Warning: Permanently added '[localhost]:65000' (ECDSA) to the list of known hosts. 2025/06/11 22:50:54 fuzzer started 2025/06/11 22:50:54 dialing manager at localhost:45945 syzkaller login: [ 102.336409] cgroup: Unknown subsys name 'net' [ 102.496917] cgroup: Unknown subsys name 'cpuset' [ 102.549331] cgroup: Unknown subsys name 'rlimit' 2025/06/11 22:51:17 syscalls: 203 2025/06/11 22:51:17 code coverage: enabled 2025/06/11 22:51:17 comparison tracing: enabled 2025/06/11 22:51:17 extra coverage: enabled 2025/06/11 22:51:17 setuid sandbox: enabled 2025/06/11 22:51:17 namespace sandbox: enabled 2025/06/11 22:51:17 Android sandbox: enabled 2025/06/11 22:51:17 fault injection: enabled 2025/06/11 22:51:17 leak checking: enabled 2025/06/11 22:51:17 net packet injection: enabled 2025/06/11 22:51:17 net device setup: enabled 2025/06/11 22:51:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 22:51:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 22:51:17 USB emulation: enabled 2025/06/11 22:51:17 hci packet injection: enabled 2025/06/11 22:51:17 wifi device emulation: enabled 2025/06/11 22:51:17 802.15.4 emulation: enabled 2025/06/11 22:51:17 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 22:51:19 starting 8 fuzzer processes 22:51:19 executing program 0: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/25, 0x19}], 0x2, &(0x7f0000000300)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)={0xcd, 0x2, 0x2, "7a81dc5779c087403db519b0711e403facbe6b0efddc60a125b330f28c23754acc646d00f1c58b0bcf43240d0d3a6e31d8ecb75522c7ef87b04d993b347df5c052debb6a344a7789f53a8ae0179574f51106c203d0b61a7ba0d7d106466e77edc5cdd109235e8fc84bb90112f4d066d6bbbdb0b92c230b7ac76e88a19c6b736ba895ba263058997d4a6b533f52c6c6a3d8d37dc97aadaf66c2a274f057eb62adca401cd871a6a9c78122e57ba156d21107a244941ed9a0360812457cf14b52789316420d7138a948adc2066138"}) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f00000004c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000500)={0x1000, ""/4096}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000001540)) r6 = memfd_secret(0x80000) statx(r6, &(0x7f0000001580)='./file0\x00', 0x400, 0x80, &(0x7f00000015c0)) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000016c0)=[0x875a, 0x10001]) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000001700)=0x16) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001740)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x3) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001780)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x1) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f00000017c0)) 22:51:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x1000, 0x10000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)={0xf3, 0x3c8c, 0x7ff, "57a701d0cb076229560d64a3e0f062bdc782644e7ce3d7cb608937762899f60e163e098ec543c4fb0cda94ae606e086d485b47eea4de26b3e00bc16a6948578117a741eeccf88b55576d159c438d3e0d9b6db5687e8bd20218cdd27ee96df06e24c13f2b26545f4cf6a88a201dd188990b9dae59ff4c35d4e928a554646fd065f127fb7a7185dcd8709ac66f48878c3ed9890805b616a790678264668abe87e7bac0a558d7f10a4a577ad09d1f8f909aa80bd9dab030a1cf0bc054c65b9d752430ddb4bf31740b6bcaddc8384ee2b95d2f8efd3c54f7f6d86439f98374a2af442a320b617f3daf37e5d22bcc383a2f87858bc6"}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000600)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000640)) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000680)) r1 = memfd_secret(0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000006c0)) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000700)) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x10001, 0x24040) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f00000007c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000800)) r4 = memfd_secret(0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000840)) r5 = memfd_secret(0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f00000009c0)=0x9) 22:51:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xad68, 0x4000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x9, 0x5, 0x7, 0x40, 0x79, 0x9}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xff, 0x513880) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x8, 0x3f]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/159, 0x9f}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x140) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000380)=[0x9, 0x3]) r7 = syz_open_dev$evdev(&(0x7f00000003c0), 0x31a, 0x408000) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000000400)=""/6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x2, 0x0) r9 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x20000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001640)={0x7c, 0x0, &(0x7f00000005c0)=[@acquire, @free_buffer={0x40086303, r9}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r10}, @flat=@weak_handle={0x77682a85, 0x317110dd47e164bc, 0x3}, @fda={0x66646185, 0x7, 0x1, 0x33}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}}, @acquire, @acquire_done], 0x1000, 0x0, &(0x7f0000000640)="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"}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000001740)={0x0, 0x91, &(0x7f0000001680)="36a40a9e6ac587ab693e0ed036045f31b31ead45b3281d17a7e464db05f1dc7f2a77c43aceef8d9e7ab345502531d2dbf15b98be1fe37a5e65b85e3bdd0c6273777bb328079fb17023d03ec1d5ff3fcaed5230ebb85c9175ac7b168ddf26d2b852bec04ac111a39a7741af6f4340daa12f35195ef5e6411f3bd31081b0c132d84180372000563dc13efcc264068c52fb5f"}) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000001780)) r11 = syz_open_dev$sg(&(0x7f00000017c0), 0x800, 0x0) ioctl$SG_GET_PACK_ID(r11, 0x227c, &(0x7f0000001800)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000001840)=""/252) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000001940)) [ 126.580540] audit: type=1400 audit(1749682279.411:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:51:19 executing program 3: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x7]) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x7fffffff, 0x6, 0x3, 0x2, 0x4, 0x1}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x4, 0x5]) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffffffffe0, 0x4a081) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000140)=""/197) recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/203, 0xcb}], 0x1, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x20000202) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000480)=""/138) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000540)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc815}, 0x1) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000800)=""/4096) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) mq_getsetattr(r1, &(0x7f0000001900)={0xff9, 0x3ff, 0x400, 0x6}, &(0x7f0000001940)) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001980)=""/254) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001a80)) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000001ac0)=""/40) 22:51:19 executing program 4: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0xc7, &(0x7f0000000000)="090d27ff9c08bb9e3d392bd94da515f4b3d2911ec243d15e322310a2c65579a8f3edc2df33bfeebc9e318d2fff048d24dcd288bc60a4c91ec96f8127fb12c78e851ecead6c29de5d9daaab0e62d782f19c41859503f40d97388b58210d3ef4eb94dbe13dea686b7397c9602b83d6406bc6df2a0b273b826a429e9e9c7d8eedcc7a9cc27bedd152a53b0b58d7839484202417d4f0ad476543354973aac378179f3814c82a27be53cb52a1668ab16853f159c1988e6a514b389a90a4fdd58bd2dc6be71224f3b6fe"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00'}) set_robust_list(&(0x7f0000000200)={&(0x7f00000001c0), 0x9}, 0x18) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ipvlan1\x00', @ifru_addrs=@xdp}}) fchownat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x400) r0 = memfd_secret(0x0) renameat2(r0, &(0x7f0000000300)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) statx(r0, &(0x7f0000000380)='./file1\x00', 0x6000, 0x80, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x12123) getresgid(&(0x7f0000001640), &(0x7f0000001680)=0x0, &(0x7f00000016c0)) getgroups(0x9, &(0x7f0000001700)=[r1, r2, 0xee01, 0xee00, 0xffffffffffffffff, r5, r7, 0x0, 0xee01]) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) getresgid(&(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) recvmsg$unix(r3, &(0x7f0000001e80)={&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001880)=""/223, 0xdf}, {&(0x7f0000001980)=""/101, 0x65}, {&(0x7f0000001a00)=""/234, 0xea}, {&(0x7f0000001b00)=""/187, 0xbb}, {&(0x7f0000001bc0)=""/105, 0x69}, {&(0x7f0000001c40)=""/143, 0x8f}, {&(0x7f0000001d00)=""/99, 0x63}], 0x7, &(0x7f0000001e00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x2040) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r9, 0x5386, &(0x7f0000001ec0)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x402202, 0x0) ioctl$TUNSETGROUP(r10, 0x400454ce, r8) 22:51:19 executing program 5: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x8001, 0x80101) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000001c0)) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x8, 0x20000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x2f, 0x1, 0x14, 0x1, 0x8, @private1, @rand_addr=' \x01\x00', 0x700, 0x20, 0x9, 0x29a}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x28, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x3}, @acquire_done={0x40106309, 0x1}], 0xa7, 0x0, &(0x7f00000003c0)="a2d81ba5039d4064e1ef22b615f785f3255d9fc76e7bd46572ef521b478f26118102fe60fa9fca2243626e421ca93df05e6f10595cbf8e472af0766fac3862e86f062ceb7c50f106926a15a602877d29514ac8f14f88c3e95b774882995bcb73e98a12b678018a945e87ad5893709d8efb46835aa624832e0782f7e80dc89c117d127edab40f60cf5478ca6f5e3ca67f7886a253e1f312edb66c4091b27cddb1f8874832369928"}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000004c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000500)={0x65, ""/101}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000580)={0x0, 0xfff, 0x400}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000005c0)) r3 = syz_open_dev$sg(&(0x7f0000000600), 0x55b4, 0x400) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000640)=0x3) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000680)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x700) 22:51:19 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x1, 0x1f, 0x6}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) io_uring_setup(0x1bd5, &(0x7f0000000100)={0x0, 0xbc50, 0x20, 0x0, 0x2ee}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000180)) r3 = mq_open(&(0x7f00000001c0)='\x00', 0x40, 0xc0, &(0x7f0000000200)={0x9, 0x1b, 0x6039, 0x4}) mq_getsetattr(r3, &(0x7f0000000240)={0x1, 0x6, 0x2, 0x400}, &(0x7f0000000280)) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x4, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000300)) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r5 = syz_open_dev$sg(&(0x7f0000000340), 0x7, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000003c0)=0xd4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000400)={0x6, 0x4, 0x4}) r6 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000480)) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f00000004c0)) memfd_secret(0x80000) 22:51:19 executing program 7: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x48040) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40895}, 0x4000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x4884) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c6}, 0x894) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4000005) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40081652}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044003}, 0x90) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x223, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040814}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x7c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x5000) [ 127.914850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.916299] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.919968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.921452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.924910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.929127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.933470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.934153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.937441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.938199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.062440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.068150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.073709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.076727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.086067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.100956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.120976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.122783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.126895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.128844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.133431] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.134248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.138353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.140371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.145930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.149312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.156934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.159168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.165204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.187160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.198800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.204387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.246582] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.261391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.292520] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.314283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.328984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.374042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.384931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.413343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.004893] Bluetooth: hci1: command tx timeout [ 130.005500] Bluetooth: hci0: command tx timeout [ 130.195727] Bluetooth: hci3: command tx timeout [ 130.195776] Bluetooth: hci6: command tx timeout [ 130.260670] Bluetooth: hci5: command tx timeout [ 130.388694] Bluetooth: hci2: command tx timeout [ 130.451651] Bluetooth: hci4: command tx timeout [ 130.579661] Bluetooth: hci7: command tx timeout [ 132.051642] Bluetooth: hci0: command tx timeout [ 132.052128] Bluetooth: hci1: command tx timeout [ 132.243884] Bluetooth: hci6: command tx timeout [ 132.245447] Bluetooth: hci3: command tx timeout [ 132.307914] Bluetooth: hci5: command tx timeout [ 132.435758] Bluetooth: hci2: command tx timeout [ 132.499987] Bluetooth: hci4: command tx timeout [ 132.627622] Bluetooth: hci7: command tx timeout [ 134.100182] Bluetooth: hci0: command tx timeout [ 134.100870] Bluetooth: hci1: command tx timeout [ 134.292612] Bluetooth: hci3: command tx timeout [ 134.293093] Bluetooth: hci6: command tx timeout [ 134.355786] Bluetooth: hci5: command tx timeout [ 134.484624] Bluetooth: hci2: command tx timeout [ 134.547925] Bluetooth: hci4: command tx timeout [ 134.675742] Bluetooth: hci7: command tx timeout [ 136.149008] Bluetooth: hci0: command tx timeout [ 136.149494] Bluetooth: hci1: command tx timeout [ 136.339639] Bluetooth: hci3: command tx timeout [ 136.340111] Bluetooth: hci6: command tx timeout [ 136.404610] Bluetooth: hci5: command tx timeout [ 136.531614] Bluetooth: hci2: command tx timeout [ 136.596907] Bluetooth: hci4: command tx timeout [ 136.725686] Bluetooth: hci7: command tx timeout [ 188.458755] syz-executor.6 (292) used greatest stack depth: 24816 bytes left [ 191.215298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.218389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.223471] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.235125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.241470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.304503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.309464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.314034] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.317042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.319245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.328329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.330996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.339122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.344856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.349308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.375517] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.400074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.412947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.422581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.427644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.438347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.469146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.491056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.500899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.504279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.513266] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.515443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.521073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.528485] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.541290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.545120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.552498] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.555676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.561518] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.568063] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.621329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.646189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.652500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.658221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.689481] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.299692] Bluetooth: hci0: command tx timeout [ 193.427642] Bluetooth: hci2: command tx timeout [ 193.493270] Bluetooth: hci1: command tx timeout [ 193.619643] Bluetooth: hci3: command tx timeout [ 193.684692] Bluetooth: hci6: command tx timeout [ 193.685362] Bluetooth: hci5: command tx timeout [ 193.811932] Bluetooth: hci7: command tx timeout [ 193.813663] Bluetooth: hci4: command tx timeout [ 195.349672] Bluetooth: hci0: command tx timeout [ 195.476830] Bluetooth: hci2: command tx timeout [ 195.541625] Bluetooth: hci1: command tx timeout [ 195.669024] Bluetooth: hci3: command tx timeout [ 195.731882] Bluetooth: hci5: command tx timeout [ 195.732344] Bluetooth: hci6: command tx timeout [ 195.861760] Bluetooth: hci7: command tx timeout [ 195.862499] Bluetooth: hci4: command tx timeout [ 197.396709] Bluetooth: hci0: command tx timeout [ 197.523843] Bluetooth: hci2: command tx timeout [ 197.590576] Bluetooth: hci1: command tx timeout [ 197.715702] Bluetooth: hci3: command tx timeout [ 197.779680] Bluetooth: hci6: command tx timeout [ 197.780130] Bluetooth: hci5: command tx timeout [ 197.907767] Bluetooth: hci7: command tx timeout [ 197.908240] Bluetooth: hci4: command tx timeout [ 199.443868] Bluetooth: hci0: command tx timeout [ 199.572612] Bluetooth: hci2: command tx timeout [ 199.638569] Bluetooth: hci1: command tx timeout [ 199.764604] Bluetooth: hci3: command tx timeout [ 199.830020] Bluetooth: hci5: command tx timeout [ 199.830468] Bluetooth: hci6: command tx timeout [ 199.955786] Bluetooth: hci4: command tx timeout [ 199.956259] Bluetooth: hci7: command tx timeout [ 253.555618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.559077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.566523] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.583914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.595761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.796852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.801945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.803975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.810048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.813101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.871116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.879056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.891476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.915462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.924275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.099009] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.101260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.114032] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.116316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.125464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.139102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.143615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.145593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.148053] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.156604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.156734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.158413] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.165202] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.168239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.180143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.201749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.201937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.223739] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.237468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.261004] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.465399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.523055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.543692] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.632992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.687747] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.636060] Bluetooth: hci0: command tx timeout [ 255.891716] Bluetooth: hci1: command tx timeout [ 255.955654] Bluetooth: hci2: command tx timeout [ 256.275634] Bluetooth: hci4: command tx timeout [ 256.403657] Bluetooth: hci5: command tx timeout [ 256.404402] Bluetooth: hci3: command tx timeout [ 256.531761] Bluetooth: hci6: command tx timeout [ 256.787673] Bluetooth: hci7: command tx timeout [ 257.685602] Bluetooth: hci0: command tx timeout [ 257.940086] Bluetooth: hci1: command tx timeout [ 258.003984] Bluetooth: hci2: command tx timeout [ 258.323682] Bluetooth: hci4: command tx timeout [ 258.452063] Bluetooth: hci3: command tx timeout [ 258.452513] Bluetooth: hci5: command tx timeout [ 258.579620] Bluetooth: hci6: command tx timeout [ 258.835653] Bluetooth: hci7: command tx timeout [ 259.731706] Bluetooth: hci0: command tx timeout [ 259.987628] Bluetooth: hci1: command tx timeout [ 260.051620] Bluetooth: hci2: command tx timeout [ 260.371655] Bluetooth: hci4: command tx timeout [ 260.501637] Bluetooth: hci5: command tx timeout [ 260.502112] Bluetooth: hci3: command tx timeout [ 260.627786] Bluetooth: hci6: command tx timeout [ 260.885877] Bluetooth: hci7: command tx timeout [ 261.779766] Bluetooth: hci0: command tx timeout [ 262.035642] Bluetooth: hci1: command tx timeout [ 262.099634] Bluetooth: hci2: command tx timeout [ 262.419857] Bluetooth: hci4: command tx timeout [ 262.547704] Bluetooth: hci5: command tx timeout [ 262.548361] Bluetooth: hci3: command tx timeout [ 262.676035] Bluetooth: hci6: command tx timeout [ 262.931687] Bluetooth: hci7: command tx timeout [ 313.538864] syz-executor.1 (5199) used greatest stack depth: 24544 bytes left [ 315.560312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.563269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.575400] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.589869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.598218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.690489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.695466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.698048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.708246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.712088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.879061] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.901447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.920391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.942954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.964676] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.002752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.006260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.012407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.025741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.040137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.045140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.047082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.050231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.082057] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.090082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.097904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.106276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.110694] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.111977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.113140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.119474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.122727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.143022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.186806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.200967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.214203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.229209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.231150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.237368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.249592] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.653778] Bluetooth: hci0: command tx timeout [ 317.781109] Bluetooth: hci1: command tx timeout [ 318.035643] Bluetooth: hci2: command tx timeout [ 318.163892] Bluetooth: hci6: command tx timeout [ 318.227661] Bluetooth: hci4: command tx timeout [ 318.291936] Bluetooth: hci7: command tx timeout [ 318.291982] Bluetooth: hci3: command tx timeout [ 318.356841] Bluetooth: hci5: command tx timeout [ 319.699931] Bluetooth: hci0: command tx timeout [ 319.827663] Bluetooth: hci1: command tx timeout [ 320.085576] Bluetooth: hci2: command tx timeout [ 320.211665] Bluetooth: hci6: command tx timeout [ 320.278583] Bluetooth: hci4: command tx timeout [ 320.339901] Bluetooth: hci7: command tx timeout [ 320.341488] Bluetooth: hci3: command tx timeout [ 320.404585] Bluetooth: hci5: command tx timeout [ 321.747643] Bluetooth: hci0: command tx timeout [ 321.876610] Bluetooth: hci1: command tx timeout [ 322.132584] Bluetooth: hci2: command tx timeout [ 322.260804] Bluetooth: hci6: command tx timeout [ 322.324882] Bluetooth: hci4: command tx timeout [ 322.388800] Bluetooth: hci3: command tx timeout [ 322.388900] Bluetooth: hci7: command tx timeout [ 322.451660] Bluetooth: hci5: command tx timeout [ 323.796645] Bluetooth: hci0: command tx timeout [ 323.924604] Bluetooth: hci1: command tx timeout [ 324.180842] Bluetooth: hci2: command tx timeout [ 324.308592] Bluetooth: hci6: command tx timeout [ 324.371686] Bluetooth: hci4: command tx timeout [ 324.435767] Bluetooth: hci3: command tx timeout [ 324.436219] Bluetooth: hci7: command tx timeout [ 324.500424] Bluetooth: hci5: command tx timeout [ 378.086927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.092202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.101633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.116794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.123516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.172479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.176117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.178888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.186277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.194272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.336524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.341023] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.343977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.351758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.357382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.423190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.426329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.427234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.434492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.439407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.446015] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.451130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.453304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.457324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.474038] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.678641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.684063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.695082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.711508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.749830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.276959] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.294101] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.320446] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.344053] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.344525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.372037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.373299] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.387089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.415046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.415751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.179669] Bluetooth: hci0: command tx timeout [ 380.243683] Bluetooth: hci1: command tx timeout [ 380.437928] Bluetooth: hci2: command tx timeout [ 380.629292] Bluetooth: hci3: command tx timeout [ 380.755741] Bluetooth: hci4: command tx timeout [ 380.819634] Bluetooth: hci5: command tx timeout [ 381.523660] Bluetooth: hci6: command tx timeout [ 381.524473] Bluetooth: hci7: command tx timeout [ 382.228615] Bluetooth: hci0: command tx timeout [ 382.293635] Bluetooth: hci1: command tx timeout [ 382.484772] Bluetooth: hci2: command tx timeout [ 382.676959] Bluetooth: hci3: command tx timeout [ 382.803751] Bluetooth: hci4: command tx timeout [ 382.867829] Bluetooth: hci5: command tx timeout [ 383.573755] Bluetooth: hci6: command tx timeout [ 383.574235] Bluetooth: hci7: command tx timeout [ 384.275867] Bluetooth: hci0: command tx timeout [ 384.340619] Bluetooth: hci1: command tx timeout [ 384.532974] Bluetooth: hci2: command tx timeout [ 384.724623] Bluetooth: hci3: command tx timeout [ 384.852602] Bluetooth: hci4: command tx timeout [ 384.915632] Bluetooth: hci5: command tx timeout [ 385.619952] Bluetooth: hci7: command tx timeout [ 385.620432] Bluetooth: hci6: command tx timeout [ 386.324730] Bluetooth: hci0: command tx timeout [ 386.387603] Bluetooth: hci1: command tx timeout [ 386.581892] Bluetooth: hci2: command tx timeout [ 386.771809] Bluetooth: hci3: command tx timeout [ 386.899711] Bluetooth: hci4: command tx timeout [ 386.963598] Bluetooth: hci5: command tx timeout [ 387.668919] Bluetooth: hci6: command tx timeout [ 387.669400] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:56:23 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=08ceeec3ed70d47e RDX=00000000aec534fd RSI=00000000e49da119 RDI=00000000a44fd1a7 RBP=ffffffff85c1cbc0 RSP=ffff88802d686f38 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=000000009362d616 R14=0000000000000000 R15=08ceeec3ed70d47e RIP=ffffffff815190c5 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f21f1a75620 CR3=000000000c666000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800a0744a0 RBX=ffff88800a0744a0 RCX=ffff88808a0744a0 RDX=ffffea0000281d00 RSI=ffff888008c4b780 RDI=ffff888034d56dd0 RBP=0000000000000000 RSP=ffff888019e1f740 R8 =0000000000000000 R9 =ffffffff81aeea00 R10=ffff888009401280 R11=0000000000000001 R12=0000000000000000 R13=ffff888019e1f778 R14=ffff888034d56dd0 R15=ffff888034d56eb8 RIP=ffffffff81aeeb26 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6fe50ae020 CR3=00000000355d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000