Warning: Permanently added '[localhost]:15221' (ECDSA) to the list of known hosts. 2025/06/21 15:24:39 fuzzer started 2025/06/21 15:24:39 dialing manager at localhost:33119 syzkaller login: [ 94.657481] cgroup: Unknown subsys name 'net' [ 94.801131] cgroup: Unknown subsys name 'cpuset' [ 94.838189] cgroup: Unknown subsys name 'rlimit' 2025/06/21 15:25:02 syscalls: 204 2025/06/21 15:25:02 code coverage: enabled 2025/06/21 15:25:02 comparison tracing: enabled 2025/06/21 15:25:02 extra coverage: enabled 2025/06/21 15:25:02 setuid sandbox: enabled 2025/06/21 15:25:02 namespace sandbox: enabled 2025/06/21 15:25:02 Android sandbox: enabled 2025/06/21 15:25:02 fault injection: enabled 2025/06/21 15:25:02 leak checking: enabled 2025/06/21 15:25:02 net packet injection: enabled 2025/06/21 15:25:02 net device setup: enabled 2025/06/21 15:25:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 15:25:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 15:25:02 USB emulation: enabled 2025/06/21 15:25:02 hci packet injection: enabled 2025/06/21 15:25:02 wifi device emulation: enabled 2025/06/21 15:25:02 802.15.4 emulation: enabled 2025/06/21 15:25:02 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 15:25:04 starting 8 fuzzer processes 15:25:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5de}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x24004001) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004004) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044091}, 0x4008004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040801) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa0f}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x54) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x430284}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000091) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}]}, 0x1c}}, 0x803) 15:25:04 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000420}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x3d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44005}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000002c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x3d41871db307f2ec}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x24000090) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x4800) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x4004000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r10, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4050) 15:25:04 executing program 2: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xbe}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x4044810) munlockall() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000011) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6016}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x1) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='THAWED\x00', 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x85}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048011}, 0x8001) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x804) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x48040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x44880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x50) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb0, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) 15:25:04 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/127) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000080)=""/181) msgsnd(0xffffffffffffffff, &(0x7f0000000140)={0x0, "4c456e4d8227e5631e968714c1f9abe204a1000e01815a9d47ea96e9bf18e34a309fd045a312327ca006b868c27df62b846b110375bc041fc260313cdc968d7184c9717559e6bf24a90499592d4c9044cb96fa237a02629bb6e3e31c21d14cf106b4739e899c3913efc78abce391b17c850d21b45d78fde4e48323b8705bec8ec17f76c9c6e83f231bbb2acd865078b0f9083b50e73f4ed2902f08ddfe7b"}, 0xa6, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/68) semctl$SETVAL(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)=0x101) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000002c0)=""/171) r0 = semget$private(0x0, 0x2, 0x241) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = msgget(0x1, 0x60) msgsnd(r1, &(0x7f0000000380)={0x3, "2875f0ba8d180e0e027a9c42b7a7f65597668777b1552f4ffd3d498cdb760b56679ea4a767c380f646fc793ed139ccf79768106c4394c7daa9b790dea2bf79fe3f47a63473ab5b4c1e6919c945a0af6c76c9826d"}, 0x5c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/llc/socket\x00') ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000440)) r3 = semget$private(0x0, 0x0, 0x0) semctl$IPC_INFO(r3, 0x0, 0x3, &(0x7f0000000480)=""/191) r4 = semget$private(0x0, 0x0, 0x40) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000540)=0x4) r5 = msgget(0x2, 0x84) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000580)=""/50) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000005c0)=""/129) [ 119.198615] audit: type=1400 audit(1750519504.347:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:25:04 executing program 4: ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x2, 0x3, 0x8, 0x2, 0x2, 0x4f1}, 0x104, [0x6, 0x401, 0x81, 0x40, 0x4, 0x3, 0x10001, 0x20, 0x2, 0x7, 0x0, 0xffffffff, 0x800, 0x7ff8, 0xffffffff, 0xcb8, 0xffffff81, 0xfb2c, 0xffffffc0, 0x400, 0xfffffffe, 0x1, 0x2, 0x40, 0x9, 0x6b9, 0x5, 0xccc, 0x0, 0x5, 0x9, 0x3, 0x800, 0x4, 0xfffffc01, 0x4, 0xbb, 0x8, 0x1, 0x40, 0x2, 0x9, 0x5, 0x1f, 0x5, 0x8b1e, 0x1, 0x7f, 0x673, 0x4, 0x5, 0x0, 0x4, 0x3, 0x200, 0x7f, 0x3f, 0x800, 0xeb52, 0xf8b1, 0x7f, 0x101, 0x9, 0x22609f9f, 0x1, 0x5, 0x0, 0xf0d, 0x1, 0x4, 0x401, 0xff, 0x1, 0x8, 0x3, 0x401, 0xffffffe0, 0x2, 0x6, 0x5139a52b, 0x4, 0x800, 0x0, 0x0, 0x2, 0x9, 0x9, 0x100, 0x3, 0x2, 0x9, 0x7, 0x9, 0x2, 0x4e19, 0x0, 0x5, 0x9, 0x7db3, 0x100, 0xff, 0xffffffff, 0x3, 0x82cf, 0x8, 0x8, 0x1, 0x5a, 0xd91, 0x0, 0x3f, 0x2728, 0x2b, 0x7, 0x4, 0x80000000, 0x0, 0xffff, 0x2, 0x80, 0x800, 0x9, 0x9be, 0x1, 0x5, 0x10001, 0x5, 0x0, 0x9, 0xd7c2, 0x0, 0x5, 0x7, 0x8, 0x0, 0x3, 0x0, 0x7fff, 0x4, 0xfffffffc, 0x5, 0x3, 0x4, 0x1, 0x2800000, 0x100, 0x5, 0x5, 0x3ff, 0x5, 0x4, 0xffffff80, 0xe1, 0x7, 0xbef9, 0x5, 0x7ff, 0x7ff, 0x4, 0x7, 0x2, 0x0, 0x8000, 0x9, 0x81, 0x6, 0xa52c, 0x6, 0xa52, 0xcb, 0x10000, 0x7fff, 0x6f61c733, 0x1, 0x101, 0xfffffffb, 0x999, 0xebdd, 0x2, 0x1, 0x200, 0x6, 0x0, 0x1, 0x6, 0x5c61, 0x4, 0xc7ff, 0x2, 0x351, 0x4, 0x1, 0x1, 0x7, 0x53, 0x6, 0xffffff6b, 0x8000, 0x80000000, 0x7ff, 0x1, 0x401, 0x7, 0xb806, 0x80, 0x2, 0x10000, 0x6d8e, 0xfffffff7, 0x1, 0x10001, 0x8, 0x7, 0x2, 0x400, 0x6, 0x100, 0x6, 0xffff0803, 0x8, 0x1ff, 0x6, 0x5, 0x0, 0x9, 0x5c, 0x7fff, 0x140, 0x3, 0xbf2c, 0xe93, 0x1, 0x7fffffff, 0x255, 0x1, 0x8, 0x7, 0xfffffff8, 0x0, 0x7, 0x8, 0xfff, 0xffffffff, 0x9, 0x4ef4, 0x7fff, 0x0, 0x3, 0x0, 0x6, 0x5, 0x8, 0x8, 0xdd, 0x40000, 0x6, 0x0, 0x9, 0x5, 0x3, 0x400, 0x3f, 0x0, 0xfffffff7, 0x1b0, 0xffff450c, 0x3, 0x81, 0x8, 0x1, 0x2de0, 0x20, 0x3f, 0x3, 0x4, 0x80000000, 0x8c0, 0x0, 0x80000000, 0x8, 0x3, 0x0, 0x101, 0x80000000, 0x0, 0x1, 0x7, 0x9, 0x20, 0x1, 0x1, 0x567d, 0x5, 0x10000, 0x7, 0x7f, 0x3, 0x6, 0x8, 0x6, 0x40, 0x3f, 0x200, 0x4, 0x1f, 0x2, 0x1, 0x44d8, 0x10001, 0x7fffffff, 0x6, 0x4, 0x2, 0x9, 0x1f, 0xbc6, 0xffffffff, 0x3f, 0xe037, 0xffffff7f, 0x5, 0x80, 0xfe8, 0x0, 0x0, 0x3f, 0x1, 0xff, 0x6, 0x7ff, 0x80000001, 0x200, 0x3, 0x8, 0x8, 0x0, 0x7fffffff, 0xfff, 0x1000, 0x4, 0x800, 0x4, 0x5, 0x3698ed32, 0x7, 0x8, 0x7fffffff, 0x0, 0x290e, 0x1, 0x88, 0x6, 0x200000, 0xf8c, 0x9, 0x10001, 0x1, 0x0, 0x2, 0x7, 0xffff, 0x7, 0x8, 0x3, 0x3b67f11c, 0x80000000, 0x2, 0x3, 0x3ff, 0xfff, 0x60e, 0x485e, 0x80000001, 0x401, 0xfffffff7, 0xfff, 0xffff, 0x6, 0x8, 0x1, 0x0, 0xfffffff7, 0x10000, 0x2, 0x7, 0x2, 0x813, 0x9c70, 0x72e, 0xffffffff, 0x10000, 0x3, 0xfffffff7, 0x7, 0xff, 0x7f, 0x4c86cab0, 0x0, 0x3, 0x3, 0x8, 0xfffffff8, 0x7fff, 0x0, 0x3, 0x8, 0x5, 0x5, 0x8, 0x800, 0x1ff, 0x7fffffff, 0x6, 0x14, 0xfff, 0x81, 0x5, 0xf040, 0x3ff, 0x20, 0x8, 0x46, 0x1, 0x1c00, 0x7, 0x101, 0x8b, 0x7fffffff, 0x7, 0x20, 0x7fffffff, 0x2, 0x80000001, 0x101, 0x7fffffff, 0x8, 0x9, 0x325, 0x9, 0x2, 0x81, 0x0, 0xdf00, 0x1f79, 0x9, 0x5865, 0x5, 0x8, 0xf48a, 0x2, 0x87f7, 0x7, 0xfffffff7, 0x80000001, 0x24e7, 0x0, 0x9, 0xffffffff, 0x1, 0x10001, 0x6, 0x84d8, 0x4, 0xa23, 0x0, 0x80000001, 0x9, 0x7ff, 0x5, 0x2, 0x1, 0x6, 0xfffffff8, 0x2, 0x3, 0x0, 0x9b4e1b5, 0x0, 0x101, 0x0, 0x7, 0x2, 0x6, 0x6, 0x3, 0x388, 0x8836, 0x8, 0x0, 0x9a, 0x8, 0x8, 0x69, 0xfff, 0x8, 0xf0, 0x6, 0xfc6, 0x1bde8ce4, 0x6, 0x0, 0x3, 0x2, 0xdde3, 0x2, 0x8001, 0x4, 0x3f, 0x0, 0x100, 0x100, 0x2, 0x7f, 0x0, 0x9, 0x9, 0xd42f, 0x3, 0x3, 0x3, 0x9, 0xfff, 0xff, 0x2d6, 0xdad, 0xa4, 0x100, 0x7, 0x101, 0x790000, 0x0, 0x6, 0x9, 0xfffffffb, 0x101, 0x9, 0x5, 0x400, 0x3f, 0x66, 0x542ba731, 0x2, 0x8222, 0x1000, 0x2, 0x800, 0x4, 0xffffff01, 0x0, 0x80000001, 0x7, 0x7, 0xfffffffc, 0x8000, 0xa93, 0x5, 0x10001, 0x5, 0x5, 0x6, 0xfffffff7, 0x16, 0x8000, 0x6000, 0x4, 0x9, 0x5, 0x3, 0x200, 0xfff, 0x9, 0x1, 0x6, 0x7fff, 0x1, 0x400, 0x1ff, 0x1, 0x2, 0x0, 0xfffffffe, 0x200, 0x1, 0x0, 0x4, 0x1, 0x5, 0x9, 0x6, 0x80000000, 0xffffff61, 0x4, 0x81, 0x55, 0x7ff, 0x401, 0x1f, 0x6, 0x2, 0x6, 0x0, 0x6, 0x1000, 0x401, 0x1, 0x0, 0x0, 0x80, 0x3f, 0x80000000, 0x2, 0x25e2, 0x5, 0x1, 0x80, 0x34, 0xfffff001, 0x7, 0x200, 0x9, 0x401, 0x51c4, 0x1, 0x9, 0x10000, 0xffff4de1, 0x8, 0x7fffffff, 0x48f, 0x1, 0x8000, 0x40, 0x58b, 0x2, 0x1, 0x5, 0xfb6, 0xd86, 0xfffffffe, 0x7, 0x8, 0x3, 0x8, 0xffffffff, 0x20, 0x6122, 0xfce, 0xffffff36, 0x0, 0x5, 0x139e, 0x1, 0x6, 0x9b, 0x0, 0x7fffffff, 0x3, 0x101, 0xe22, 0x60, 0x0, 0xffffffff, 0x4, 0x3, 0x3, 0xffffffe1, 0x2, 0x81, 0x9, 0x80000001, 0x9e, 0x4, 0x0, 0x8, 0x86d, 0x9, 0x6, 0x3, 0x9, 0x4fe, 0x800, 0x7, 0x0, 0xd37, 0xfffffff7, 0x200, 0x9, 0x2, 0x0, 0xfffffffe, 0x3, 0x5, 0xfffffff8, 0x5, 0x4, 0x9, 0x6, 0xac, 0x83, 0x1, 0x1, 0x6, 0xffffffff, 0xffff, 0x0, 0x3, 0x3df000, 0x2, 0xc0000000, 0x101, 0x1, 0x74b, 0xd92, 0x8, 0xfffffffb, 0x4e5, 0x101, 0x6, 0x7f, 0x400, 0x0, 0x80, 0x8001, 0xffffffff, 0x9, 0x9, 0x5, 0x6, 0xc31, 0x4, 0x80000000, 0x7c3, 0xfff, 0xb4f, 0xfffffff7, 0x2, 0x3, 0x29, 0x7ff, 0x1, 0x342, 0x2, 0x80, 0x9, 0x80000001, 0x7f, 0x7, 0x41cb, 0x3, 0x5, 0x6, 0x5, 0xc7, 0x8, 0x3, 0x6, 0x7, 0x7, 0x2d, 0xfffffffd, 0x40, 0x6, 0x4, 0x53b8, 0x9, 0x8, 0x1000, 0xffff, 0x7fffffff, 0x2, 0x7, 0x1, 0x0, 0xffffffa6, 0x4, 0xffffffff, 0x20, 0x40, 0x401, 0x9, 0x7fff, 0x1, 0x8, 0x200, 0x981, 0x3, 0x7, 0x1613, 0x1, 0x9, 0x3, 0x2, 0x800, 0x3ff, 0x6a010382, 0x6, 0x9, 0x4, 0xfffffe00, 0x2, 0x489cf72f, 0x100, 0x7, 0xf8, 0xa2b8, 0x3, 0x2, 0xfff, 0x6, 0x0, 0x5043, 0x4, 0xe00, 0xc, 0x8, 0xff, 0x80000000, 0x3ff, 0x80, 0x2872, 0x7, 0x6, 0x8, 0x4, 0x5, 0x1, 0x800, 0x5, 0x99f, 0x8, 0x1, 0x2, 0x7, 0x5c6, 0x1, 0x91, 0x6a74, 0x4, 0x9, 0x5, 0x0, 0x6, 0x9e35, 0x1ff, 0x1, 0x7, 0x4a60, 0x7, 0x3f, 0x80, 0x1, 0x401, 0x3, 0x80, 0x401, 0x3, 0x1ff, 0xffff, 0x71f, 0x8, 0x7, 0x74a, 0x8, 0xcf, 0x0, 0x43759228, 0x8001, 0x4, 0x0, 0x200000, 0x8, 0xffffffff, 0x80000001, 0x1, 0x0, 0x2, 0x80000001, 0x8, 0x7f, 0x4, 0x2, 0x5, 0x8001, 0x100, 0xa6, 0x6, 0x7, 0x8, 0x400, 0x9, 0xfffffffe, 0x200, 0x5a176453, 0x6, 0x79bb, 0x7ff, 0xfffff001, 0x400, 0x4, 0x0, 0x7fff, 0x9, 0x1, 0x3ff, 0x7fff, 0x1, 0x1000, 0x1, 0x3, 0x8000, 0x40, 0x4, 0x1, 0x7, 0x5, 0x8, 0xffff, 0xfff, 0x8, 0x80, 0x6fcc, 0xcf2e, 0x3, 0x5, 0xe5c3, 0x5, 0x9, 0x3, 0x0, 0x1000, 0x5, 0x7e98fd34, 0x3, 0x2, 0xbd3, 0x40, 0x3, 0x7, 0x5, 0x4, 0x6, 0x7, 0x3, 0x9, 0xfffffffc, 0x6, 0x0, 0xffffffff, 0x2, 0x992, 0x20, 0x2, 0x3, 0x3f, 0x600000, 0x9e, 0x0, 0xffffffe0, 0x3f, 0x401, 0x4, 0x0, 0x1, 0x200, 0xc8d6, 0x1, 0x8, 0xa22, 0xaf9, 0xfff, 0x3, 0x4, 0x8, 0x6, 0x9, 0x81, 0x800, 0xfffffffe, 0x400, 0xf6, 0xc5, 0x10000, 0x7, 0x2, 0x7fff, 0xa9d0, 0x8001, 0x8, 0x28, 0x401, 0x3, 0xffffffff, 0x9, 0xe06, 0x10000, 0xa5, 0x3, 0x9, 0x10001, 0x4, 0x8001, 0x3, 0xff, 0x9, 0x0, 0x80000001, 0x3f0c76f5, 0xfffffff9, 0x6, 0x800, 0x2, 0x3, 0x7, 0x6, 0x5, 0x3, 0xfff, 0x6, 0x1, 0x8, 0x1000000, 0x80000001, 0x5, 0x200]}) r0 = syz_open_procfs(0x0, &(0x7f0000001040)='net/rfcomm\x00') ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000001080)={{0x3, 0x1, 0x9, 0x4, 0xa5e7, 0x9}, 0x373, [0x2, 0x1000, 0x1, 0xfff, 0xece7, 0x0, 0x9, 0x1, 0xfffffffc, 0x8000, 0x6, 0x0, 0x7, 0x138, 0x8, 0x8, 0x2, 0x5, 0x1, 0x6, 0x9, 0x3, 0xae, 0x6, 0x9, 0x85fc, 0x8, 0x6, 0x10000, 0x4, 0x4, 0xcfb, 0x6, 0xe5a6, 0xcb, 0x4509, 0x1, 0x7, 0x1, 0x10000, 0x9, 0x7fff, 0x1, 0x10000, 0x5, 0x4, 0x8, 0x0, 0x10001, 0x41, 0x9, 0x8, 0x1f, 0x5, 0x61, 0x7ff, 0x2, 0xfffffc01, 0x8, 0xfab4, 0x80008, 0x1, 0x976, 0x99, 0x0, 0x40, 0x1, 0xa4, 0x7, 0x4, 0x3, 0x401, 0x4, 0x10001, 0x0, 0xa30, 0x3, 0x8001, 0x2, 0x1, 0x0, 0x6, 0x0, 0x3, 0x20, 0xd585, 0x100, 0xfff, 0x5, 0x4, 0x0, 0xfff, 0x3, 0xffffffff, 0x4, 0x5, 0x80000000, 0x1f, 0xc4, 0x9, 0xb14f, 0x1, 0x1, 0x53c, 0x8001, 0x2ce3, 0x4, 0x60, 0x47d4, 0x200, 0xb41, 0x4, 0x3, 0x3, 0x0, 0xf5, 0x70, 0x200, 0x3, 0x0, 0xff, 0xecb, 0x7, 0x8, 0x4, 0x1, 0x2, 0x3, 0x4, 0xbc, 0x7fffffff, 0x1, 0x80000000, 0x1000, 0x1000, 0x800, 0x401, 0x4, 0x2000000, 0x44e, 0x0, 0x9, 0xffffffff, 0x9, 0x6, 0xf4, 0x2, 0x80, 0x8, 0x1f, 0x5, 0x400, 0x200, 0xfffffffd, 0x200, 0x76ce, 0x4, 0x5, 0x9, 0x7, 0x724, 0x9, 0x3, 0x2, 0x3ff, 0x8, 0x2, 0x59bb, 0x10000, 0x3, 0xea47, 0xfffffc01, 0x3f, 0x200, 0x0, 0x1, 0xea4, 0xba77, 0x1, 0x101, 0x80000001, 0x7fff, 0xecb, 0x7f3bbe7c, 0xfffffff7, 0x7, 0x52c0000, 0x3, 0x94800000, 0x9, 0x2b, 0x1ffc0, 0x1000, 0x0, 0x10001, 0x0, 0x4e79, 0x101, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x131, 0x2, 0x6, 0x2, 0x8, 0x2, 0x9, 0x1, 0x2, 0x200, 0x0, 0x5, 0x7, 0xe97, 0x8, 0x5, 0x8000, 0x8, 0x3, 0x400, 0x7, 0xaa16, 0x81, 0x7, 0x6, 0xa84, 0x6, 0x2, 0x800, 0xdb, 0x100, 0x80000000, 0x4, 0x4, 0x8001, 0x1, 0x64, 0x10001, 0x1, 0xb93, 0xffffff33, 0x0, 0x200, 0x0, 0x3, 0x3dff, 0x0, 0x7, 0x9c68, 0xfffffff9, 0x8, 0x1c0, 0x1f, 0xfffffffa, 0xe572, 0x2, 0x5, 0x7f, 0x8e04, 0x7, 0x101, 0x5, 0x9, 0x7, 0x0, 0x3, 0x8, 0x7f, 0x3, 0xfffffffd, 0x47, 0x1, 0x2, 0x5, 0x1000, 0x7fff, 0x6c0, 0x2, 0xf94f, 0x4, 0x9, 0x3, 0x9, 0x3f, 0x6, 0x0, 0x8001, 0x1811, 0x2, 0x3, 0x7b87, 0x0, 0x401, 0x69222794, 0x4bd5, 0x0, 0xa047, 0x3ff, 0x5, 0xffff, 0x8c1d, 0x1, 0xd9, 0x4, 0x3, 0x2, 0x8, 0x1000, 0xdc, 0x3, 0xc9, 0x400, 0x2ea6, 0xfff, 0x101, 0xfff, 0x4, 0x9, 0x3, 0x3, 0xf13, 0x31be, 0xc850, 0x0, 0xff, 0x4, 0x9, 0xfffff451, 0x7, 0x5, 0xffffffff, 0x0, 0x5, 0x7, 0xb3bf, 0x2, 0x1, 0x67e, 0x9, 0x2, 0x4, 0xba, 0xfffffff9, 0x7, 0x4, 0x5d, 0xfffffffc, 0x7f, 0x5, 0x9, 0x401, 0x0, 0x8, 0x4, 0x7ff, 0x7, 0x4, 0x8d, 0x81, 0x2, 0xc1e, 0x401, 0xfffffff7, 0x6, 0x10001, 0x8001, 0x8000, 0x1, 0x6, 0x7, 0x6, 0x7, 0x7fffffff, 0x2, 0x4, 0x8, 0x3ff, 0x0, 0x4, 0x7, 0x26c6, 0x1000, 0x5d5, 0xfffffffd, 0x5, 0x7f4, 0x2, 0x9, 0x7, 0x745, 0xdf, 0x4, 0x4, 0x1, 0x7, 0x20f5, 0x6, 0xfffffff9, 0xfff, 0x3, 0x8, 0x5, 0xa661, 0x7, 0x4, 0x0, 0x1, 0x9, 0x33, 0x3, 0xc4, 0x6, 0x91, 0x1, 0x7fffffff, 0x3, 0x401, 0x1ff, 0x1, 0xa1, 0x6, 0xae, 0xfffffff9, 0x1, 0xecd3, 0x2, 0xfff, 0x20, 0x6, 0xc5, 0x2e, 0x0, 0x800000, 0x9, 0x6e3, 0x147a, 0x1e3, 0xffff0000, 0x400, 0x844, 0x37ba, 0x10000, 0x0, 0x2, 0x1, 0x8001, 0x1, 0x10000, 0x3, 0xe1, 0xeac, 0x1ff, 0x1, 0x2, 0x1, 0x2, 0x7ff, 0x9d33, 0xbf, 0x200, 0x0, 0x0, 0x3, 0x9, 0x5, 0x10000, 0x2, 0xff, 0x1, 0x7ff, 0x80, 0x1, 0x200, 0x5, 0x3d49, 0x6, 0x3, 0x400, 0x8a000000, 0x200, 0x185, 0xfffffffd, 0xdc, 0x3, 0x9, 0x3, 0xfffffffe, 0x10001, 0x80000001, 0xff, 0x3, 0x7, 0x5, 0x9, 0x2, 0x7fffffff, 0xfff, 0x10000, 0x0, 0x3, 0xffffff7f, 0x9b, 0x80000000, 0x80000000, 0x1, 0xa80, 0xff, 0x401, 0x3ffc0000, 0xffffffff, 0x6, 0x7cd, 0x1, 0x1f, 0xc0000000, 0x0, 0x1, 0x4, 0x1, 0x2, 0x0, 0x7, 0x7060, 0x0, 0x1f, 0xbd7d, 0x3f, 0x9, 0x2, 0xb60a, 0x7, 0x7, 0x101, 0x1, 0x10001, 0x3, 0x4, 0xed, 0x0, 0xeb, 0xda, 0x6, 0xffff0001, 0x1000, 0x1000, 0x6, 0x800, 0x7, 0x80000000, 0x80000000, 0x2, 0x8000, 0x1, 0xffff, 0x9, 0x2, 0x14, 0x2, 0x7, 0x2, 0x3, 0x4, 0x3, 0x0, 0xe814, 0x2, 0x1000, 0x8, 0x1, 0x9, 0xc0, 0x9, 0x8, 0x2, 0x3f, 0x9, 0x0, 0x6, 0x100, 0x9, 0x9, 0x1, 0x6, 0x4, 0x8, 0x4, 0x7fffffff, 0x3, 0x5, 0xd, 0x1, 0x6, 0x1ff, 0x9, 0x41, 0x0, 0xe7, 0x4, 0x1000, 0x9, 0x5d, 0x4c, 0x2, 0xb43e, 0x4, 0xffffffff, 0xa6, 0xfffffff7, 0x5, 0x8000, 0xfff, 0x100, 0x20, 0xfffffffb, 0x4, 0x3, 0x4, 0xa098, 0x7fff, 0x0, 0x7451, 0x800, 0x100000, 0xb10c, 0xaf, 0xfffffffc, 0x3, 0x10000, 0x62094980, 0x2, 0x7, 0xbe, 0x9, 0xffffffff, 0x4, 0x6, 0x7, 0x1, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x8, 0x101, 0x5, 0x6, 0x2, 0x8000, 0x0, 0x0, 0x10000, 0x132, 0x0, 0x3, 0x5307, 0x20, 0xfffffff9, 0x10000, 0x10001, 0x1, 0x4, 0x7, 0x2, 0x90, 0x91b9, 0x7ff, 0x3, 0x9, 0xa5c, 0x2, 0x28, 0xffffff81, 0xffffffff, 0x9, 0xffffffff, 0x7, 0x9c00, 0x7, 0x2, 0x1, 0x0, 0xffffffff, 0x6, 0xaeb, 0x7fffffff, 0x0, 0x0, 0x5, 0x0, 0x81, 0x7, 0x1f, 0x1, 0x1, 0x4, 0x98, 0x9, 0x9, 0x1, 0x7, 0xffffff01, 0x8c, 0x200, 0x3af8, 0x4d06, 0x2, 0xfffe0000, 0x4, 0x7, 0x9, 0xfffffffb, 0x4, 0x0, 0x7f, 0xb4, 0x2, 0x8, 0x0, 0x14, 0x1, 0x1f, 0x5, 0x7fffffff, 0x0, 0xdc8, 0xffffffff, 0x4, 0x8, 0x9, 0x7fff, 0x10001, 0x4, 0x4, 0x200, 0x2, 0x2, 0x2, 0x6, 0xffff2b11, 0x6, 0xd6, 0x8000, 0x8, 0x1, 0x4, 0x6, 0x6, 0x3, 0xf52, 0x5, 0x0, 0x6, 0xffffffff, 0x1b7, 0x17788000, 0x7, 0x5, 0x0, 0x4, 0x356, 0x1, 0x5897, 0x5, 0x3ff, 0x2, 0x8, 0x4b, 0x5, 0x2, 0x96, 0x5, 0xfffffff8, 0x6, 0x40, 0x9, 0x26, 0x7, 0x1ff, 0x9, 0x9, 0x40000000, 0x8c, 0xffffff01, 0x400, 0xd3, 0x6533, 0x401, 0xffc00000, 0x8, 0x1ff, 0x3, 0x866, 0x401, 0x5, 0xd9e, 0x3, 0x200, 0x40, 0xa7e6, 0x8b3, 0x0, 0x40, 0x9, 0x3, 0x8, 0x59, 0xf0e8, 0x7, 0xca97, 0x3f5, 0x7fff, 0x10001, 0xe4b2, 0xa76, 0xa, 0x7, 0xe3, 0x2a8, 0x10000, 0xfffffffe, 0x9, 0x0, 0x0, 0x80, 0xffff3fbc, 0x3ff, 0x20, 0xff, 0x7, 0x8, 0x0, 0x101, 0x8000, 0x7fffffff, 0xda1c, 0x3, 0x7, 0x4798, 0x9, 0xb6be, 0x0, 0x7fffffff, 0x5, 0x9, 0xffffffff, 0x1cc39766, 0x375, 0x10000, 0x9, 0x4, 0x2, 0x2, 0xe2, 0x3f, 0xfffffffd, 0x2, 0x8, 0x9, 0x40, 0x9, 0x9, 0xb8a20000, 0x1, 0x6, 0xd9e9, 0x0, 0x1, 0xfff, 0x8001, 0x707, 0x24, 0x3f, 0x3ff, 0x29, 0x1ff, 0x8001, 0x9f, 0x5, 0xa4, 0xc44, 0x80, 0x80, 0x80000001, 0x425e, 0x9, 0x7, 0x55a6, 0xfff, 0x8, 0x1000, 0x1ec, 0x9, 0x800, 0x3, 0x6, 0x888, 0x0, 0xac, 0xca06, 0x9, 0x3, 0x8000, 0x493, 0x1ff, 0x7ff, 0x4636, 0x2, 0x8, 0x8, 0xffffffff, 0x7f, 0x71, 0x400, 0xfffffff7, 0x7, 0x101, 0x100, 0x22, 0x8, 0x0, 0xfffffffa, 0x9, 0x7, 0x1000, 0x8, 0x22312b78, 0x2, 0x4, 0x401, 0x2, 0x9, 0x81, 0x4, 0x1, 0xdd, 0x11e6, 0x118, 0xfffffff9, 0x7, 0x8, 0x800, 0x3, 0x200, 0x404, 0x5, 0x2, 0x9, 0x4e7d7e50, 0x3, 0x5a4432e0, 0x7fff, 0x2400000, 0x3, 0xffff, 0x10000, 0x7f, 0xc3d, 0x80, 0x49, 0x9, 0x100, 0x6, 0x0, 0x8, 0x78, 0xf163, 0x10001, 0x267000, 0x10001, 0x80000001, 0x100, 0x28d, 0x7, 0x80000001, 0x7, 0x4, 0x100, 0x0, 0xfffffff9, 0x5, 0x6, 0x6, 0x10001, 0x5, 0x10001, 0x5, 0x9, 0x80, 0x2, 0x1651, 0x3f, 0xffff, 0x8, 0x6bf, 0x2, 0x6, 0x4, 0x1, 0x80000001, 0xffffff4f, 0x5c3b, 0x7, 0xffff09b1, 0x9, 0xeaa, 0xfffffff9, 0x9, 0x6, 0x7, 0x100, 0x3, 0x78, 0x3, 0x9, 0x100, 0x9, 0x1ff, 0xff, 0x80000001, 0x3]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000020c0), 0x404001, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='net/fib_trie\x00') ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000002140)={0x6e, "fa8d546d6cfc8f7fb3fed51f8b30edb9d8b9de207641acc1c2c565a837636390d1efdfc3272fe827e84c6065208018258c80ba1900e6274cc86cdbb740d200f698432482d7b6dd67779d1a0540bcab46a134ae5bbf1150f87b49fafb649b7042d461afe965b425e9ffcf4bba524f"}) read$hiddev(r2, &(0x7f00000021c0)=""/109, 0x6d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x68, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff0001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x68}, 0x1, 0x0, 0x0, 0x884}, 0x40) socketpair(0x1f, 0x6, 0x8, &(0x7f00000023c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c40}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002540), 0x10000, 0x0) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000002580)={0x1, 0x3, 0x1}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000025c0)='map_files\x00') ioctl$HIDIOCGREPORT(r7, 0x400c4807, &(0x7f0000002600)={0x2, 0x1, 0xfffffffa}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002640), 0x20440, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}}, 0x4048801) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xa4, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 15:25:04 executing program 5: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x800) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8000, 0x2400) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='timers\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={&(0x7f00000000c0), &(0x7f0000000100)=""/221, 0xdd}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000240)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/llc/core\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xcc, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000780)) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000007c0)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004004) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x7ff3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) 15:25:04 executing program 6: msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000000)=""/114) r0 = msgget(0x3, 0x80) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/98) msgsnd(r0, &(0x7f0000000100)={0x0, "45409272ce1ab64e"}, 0x10, 0x800) r1 = msgget(0x1, 0x1304b4e81488b79f) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/140) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/152) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2a802000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000440)=""/4096) setresuid(0xee00, 0xee01, 0xffffffffffffffff) msgsnd(r1, &(0x7f0000001440)={0x2, "5245a724569871737142"}, 0x12, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000014c0), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20081200}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x800) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000016c0)=""/160) semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000001780)=""/52) msgget(0x1, 0x50) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000017c0)=""/143) 15:25:04 executing program 7: r0 = getpgid(0xffffffffffffffff) r1 = gettid() r2 = getpgrp(0x0) clone3(&(0x7f0000000300)={0x20400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f00000000c0)=""/200, 0xc8, &(0x7f00000001c0)=""/229, &(0x7f00000002c0)=[0x0, r0, r1, 0x0, r2], 0x5}, 0x58) tkill(0xffffffffffffffff, 0x3) r4 = syz_open_dev$hiddev(&(0x7f0000000380), 0x8, 0x0) read$hiddev(r4, &(0x7f00000003c0)=""/164, 0xa4) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000480)=""/70) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x6) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000500)) waitid$P_PIDFD(0x3, r3, &(0x7f0000000540), 0x1, &(0x7f00000005c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = syz_open_procfs(r0, &(0x7f0000000700)='attr/current\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r6, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x41}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2e}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040000}, 0x4000040) openat$cgroup_devices(r7, &(0x7f0000000880)='devices.deny\x00', 0x2, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r7) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x8c1) openat$cgroup_freezer_state(r7, &(0x7f0000000a00), 0x2, 0x0) [ 120.725707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.732161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.737404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.741775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.748673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.753991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.764965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.767594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.777876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.781783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.787336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.791127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.796696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.797609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.808273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.808607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.817746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.826399] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.831828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.837627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.841852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.846395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.857263] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.860150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.864033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.870679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.874934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.924441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.928325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.930730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.934486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.937697] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.941673] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.947494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.949827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.953527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.975552] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.998706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.000862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.021965] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.925641] Bluetooth: hci2: command tx timeout [ 122.926469] Bluetooth: hci3: command tx timeout [ 122.926965] Bluetooth: hci1: command tx timeout [ 122.988291] Bluetooth: hci5: command tx timeout [ 122.988423] Bluetooth: hci0: command tx timeout [ 123.052747] Bluetooth: hci7: command tx timeout [ 123.052804] Bluetooth: hci6: command tx timeout [ 123.116174] Bluetooth: hci4: command tx timeout [ 124.972276] Bluetooth: hci1: command tx timeout [ 124.972357] Bluetooth: hci3: command tx timeout [ 124.972756] Bluetooth: hci2: command tx timeout [ 125.036191] Bluetooth: hci5: command tx timeout [ 125.036220] Bluetooth: hci0: command tx timeout [ 125.100431] Bluetooth: hci6: command tx timeout [ 125.100904] Bluetooth: hci7: command tx timeout [ 125.164165] Bluetooth: hci4: command tx timeout [ 127.020268] Bluetooth: hci2: command tx timeout [ 127.020746] Bluetooth: hci3: command tx timeout [ 127.022108] Bluetooth: hci1: command tx timeout [ 127.084871] Bluetooth: hci0: command tx timeout [ 127.085355] Bluetooth: hci5: command tx timeout [ 127.148462] Bluetooth: hci7: command tx timeout [ 127.151108] Bluetooth: hci6: command tx timeout [ 127.212194] Bluetooth: hci4: command tx timeout [ 129.068186] Bluetooth: hci1: command tx timeout [ 129.068671] Bluetooth: hci3: command tx timeout [ 129.070282] Bluetooth: hci2: command tx timeout [ 129.133768] Bluetooth: hci5: command tx timeout [ 129.134460] Bluetooth: hci0: command tx timeout [ 129.197564] Bluetooth: hci6: command tx timeout [ 129.197998] Bluetooth: hci7: command tx timeout [ 129.260757] Bluetooth: hci4: command tx timeout [ 180.497946] syz-executor.6 (291) used greatest stack depth: 24640 bytes left [ 183.243622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.251735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.260592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.274857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.282533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.284588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.295440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.299585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.307905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.330597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.334567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.336275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.345614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.350210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.355546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.360910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.367445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.371705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.379347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.393201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.398650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.403918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.412573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.421823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.438749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.444681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.448641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.457709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.466702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.473192] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.482745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.503730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.506569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.511157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.514331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.529692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.531811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.563622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.568762] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.573683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.324337] Bluetooth: hci0: command tx timeout [ 185.517568] Bluetooth: hci1: command tx timeout [ 185.517590] Bluetooth: hci2: command tx timeout [ 185.644622] Bluetooth: hci7: command tx timeout [ 185.645208] Bluetooth: hci4: command tx timeout [ 185.646443] Bluetooth: hci5: command tx timeout [ 185.709305] Bluetooth: hci6: command tx timeout [ 185.709353] Bluetooth: hci3: command tx timeout [ 187.372823] Bluetooth: hci0: command tx timeout [ 187.564317] Bluetooth: hci1: command tx timeout [ 187.565202] Bluetooth: hci2: command tx timeout [ 187.692428] Bluetooth: hci5: command tx timeout [ 187.695126] Bluetooth: hci4: command tx timeout [ 187.695180] Bluetooth: hci7: command tx timeout [ 187.756167] Bluetooth: hci6: command tx timeout [ 187.759138] Bluetooth: hci3: command tx timeout [ 189.421093] Bluetooth: hci0: command tx timeout [ 189.612363] Bluetooth: hci2: command tx timeout [ 189.612489] Bluetooth: hci1: command tx timeout [ 189.740296] Bluetooth: hci7: command tx timeout [ 189.740342] Bluetooth: hci4: command tx timeout [ 189.740385] Bluetooth: hci5: command tx timeout [ 189.805127] Bluetooth: hci3: command tx timeout [ 189.805554] Bluetooth: hci6: command tx timeout [ 191.468164] Bluetooth: hci0: command tx timeout [ 191.660587] Bluetooth: hci2: command tx timeout [ 191.660836] Bluetooth: hci1: command tx timeout [ 191.789118] Bluetooth: hci5: command tx timeout [ 191.789163] Bluetooth: hci7: command tx timeout [ 191.789552] Bluetooth: hci4: command tx timeout [ 191.852476] Bluetooth: hci6: command tx timeout [ 191.852761] Bluetooth: hci3: command tx timeout [ 245.244454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.249737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.253930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.262137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.269479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.440433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.443954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.445923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.451809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.459680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.773526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.775945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.778307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.838880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.852724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.874530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.874812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.880948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.887616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.912279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.916163] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.919010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.927236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.928041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.928690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.946623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.951800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.954426] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.956047] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.958472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.961924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.964380] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.968632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.975251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.993040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.998469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.001244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.001658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.036353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.055374] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.340462] Bluetooth: hci0: command tx timeout [ 247.532541] Bluetooth: hci1: command tx timeout [ 247.917444] Bluetooth: hci2: command tx timeout [ 248.110134] Bluetooth: hci6: command tx timeout [ 248.172189] Bluetooth: hci3: command tx timeout [ 248.173331] Bluetooth: hci5: command tx timeout [ 248.173830] Bluetooth: hci4: command tx timeout [ 248.174342] Bluetooth: hci7: command tx timeout [ 249.388242] Bluetooth: hci0: command tx timeout [ 249.580202] Bluetooth: hci1: command tx timeout [ 249.964358] Bluetooth: hci2: command tx timeout [ 250.156339] Bluetooth: hci6: command tx timeout [ 250.220193] Bluetooth: hci7: command tx timeout [ 250.220629] Bluetooth: hci4: command tx timeout [ 250.221037] Bluetooth: hci5: command tx timeout [ 250.221680] Bluetooth: hci3: command tx timeout [ 251.437799] Bluetooth: hci0: command tx timeout [ 251.629130] Bluetooth: hci1: command tx timeout [ 252.013336] Bluetooth: hci2: command tx timeout [ 252.204153] Bluetooth: hci6: command tx timeout [ 252.269164] Bluetooth: hci3: command tx timeout [ 252.269615] Bluetooth: hci5: command tx timeout [ 252.270027] Bluetooth: hci4: command tx timeout [ 252.271744] Bluetooth: hci7: command tx timeout [ 253.484962] Bluetooth: hci0: command tx timeout [ 253.676169] Bluetooth: hci1: command tx timeout [ 254.060117] Bluetooth: hci2: command tx timeout [ 254.252137] Bluetooth: hci6: command tx timeout [ 254.316165] Bluetooth: hci4: command tx timeout [ 254.318495] Bluetooth: hci7: command tx timeout [ 254.318910] Bluetooth: hci3: command tx timeout [ 254.320401] Bluetooth: hci5: command tx timeout [ 307.582802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.592677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.595902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.605915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.615605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.650539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.660423] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.664555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.671331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.679507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.934805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.943524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.945386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.948916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.957896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.977276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.980816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.983326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.984514] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.987660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.001887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.021332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.069983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.086669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.102397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.124614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.134862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.142110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.148519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.187571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.195113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.196716] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.230565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.295754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.320645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.337385] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.361940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.402500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.463478] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.477963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.676156] Bluetooth: hci0: command tx timeout [ 309.741138] Bluetooth: hci1: command tx timeout [ 310.124394] Bluetooth: hci4: command tx timeout [ 310.125540] Bluetooth: hci2: command tx timeout [ 310.188129] Bluetooth: hci3: command tx timeout [ 310.380145] Bluetooth: hci6: command tx timeout [ 310.444121] Bluetooth: hci5: command tx timeout [ 310.573469] Bluetooth: hci7: command tx timeout [ 311.724368] Bluetooth: hci0: command tx timeout [ 311.788947] Bluetooth: hci1: command tx timeout [ 312.172260] Bluetooth: hci2: command tx timeout [ 312.172429] Bluetooth: hci4: command tx timeout [ 312.236283] Bluetooth: hci3: command tx timeout [ 312.428362] Bluetooth: hci6: command tx timeout [ 312.492122] Bluetooth: hci5: command tx timeout [ 312.620129] Bluetooth: hci7: command tx timeout [ 313.772211] Bluetooth: hci0: command tx timeout [ 313.836126] Bluetooth: hci1: command tx timeout [ 314.222091] Bluetooth: hci2: command tx timeout [ 314.222571] Bluetooth: hci4: command tx timeout [ 314.284158] Bluetooth: hci3: command tx timeout [ 314.479126] Bluetooth: hci6: command tx timeout [ 314.540236] Bluetooth: hci5: command tx timeout [ 314.669327] Bluetooth: hci7: command tx timeout [ 315.821374] Bluetooth: hci0: command tx timeout [ 315.884312] Bluetooth: hci1: command tx timeout [ 316.268301] Bluetooth: hci4: command tx timeout [ 316.268441] Bluetooth: hci2: command tx timeout [ 316.332110] Bluetooth: hci3: command tx timeout [ 316.524146] Bluetooth: hci6: command tx timeout [ 316.590092] Bluetooth: hci5: command tx timeout [ 316.718087] Bluetooth: hci7: command tx timeout [ 369.847829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.852422] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.854878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.869829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.875018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.052868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.056730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.059745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.069397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.077404] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.100520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.116676] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.123542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.131472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.135538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.239948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.248477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.252194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.264239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.280565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.336779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.341538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.364595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.380479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.384658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.392384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.401226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.403801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.407945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.408694] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.411304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.413381] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.417792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.424371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.452794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.462382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.505329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.507317] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.516909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.537752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.948170] Bluetooth: hci0: command tx timeout [ 372.140733] Bluetooth: hci1: command tx timeout [ 372.204461] Bluetooth: hci2: command tx timeout [ 372.332838] Bluetooth: hci3: command tx timeout [ 372.588724] Bluetooth: hci4: command tx timeout [ 372.589972] Bluetooth: hci5: command tx timeout [ 372.590972] Bluetooth: hci6: command tx timeout [ 372.652227] Bluetooth: hci7: command tx timeout [ 373.998122] Bluetooth: hci0: command tx timeout [ 374.188354] Bluetooth: hci1: command tx timeout [ 374.252195] Bluetooth: hci2: command tx timeout [ 374.380476] Bluetooth: hci3: command tx timeout [ 374.638141] Bluetooth: hci4: command tx timeout [ 374.638565] Bluetooth: hci6: command tx timeout [ 374.638972] Bluetooth: hci5: command tx timeout [ 374.701230] Bluetooth: hci7: command tx timeout [ 376.044147] Bluetooth: hci0: command tx timeout [ 376.236487] Bluetooth: hci1: command tx timeout [ 376.300345] Bluetooth: hci2: command tx timeout [ 376.429124] Bluetooth: hci3: command tx timeout [ 376.684391] Bluetooth: hci5: command tx timeout [ 376.684758] Bluetooth: hci6: command tx timeout [ 376.684894] Bluetooth: hci4: command tx timeout [ 376.749326] Bluetooth: hci7: command tx timeout [ 378.093160] Bluetooth: hci0: command tx timeout [ 378.284400] Bluetooth: hci1: command tx timeout [ 378.348329] Bluetooth: hci2: command tx timeout [ 378.477348] Bluetooth: hci3: command tx timeout [ 378.732249] Bluetooth: hci6: command tx timeout [ 378.733020] Bluetooth: hci5: command tx timeout [ 378.733393] Bluetooth: hci4: command tx timeout [ 378.797181] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:30:07 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff84ad73a2 RCX=ffff88806ce0897c RDX=1ffff1100d9c1150 RSI=ffffffff85c1cc40 RDI=ffffffff84ad73a2 RBP=ffffffff84ad73a2 RSP=ffff88806ce089d8 R8 =0000000000000001 R9 =ffff88806ce08a68 R10=000000000003b53d R11=00000000000c31b1 R12=0000000000000001 R13=0000000000000000 R14=ffff88802e130000 R15=ffff88802fb6c9c0 RIP=ffffffff8142fa22 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f129eddf1f0 CR3=000000000b274000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e5730000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888036d7fed0 RDI=ffff88806cf31850 RBP=ffff888036d78000 RSP=ffff888036d7f718 R8 =0000000000000001 R9 =ffff888036d7f7d8 R10=000000000003b53d R11=0000000000026f0f R12=ffff888036d7f701 R13=ffff888036d7f7e0 R14=ffff888036d7fed0 R15=ffff888036d7f798 RIP=ffffffff815ab920 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f177b9bbb70 CR3=000000002fbf4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000