Warning: Permanently added '[localhost]:15134' (ECDSA) to the list of known hosts. 2024/11/11 23:04:55 fuzzer started 2024/11/11 23:04:56 dialing manager at localhost:46317 syzkaller login: [ 63.656244] cgroup: Unknown subsys name 'net' [ 63.723768] cgroup: Unknown subsys name 'cpuset' [ 63.774802] cgroup: Unknown subsys name 'rlimit' 2024/11/11 23:05:13 syscalls: 201 2024/11/11 23:05:13 code coverage: enabled 2024/11/11 23:05:13 comparison tracing: enabled 2024/11/11 23:05:13 extra coverage: enabled 2024/11/11 23:05:13 setuid sandbox: enabled 2024/11/11 23:05:13 namespace sandbox: enabled 2024/11/11 23:05:13 Android sandbox: enabled 2024/11/11 23:05:13 fault injection: enabled 2024/11/11 23:05:13 leak checking: enabled 2024/11/11 23:05:13 net packet injection: enabled 2024/11/11 23:05:13 net device setup: enabled 2024/11/11 23:05:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/11 23:05:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/11 23:05:13 USB emulation: enabled 2024/11/11 23:05:13 hci packet injection: enabled 2024/11/11 23:05:13 wifi device emulation: enabled 2024/11/11 23:05:13 802.15.4 emulation: enabled 2024/11/11 23:05:13 fetching corpus: 0, signal 0/0 (executing program) 2024/11/11 23:05:15 starting 8 fuzzer processes 23:05:15 executing program 0: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = getpid() r1 = getpid() r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, r2, 0xef2}) waitid(0x2, r1, &(0x7f00000000c0), 0x80000000, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000240)=0x2) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r4, 0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) getrusage(0x0, &(0x7f0000000300)) waitid(0x1, 0x0, &(0x7f00000003c0), 0x4, &(0x7f0000000440)) epoll_wait(r3, &(0x7f0000000500)=[{}, {}, {}], 0x3, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4004011) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0) 23:05:15 executing program 1: ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0xcb, "bbe2083d9ed68fa92ea9cca957375fca46a38589c3750ed4a6e6c012680c4221a9c2ce6e56867e0e76c4339cc54c3f2eaed3dd8e4ed80bcbd37637e6153415ce294aed5cefce11fce030fa3472c1a3dbcbd3b159e696616cfe428eb4bcba5a52f7a5b41be467edb0e96591bba883674e72f4a7029c551b2b1e4a7ab89549e4d2c8f00b1eed453048d283f8f7058d110973216a87d2dc322433495554ecf1fac0a870f61431174311f4b94ec90aa8eae277bb9d6b627e4081cc3260995a6d964bbc7419bbd1ac5a5f9c688b"}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000140)={0x5, 0x20, 0x1b70, 0xd82f}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = getpid() waitid(0x2, r0, 0x0, 0x40000000, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000180)={0x1, 0x100, 0x3, 0xe7, 0x2, 0x8}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000200)={0x1, 0x2, 0xfffffffc, 0xd0, 0x9d, 0x9a61}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000280)) r4 = fsmount(r2, 0x1, 0x7a) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f00000002c0)) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000300)={'\x00', 0x7, 0x3, 0x3}) inotify_init1(0x80000) fsopen(&(0x7f0000000380)='nilfs2\x00', 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000440)={{0x3, 0x1, 0x7fffffff, 0x1, 0x5}}) sched_rr_get_interval(0x0, &(0x7f0000000480)) 23:05:15 executing program 2: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8000}, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @release, @increfs_done], 0xf1, 0x0, &(0x7f00000000c0)="a0160a90e6d84dd8c7ec6519297d9ecc60d6d3a05c1f5ec6c42b17e3ac208fd4ee6b65f1fcd4c2eefbea86bfe9e617d918dcc427d73edf358ba08d380f29674e6bed1f84a4b676c19cd9a97627f9e1a1d4f52cf96ad1acdbefd9d56c0019bdc05cec829f4d31d3fae8ed2922fe27d887443161edb90b10d31e5de288cb651d20fb19423873813169714cb1d23613c5ada40ecdc07c8ae7e369e1edef60c7a3bffe29987923dd6f4c292465a4126a1a725bb80aa4b5101aba42ef0892372dafbfd67bcfedc33e894327c7d161ff095309641f77aca0208c711dfed0b03517ef4ac22fa27b800ad46d426f1316615dec96d4"}) r1 = fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='.}\xcb\x00', 0x0, r2) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x119) r4 = socket$packet(0x11, 0x0, 0x300) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='R,%]\x00', 0x0, r4) r5 = fsmount(r1, 0x1, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0xcc, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/68, 0x44, 0x1, 0x38}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}, @exit_looper, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1080, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @release, @request_death={0x400c630e, 0x3}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x2}], 0x64, 0x0, &(0x7f00000005c0)="7b9ef07c080920c60541f6fa3df49f6b9fa86891c5301bdb338a356ba3c809ceac4c4cd1e065073c7dd461274205f6cc12a538c261167ea5284601496aa28b2276b099bd69b9ec4b786044e515a4223c0b1f446e38e3495f360405bc67f889725a897074"}) r6 = fsmount(r1, 0x1, 0x80) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000980)={0xa4, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x6, &(0x7f0000000680)=""/156, 0x9c, 0x0, 0x27}, @flat=@binder={0x73622a85, 0x1101, 0x1}, @fda={0x66646185, 0x3, 0x0, 0xe}}, &(0x7f00000007c0)={0x0, 0x28, 0x40}}, 0x1000}, @dead_binder_done, @free_buffer={0x40086303, r3}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x3}, @decrefs, @acquire={0x40046305, 0x2}], 0x86, 0x0, &(0x7f00000008c0)="922a5ec6f8d7f7e3048e851ec10f559f75f2b1cdb03cddbbfcbffc536974793ee59c970e0183e087465241a496561b582afe3c0cc4872f86a08c37f4dbc7629d53910a472123b0d8d7a72b8c74a693d23363b0bc81b2ccf30af5528cf567714b9541cf71822132222f2912ca82f57c134db4b692a6a123431259137ceca586fd77f96aa62b89"}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0xbb, 0xe8, 0xa6, 0xff, 0xc45, 0x6011, 0xe376, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3f, 0x40, 0x1, [{{0x9, 0x4, 0x49, 0x1, 0x0, 0x11, 0xd8, 0x87, 0xff}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x200, 0xc0, 0x3f, 0x21, 0x10, 0x3f}, 0xf, &(0x7f0000000a40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x6, 0x8}]}, 0x1, [{0x6e, &(0x7f0000000a80)=@string={0x6e, 0x3, "b652c28fcc1b08ce060fa53cd5c99155ff8ebd0b394b1fb1818a4986394f69ee5ce1f8ba4e59932a2cde3c440d125041e9b51acea169811312337a9bf575ed9d8eff7d4060f655ff351d98e213b0d78a5db0f6915155d079c18eb9857617a824474c8913a27e1e78c7fcae11"}}]}) syz_usb_disconnect(r7) r8 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000b40)) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x100) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x200000c1) 23:05:15 executing program 3: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x1, 0x4, 0xffffffff, 0x0, 0x11}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x80000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x169100) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000180)={0x5, 0x3, 0x81}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xcbe601b7aea8fcd3}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x8004) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) [ 82.373175] audit: type=1400 audit(1731366315.407:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:05:15 executing program 4: socket$inet6(0xa, 0xa, 0x40) r0 = fsmount(0xffffffffffffffff, 0x1, 0x3) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='-\'\\!\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r1 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000100)) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x8, 0x143801) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000180)) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='/dev/usb/hiddev#\x00', 0x0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000001, 0x10010, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd=r0, 0x9, &(0x7f0000000800)=[{&(0x7f0000000200)="f7e86827e6cb68d43ed52cba3e2976e3bdfe1524fe9daf7f718c50a5b1b4f3ee7229989cd5d4b653d71f4eddb45c702a58a0143245fca31b0acde347b38e28d50a2e28bda0506acad8c208d4969ccce66d8bd2bf8d63e70cd71864d4b634d452fa99a9b39c815f349c0e1365517d246f4bf46bae801185683db26b46fdd7bac8a1616eb1d0cde0cfbfbd4838f63ffaac679a008ff5c93b01b6ab113a458bf9bf34dcbea5dfa0a8224330e1642e844e8cbde0dfc28077964c8617aaf33b8436699f7af79da3319b2315a88ea24a93ef560f8ba9d2f4c1655189e0732922f5b15be40c8555902b895bb466fe8b32a108988d86000b", 0xf4}, {&(0x7f0000000300)="dc98a6fffea88caf73906dabf2b692b053833976ed90a7a424d862d77d2e58dcf6c929ffc6efc31acb4251373eeaa78c686c4a8e19bb0bae19d2286c3b6c280d557c8f47e85678f17633382d370b11de170a1d7660e03da4ca557082929333ff30cbbb901d9f34ae3126c3725cb897", 0x6f}, {&(0x7f0000000380)="50868f1030b38224ef3e8ecaf3eecbfe2b94aadce6ced21609eea0e0d4459696a16c1fe7f747ea1a2711df54c4fd1cf46bae233dde1786ff3d478ade71b72ed09baf5914fadc251b21962cf93820985ccf42bc6cc43241bdfca6000363ba77bce8ece4fe0f5d4a0180dfb563e05fbf", 0x6f}, {&(0x7f0000000400)="5579383397db88e6f01977e1f3a4aa36dd8e002bee6b66b9e5c8af675769dc1cb7dcdb582e906b65381f17d51e2ee6f249870ab82b0bda159d6d6ca4f156e0e074111ca23e199765b07bc43138636eebe0b7d2b9e235fe995ff683950ee582cbf2155b40ca43ea33190c1c5c057ac87e9e7678fa1845b299bf1fe8a565b8c09e3dae73319cb3be98695efb083e05f775cf4615176c303be870fa6717c281c0f63843041e26abbd8b14638047c6ea4d0949074d1027732a3c339c84ef4f6379e81fad0f", 0xc3}, {&(0x7f0000000500)="43e4b12fbe8fd5dffd3f44bf09c58411d2fdd4edc57d8f46", 0x18}, {&(0x7f0000000540)="8ee94cd7bfc4d433ae596cbda76f35943a90337e3629aa261289ccf729272ee9bbb9d8feac6f31b08244b01f7d167eb99574e49a31db18dbb95578989fb6e57b6887bf60ca2a0b998571d2ab884a414a3b2a67160f702ee6b0b5635b35d9d92ecdbe7457a6", 0x65}, {&(0x7f00000005c0)="ce0990b999e5832a080073b1cac3695a72e016bb18d7980dd5682e9eefba542a8b80df4a75e40dfe931df3cd5144f689817bf8f5ab79c6272a26eb8b86f0a55052cf3c289e2ead2ee453980aff8a3bc7c13af2d26705be649261e15abe6879d21887cf830c10d9b143f11df04f18f8f83c71d5c45631365fc1f9c34460a06247457a9bfa6ddadac95c51da22c29bd677e52fee5a906f1adf796d3beb47842fb56c3dbaede0cdc38095426b71c6fe539e279d256be83b1a11", 0xb8}, {&(0x7f0000000680)="498825c98bfb571f6399964616e102a3f325bd4f85758061a58a2b39bb97acfae4d87965f64c718348334e10fa7645addb81605605d1a60a2e7aca07ad0e6e6b2512b57032496a2c1f4322bdd83e2a0875d786b8dc992dc85eff5d3bfd633b974e3ab0", 0x63}, {&(0x7f0000000700)="53d4ba654fb4260d01579905a9a01cd9f2d74826919cead9ec4c8439b67d15a0569a26dc9ec24e31e351f7659b8d12bcf6c192097fa3bf4b8792b2a1643ab78cf373554152e575374b44165957c87056ae95b406d802ee0c84bc61db8332051499764f8dd5d0acd8bc1109f7f95f8130eadf53bb0b17893c8eed8ee05a043573ed6df452053e61f590d96c2630f4291c83003badd6050785b469172e5212b71f6e630fb9f285215e8b30d674c458650feba782dc81b5f326ae54bc370a6f7f43045540a2ca70f9c45c300cb6d54e52bcc9", 0xd1}], 0x9, 0x2, 0x0, {0x3}}, 0x5) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000900), 0x46001, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000940)={{0x1, 0xffffffff, 0x8, 0x7, 0x7, 0x7fffffff}, 0x302, [0x7fff, 0x2800000, 0x7fffffff, 0x42, 0x6, 0x9, 0x8000, 0x0, 0x9, 0x7, 0x10001, 0x7, 0x3, 0xde, 0xffff, 0x8f1, 0xfff, 0x3, 0x8, 0x4c4b, 0x1, 0x7, 0x2, 0x4, 0x1000100, 0x40, 0x9, 0x9, 0x1, 0xffff, 0x9090, 0x0, 0x7fffffff, 0x8, 0x9, 0xf5c08d9, 0x4e, 0x0, 0xdfeb, 0x7e00, 0x6, 0x0, 0x8, 0x10001, 0x0, 0x52f, 0x401, 0x1000, 0x9, 0x8, 0x0, 0x401, 0x4, 0x10000, 0x0, 0x2, 0xf7c0, 0x4, 0x5, 0x6f9d, 0x6, 0x3ff, 0x101, 0x6, 0x2, 0xffff, 0xf5, 0x5, 0x400, 0x0, 0x8001, 0x773, 0x0, 0xd8c, 0x3f, 0x1f, 0x4, 0x9, 0x0, 0x7, 0x100, 0x7, 0x0, 0xd31, 0x80000000, 0x6, 0x1200000, 0x3, 0x5, 0x80000001, 0x6, 0x2, 0x8, 0x5, 0x20, 0x5, 0x88, 0xf45, 0x45, 0xa8c, 0x80000001, 0x6, 0x1f, 0x7fffffff, 0x9, 0x8, 0xc370, 0xe564, 0x9, 0x53d26009, 0x10000, 0xfffffffd, 0x4, 0x7, 0x7, 0x5, 0x1, 0x2, 0x4, 0x2, 0x7b3e712d, 0x7fffffff, 0xfffffffb, 0x4, 0x7fff, 0x8f8, 0x100, 0x2a246cef, 0x101, 0xed, 0x4, 0x5, 0x747811ec, 0x5, 0xfffffffd, 0x8000, 0x1, 0x1f, 0x3, 0x4, 0x5, 0x2, 0xcb1d, 0x3, 0x5, 0x20d, 0x2, 0x10001, 0x7, 0x7, 0x6, 0x5fd2f924, 0xa14, 0xf4, 0x5, 0xb05a, 0x80000001, 0x6, 0xc3, 0xc1c3, 0xff, 0x1, 0x1, 0x1b0, 0x96, 0x800, 0x4, 0x1, 0x400, 0x7fff, 0x1f, 0x7, 0x3ecd, 0x1000, 0x9, 0x5, 0x7ff, 0x0, 0x4, 0xf322, 0x40, 0xa08d, 0x7, 0x9, 0x6, 0xff, 0x8000, 0x3, 0xfffffffe, 0x6, 0x7fff0, 0x8a, 0x1000, 0x9, 0x80, 0x1, 0x48d5, 0x8001, 0x0, 0x5, 0x0, 0x6, 0x1f, 0x7, 0x5, 0x1, 0x4e2, 0x7, 0x7, 0x43, 0x7fff, 0x40, 0xefb, 0x3, 0x7fffffff, 0xfffffffa, 0x1, 0x7, 0xffffffff, 0x4, 0x55e, 0x20000000, 0x9, 0x0, 0x8, 0x10001, 0x8, 0x5, 0x6, 0x1, 0x100, 0x9f, 0x4, 0xfffffffa, 0x10000000, 0x4, 0x0, 0x6, 0x0, 0x8, 0x5, 0xfff, 0xffffffff, 0x5, 0x3ff, 0x6bae, 0x8, 0x1, 0x1000, 0x7, 0x3, 0x8, 0xd2e, 0x6, 0x6, 0x7fffffff, 0x4b, 0x2a0b, 0x80000001, 0x1, 0x9d7, 0x8, 0x3, 0x6, 0x3f, 0x400, 0x7, 0x8000, 0x2766, 0x4, 0x6ac3, 0xba, 0x1, 0x2b06, 0x1, 0x2, 0x6, 0x5, 0xc96, 0x314, 0x9, 0x24, 0x5, 0x80000001, 0x9, 0x2, 0x8000000, 0x7bc8, 0x1, 0x7, 0x7ff, 0x8, 0x4, 0x2, 0x4, 0x0, 0x1, 0x8, 0x4, 0x521, 0x5, 0xfffffff9, 0x12801bec, 0x8, 0x1, 0x7, 0x7fffffff, 0x9, 0xffff, 0x1b, 0x4, 0x3, 0x9, 0x7, 0x5, 0xaeb, 0x930, 0x1, 0xb4a6, 0x6, 0x80, 0x7, 0x9, 0xfffffff7, 0x6, 0xad3, 0x7, 0x9, 0x8000, 0x1f, 0xffffffff, 0x2, 0x5, 0xe51f, 0x401, 0x9, 0xc48d, 0x40, 0x0, 0x10001, 0x8, 0x0, 0x5, 0xade, 0x0, 0x8001, 0xe3, 0x8, 0xfff, 0xa45, 0x21ce, 0xff, 0x4, 0x6, 0x0, 0x3, 0xfffffe01, 0x8, 0x0, 0x4e, 0x1, 0xeac, 0xfff, 0x3e0, 0x0, 0x200, 0x6, 0x14000000, 0xf8c, 0x6, 0x2, 0xfffff001, 0x7ff, 0x4, 0xff, 0xc3, 0x7, 0xf8000000, 0x0, 0x8000, 0xab26, 0x2, 0x9, 0x101, 0x7fff, 0x9, 0x154, 0xfffffc01, 0x2, 0x0, 0x6, 0x10000, 0x8e, 0xa545, 0x20, 0x4, 0x6, 0xb3e, 0x200, 0xfffffffc, 0x5, 0x2, 0x9, 0x3, 0x2, 0x3, 0xf1c, 0x322, 0x3, 0x9, 0x20c0, 0x9, 0x4, 0x6, 0x8a9d, 0x4, 0x9, 0xfffffffd, 0x5b81, 0x5800, 0xfffffffb, 0x10000, 0xfff, 0x3, 0x5, 0x3, 0x55f, 0x1f, 0x80000000, 0x80, 0x7273b0bd, 0x100, 0x4, 0x400, 0x3, 0x99, 0x0, 0x0, 0x5, 0xffff90ed, 0x40, 0xa02, 0x8, 0x9, 0x0, 0x200, 0x1, 0x2, 0xfffffff7, 0x101, 0x4, 0x100, 0xed8, 0x20, 0xc2c, 0x6, 0x7, 0x83, 0x9, 0x1, 0x10001, 0x800, 0x800000, 0x0, 0x2, 0x80, 0x80e, 0x0, 0x1, 0x7ff, 0xffffff75, 0x94e80, 0x3f, 0x8, 0x219, 0x2, 0x10001, 0xfffffffa, 0x5, 0x2, 0x7, 0x6, 0x5, 0x6e9, 0x81, 0x8, 0x4, 0x401, 0x9, 0x22e8, 0x7b8, 0xe2, 0x5, 0x3, 0x7, 0x38, 0x9, 0x9, 0x3, 0xfffffffb, 0x8, 0x200, 0x1, 0x6, 0x40, 0x2, 0x2, 0x10000, 0xfffffff7, 0x8001, 0xfffffff7, 0x4, 0x0, 0x11c0ca6, 0x10001, 0x3f, 0x0, 0x5, 0x9, 0x10001, 0x7, 0x9, 0x1f, 0x54d, 0x9, 0xbb, 0x2, 0x7, 0x3f, 0x169a, 0x7, 0x7ff, 0x6, 0x81, 0x8, 0x4, 0x80, 0x1, 0x0, 0x2, 0x4, 0x1, 0x7, 0x38b4, 0x8, 0x1000, 0x3, 0x3, 0xae52, 0x1, 0xfffffff7, 0x1, 0x3, 0x8001, 0x401, 0x0, 0x21b425c1, 0x3, 0x10001, 0x0, 0xfff, 0x2, 0x3, 0x7, 0x7fff, 0xa8f, 0x8, 0xfffffffd, 0x2cce, 0x3, 0x0, 0x1, 0x100000, 0x80000001, 0x101, 0x2, 0x9f8, 0x0, 0x2, 0x4, 0x40, 0x1, 0x5, 0x9, 0xfffffffe, 0x2, 0x7e8e, 0x9, 0xff1, 0xc2b2, 0x3, 0x1f, 0x3ff, 0x2, 0x9, 0x7fff, 0x800, 0x10001, 0x80, 0x0, 0x1, 0x1b4, 0x9, 0xff, 0x9f35, 0x3, 0x5, 0x7, 0x4, 0xffff, 0x8a, 0x0, 0x80000000, 0x14, 0x9f5, 0x3, 0x5b, 0x1, 0xc0a3, 0x3a5, 0xd520, 0x0, 0x2, 0x10001, 0x6, 0x401, 0x80000001, 0xfff, 0xfffffffd, 0x2, 0x4, 0x9, 0x3, 0x3, 0x100, 0x20, 0x101, 0x200, 0x4, 0x2, 0x4, 0x1, 0x7, 0x9, 0x3af0, 0x7, 0x9300, 0x8, 0x6, 0xb10, 0xfffffff7, 0x7, 0x0, 0x1, 0x80000000, 0x561, 0x1, 0x4, 0x2, 0x1, 0x8, 0x467, 0xd3d, 0x28f, 0x4, 0x7, 0x9ec, 0x4, 0x400, 0xffffffc0, 0xfff, 0x200, 0x5, 0x81, 0x10001, 0xfdcde6e, 0x6, 0x10000, 0x7, 0x4, 0x8, 0x7, 0x1ff, 0x5, 0x1000, 0x0, 0x2, 0x3ff, 0xfa76, 0x80000000, 0x2419, 0x7fffffff, 0x4, 0x3, 0x80000000, 0xe561, 0x8000, 0x8, 0x3, 0x1, 0x1, 0x1147, 0x8, 0x1ff, 0x6, 0x7c, 0xfffff6fe, 0x1, 0x6, 0x8, 0x1, 0xac, 0xffffff56, 0x7, 0x8, 0x10001, 0x0, 0xfffffff7, 0xffff0000, 0x3, 0x3ff, 0x9, 0x0, 0x5, 0x10000, 0x9, 0x10001, 0x7, 0xffffffff, 0x80000001, 0x1, 0x48, 0x1, 0x3, 0x2da, 0x4, 0x52, 0x9, 0x8, 0x7ff, 0x4, 0x3ff, 0x67, 0xffffffff, 0x6, 0x3, 0x52e, 0x7, 0x1000, 0x6, 0x101, 0x1a70, 0x6, 0x6, 0x8720, 0x0, 0x4, 0x3, 0xbf, 0x1, 0x7ff, 0x400, 0x2, 0x3, 0x400, 0x0, 0x1, 0x2, 0x5, 0x30000, 0x7, 0x1ff, 0x1, 0x6, 0x6, 0x3, 0x7, 0x9, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x4, 0xcf5, 0xffffff80, 0x5, 0x3, 0xffffb3b8, 0x3, 0x7ff, 0x3, 0xffff0000, 0x1, 0x3b61, 0x1ff, 0x5, 0x1f, 0xc00000, 0x6, 0x8001, 0x9, 0x4, 0x401, 0x1, 0x8, 0x1, 0xff, 0xff, 0x3ff, 0x80000001, 0x20, 0xd29, 0x800, 0x8, 0x3, 0x88, 0x40, 0x0, 0x1000, 0x5, 0x3, 0xee2, 0x3, 0x3, 0x4, 0x0, 0x7, 0x0, 0x2, 0xffffffff, 0x8000000, 0x81, 0x7f, 0x0, 0xeb7, 0x1, 0x2, 0xfffffffc, 0x5, 0x1, 0xe0000, 0x4, 0x3, 0x20, 0x9, 0x7, 0x0, 0xff, 0x30, 0xffffffff, 0x8, 0x3, 0x0, 0x3, 0xfa2c, 0x4, 0x1b57, 0x6401, 0x5, 0xfffffffa, 0x8, 0x10000, 0x4d38, 0x1, 0xfff, 0xfffffffc, 0xac2, 0x2, 0x7, 0x2, 0x81, 0x7fffffff, 0xc93, 0xa3, 0xc5, 0x80000001, 0x40, 0x7fff, 0x7, 0x8, 0x5, 0x100, 0x1ff, 0x1000, 0x8001, 0x7ff, 0x3, 0x0, 0x7, 0x7f, 0x401, 0x0, 0x651, 0x401, 0x1f, 0x7b5, 0xc4, 0x200, 0x1000, 0x9, 0x400, 0x3ff, 0x718bab2, 0x2, 0x9, 0x5, 0x81, 0x9, 0x8, 0x1, 0x1, 0x5, 0x3668, 0x80000001, 0x7f, 0x5, 0x955, 0x6731, 0x8c9, 0x8001, 0x4, 0x1, 0x7ff, 0x6, 0x5, 0x0, 0xfffff000, 0x7, 0x3, 0xd16a, 0xa1, 0x6, 0xffff, 0x80, 0x3, 0xfff, 0x9da2, 0x0, 0x0, 0x2, 0x5855, 0x200, 0xd1, 0x9, 0xba, 0x1000, 0x926, 0x8001, 0x800, 0x3, 0x196, 0x3, 0x7, 0x32, 0x51a, 0x0, 0xc409, 0x401, 0xfffe0000, 0x1ff, 0x2, 0x1, 0xf8280000, 0x30f, 0x231f, 0x5, 0x7, 0x5, 0x8, 0x7, 0x2, 0xfd6a0000, 0x7ff, 0xfe1, 0x0, 0x0, 0x5, 0xc1e, 0x80000001, 0x8001, 0x1605, 0x1, 0x6, 0x9, 0x1, 0x3, 0x3, 0x401, 0x4, 0x6, 0x80000000, 0x0, 0x4, 0x1, 0x9, 0xf1c, 0x4, 0x1ff, 0x5, 0x2, 0x486f4cb0, 0xfffffffd, 0x80000000, 0x7, 0xd904, 0x1, 0x1, 0x8, 0x8, 0x80000001, 0x3, 0x1, 0x7, 0x7e4cd696, 0x0, 0x5, 0x8, 0xffff91cc, 0x6]}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000001980)='\x00', &(0x7f00000019c0)='./file0\x00', 0xffffffffffffff9c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x40) r5 = epoll_create1(0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup.net/syz1\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) openat$cgroup(r0, &(0x7f0000001a40)='syz0\x00', 0x200002, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x4, &(0x7f0000001a80)) 23:05:15 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x13c, &(0x7f0000000000)={[{0x4, 0x4e00, "44a63b3c"}, {0xb, 0x4e00, "5eb6b2ec37a9035e438129"}, {0x53, 0x4e00, "8a4d176a0032e4b41f38ad134ee77ed7a2e75ec1712a9b975aa291f3b7fafd2a564696f272777b689ce1857c177c67634bea9b3d4228e0454197e57dbd6d7ba6521ee7553513917752b666cc261abc6ac46cac"}, {0x43, 0x4e00, "c5e15102d78667ab17f3a53336b66c064f8cecd285d1703ace6217446a627210119a310d3395bfcde3d8dbc1dd7b22fc761b6585b54ee5dd67b9a2c98648b0a66bcebc"}, {0x5a, 0x4e00, "c0bdb347ffb3af777f2f8ec28ee46b46fb666a61d6e4cf39be82fa7851c446a39222b82ceefd57f9f9db00bc0e936d83a97e168757f6146bb5f53da5c9335c34b025151c0c94fc6ad1c19ce35ee30f8c5a5a4c99010348f2311a"}, {0x20, 0x4e00, "ecd93c421bdf60fc1d831771dd735c042abb15625ece3f93324684cff0056f08"}]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x800, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x8}) syz_usb_disconnect(0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000200)) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x349000) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000280), &(0x7f00000002c0)=""/19, 0x13}) inotify_init1(0x80000) syz_usb_ep_read(0xffffffffffffffff, 0x21, 0x1000, &(0x7f0000000340)=""/4096) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd5f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x28000844}, 0x4000005) waitid$P_PIDFD(0x3, r3, &(0x7f0000001480), 0x2, &(0x7f0000001500)) r5 = fsmount(r2, 0x1, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000001600)={0x10}) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x30000040}, 0x800) 23:05:15 executing program 6: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0xc4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40080) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x21}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x13, 0xffffffffffffffff, 0x8000000) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000084) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '.\'!)\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '+{\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4880}, 0x40084) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000900), 0xffffffffffffffff) socketpair(0x6, 0x1, 0xffffffc1, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x9c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x881) 23:05:15 executing program 7: r0 = io_uring_setup(0x6fff, &(0x7f0000000000)={0x0, 0x1637, 0x10, 0x0, 0x260}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x3, 0x1, 0x40, 0x0, 0x2}, 0x3, 0x9, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{0x2, 0x3, 0x1, 0x0, 0x3}, 0x80000000, 0x2, 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x3, 0x1, 0xf5, 0x3, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000001c0)={{0x1, 0x3, 0xfff, 0x1, 0x1b}, 0xffffffe0, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1d48, 0x20, 0x7}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x200001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000300)={{0xffffffffffffffff, 0x2, 0x4, 0x3, 0xe0}, 0x8, 0x800, 'id1\x00', 'timer1\x00', 0x0, 0x100, 0x0, 0x8, 0x2}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000400)=""/53) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000440)={0x2, 0x3, 0xfffff235}) socket$inet6(0xa, 0x6, 0x7ccbd402) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000480)={0x1, 0xffffffff, 0x100000}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000500)={{0x3, 0x1, 0x7fffffff, 0x3, 0xfffeffff}, 0x2, 0xd3d1, 'id0\x00', 'timer0\x00', 0x0, 0x7ff, 0x0, 0x80000000, 0x7ff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000680)=""/105) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x811) [ 83.753735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.755493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.757042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.760034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.763158] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.765811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.839632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.842770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.844197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.846909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.857920] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.860500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.884099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.892651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.897940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.904467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.905242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.906858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.907896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.910849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.913586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.915723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.915829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.916975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.919568] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.921614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.921741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.925083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.927777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.930647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.934178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.937855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.938884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.939855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.943751] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.944656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.949636] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.950913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.952544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.969263] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.974475] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.976710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.993835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.000305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.008992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.024674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.026312] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.027545] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.808941] Bluetooth: hci0: command tx timeout [ 85.872267] Bluetooth: hci1: command tx timeout [ 85.999684] Bluetooth: hci2: command tx timeout [ 85.999887] Bluetooth: hci4: command tx timeout [ 86.063608] Bluetooth: hci6: command tx timeout [ 86.064662] Bluetooth: hci3: command tx timeout [ 86.064901] Bluetooth: hci7: command tx timeout [ 86.065253] Bluetooth: hci5: command tx timeout [ 87.856416] Bluetooth: hci0: command tx timeout [ 87.921388] Bluetooth: hci1: command tx timeout [ 88.048483] Bluetooth: hci4: command tx timeout [ 88.048513] Bluetooth: hci2: command tx timeout [ 88.112215] Bluetooth: hci7: command tx timeout [ 88.112798] Bluetooth: hci6: command tx timeout [ 88.113272] Bluetooth: hci5: command tx timeout [ 88.113405] Bluetooth: hci3: command tx timeout [ 89.904488] Bluetooth: hci0: command tx timeout [ 89.969908] Bluetooth: hci1: command tx timeout [ 90.095508] Bluetooth: hci2: command tx timeout [ 90.096517] Bluetooth: hci4: command tx timeout [ 90.159456] Bluetooth: hci5: command tx timeout [ 90.159597] Bluetooth: hci3: command tx timeout [ 90.159959] Bluetooth: hci6: command tx timeout [ 90.160419] Bluetooth: hci7: command tx timeout [ 91.951419] Bluetooth: hci0: command tx timeout [ 92.017382] Bluetooth: hci1: command tx timeout [ 92.143425] Bluetooth: hci4: command tx timeout [ 92.144902] Bluetooth: hci2: command tx timeout [ 92.207441] Bluetooth: hci6: command tx timeout [ 92.209084] Bluetooth: hci3: command tx timeout [ 92.209125] Bluetooth: hci5: command tx timeout [ 92.210894] Bluetooth: hci7: command tx timeout [ 146.442902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.459572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.460743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.469753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.473769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.475370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.491426] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.495546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.496382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.513610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.515184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.516122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.524643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.531476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.533728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.536142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.538490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.545575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.549942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.551862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.557949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.562905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.565709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.567479] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.567683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.570471] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.571648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.572461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.576866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.587536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.591148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.594050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.611126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.614737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.615889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.618115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.623467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.624298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.629150] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.629191] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.632248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.637022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.639907] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.654443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.677556] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.689249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.692754] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.695845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.592429] Bluetooth: hci0: command tx timeout [ 148.592435] Bluetooth: hci3: command tx timeout [ 148.655418] Bluetooth: hci2: command tx timeout [ 148.655556] Bluetooth: hci1: command tx timeout [ 148.719524] Bluetooth: hci4: command tx timeout [ 148.720966] Bluetooth: hci5: command tx timeout [ 148.783461] Bluetooth: hci7: command tx timeout [ 148.783513] Bluetooth: hci6: command tx timeout [ 150.640417] Bluetooth: hci0: command tx timeout [ 150.640626] Bluetooth: hci3: command tx timeout [ 150.703423] Bluetooth: hci1: command tx timeout [ 150.705066] Bluetooth: hci2: command tx timeout [ 150.767424] Bluetooth: hci4: command tx timeout [ 150.768905] Bluetooth: hci5: command tx timeout [ 150.832412] Bluetooth: hci6: command tx timeout [ 150.832961] Bluetooth: hci7: command tx timeout [ 152.687430] Bluetooth: hci0: command tx timeout [ 152.688613] Bluetooth: hci3: command tx timeout [ 152.751486] Bluetooth: hci2: command tx timeout [ 152.752027] Bluetooth: hci1: command tx timeout [ 152.817370] Bluetooth: hci5: command tx timeout [ 152.817525] Bluetooth: hci4: command tx timeout [ 152.879581] Bluetooth: hci7: command tx timeout [ 152.879668] Bluetooth: hci6: command tx timeout [ 154.735424] Bluetooth: hci3: command tx timeout [ 154.735468] Bluetooth: hci0: command tx timeout [ 154.799461] Bluetooth: hci2: command tx timeout [ 154.800570] Bluetooth: hci1: command tx timeout [ 154.863394] Bluetooth: hci5: command tx timeout [ 154.865181] Bluetooth: hci4: command tx timeout [ 154.927394] Bluetooth: hci7: command tx timeout [ 154.928850] Bluetooth: hci6: command tx timeout [ 208.763849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.768819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.771605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.780901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.791865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.797635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.829714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.832644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.835872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.850852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.853751] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.861030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.964948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.973928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.002752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.025450] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.039425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.039698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.048618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.050866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.052958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.062163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.068119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.077509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.085579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.089606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.091686] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.095738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.100576] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.104438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.122917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.133582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.170687] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.174468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.178602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.181239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.219624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.221441] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.229175] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.230189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.232528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.232615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.241970] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.244161] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.245585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.288568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.292694] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.305561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.863440] Bluetooth: hci0: command tx timeout [ 210.928748] Bluetooth: hci1: command tx timeout [ 211.120421] Bluetooth: hci2: command tx timeout [ 211.185355] Bluetooth: hci5: command tx timeout [ 211.247422] Bluetooth: hci3: command tx timeout [ 211.375428] Bluetooth: hci4: command tx timeout [ 211.439554] Bluetooth: hci6: command tx timeout [ 211.503417] Bluetooth: hci7: command tx timeout [ 212.911382] Bluetooth: hci0: command tx timeout [ 212.975414] Bluetooth: hci1: command tx timeout [ 213.169458] Bluetooth: hci2: command tx timeout [ 213.231430] Bluetooth: hci5: command tx timeout [ 213.295871] Bluetooth: hci3: command tx timeout [ 213.423579] Bluetooth: hci4: command tx timeout [ 213.487504] Bluetooth: hci6: command tx timeout [ 213.551382] Bluetooth: hci7: command tx timeout [ 214.960364] Bluetooth: hci0: command tx timeout [ 215.023386] Bluetooth: hci1: command tx timeout [ 215.215482] Bluetooth: hci2: command tx timeout [ 215.279660] Bluetooth: hci5: command tx timeout [ 215.344390] Bluetooth: hci3: command tx timeout [ 215.471529] Bluetooth: hci4: command tx timeout [ 215.537341] Bluetooth: hci6: command tx timeout [ 215.599374] Bluetooth: hci7: command tx timeout [ 217.008398] Bluetooth: hci0: command tx timeout [ 217.073326] Bluetooth: hci1: command tx timeout [ 217.263467] Bluetooth: hci2: command tx timeout [ 217.327377] Bluetooth: hci5: command tx timeout [ 217.393345] Bluetooth: hci3: command tx timeout [ 217.519489] Bluetooth: hci4: command tx timeout [ 217.583372] Bluetooth: hci6: command tx timeout [ 217.647533] Bluetooth: hci7: command tx timeout [ 271.175763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.178564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.180857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.183145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.183508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.186665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.188726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.190146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.191130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.195801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.198450] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.208512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.294843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.306493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.310087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.315406] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.318406] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.323536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.355491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.364930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.367008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.371190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.376218] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.379321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.421814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.435144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.444736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.467664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.476238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.479114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.487408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.489855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.500939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.503499] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.508438] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.521535] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.551221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.554705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.560006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.560057] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.569532] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.571598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.578644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.598934] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.606081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.611493] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.635421] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.643641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.263713] Bluetooth: hci0: command tx timeout [ 273.265607] Bluetooth: hci1: command tx timeout [ 273.392132] Bluetooth: hci3: command tx timeout [ 273.392195] Bluetooth: hci2: command tx timeout [ 273.519374] Bluetooth: hci4: command tx timeout [ 273.711408] Bluetooth: hci5: command tx timeout [ 273.711557] Bluetooth: hci7: command tx timeout [ 273.713097] Bluetooth: hci6: command tx timeout [ 275.312404] Bluetooth: hci1: command tx timeout [ 275.314111] Bluetooth: hci0: command tx timeout [ 275.439357] Bluetooth: hci2: command tx timeout [ 275.439441] Bluetooth: hci3: command tx timeout [ 275.567481] Bluetooth: hci4: command tx timeout [ 275.759379] Bluetooth: hci7: command tx timeout [ 275.760355] Bluetooth: hci6: command tx timeout [ 275.760777] Bluetooth: hci5: command tx timeout [ 277.360103] Bluetooth: hci1: command tx timeout [ 277.361660] Bluetooth: hci0: command tx timeout [ 277.488018] Bluetooth: hci3: command tx timeout [ 277.489617] Bluetooth: hci2: command tx timeout [ 277.615373] Bluetooth: hci4: command tx timeout [ 277.809401] Bluetooth: hci6: command tx timeout [ 277.811373] Bluetooth: hci7: command tx timeout [ 277.811487] Bluetooth: hci5: command tx timeout [ 279.407448] Bluetooth: hci0: command tx timeout [ 279.408877] Bluetooth: hci1: command tx timeout [ 279.535419] Bluetooth: hci2: command tx timeout [ 279.536747] Bluetooth: hci3: command tx timeout [ 279.665323] Bluetooth: hci4: command tx timeout [ 279.855491] Bluetooth: hci7: command tx timeout [ 279.856807] Bluetooth: hci6: command tx timeout [ 279.858099] Bluetooth: hci5: command tx timeout [ 333.375580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.379545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.383149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.389328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.392600] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.394812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.500821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.519554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.521886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.528511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.536721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.539101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.628962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.632018] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.633311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.635202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.635485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.641879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.646190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.652568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.655085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.657008] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.660906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.662058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.694681] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.705137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.711924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.717505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.736067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.737374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.780201] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.791626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.794156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.800318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.815523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.819134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.821374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.864896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.866951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.869675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.873578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.877301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.879949] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.882202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.890665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.952659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.965552] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.975543] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.472351] Bluetooth: hci0: command tx timeout [ 335.599575] Bluetooth: hci1: command tx timeout [ 335.727429] Bluetooth: hci3: command tx timeout [ 335.791434] Bluetooth: hci4: command tx timeout [ 335.792997] Bluetooth: hci2: command tx timeout [ 335.855570] Bluetooth: hci5: command tx timeout [ 335.985319] Bluetooth: hci6: command tx timeout [ 336.049331] Bluetooth: hci7: command tx timeout [ 337.520461] Bluetooth: hci0: command tx timeout [ 337.647395] Bluetooth: hci1: command tx timeout [ 337.775485] Bluetooth: hci3: command tx timeout [ 337.840393] Bluetooth: hci2: command tx timeout [ 337.840914] Bluetooth: hci4: command tx timeout [ 337.904461] Bluetooth: hci5: command tx timeout [ 338.032858] Bluetooth: hci6: command tx timeout [ 338.095765] Bluetooth: hci7: command tx timeout [ 339.567331] Bluetooth: hci0: command tx timeout [ 339.695412] Bluetooth: hci1: command tx timeout [ 339.824361] Bluetooth: hci3: command tx timeout [ 339.888344] Bluetooth: hci2: command tx timeout [ 339.888834] Bluetooth: hci4: command tx timeout [ 339.953289] Bluetooth: hci5: command tx timeout [ 340.079319] Bluetooth: hci6: command tx timeout [ 340.143345] Bluetooth: hci7: command tx timeout [ 341.615473] Bluetooth: hci0: command tx timeout [ 341.743731] Bluetooth: hci1: command tx timeout [ 341.872376] Bluetooth: hci3: command tx timeout [ 341.936386] Bluetooth: hci2: command tx timeout [ 341.937737] Bluetooth: hci4: command tx timeout [ 342.000337] Bluetooth: hci5: command tx timeout [ 342.127417] Bluetooth: hci6: command tx timeout [ 342.192354] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:10:25 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce09a78 RCX=0000000000000001 RDX=1ffff1100d9c1350 RSI=ffff888026937f28 RDI=ffff88806ce09a80 RBP=ffff888026937f28 RSP=ffff88806ce099d0 R8 =ffffffff86775bc8 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=000000000000333a R12=0000000000000008 R13=ffff88806ce09ac0 R14=ffff888026937f30 R15=ffff88806ce09a78 RIP=ffffffff81148ef5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb0c1380000 CR3=000000002a73c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000090 RCX=ffffffff822926c4 RDX=ffff8880343cd280 RSI=00007ffe58386af0 RDI=0000000000000006 RBP=00007ffe58386a60 RSP=ffff8880287a7c48 R8 =0000000000000001 R9 =ffff8880343cdcb8 R10=00007fffffffefff R11=0000000000000000 R12=ffff8880287a7cb0 R13=00007ffe58386af0 R14=00007fffffffefff R15=0000000000000000 RIP=ffffffff822926d1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fac94522540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe58386b48 CR3=000000000bed2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000