Warning: Permanently added '[localhost]:15752' (ECDSA) to the list of known hosts. 2025/05/28 00:34:35 fuzzer started 2025/05/28 00:34:35 dialing manager at localhost:36005 syzkaller login: [ 84.324710] cgroup: Unknown subsys name 'net' [ 84.452247] cgroup: Unknown subsys name 'cpuset' [ 84.499534] cgroup: Unknown subsys name 'rlimit' 2025/05/28 00:34:51 syscalls: 201 2025/05/28 00:34:51 code coverage: enabled 2025/05/28 00:34:51 comparison tracing: enabled 2025/05/28 00:34:51 extra coverage: enabled 2025/05/28 00:34:51 setuid sandbox: enabled 2025/05/28 00:34:51 namespace sandbox: enabled 2025/05/28 00:34:51 Android sandbox: enabled 2025/05/28 00:34:51 fault injection: enabled 2025/05/28 00:34:51 leak checking: enabled 2025/05/28 00:34:51 net packet injection: enabled 2025/05/28 00:34:51 net device setup: enabled 2025/05/28 00:34:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 00:34:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 00:34:51 USB emulation: enabled 2025/05/28 00:34:51 hci packet injection: enabled 2025/05/28 00:34:51 wifi device emulation: enabled 2025/05/28 00:34:51 802.15.4 emulation: enabled 2025/05/28 00:34:51 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 00:34:53 starting 8 fuzzer processes 00:34:53 executing program 1: waitid(0x0, 0x0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) r1 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) syz_open_dev$loop(&(0x7f0000000380), 0x53ac, 0x6300c3) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f00000003c0)=""/69) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) setfsgid(r1) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)=[0x987b, 0x18, 0x1a, 0x8, 0x7fff, 0x9, 0x20, 0x800, 0x5, 0xffff]) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) setfsgid(r2) socket$inet_udp(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000700)={&(0x7f0000000640)="77c295b914284b5b9e5cab78bb0f76c1dda5c52b938328e8fdb82d656538ae0054f1ad3b960d189cd50806a4d23530c44c0604f1123f2e3c3d0673f42bbb251b8cbf41002fc403f9b0d10daa6318a6f8f0409b954feebb00a528f50a2061581bece3bccc1e41b9fef236839be75f78245ea5382645e81ecdd967165192a386a33f2d74c228210ceacb43366fd12fafee78f033d8e3ea3fbb51b60ec46a2bb43e84f0f209", 0xa4}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000780)={0x8, &(0x7f0000000740)=[{0x9, 0x1, 0x9, 0x101}, {0x7, 0x81, 0x3f, 0x2}, {0x0, 0x0, 0x1}, {0x33b, 0x5, 0x0, 0x6c0}, {0x4, 0x0, 0x29, 0x2}, {0x6, 0x0, 0x5, 0xfffffff3}, {0x6f, 0x80, 0x4b, 0x40}, {0xdc, 0x5, 0x1, 0x3}]}) 00:34:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040084}, 0x4040800) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0\x00'}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) socketpair(0x22, 0x6, 0x8ea, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x618, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x18}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x86c}]}, 0x38}, 0x1, 0x0, 0x0, 0x40055}, 0x1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x36}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x1f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x3c}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0b4}, 0x4000054) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x1) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x4000010) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r11, 0x404, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1bd}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x614}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x3c}}, 0x8084) getgid() r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r12, 0x2, 0x5, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7cb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000020}, 0x20040800) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r11, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) 00:34:53 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040805}, 0x4000800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xaf}]}, 0x54}, 0x1, 0x0, 0x0, 0x44010}, 0xc8d0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004012) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000980), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r9, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2d8d8744600a5085}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}}, 0x0) 00:34:53 executing program 3: prctl$PR_SET_FP_MODE(0x2d, 0x1) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x4881) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x28}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x99e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x200}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}]}]}, 0x8c}}, 0x20008000) munlockall() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r1) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x23}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c851}, 0x20000000) semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000640)=""/74) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, r5, 0x400, 0x70bd25, 0x8001, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8d}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}]}, 0x74}}, 0x11) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4f6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 102.283416] audit: type=1400 audit(1748392493.748:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:34:53 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x58}}, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x2040) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r9, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000085) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa081}, 0x4045) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r8, 0x802, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan0\x00'}) 00:34:53 executing program 5: r0 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, r0}}, './file0\x00'}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0x4, 0xe2, 0x0, &(0x7f0000000040)}) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) setfsgid(r3) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000001c0)) getegid() getuid() getgroups(0x7, &(0x7f0000000200)=[r3, r3, r4, r4, r2, r0, 0xee01]) setfsgid(r5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x412040, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000340)) r6 = syz_open_dev$loop(&(0x7f0000000380), 0x8, 0x2200) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f00000003c0)={0x7, 0x250b8ce1}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000400)={0x7fff, 0x9b38, 0x1}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000500)={0x7, 0x3f, 0xbe, &(0x7f0000000440)="ce2968fb43a3e2b4cdb18cc05d89579cff73f92dbb635003154f3391d1ec12b4eae5e56a8fb014f5777c1260e25e0755acfff4667ea1969c4675b16412ec69876c7ee4f3610c991074388ce08b94f3ad5b653174efa02828a5111b8c3d3172c11bc823ef90e8d38f869b6192bf59e993c79415a2e660365acb9da20ccfa0c80e37571171ed25b7c0e8e0e28b6384dc079d953b4f8026f5b214d0ed3d48229493af4d85821d9c81ea1d276c42b9d78d2d7571a1cce227e5e6c21daa61ea33"}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000540)) 00:34:53 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r0, &(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) r3 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='&\'!\x00', 0x0) keyctl$link(0x8, r2, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4054}, 0x20000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x4001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r7 = getpid() ptrace$setopts(0x4200, r7, 0x100000000, 0x10) r8 = getpid() sched_getparam(r8, &(0x7f0000000600)) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000640)={r1, 0xd4, 0x44}, &(0x7f0000000680)={'enc=', 'pkcs1', ' hash=', {'cbcmac-aes-ce\x00'}}, &(0x7f0000000700)="cbbb70e59283075fb5a25b4cae6026f97d4eaf4374941ccc8ca9a1b8fe9c63e4e68b0e1c4027304a9f79772ad41dd64ee9366a810bd67001d3bb5d6369efba150cf00f038dbc74fd3ffc79ca31034b85f4949065e2d4e2fb58c821c67f83689f6d81bba1cc6cba171676862a381bc2b9808bc498e3fe4904a4393f6852ab399d17072c87cd837e3ed2c8a723af2c384306bfde5145b6a1bae3d0137d5a062a95333fc99545ce73dcf72c1dad1b3f6534b8ebc95e52200fe2654bb6bcd58077c46faa61e6a3a775ff99188a135365f7f0f50b32dd", &(0x7f0000000800)=""/68) r9 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, r9) 00:34:53 executing program 7: semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000000)=""/4096) rt_sigaction(0x39, &(0x7f00000010c0)={&(0x7f0000001000)="c4827946844733a70426c4837d7c050a000000fac4e17dfb210fc72500080000f243aa3e26f2446c36420fd7e4c4a279780502000000c4617df6e0c463014ae91b", 0x40000000, &(0x7f0000001080)="c423d5487a720a66420fdf950200000045df4760432500000000f045314639c4814ddf9bf4640000c401ff2cf6c441ff10a200000080c46165ee16c4617dd7ca", {[0x80000001]}}, &(0x7f0000001180)={&(0x7f0000001100)="c461fe6f98dbfdadafc403a14125000080206b660f1babab090000660f617d0df2ac8c4300f209e6c481f5d2dcc4a17c584101c462192e0a", 0x0, &(0x7f0000001140)="66420f58a500000000f2e39246dbdec4e14559af00000000363ef30fe609c462b1457c8107c422b99c4c7597c4017f2d7a00ca550ec4216d67245e"}, 0x8, &(0x7f00000011c0)) r0 = semget(0x2, 0x4, 0x400) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001200)=""/61) rt_sigaction(0x3f, &(0x7f0000001300)={&(0x7f0000001240)="440f034c5100f0f752aa3e653e420fefa23223333326660fc2b80000000051c421f9287a46400f0fa60e0000009e660f3a0993c60000002b66410f3830f7c442d8f5f8c462f9179420c6000000", 0x9c000000, &(0x7f00000012c0)="42281bf2f3450f9bef6464f24c0fc78907000000470f967032c4e201aec2334e09c4627d30a90802b956c441d45d7e08c423516ec3f8c4a30978cf0b", {[0x1]}}, &(0x7f0000001400)={&(0x7f0000001340)="0fe404b5087c0000430f15be000000002665654180f9006566460f113fc40279185736f236363e45d144cc29672e450f01c1c4a20d287a0026430f38cce7440f2ab866580000", 0x0, &(0x7f00000013c0)="c463fbf00b00f080b3000000002dc443cd5e65000c8f487887fa0036d02bc4436d02580000420f0f370cc4c27d13b42b0bba41c6c4e2f0f752e10f18dd"}, 0x8, &(0x7f0000001440)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001480)={0x0, 0x86, 0xe6}, &(0x7f00000014c0)={'enc=', 'pkcs1', ' hash=', {'sha1-ni\x00'}}, &(0x7f0000001540)="56de043267fe76853de7ec12a1c7c26ffc268d896b9bc8575e1040338f0b91b6a9debd260de525badb0d64dcb8f42d068d4e6005c793f500346116ccc47c743819127d10bd1033f55f0ba26eb03ecbc3bbcc932c0218591713c2e48d86a072d3737700ab99fdc6628690ca6dc829a8880bc68fcd24887ac6c9278546ab18ab75de4fd2571c1a", &(0x7f0000001600)=""/230) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000001740), &(0x7f0000001780)=0x10) r3 = syz_io_uring_setup(0x540b, &(0x7f00000017c0)={0x0, 0x3604, 0x8, 0x3, 0x3b5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001840), &(0x7f0000001880)) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f00000018c0)=""/96) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000001940)=""/137) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) r5 = semget$private(0x0, 0x4, 0x440) semctl$GETVAL(r5, 0x4, 0xc, &(0x7f0000001a80)=""/59) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) socketpair(0x28, 0x7, 0x2, &(0x7f0000001b40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x9c, 0x0, 0x1, 0x718f, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r3, {0x0, r8}}, './file0\x00'}) [ 103.673092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.677731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.681500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.690775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.696288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.738098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.747679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.749926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.752134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.753695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.758837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.772777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.784688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.791731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.802776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.823293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.832505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.856721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.869624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.881402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.891035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.895195] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.899397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.920985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.949627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.954443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.954659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.958651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.967668] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.972759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.013599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.019697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.067649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.072874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.077751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.081120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.084922] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.087880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.117046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.141689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.749009] Bluetooth: hci0: command tx timeout [ 105.876368] Bluetooth: hci2: command tx timeout [ 105.876388] Bluetooth: hci1: command tx timeout [ 106.004297] Bluetooth: hci3: command tx timeout [ 106.069031] Bluetooth: hci5: command tx timeout [ 106.069136] Bluetooth: hci4: command tx timeout [ 106.196329] Bluetooth: hci7: command tx timeout [ 106.196371] Bluetooth: hci6: command tx timeout [ 107.797498] Bluetooth: hci0: command tx timeout [ 107.924808] Bluetooth: hci1: command tx timeout [ 107.926059] Bluetooth: hci2: command tx timeout [ 108.052360] Bluetooth: hci3: command tx timeout [ 108.118251] Bluetooth: hci4: command tx timeout [ 108.118290] Bluetooth: hci5: command tx timeout [ 108.244433] Bluetooth: hci6: command tx timeout [ 108.244895] Bluetooth: hci7: command tx timeout [ 109.844379] Bluetooth: hci0: command tx timeout [ 109.972591] Bluetooth: hci1: command tx timeout [ 109.973631] Bluetooth: hci2: command tx timeout [ 110.101235] Bluetooth: hci3: command tx timeout [ 110.164337] Bluetooth: hci5: command tx timeout [ 110.164569] Bluetooth: hci4: command tx timeout [ 110.292241] Bluetooth: hci7: command tx timeout [ 110.293261] Bluetooth: hci6: command tx timeout [ 111.892246] Bluetooth: hci0: command tx timeout [ 112.020260] Bluetooth: hci2: command tx timeout [ 112.020291] Bluetooth: hci1: command tx timeout [ 112.148381] Bluetooth: hci3: command tx timeout [ 112.212760] Bluetooth: hci5: command tx timeout [ 112.212841] Bluetooth: hci4: command tx timeout [ 112.340433] Bluetooth: hci6: command tx timeout [ 112.340886] Bluetooth: hci7: command tx timeout [ 163.534103] syz-executor.1 (281) used greatest stack depth: 25056 bytes left [ 163.668049] syz-executor.0 (287) used greatest stack depth: 24736 bytes left [ 163.876671] syz-executor.4 (285) used greatest stack depth: 24704 bytes left [ 166.114943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.118924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.124538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.134715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.139551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.243248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.246110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.248707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.249845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.254662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.256324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.264954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.267361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.280854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.289265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.322141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.330998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.336533] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.339088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.353829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.358414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.377897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.392584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.401433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.403309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.484402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.498875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.502599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.511558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.523932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.553911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.556607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.564584] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.582499] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.589749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.627394] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.636038] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.640777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.670033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.674473] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.212554] Bluetooth: hci0: command tx timeout [ 168.340270] Bluetooth: hci2: command tx timeout [ 168.469233] Bluetooth: hci1: command tx timeout [ 168.532474] Bluetooth: hci4: command tx timeout [ 168.532501] Bluetooth: hci3: command tx timeout [ 168.596269] Bluetooth: hci5: command tx timeout [ 168.724295] Bluetooth: hci6: command tx timeout [ 168.788539] Bluetooth: hci7: command tx timeout [ 170.260262] Bluetooth: hci0: command tx timeout [ 170.389236] Bluetooth: hci2: command tx timeout [ 170.516699] Bluetooth: hci1: command tx timeout [ 170.580567] Bluetooth: hci4: command tx timeout [ 170.580685] Bluetooth: hci3: command tx timeout [ 170.645199] Bluetooth: hci5: command tx timeout [ 170.772481] Bluetooth: hci6: command tx timeout [ 170.836303] Bluetooth: hci7: command tx timeout [ 172.309650] Bluetooth: hci0: command tx timeout [ 172.437234] Bluetooth: hci2: command tx timeout [ 172.564496] Bluetooth: hci1: command tx timeout [ 172.629293] Bluetooth: hci3: command tx timeout [ 172.629507] Bluetooth: hci4: command tx timeout [ 172.692390] Bluetooth: hci5: command tx timeout [ 172.821482] Bluetooth: hci6: command tx timeout [ 172.884446] Bluetooth: hci7: command tx timeout [ 174.358208] Bluetooth: hci0: command tx timeout [ 174.484242] Bluetooth: hci2: command tx timeout [ 174.613583] Bluetooth: hci1: command tx timeout [ 174.676227] Bluetooth: hci4: command tx timeout [ 174.677493] Bluetooth: hci3: command tx timeout [ 174.740241] Bluetooth: hci5: command tx timeout [ 174.868252] Bluetooth: hci6: command tx timeout [ 174.933277] Bluetooth: hci7: command tx timeout [ 228.453002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.457462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.463060] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.468463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.475077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.499222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.504469] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.516766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.534634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.539840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.544444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.546574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.548057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.561560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.566845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.660581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.665067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.667232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.685429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.695888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.770420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.781942] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.788652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.794627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.796970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.801428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.802996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.805648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.808855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.816740] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.821917] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.827585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.832891] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.838200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.840137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.849647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.858429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.875211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.917096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.924587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.548287] Bluetooth: hci0: command tx timeout [ 230.612659] Bluetooth: hci2: command tx timeout [ 230.612688] Bluetooth: hci1: command tx timeout [ 230.740781] Bluetooth: hci3: command tx timeout [ 230.932313] Bluetooth: hci6: command tx timeout [ 230.932621] Bluetooth: hci7: command tx timeout [ 230.934558] Bluetooth: hci5: command tx timeout [ 230.997209] Bluetooth: hci4: command tx timeout [ 232.596476] Bluetooth: hci0: command tx timeout [ 232.660539] Bluetooth: hci1: command tx timeout [ 232.661061] Bluetooth: hci2: command tx timeout [ 232.788210] Bluetooth: hci3: command tx timeout [ 232.981446] Bluetooth: hci6: command tx timeout [ 232.981734] Bluetooth: hci5: command tx timeout [ 232.981904] Bluetooth: hci7: command tx timeout [ 233.044392] Bluetooth: hci4: command tx timeout [ 234.644212] Bluetooth: hci0: command tx timeout [ 234.708363] Bluetooth: hci1: command tx timeout [ 234.709377] Bluetooth: hci2: command tx timeout [ 234.836433] Bluetooth: hci3: command tx timeout [ 235.028381] Bluetooth: hci7: command tx timeout [ 235.028862] Bluetooth: hci6: command tx timeout [ 235.029402] Bluetooth: hci5: command tx timeout [ 235.092675] Bluetooth: hci4: command tx timeout [ 236.693494] Bluetooth: hci0: command tx timeout [ 236.757382] Bluetooth: hci2: command tx timeout [ 236.757815] Bluetooth: hci1: command tx timeout [ 236.885215] Bluetooth: hci3: command tx timeout [ 237.078180] Bluetooth: hci5: command tx timeout [ 237.078619] Bluetooth: hci6: command tx timeout [ 237.079045] Bluetooth: hci7: command tx timeout [ 237.141238] Bluetooth: hci4: command tx timeout [ 291.562132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.569295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.575022] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.584774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.590853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.641726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.648469] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.650499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.660682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.664732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.686928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.695734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.699822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.710766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.716702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.895396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.909364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.936712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.946892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.953972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.959102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.966782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.972691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.983427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.989666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.077005] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.090051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.106761] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.108529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.117718] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.124921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.128871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.138063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.151720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.165914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.166385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.172400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.173904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.195090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.226914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 293.653247] Bluetooth: hci0: command tx timeout [ 293.716242] Bluetooth: hci1: command tx timeout [ 293.781306] Bluetooth: hci2: command tx timeout [ 294.036318] Bluetooth: hci3: command tx timeout [ 294.102216] Bluetooth: hci4: command tx timeout [ 294.292546] Bluetooth: hci5: command tx timeout [ 294.293592] Bluetooth: hci6: command tx timeout [ 294.359200] Bluetooth: hci7: command tx timeout [ 295.700318] Bluetooth: hci0: command tx timeout [ 295.765435] Bluetooth: hci1: command tx timeout [ 295.828391] Bluetooth: hci2: command tx timeout [ 296.085585] Bluetooth: hci3: command tx timeout [ 296.151256] Bluetooth: hci4: command tx timeout [ 296.340476] Bluetooth: hci6: command tx timeout [ 296.342294] Bluetooth: hci5: command tx timeout [ 296.404234] Bluetooth: hci7: command tx timeout [ 297.748954] Bluetooth: hci0: command tx timeout [ 297.814174] Bluetooth: hci1: command tx timeout [ 297.878180] Bluetooth: hci2: command tx timeout [ 298.133430] Bluetooth: hci3: command tx timeout [ 298.196427] Bluetooth: hci4: command tx timeout [ 298.388233] Bluetooth: hci5: command tx timeout [ 298.389218] Bluetooth: hci6: command tx timeout [ 298.452495] Bluetooth: hci7: command tx timeout [ 299.797198] Bluetooth: hci0: command tx timeout [ 299.860226] Bluetooth: hci1: command tx timeout [ 299.925204] Bluetooth: hci2: command tx timeout [ 300.181455] Bluetooth: hci3: command tx timeout [ 300.245484] Bluetooth: hci4: command tx timeout [ 300.437257] Bluetooth: hci6: command tx timeout [ 300.437734] Bluetooth: hci5: command tx timeout [ 300.501208] Bluetooth: hci7: command tx timeout [ 354.022867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.026018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.030791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.040914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.045757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.283182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.287811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.292994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.303596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.309534] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.362581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.371079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.379390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.404125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.413983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.467490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.478297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.481733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.487790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.491021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.501118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.505603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.512784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.515287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.526955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.531563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.562701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.580809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.580840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.621503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.649602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.667686] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.703992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.706614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.712497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.716242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.718069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.727436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.766451] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.783821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.116470] Bluetooth: hci0: command tx timeout [ 356.372549] Bluetooth: hci1: command tx timeout [ 356.500328] Bluetooth: hci2: command tx timeout [ 356.629382] Bluetooth: hci5: command tx timeout [ 356.692285] Bluetooth: hci4: command tx timeout [ 356.821238] Bluetooth: hci3: command tx timeout [ 356.885268] Bluetooth: hci6: command tx timeout [ 356.948246] Bluetooth: hci7: command tx timeout [ 358.164352] Bluetooth: hci0: command tx timeout [ 358.420220] Bluetooth: hci1: command tx timeout [ 358.549443] Bluetooth: hci2: command tx timeout [ 358.676368] Bluetooth: hci5: command tx timeout [ 358.740473] Bluetooth: hci4: command tx timeout [ 358.868243] Bluetooth: hci3: command tx timeout [ 358.932542] Bluetooth: hci6: command tx timeout [ 358.997187] Bluetooth: hci7: command tx timeout [ 360.212230] Bluetooth: hci0: command tx timeout [ 360.468265] Bluetooth: hci1: command tx timeout [ 360.596224] Bluetooth: hci2: command tx timeout [ 360.725130] Bluetooth: hci5: command tx timeout [ 360.788227] Bluetooth: hci4: command tx timeout [ 360.916226] Bluetooth: hci3: command tx timeout [ 360.980226] Bluetooth: hci6: command tx timeout [ 361.044398] Bluetooth: hci7: command tx timeout [ 362.261181] Bluetooth: hci0: command tx timeout [ 362.518202] Bluetooth: hci1: command tx timeout [ 362.644299] Bluetooth: hci2: command tx timeout [ 362.772803] Bluetooth: hci5: command tx timeout [ 362.836630] Bluetooth: hci4: command tx timeout [ 362.965223] Bluetooth: hci3: command tx timeout [ 363.028437] Bluetooth: hci6: command tx timeout [ 363.092581] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:39:54 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=0000000000000001 RCX=ffff8880177175cc RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff88801689bafc RBP=ffff88801689b700 RSP=ffff8880177175d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88801689b700 R13=0000000000000000 R14=ffffffff85c753a8 R15=0000000000000dc0 RIP=ffffffff815bae3b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2bf96d2540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055645d8764c8 CR3=000000002cff5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888027fe77a0 RCX=ffffffff82269de4 RDX=ffff888009750000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff888027fe7718 R8 =0000000000000000 R9 =ffff888027fe77a0 R10=0000000000000002 R11=0000000000000001 R12=000000000000000a R13=0000000000000002 R14=0000000000000005 R15=0000000000000001 RIP=ffffffff817383a6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0f0f441540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f0f5dc4a1 CR3=0000000031710000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000