Warning: Permanently added '[localhost]:17834' (ECDSA) to the list of known hosts. 2024/10/31 15:44:33 fuzzer started 2024/10/31 15:44:33 dialing manager at localhost:45639 syzkaller login: [ 68.726589] cgroup: Unknown subsys name 'net' [ 68.810946] cgroup: Unknown subsys name 'cpuset' [ 68.823615] cgroup: Unknown subsys name 'rlimit' 2024/10/31 15:44:50 syscalls: 201 2024/10/31 15:44:50 code coverage: enabled 2024/10/31 15:44:50 comparison tracing: enabled 2024/10/31 15:44:50 extra coverage: enabled 2024/10/31 15:44:50 setuid sandbox: enabled 2024/10/31 15:44:50 namespace sandbox: enabled 2024/10/31 15:44:50 Android sandbox: enabled 2024/10/31 15:44:50 fault injection: enabled 2024/10/31 15:44:50 leak checking: enabled 2024/10/31 15:44:50 net packet injection: enabled 2024/10/31 15:44:50 net device setup: enabled 2024/10/31 15:44:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 15:44:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 15:44:50 USB emulation: enabled 2024/10/31 15:44:50 hci packet injection: enabled 2024/10/31 15:44:50 wifi device emulation: enabled 2024/10/31 15:44:50 802.15.4 emulation: enabled 2024/10/31 15:44:50 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 15:44:52 starting 8 fuzzer processes 15:44:52 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0xb0000008}) epoll_create(0x6) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x218041, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0xa0002013}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r4 = openat$incfs(r2, &(0x7f0000000300)='.log\x00', 0x101000, 0x2d) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm], 0x1) write$char_usb(r4, &(0x7f0000000500)="2f673e65c3adef05698e877c1cc9b2026e9a73ee0f3e2fbb183759c1b08b656ecdaa27d30e314c0a43aca99192ed3d28015566890b52b55f700822f8eba870ba75284925c8db43960161f42baa9f0b941d16", 0x52) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x80) socketpair(0x29, 0x2, 0x5, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000006c0), &(0x7f0000000700)=0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000780)={0x10000001}) 15:44:52 executing program 1: r0 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!\x00', 0xfffffffffffffff8) keyctl$link(0x8, r0, 0xfffffffffffffff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x80) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x15, 0xa, 0x903, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x400000, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580), r4) renameat2(r4, &(0x7f0000000600)='./file0\x00', r4, &(0x7f0000000640)='./file0\x00', 0x2) r5 = socket(0x18, 0x4, 0x3) r6 = openat$cgroup_ro(r4, &(0x7f00000006c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24008840) write$hidraw(r4, &(0x7f00000007c0)="dc70697d7db39db2adf888d1b4202fd5e490b39bb826d6c1d8dbb01517578cb9168044d6fe6b9b4dc5b4f9638800bbcd008d9ef0b81a21cd30513e44a8cf02894f9e79355bac3797f9f5898066a53ab627f556f22274fcd05799641b92363c9a4e1bacd9b57f92b305e07ec5a2bb6c5246e0f08bb650c6bca225aa1bb69a3da352262c0df1714ef0afc56ed9e302b510ccb8b50b01e7cc", 0x97) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x400002, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000008c0)={0x4, 0x3, 0xf85d, 0x20, 0x0, 0x0, 0x1}, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64, 0x1}, 0x20) 15:44:52 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff2e0e}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x24040001) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xe0}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x40800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x17}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000094) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x2044) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44010}, 0x4880) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40488d1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}]}, 0x44}}, 0x4000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7c}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c000}, 0x800) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1fffd}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24001}, 0x4042850) 15:44:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10000}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff0000}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfa}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40840) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44091}, 0x20008000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40320c5}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x4000000) r6 = socket(0x18, 0x4, 0x1000) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x13, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6(0xa, 0x80000, 0x2) getdents64(r3, &(0x7f0000000740)=""/205, 0xcd) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xc0004}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x800) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) [ 87.250243] audit: type=1400 audit(1730389492.737:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:44:52 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400d4}, 0x2004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4040081) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x64}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008804}, 0x80) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xc800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4001) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000051) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x9, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040001}, 0x0) 15:44:52 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x4040) r2 = openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa000400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000480), 0x2, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000004c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000500)=0x1, 0x4) r6 = openat$cgroup_ro(r2, &(0x7f0000000540)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000580)) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44018}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:44:52 executing program 6: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={0x0, 0xe2, 0x69}, 0x0, &(0x7f0000000040)="f8639bf7abe746edba5766b7fc2f06c27ee7f7e1fd9cefb6624c4bb67c86d8e22b6f727e6a38fa6289040e7fc67f1e2b14b6406e56737f65d064e8591290760b53925f2be54f69ee91db3892ebfb965f5caf82ba6573d298cdfb6b510f4eceaca2f015b7d70e596c757ead5b9e1249ab1ab979c991572b1443f395a751b769256e7d7ebe856e6d400a223b0c7176629cb5d871938e6aa2c4b5ed97e73f36cc17aa9b8b2c5c1678e41ca926b4d9453738f16a1e46f3ef319d2d16a8e17f7b90d0732a64e8977604c69a482133fabed751449b5072e55a797e4c1b699763c5455d0ec3", &(0x7f0000000140)=""/105) add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="fe4a99a38a9530b77bf30356cb8c5122a95c1c58a8363e9788e97f05ea2f0815465134c387f9f832a6734e7ff31e25f169f2c318abc86aec7a0d008ed09b5a0871c5518a5cf1ea8fadabd4f3c81914f1c5e857379773e16bcd73b1fa6b48af75cd00e4e91ecac567eabacf7659c5204fd8fa62735e78aa466c12cfe0ca2506c67235c426486611e90be2574e40", 0x8d, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000300)='.dead\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='syz', r0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="65c41ab73cc1d00884c5e8960eaf1d6343d160be2e73a9bbd9f3f4cce072544bd5f7ff775a7fe0759070e919e563567188a951d0faf7348adb5280b801a93569b23d8a26f47cc93c7ed79f30603dad5cbd0044420b8193bd44deef", 0x5b, r2) keyctl$get_persistent(0x16, 0xffffffffffffffff, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000005c0)={r3, 0xac, 0x6a}, &(0x7f0000000600)={'enc=', 'oaep', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000680)="dd43ead02bfd8e810f1d6ec998a37a4a705f7b52d4570800ae9a706f5e9c30d4e9f8224b8627f5a93c38e5f5e5cbb4e51368fc602ba7d968f78fd165b880bf5071cba660889e36d0dc5f0f4e2e0d93b8c84c67a2073236e4b42e5e43c99aed19621ecd5f303226180c661de63ca8dd44a8c36ddad68d8aa6a75fff0482af9bbdfddfb4330a260fa2080ecf375ce7b2a813df5753718a862366f5719d3dd63cdccf48ce239f0f86593be5a200", &(0x7f0000000740)="ef26312df99558976422dbe0f6ea5cf33603a6013dee3691723cc4d455013f148b6409724bee49cbeb69097335e460ec32366c027b17e0676d44a3f5fc18774cd4b48b573fbb35e4f935961961fe61b6538314407a2c0949a252d21d48221bb8ec4341082f2e39c1cb61") keyctl$link(0x8, r1, r2) r4 = add_key(&(0x7f00000007c0)='cifs.idmap\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="736e30841102e56f238d6db433ebfe98047571f90d2c7f88c9985ef30ed065e9cc52f191fae987287a3ba91b944698e8c1ab79f7876f112049d27646c20d2a37e251f61a7e4fa3d9fe51091c8f3e140c1d50a38e6e8fc62ac56c6c6a6a3457a4d483e321711567867a7ec9fa8288dd055d19e4c04a49af5c838648b9942a104dec9278ac", 0x84, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000900)={r4, 0x67, 0xc7}, &(0x7f0000000940)={'enc=', 'oaep', ' hash=', {'sha3-256\x00'}}, &(0x7f00000009c0)="f1dcd41114bc6efeb66fc6e6efa151cb9e0e8439cea289ee0c3e01e494e9ce5be1fcf8e94eaddbd4f413d496ee1060f748f752bcb9199bf57472f72d4945fc4159a1993a6bbe3f6b32f958eade5f66c0332db27f0b050fa86f17988128c218a75f8e766e281e79", &(0x7f0000000a40)="d3831b09b16b4e2fd052a870b37ad652ad9b10da9f462d037d83b4601d3690bfbdceb48ed85db2c851e6d1fb2357661b0ad052ba3614cae073a0185751c01db5f38bf4c1ebbc19b379a522df807ee5034b2fba2f76be0a469f57b63599bfc905ef2ff73b7537c4290c86fd612be2452bbddc36dab72d73bab4fdd125b5b5881281c3cff0800c8f4fc87579a7f2251e74621bb2f86f7d1eb990b8fb2187f82357ab3bde3a65d2f47b827b7013c0f0ad522dc4c5a4d55bf2adb18c479edae5d6bfe615c4eb3c40e5") keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b40)={r4, 0xce, 0x37}, &(0x7f0000000b80)={'enc=', 'raw', ' hash=', {'tgr192\x00'}}, &(0x7f0000000c00)="518da15c1aa738de621e5e773f9299f105bb154bb529c725305c91e09d54f7c4a0ef44e05a11e883a2fc8b9b0d06f02b79df789b545d48effa09f01e85c94bb69d14f59e6dcbf223266227671a5a7c12fcb319cdc11c97461341e2f4090567fc6ba4b8ee4446731f084e115aea644d8bacd419bb170d110d14b95e6f13cb8fba561dde5280a758753776e43ea3e4ee8e57a23d2659262c7e38da2d9040eba9be373805862ac34038398d411fa60a1f04b59d85f99ff05ea3a7c75cb8b22b8587d7388699f1c49b64367046eadbc0", &(0x7f0000000d00)="e05cd51fd9023fe7ea50eb57b57683e912419ad82c5c17bd611b6a79583f131fc7f3ce1959aed0426ff2c9495624a6b2690e3b43d06263") getegid() r5 = request_key(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00)={'syz', 0x1}, &(0x7f0000000e40)='\x00', r3) add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x0}, 0x0, 0x0, r5) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000e80)=""/4096, &(0x7f0000001e80)=0x1000) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000001ec0)={0xf, 0x1f, 0x2, 0xffffffffffffff01}, 0xf) r6 = add_key$keyring(&(0x7f0000001fc0), &(0x7f0000002000)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000001f00)='trusted\x00', &(0x7f0000001f40)={'syz', 0x1}, &(0x7f0000001f80)='(%/@@]&!|#(\x00', r6) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000002040), 0x4) 15:44:52 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+60000}}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000000c0)=""/111, 0x6f, 0x6, &(0x7f0000000140)={0x77359400}) pselect6(0x40, &(0x7f0000000180)={0x4, 0x6, 0x78, 0x31a580000000000, 0xcde, 0x7, 0x8, 0x100}, &(0x7f00000001c0)={0x9, 0x10001, 0x1, 0x9, 0xb6, 0x122, 0x53, 0x3}, &(0x7f0000000200)={0x7fff, 0xf804, 0x101, 0x7, 0x2ed, 0x3c02bf71, 0xa77, 0x8}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0xfa9]}, 0x8}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=0x4, 0x4) syz_io_uring_setup(0xc01, &(0x7f0000000340)={0x0, 0x274e, 0x2, 0x3, 0x261}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x0, @fd_index, 0x5, 0x401, 0x6, 0x10, 0x0, {0x2}}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x6) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=0x1, 0x4) futimesat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0x14, &(0x7f0000000680)={&(0x7f0000000600)="692d4b2049c14378f4d59f722d3ea23fa25ee6e62789634a40a1849cb129fce84300a1a7ce61471b59dbd2a716eee8834c8124ea24e224478374686f35ed183e19c6d8b5cb4fbc", 0x47}, 0x1, 0x0, 0x0, 0x40811}, 0x4041040) r4 = perf_event_open(&(0x7f0000000740)={0x3, 0x80, 0x6, 0xd, 0x3, 0x9, 0x0, 0x401, 0x9a9574cb4819d80c, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000700), 0x1}, 0x48200, 0x4, 0x8, 0x1, 0x0, 0x101, 0x2, 0x0, 0x88, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000007c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000800)={0x40000005}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000840)=0x1, 0x4) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000900), &(0x7f0000000940)={[0xff]}, 0x8) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000980)) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000ac0)='./file0\x00', 0x400, 0x6000, 0x1}, 0x62) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000b40)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) [ 88.668277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.677924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.679719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.682802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.685961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.687121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.716679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.718078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.719862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.721131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.727672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.732036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.734006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.735950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.737024] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.750231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.781433] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.784455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.785914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.787716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.789670] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.795217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.798795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.802496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.810974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.812442] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.814208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.823842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.825863] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.829733] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.836994] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.837042] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.840102] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.841337] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.843174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.844824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.858180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.858811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.860549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.862861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.869307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.870797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.873287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.875011] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.883810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.886227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.888099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.892917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.736677] Bluetooth: hci0: command tx timeout [ 90.800853] Bluetooth: hci1: command tx timeout [ 90.863534] Bluetooth: hci6: command tx timeout [ 90.865307] Bluetooth: hci2: command tx timeout [ 90.928473] Bluetooth: hci5: command tx timeout [ 90.930319] Bluetooth: hci4: command tx timeout [ 90.930507] Bluetooth: hci3: command tx timeout [ 90.931222] Bluetooth: hci7: command tx timeout [ 92.784666] Bluetooth: hci0: command tx timeout [ 92.849136] Bluetooth: hci1: command tx timeout [ 92.912576] Bluetooth: hci6: command tx timeout [ 92.914556] Bluetooth: hci2: command tx timeout [ 92.975501] Bluetooth: hci7: command tx timeout [ 92.977021] Bluetooth: hci3: command tx timeout [ 92.978520] Bluetooth: hci4: command tx timeout [ 92.979938] Bluetooth: hci5: command tx timeout [ 94.832530] Bluetooth: hci0: command tx timeout [ 94.895532] Bluetooth: hci1: command tx timeout [ 94.959520] Bluetooth: hci6: command tx timeout [ 94.960075] Bluetooth: hci2: command tx timeout [ 95.023588] Bluetooth: hci4: command tx timeout [ 95.024147] Bluetooth: hci3: command tx timeout [ 95.024838] Bluetooth: hci7: command tx timeout [ 95.025311] Bluetooth: hci5: command tx timeout [ 96.879522] Bluetooth: hci0: command tx timeout [ 96.943485] Bluetooth: hci1: command tx timeout [ 97.007529] Bluetooth: hci6: command tx timeout [ 97.008088] Bluetooth: hci2: command tx timeout [ 97.071525] Bluetooth: hci5: command tx timeout [ 97.072068] Bluetooth: hci7: command tx timeout [ 97.072606] Bluetooth: hci3: command tx timeout [ 97.073068] Bluetooth: hci4: command tx timeout [ 151.328041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.338065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.340862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.347701] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.350838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.353092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.609722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.613285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.616754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.633968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.639694] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.642809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.818345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.821695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.824869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.836777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.838301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.839133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.840152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.842547] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.847685] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.856500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.864029] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.866335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.885280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.895183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.901549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.919564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.932500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.935726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.941962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.964158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.969068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.976672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.980771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.982821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.990248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.993557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.997518] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.998339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.006279] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.008619] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.011703] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.015988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.017773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.019853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.025602] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.028660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.391770] Bluetooth: hci0: command tx timeout [ 153.712527] Bluetooth: hci1: command tx timeout [ 153.904246] Bluetooth: hci2: command tx timeout [ 153.968635] Bluetooth: hci4: command tx timeout [ 153.969533] Bluetooth: hci3: command tx timeout [ 154.095536] Bluetooth: hci6: command tx timeout [ 154.095601] Bluetooth: hci5: command tx timeout [ 154.160548] Bluetooth: hci7: command tx timeout [ 155.439944] Bluetooth: hci0: command tx timeout [ 155.759481] Bluetooth: hci1: command tx timeout [ 155.951470] Bluetooth: hci2: command tx timeout [ 156.016450] Bluetooth: hci4: command tx timeout [ 156.016480] Bluetooth: hci3: command tx timeout [ 156.143584] Bluetooth: hci6: command tx timeout [ 156.143735] Bluetooth: hci5: command tx timeout [ 156.207562] Bluetooth: hci7: command tx timeout [ 157.487492] Bluetooth: hci0: command tx timeout [ 157.807535] Bluetooth: hci1: command tx timeout [ 157.999484] Bluetooth: hci2: command tx timeout [ 158.064626] Bluetooth: hci3: command tx timeout [ 158.065180] Bluetooth: hci4: command tx timeout [ 158.191592] Bluetooth: hci5: command tx timeout [ 158.194410] Bluetooth: hci6: command tx timeout [ 158.255575] Bluetooth: hci7: command tx timeout [ 159.543932] Bluetooth: hci0: command tx timeout [ 159.855464] Bluetooth: hci1: command tx timeout [ 160.047568] Bluetooth: hci2: command tx timeout [ 160.111567] Bluetooth: hci3: command tx timeout [ 160.112060] Bluetooth: hci4: command tx timeout [ 160.239618] Bluetooth: hci6: command tx timeout [ 160.240146] Bluetooth: hci5: command tx timeout [ 160.304422] Bluetooth: hci7: command tx timeout [ 213.453995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.455531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.456654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.462009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.463439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.464554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.528208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.537555] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.573224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.612277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.613930] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.615069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.706247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.713804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.720287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.729993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.732918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.735068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.822110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.827974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.841366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.844601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.846606] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.848181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.907119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.917917] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.918902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.923333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.925751] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.928751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.932825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.936255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.937308] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.938267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.939579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.940580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.942841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.945256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.953885] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.986590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.987411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.995542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.997249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.999803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.005184] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.007684] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.014587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.023730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.536500] Bluetooth: hci0: command tx timeout [ 215.666418] Bluetooth: hci1: command tx timeout [ 215.791476] Bluetooth: hci2: command tx timeout [ 215.919510] Bluetooth: hci3: command tx timeout [ 215.984411] Bluetooth: hci6: command tx timeout [ 216.111679] Bluetooth: hci7: command tx timeout [ 216.112666] Bluetooth: hci4: command tx timeout [ 216.112808] Bluetooth: hci5: command tx timeout [ 217.584059] Bluetooth: hci0: command tx timeout [ 217.711544] Bluetooth: hci1: command tx timeout [ 217.839426] Bluetooth: hci2: command tx timeout [ 217.967413] Bluetooth: hci3: command tx timeout [ 218.031511] Bluetooth: hci6: command tx timeout [ 218.159479] Bluetooth: hci5: command tx timeout [ 218.160620] Bluetooth: hci4: command tx timeout [ 218.161080] Bluetooth: hci7: command tx timeout [ 219.633395] Bluetooth: hci0: command tx timeout [ 219.759517] Bluetooth: hci1: command tx timeout [ 219.887422] Bluetooth: hci2: command tx timeout [ 220.015489] Bluetooth: hci3: command tx timeout [ 220.079426] Bluetooth: hci6: command tx timeout [ 220.207776] Bluetooth: hci7: command tx timeout [ 220.207792] Bluetooth: hci5: command tx timeout [ 220.208634] Bluetooth: hci4: command tx timeout [ 221.680435] Bluetooth: hci0: command tx timeout [ 221.807422] Bluetooth: hci1: command tx timeout [ 221.935468] Bluetooth: hci2: command tx timeout [ 222.063428] Bluetooth: hci3: command tx timeout [ 222.127480] Bluetooth: hci6: command tx timeout [ 222.255725] Bluetooth: hci7: command tx timeout [ 222.256612] Bluetooth: hci4: command tx timeout [ 222.257403] Bluetooth: hci5: command tx timeout [ 275.951226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.951459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.958495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.963495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.966755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.969241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.971244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.978999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.981301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.987480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.991726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.993912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.107863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.140648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.143141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.146106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.156792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.160698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.173593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.176596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.185954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.191496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.199170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.201640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.204558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.206225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.209801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.211740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.217589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.223080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.231702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.289543] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.290568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.294455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.297042] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.308174] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.314529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.315612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.316808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.318038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.319396] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.321002] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.322508] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.324943] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.326194] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.351999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.353816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.369273] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.063587] Bluetooth: hci1: command tx timeout [ 278.064735] Bluetooth: hci0: command tx timeout [ 278.335631] Bluetooth: hci3: command tx timeout [ 278.336122] Bluetooth: hci2: command tx timeout [ 278.384869] Bluetooth: hci4: command tx timeout [ 278.384895] Bluetooth: hci7: command tx timeout [ 278.447464] Bluetooth: hci5: command tx timeout [ 278.448612] Bluetooth: hci6: command tx timeout [ 280.111567] Bluetooth: hci0: command tx timeout [ 280.111609] Bluetooth: hci1: command tx timeout [ 280.367501] Bluetooth: hci2: command tx timeout [ 280.369048] Bluetooth: hci3: command tx timeout [ 280.431539] Bluetooth: hci4: command tx timeout [ 280.432732] Bluetooth: hci7: command tx timeout [ 280.498397] Bluetooth: hci6: command tx timeout [ 280.498426] Bluetooth: hci5: command tx timeout [ 282.159473] Bluetooth: hci1: command tx timeout [ 282.160030] Bluetooth: hci0: command tx timeout [ 282.416569] Bluetooth: hci3: command tx timeout [ 282.417873] Bluetooth: hci2: command tx timeout [ 282.480550] Bluetooth: hci7: command tx timeout [ 282.480750] Bluetooth: hci4: command tx timeout [ 282.543483] Bluetooth: hci6: command tx timeout [ 282.543571] Bluetooth: hci5: command tx timeout [ 284.207628] Bluetooth: hci0: command tx timeout [ 284.207697] Bluetooth: hci1: command tx timeout [ 284.465418] Bluetooth: hci2: command tx timeout [ 284.465607] Bluetooth: hci3: command tx timeout [ 284.527464] Bluetooth: hci7: command tx timeout [ 284.528650] Bluetooth: hci4: command tx timeout [ 284.593401] Bluetooth: hci5: command tx timeout [ 284.593424] Bluetooth: hci6: command tx timeout [ 338.300602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.303200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.311548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.316281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.319471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.321254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.323513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.332083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.335585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.339223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.342008] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.349071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.428915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.441091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.447748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.451537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.452918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.484833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.574031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.582622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.586781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.594365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.608692] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.613603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.656597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.658216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.659563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.663606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.665173] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.666407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.677566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.679160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.681031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.686018] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.689384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.690833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.718440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.723547] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.727534] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.730939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.735028] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.748822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.760569] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.767297] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.775463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.812720] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.829652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.831099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.399432] Bluetooth: hci1: command tx timeout [ 340.400697] Bluetooth: hci0: command tx timeout [ 340.593408] Bluetooth: hci2: command tx timeout [ 340.655426] Bluetooth: hci3: command tx timeout [ 340.719404] Bluetooth: hci4: command tx timeout [ 340.720424] Bluetooth: hci5: command tx timeout [ 340.848433] Bluetooth: hci6: command tx timeout [ 340.849261] Bluetooth: hci7: command tx timeout [ 342.448428] Bluetooth: hci0: command tx timeout [ 342.448943] Bluetooth: hci1: command tx timeout [ 342.639634] Bluetooth: hci2: command tx timeout [ 342.703482] Bluetooth: hci3: command tx timeout [ 342.767433] Bluetooth: hci5: command tx timeout [ 342.767926] Bluetooth: hci4: command tx timeout [ 342.896631] Bluetooth: hci7: command tx timeout [ 342.897143] Bluetooth: hci6: command tx timeout [ 344.496434] Bluetooth: hci1: command tx timeout [ 344.496957] Bluetooth: hci0: command tx timeout [ 344.688393] Bluetooth: hci2: command tx timeout [ 344.752471] Bluetooth: hci3: command tx timeout [ 344.815622] Bluetooth: hci5: command tx timeout [ 344.816115] Bluetooth: hci4: command tx timeout [ 344.944434] Bluetooth: hci7: command tx timeout [ 344.944946] Bluetooth: hci6: command tx timeout [ 346.543413] Bluetooth: hci0: command tx timeout [ 346.543931] Bluetooth: hci1: command tx timeout [ 346.736894] Bluetooth: hci2: command tx timeout [ 346.800394] Bluetooth: hci3: command tx timeout [ 346.863423] Bluetooth: hci4: command tx timeout [ 346.863907] Bluetooth: hci5: command tx timeout [ 346.991440] Bluetooth: hci6: command tx timeout [ 346.991948] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:50:02 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff84a00130 RDI=ffff88806ce09a78 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a08 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=00000000000c10c7 R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff88806ce09ab9 R15=ffff88806ce09a78 RIP=ffffffff81148faa RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb24679f368 CR3=000000000c406000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf3c868 RBX=ffff8880239d6408 RCX=ffffffff815978fd RDX=1ffff1100d9e78f3 RSI=0000000000000008 RDI=ffff88806cf3c798 RBP=0000000000000200 RSP=ffff88802b4bf378 R8 =ffffffff85c20d80 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=00000000000c2f81 R12=ffffffff847a2da0 R13=ffff88806cf3c780 R14=ffff88806cf3c820 R15=0000000000004e20 RIP=ffffffff813ab50a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2083ca11f0 CR3=000000003588e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000