout [ 306.529864] Bluetooth: hci4: command tx timeout [ 306.657933] Bluetooth: hci5: command tx timeout [ 306.849770] Bluetooth: hci7: command tx timeout [ 306.914181] Bluetooth: hci6: command tx timeout [ 308.003505] Bluetooth: hci0: command tx timeout [ 308.065872] Bluetooth: hci1: command tx timeout [ 308.129544] Bluetooth: hci2: command tx timeout [ 308.449743] Bluetooth: hci3: command tx timeout [ 308.579326] Bluetooth: hci4: command tx timeout [ 308.706866] Bluetooth: hci5: command tx timeout [ 308.897790] Bluetooth: hci7: command tx timeout [ 308.961798] Bluetooth: hci6: command tx timeout [ 362.233139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.240099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.244191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.259530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.266909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.487362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.495933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.502302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.511858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.519120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.558815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.560838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.577005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.579784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.589225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.594174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.597741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.601009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.613240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.622782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.628144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.631023] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.632946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.635191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.642396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.646703] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.665788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.665826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.672044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.677436] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.687536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.735049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.739300] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.750952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.797321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.833245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.852087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.854848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.867980] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.898994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.322579] Bluetooth: hci0: command tx timeout [ 364.577717] Bluetooth: hci1: command tx timeout [ 364.705933] Bluetooth: hci2: command tx timeout [ 364.769879] Bluetooth: hci3: command tx timeout [ 364.771734] Bluetooth: hci6: command tx timeout [ 364.833698] Bluetooth: hci5: command tx timeout [ 364.834259] Bluetooth: hci4: command tx timeout [ 364.963258] Bluetooth: hci7: command tx timeout [ 366.369591] Bluetooth: hci0: command tx timeout [ 366.626525] Bluetooth: hci1: command tx timeout [ 366.753599] Bluetooth: hci2: command tx timeout [ 366.818709] Bluetooth: hci3: command tx timeout [ 366.819208] Bluetooth: hci6: command tx timeout [ 366.882618] Bluetooth: hci5: command tx timeout [ 366.883091] Bluetooth: hci4: command tx timeout [ 367.011508] Bluetooth: hci7: command tx timeout [ 368.418750] Bluetooth: hci0: command tx timeout [ 368.674569] Bluetooth: hci1: command tx timeout [ 368.802605] Bluetooth: hci2: command tx timeout [ 368.865619] Bluetooth: hci6: command tx timeout [ 368.866084] Bluetooth: hci3: command tx timeout [ 368.930697] Bluetooth: hci4: command tx timeout [ 368.931170] Bluetooth: hci5: command tx timeout [ 369.058803] Bluetooth: hci7: command tx timeout [ 370.465701] Bluetooth: hci0: command tx timeout [ 370.722964] Bluetooth: hci1: command tx timeout [ 370.849718] Bluetooth: hci2: command tx timeout [ 370.913574] Bluetooth: hci3: command tx timeout [ 370.914020] Bluetooth: hci6: command tx timeout [ 370.977606] Bluetooth: hci5: command tx timeout [ 370.978053] Bluetooth: hci4: command tx timeout [ 371.105605] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:31:14 Registers: info registers vcpu 0 RAX=ffff888033bfaa50 RBX=ffff88800c121880 RCX=ffff888033bfe100 RDX=ffff88800dc413e8 RSI=ffff888033bfe000 RDI=0000000000000000 RBP=ffff8880340bc818 RSP=ffff88801e3675f0 R8 =0000000000000000 R9 =ffffed1003c6ceaf R10=0000000000000003 R11=0000000000000001 R12=ffff888033bfe000 R13=0000000000000100 R14=0000000000000001 R15=0000000000000286 RIP=ffffffff81b22261 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0c08b9e008 CR3=000000000deff000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880168ca628 RBX=ffff888024507c10 RCX=ffff88806cf089cc RDX=0000000000000003 RSI=ffffffff85c1d1c0 RDI=ffff8880168ca628 RBP=ffffffff85c1d1c0 RSP=ffff88806cf089a8 R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b67d R11=00000000000233f7 R12=ffffffff81353f32 R13=ffff88806cf089cc R14=0000000000000003 R15=0000000000000003 RIP=ffffffff81513f45 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff81fb671f0 CR3=0000000024742000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=001b016c6c6f502e726567616e614d0c XMM02=650d086e65672063657865080a010001 XMM03=78650a00657a696d696e696d20636578 XMM04=6820636578650a006873616d73206365 XMM05=7220726f747563657865110073746e69 XMM06=75662063657865090873747261747365 XMM07=616469646e616320636578650e007a7a XMM08=6d696e696d20636578650d086e656720 XMM09=006873616d7320636578650a00657a69 XMM10=657865110073746e696820636578650a XMM11=0908737472617473657220726f747563 XMM12=20636578650e007a7a75662063657865 XMM13=20636578650b006574616469646e6163 XMM14=65657320636578650a00656761697274 XMM15=00086c61746f7420636578650a007364