Warning: Permanently added '[localhost]:44548' (ECDSA) to the list of known hosts. 2024/10/22 22:09:33 fuzzer started 2024/10/22 22:09:33 dialing manager at localhost:45639 syzkaller login: [ 87.670427] cgroup: Unknown subsys name 'net' [ 87.770281] cgroup: Unknown subsys name 'cpuset' [ 87.831155] cgroup: Unknown subsys name 'rlimit' 2024/10/22 22:09:54 syscalls: 220 2024/10/22 22:09:54 code coverage: enabled 2024/10/22 22:09:54 comparison tracing: enabled 2024/10/22 22:09:54 extra coverage: enabled 2024/10/22 22:09:54 setuid sandbox: enabled 2024/10/22 22:09:54 namespace sandbox: enabled 2024/10/22 22:09:54 Android sandbox: enabled 2024/10/22 22:09:54 fault injection: enabled 2024/10/22 22:09:54 leak checking: enabled 2024/10/22 22:09:54 net packet injection: enabled 2024/10/22 22:09:54 net device setup: enabled 2024/10/22 22:09:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/22 22:09:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/22 22:09:54 USB emulation: enabled 2024/10/22 22:09:54 hci packet injection: enabled 2024/10/22 22:09:54 wifi device emulation: enabled 2024/10/22 22:09:54 802.15.4 emulation: enabled 2024/10/22 22:09:54 fetching corpus: 0, signal 0/0 (executing program) 2024/10/22 22:09:56 starting 8 fuzzer processes 22:09:56 executing program 0: r0 = socket$inet(0x2, 0xa, 0x3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @loopback}, &(0x7f0000000040)=0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x6f, &(0x7f0000000080)=0x6f, 0x4) socket$inet(0x2, 0x6, 0x3) r1 = socket(0x21, 0x3, 0x5) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x101840) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080001) r3 = socket(0x22, 0x3, 0x653) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r5 = syz_open_dev$vcsa(&(0x7f00000005c0), 0xdb3, 0x234400) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3ffc00000}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x8840) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x2c4c2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r4, 0x101, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x3e, 0xa8, @random="4be9588ab43d264b36ac1c3115c6f421c0b6c247ba7fe05fb9da43bef0a72f9892a372b76f90c38fc7ba9e9196a1093bf9c30e2e1e7914ef2932"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4800}, 0x8000084) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xf0, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x8040) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) 22:09:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xfc97a37e5e5fc464}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffd}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffd}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xcf}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008005) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x29}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x22c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x20004004) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r2, 0x9557a0828b6c33cb, 0x70bd2b, 0x7ff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000090) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040c1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40c10010}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x60}}, 0x40) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) 22:09:56 executing program 2: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400002}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x58c352596769ed5}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x14840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_START_REQ(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x3200802}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x80) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc1}]}, 0x44}, 0x1, 0x0, 0x0, 0xdd1d4f64f8386bb6}, 0x4) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r3) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x804) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r2, 0x72fc832c3a45725c, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) 22:09:56 executing program 3: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000f77000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="977d0b2daaf4902db83555c847865521b0af727532ca1ac540fe063ee113e7442d50", 0x22}, 0x68) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r0, 0xb, 0xcd6d, 0x5, 0xc, 0x0, {0x3}}, 0xbe) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) mmap(&(0x7f0000c9f000/0x4000)=nil, 0x4000, 0x3, 0x4010, r1, 0xd7c3000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x5, &(0x7f000097c000/0x1000)=nil, 0x4) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000240)) r2 = socket(0x1f, 0x6, 0x200) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x20, 0x1, 0xffffc0e6, 0x65, @mcast1, @private0, 0x1, 0x1, 0xfffffe00, 0x1ff}}) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2eb}, {0x6, 0x11, 0x5c4f}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4400000}, {0x6, 0x11, 0x401}, {0x8, 0x15, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x25}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4a46}}]}, 0xcc}}, 0x50) r3 = syz_open_dev$vcsa(&(0x7f0000000600), 0x101, 0x2000) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c011}, 0x4000880) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x120, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xf001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x3f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}]}, 0x120}}, 0x8001) sigaltstack(&(0x7f0000bdf000/0x2000)=nil, &(0x7f0000000980)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd=r1, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, {0x1}}, 0x5f67ce17) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x188, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd1, 0xa8, @random="f1a98866526089463fea10e7a2fa182b88caf1b16978295e98fd36ca0bbc82af8028b97f6ceadbe91008ec0abe85434c83118bc3d5e5b079c668776447bd863e8969296d1f3c4ccd4ee77813fe29dde20fdd9b8f9dc6613a3deea4a440ebea35e380aff447523135d90d3d58046bcea62228d2d4a019cc5500d1fa0218d432b3714d7743c5b5bfd9a57bc10bec32377ab67f22abf49ddfafa1b0607ead42e7db54e8c248541c5881bc280ea954904defff5cb9ede94417ab134ea67f59075a8ec92a9ae734f870006faf12dee7"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x891) 22:09:56 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/239, 0xef, 0x1, &(0x7f0000000100)=""/86, 0x56}, &(0x7f00000001c0)=0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, 0xffffffffffffffff, 0x53ab5000) r0 = syz_io_uring_setup(0xcb2, &(0x7f0000000200)={0x0, 0x1a73, 0x10, 0x1, 0x230}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x50, r0, 0x8000000) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/239) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clock_nanosleep(0x3, 0x1, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000440)) r1 = syz_io_uring_setup(0x69d1, &(0x7f0000000480)={0x0, 0x2b0a, 0x1, 0x0, 0x350}, &(0x7f0000442000/0x4000)=nil, &(0x7f0000811000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x8010, r1, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x128, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2768}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5000000}, {0x6, 0x11, 0x9c3}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0xc014) r2 = io_uring_setup(0x1ef3, &(0x7f0000000780)={0x0, 0x297b, 0x8, 0x3, 0xac, 0x0, r1}) syz_io_uring_setup(0x7d0, &(0x7f0000000800)={0x0, 0x4f4c, 0x20, 0x2, 0x398, 0x0, r2}, &(0x7f00004ef000/0x4000)=nil, &(0x7f00007c2000/0x12000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000900)=""/75) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000980), 0x400002, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000009c0)=0x5) mincore(&(0x7f0000c0f000/0x3000)=nil, 0x3000, &(0x7f0000000a00)=""/5) r4 = socket(0xf, 0x800, 0x4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a80)='ns/time_for_children\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 22:09:56 executing program 5: r0 = getpid() ioprio_get$pid(0x3, r0) migrate_pages(r0, 0x8, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0xa5) sched_getparam(r0, &(0x7f0000000080)) sched_setparam(r0, &(0x7f00000000c0)=0x52) ptrace$peekuser(0x3, r0, 0x5dc) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x200c00, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x20000890) r2 = getpid() ioprio_set$pid(0x3, r2, 0x2000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x5, 0x1, 0x7e, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x80, 0x80, 0x2, 0x81}}) ioprio_get$pid(0x6, r2) ptrace$poke(0x4, r0, &(0x7f0000000400), 0x0) getpriority(0x0, r0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x880) r4 = getpid() capset(&(0x7f0000000540)={0x19980330, r4}, &(0x7f0000000580)={0x10001, 0x1c, 0x401, 0x8, 0xfffffbff, 0xfff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r3, 0x4, 0xfa, 0x2, 0x3, 0x46, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7, 0x8000, 0x7fffffff, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', r5, 0x4, 0xb, 0x7c, 0xa9, 0x28, @loopback, @remote, 0x7, 0x8, 0x1, 0x9}}) capset(&(0x7f0000000740)={0x0, r0}, &(0x7f0000000780)={0x7fff, 0x3, 0x5, 0x0, 0x400, 0x7fffffff}) [ 109.425769] audit: type=1400 audit(1729634996.400:7): avc: denied { execmem } for pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:09:56 executing program 6: munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) r0 = syz_io_uring_setup(0x199c, &(0x7f0000000080)={0x0, 0xc407, 0x2, 0x2, 0x1a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r0, 0x8000000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x9, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x402800, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x118010, r4, 0x10000000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r6 = getegid() getgroups(0x1, &(0x7f0000000300)=[r6]) syz_io_uring_setup(0x14da, &(0x7f0000000340)={0x0, 0x6, 0x20, 0x0, 0x269, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) syz_io_uring_submit(r1, r5, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 22:09:56 executing program 7: prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x27) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x28) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x11) exit(0x2) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd, 0x5, 0x4, 0x200, 0x10, 0x0, {0x2}}, 0x8) r0 = socket$inet(0x2, 0xa, 0x6b) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @dev}, &(0x7f0000000080)=0xc) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) sched_yield() set_thread_area(&(0x7f00000000c0)={0x6, 0xffffffffffffefff, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x800) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000200)=0x5) r1 = socket(0x2c, 0x4, 0x7) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000240), 0x4) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}}, 0x48000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'bond0\x00', @ifru_names}}) [ 110.717822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.720288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.722509] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.728361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.731003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.733509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.771683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.775968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.778486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.781886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.784537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.786908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.839911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.854874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.858177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.871432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.877658] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.899280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.903898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.913808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.924389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.925859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.927457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.930506] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.932180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.934061] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.936474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.938181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.939399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.941016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.943037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.944637] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.945853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.955057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.957668] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.959375] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.961604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 110.963204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.965263] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.970677] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.994391] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 110.997035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.073389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.095487] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.096980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.105057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.108668] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.110312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.808142] Bluetooth: hci0: command tx timeout [ 112.871965] Bluetooth: hci1: command tx timeout [ 113.000924] Bluetooth: hci2: command tx timeout [ 113.064446] Bluetooth: hci3: command tx timeout [ 113.064480] Bluetooth: hci7: command tx timeout [ 113.066049] Bluetooth: hci6: command tx timeout [ 113.067302] Bluetooth: hci5: command tx timeout [ 113.127977] Bluetooth: hci4: command tx timeout [ 114.855898] Bluetooth: hci0: command tx timeout [ 114.920425] Bluetooth: hci1: command tx timeout [ 115.047919] Bluetooth: hci2: command tx timeout [ 115.112033] Bluetooth: hci3: command tx timeout [ 115.112524] Bluetooth: hci6: command tx timeout [ 115.113034] Bluetooth: hci7: command tx timeout [ 115.113079] Bluetooth: hci5: command tx timeout [ 115.176101] Bluetooth: hci4: command tx timeout [ 116.903884] Bluetooth: hci0: command tx timeout [ 116.967847] Bluetooth: hci1: command tx timeout [ 117.095934] Bluetooth: hci2: command tx timeout [ 117.160816] Bluetooth: hci6: command tx timeout [ 117.162236] Bluetooth: hci3: command tx timeout [ 117.163029] Bluetooth: hci7: command tx timeout [ 117.163482] Bluetooth: hci5: command tx timeout [ 117.223849] Bluetooth: hci4: command tx timeout [ 118.366479] hrtimer: interrupt took 9505105 ns [ 118.951841] Bluetooth: hci0: command tx timeout [ 119.015834] Bluetooth: hci1: command tx timeout [ 119.143985] Bluetooth: hci2: command tx timeout [ 119.207860] Bluetooth: hci3: command tx timeout [ 119.208152] Bluetooth: hci5: command tx timeout [ 119.209313] Bluetooth: hci7: command tx timeout [ 119.209821] Bluetooth: hci6: command tx timeout [ 119.271870] Bluetooth: hci4: command tx timeout [ 173.402683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.404538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.407897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.411994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.414585] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.420860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.434513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.437363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.440492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.444476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.448072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 173.449355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.503104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.504491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.510028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.511347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.514183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.518433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.527098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.531662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.534313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.536867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.562183] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.571005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.573828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.578930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.585145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.612193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.617196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.618543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.621555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.626684] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.629168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.637967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.638201] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.645063] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.662125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.678987] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 173.681244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.691558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.716982] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 173.719295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.806001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.825008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.849621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.853611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.856529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 173.859019] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.464005] Bluetooth: hci1: command tx timeout [ 175.464035] Bluetooth: hci0: command tx timeout [ 175.656055] Bluetooth: hci2: command tx timeout [ 175.656109] Bluetooth: hci3: command tx timeout [ 175.784129] Bluetooth: hci5: command tx timeout [ 175.911934] Bluetooth: hci4: command tx timeout [ 176.104966] Bluetooth: hci6: command tx timeout [ 176.488063] Bluetooth: hci7: command tx timeout [ 177.511889] Bluetooth: hci1: command tx timeout [ 177.512531] Bluetooth: hci0: command tx timeout [ 177.704044] Bluetooth: hci3: command tx timeout [ 177.704086] Bluetooth: hci2: command tx timeout [ 177.832477] Bluetooth: hci5: command tx timeout [ 177.960820] Bluetooth: hci4: command tx timeout [ 178.152947] Bluetooth: hci6: command tx timeout [ 178.536844] Bluetooth: hci7: command tx timeout [ 179.560812] Bluetooth: hci1: command tx timeout [ 179.561321] Bluetooth: hci0: command tx timeout [ 179.752231] Bluetooth: hci3: command tx timeout [ 179.752846] Bluetooth: hci2: command tx timeout [ 179.881895] Bluetooth: hci5: command tx timeout [ 180.008804] Bluetooth: hci4: command tx timeout [ 180.200862] Bluetooth: hci6: command tx timeout [ 180.587073] Bluetooth: hci7: command tx timeout [ 181.607864] Bluetooth: hci1: command tx timeout [ 181.609796] Bluetooth: hci0: command tx timeout [ 181.799874] Bluetooth: hci2: command tx timeout [ 181.800887] Bluetooth: hci3: command tx timeout [ 181.927842] Bluetooth: hci5: command tx timeout [ 182.055979] Bluetooth: hci4: command tx timeout [ 182.247843] Bluetooth: hci6: command tx timeout [ 182.631845] Bluetooth: hci7: command tx timeout [ 235.515305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.524300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.527293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.534865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.540029] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.542649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.582898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.585971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.590377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.594091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.595966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.600406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.633417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.636967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.643245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.653693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.658316] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.660676] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.775417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.783346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.786618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.789441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.795197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.800015] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.804238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.806622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.824665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.846975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.849202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.861854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.862102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.875000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.875078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.879618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.903990] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.911381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.927022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.932935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.936003] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.938164] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.940971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.942992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.949521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.955284] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 235.957572] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.987961] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.042235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 236.052221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.609029] Bluetooth: hci0: command tx timeout [ 237.673775] Bluetooth: hci1: command tx timeout [ 237.736165] Bluetooth: hci2: command tx timeout [ 237.864895] Bluetooth: hci4: command tx timeout [ 237.927944] Bluetooth: hci3: command tx timeout [ 237.994935] Bluetooth: hci7: command tx timeout [ 238.055837] Bluetooth: hci5: command tx timeout [ 238.567901] Bluetooth: hci6: command tx timeout [ 239.655825] Bluetooth: hci0: command tx timeout [ 239.719946] Bluetooth: hci1: command tx timeout [ 239.783801] Bluetooth: hci2: command tx timeout [ 239.912767] Bluetooth: hci4: command tx timeout [ 239.975889] Bluetooth: hci3: command tx timeout [ 240.041532] Bluetooth: hci7: command tx timeout [ 240.103984] Bluetooth: hci5: command tx timeout [ 240.615977] Bluetooth: hci6: command tx timeout [ 241.704769] Bluetooth: hci0: command tx timeout [ 241.768046] Bluetooth: hci1: command tx timeout [ 241.832929] Bluetooth: hci2: command tx timeout [ 241.960831] Bluetooth: hci4: command tx timeout [ 242.024786] Bluetooth: hci3: command tx timeout [ 242.087798] Bluetooth: hci7: command tx timeout [ 242.151866] Bluetooth: hci5: command tx timeout [ 242.666954] Bluetooth: hci6: command tx timeout [ 243.751987] Bluetooth: hci0: command tx timeout [ 243.815970] Bluetooth: hci1: command tx timeout [ 243.881800] Bluetooth: hci2: command tx timeout [ 244.008934] Bluetooth: hci4: command tx timeout [ 244.071806] Bluetooth: hci3: command tx timeout [ 244.135891] Bluetooth: hci7: command tx timeout [ 244.200030] Bluetooth: hci5: command tx timeout [ 244.711855] Bluetooth: hci6: command tx timeout [ 297.923096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.925222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.930997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.933872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.941093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.945650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.952083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.954555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.962995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.984195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.987180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.993488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.050328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.063953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.068569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.072681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.075078] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.076417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.104827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.109185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.114041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.139629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.149017] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.150770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.239659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.262113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.264978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.299338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.307053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.308410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.310526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.314512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.316301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.318335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.320562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.321906] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.325540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.334138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.340142] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.340192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.345039] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 298.346234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 298.362196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.362236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.366925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.390583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.393063] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 298.394952] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.007891] Bluetooth: hci1: command tx timeout [ 300.071784] Bluetooth: hci0: command tx timeout [ 300.135832] Bluetooth: hci2: command tx timeout [ 300.199794] Bluetooth: hci3: command tx timeout [ 300.392369] Bluetooth: hci5: command tx timeout [ 300.457783] Bluetooth: hci7: command tx timeout [ 300.458403] Bluetooth: hci6: command tx timeout [ 300.459061] Bluetooth: hci4: command tx timeout [ 302.055809] Bluetooth: hci1: command tx timeout [ 302.120874] Bluetooth: hci0: command tx timeout [ 302.184862] Bluetooth: hci2: command tx timeout [ 302.247775] Bluetooth: hci3: command tx timeout [ 302.442963] Bluetooth: hci5: command tx timeout [ 302.505054] Bluetooth: hci6: command tx timeout [ 302.505540] Bluetooth: hci4: command tx timeout [ 302.506319] Bluetooth: hci7: command tx timeout [ 304.104889] Bluetooth: hci1: command tx timeout [ 304.169734] Bluetooth: hci0: command tx timeout [ 304.231882] Bluetooth: hci2: command tx timeout [ 304.297789] Bluetooth: hci3: command tx timeout [ 304.488798] Bluetooth: hci5: command tx timeout [ 304.552814] Bluetooth: hci6: command tx timeout [ 304.553304] Bluetooth: hci7: command tx timeout [ 304.554191] Bluetooth: hci4: command tx timeout [ 306.152857] Bluetooth: hci1: command tx timeout [ 306.216873] Bluetooth: hci0: command tx timeout [ 306.279959] Bluetooth: hci2: command tx timeout [ 306.343880] Bluetooth: hci3: command tx timeout [ 306.535966] Bluetooth: hci5: command tx timeout [ 306.599922] Bluetooth: hci4: command tx timeout [ 306.600410] Bluetooth: hci7: command tx timeout [ 306.601022] Bluetooth: hci6: command tx timeout [ 360.248623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.255813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.257084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.261190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.263002] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.264511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.434447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.452697] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.456626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.462562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.465550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.485113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.504651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.511069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.518939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.531917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.535577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.539621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 360.542296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.546516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.550191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.575150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.579140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 360.586940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.628877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.632044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.634480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.638857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.646646] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 360.648368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.689985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.706912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.708805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.726259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.727355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.735544] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.740464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.744822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.749004] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.752799] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 360.753997] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.754029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.762885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.772440] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 360.779442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.787153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.793243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 360.802881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.343881] Bluetooth: hci0: command tx timeout [ 362.536015] Bluetooth: hci1: command tx timeout [ 362.601783] Bluetooth: hci2: command tx timeout [ 362.663825] Bluetooth: hci4: command tx timeout [ 362.663913] Bluetooth: hci3: command tx timeout [ 362.856972] Bluetooth: hci6: command tx timeout [ 362.858104] Bluetooth: hci5: command tx timeout [ 362.858729] Bluetooth: hci7: command tx timeout [ 364.391772] Bluetooth: hci0: command tx timeout [ 364.583815] Bluetooth: hci1: command tx timeout [ 364.648011] Bluetooth: hci2: command tx timeout [ 364.712020] Bluetooth: hci4: command tx timeout [ 364.713074] Bluetooth: hci3: command tx timeout [ 364.903999] Bluetooth: hci7: command tx timeout [ 364.904246] Bluetooth: hci5: command tx timeout [ 364.904583] Bluetooth: hci6: command tx timeout [ 366.439858] Bluetooth: hci0: command tx timeout [ 366.631841] Bluetooth: hci1: command tx timeout [ 366.696119] Bluetooth: hci2: command tx timeout [ 366.760940] Bluetooth: hci3: command tx timeout [ 366.761456] Bluetooth: hci4: command tx timeout [ 366.951859] Bluetooth: hci5: command tx timeout [ 366.952404] Bluetooth: hci7: command tx timeout [ 366.952484] Bluetooth: hci6: command tx timeout [ 368.487844] Bluetooth: hci0: command tx timeout [ 368.681713] Bluetooth: hci1: command tx timeout [ 368.743788] Bluetooth: hci2: command tx timeout [ 368.807789] Bluetooth: hci3: command tx timeout [ 368.808311] Bluetooth: hci4: command tx timeout [ 368.999826] Bluetooth: hci6: command tx timeout [ 368.999873] Bluetooth: hci5: command tx timeout [ 369.001027] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:15:02 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea00001b5800 RCX=ffffffff8179692a RDX=ffff888024ec9b80 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880153cfbd8 R8 =0000000000000001 R9 =fffff94000036b16 R10=0000000000000001 R11=0000000000189f3d R12=0000000000000004 R13=ffffea00001b5880 R14=0000000000000000 R15=ffff88803011aa80 RIP=ffffffff8179692a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f730827e540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f73084625e0 CR3=000000002677a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000700007f7308789a90 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff7fffffffffff RBX=000000000000000f RCX=ffffffff812ef5ee RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff888013323700 RSP=ffff8880254af900 R8 =0000000000000000 R9 =00000000000c000f R10=ffffffff87ed4ea7 R11=00000000000c2f81 R12=ffff888013324168 R13=ffff88800bb0d390 R14=0000000000000000 R15=0000000000040000 RIP=ffffffff818b30d9 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcd6bb8d368 CR3=0000000015140000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000