Warning: Permanently added '[localhost]:22199' (ECDSA) to the list of known hosts. 2024/10/26 19:26:57 fuzzer started 2024/10/26 19:26:57 dialing manager at localhost:45639 syzkaller login: [ 67.618569] cgroup: Unknown subsys name 'net' [ 67.807232] cgroup: Unknown subsys name 'cpuset' [ 67.838476] cgroup: Unknown subsys name 'rlimit' 2024/10/26 19:27:14 syscalls: 200 2024/10/26 19:27:14 code coverage: enabled 2024/10/26 19:27:14 comparison tracing: enabled 2024/10/26 19:27:14 extra coverage: enabled 2024/10/26 19:27:14 setuid sandbox: enabled 2024/10/26 19:27:14 namespace sandbox: enabled 2024/10/26 19:27:14 Android sandbox: enabled 2024/10/26 19:27:14 fault injection: enabled 2024/10/26 19:27:14 leak checking: enabled 2024/10/26 19:27:14 net packet injection: enabled 2024/10/26 19:27:14 net device setup: enabled 2024/10/26 19:27:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/26 19:27:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/26 19:27:14 USB emulation: enabled 2024/10/26 19:27:14 hci packet injection: enabled 2024/10/26 19:27:14 wifi device emulation: enabled 2024/10/26 19:27:14 802.15.4 emulation: enabled 2024/10/26 19:27:14 fetching corpus: 0, signal 0/0 (executing program) 2024/10/26 19:27:16 starting 8 fuzzer processes 19:27:16 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000008) r0 = request_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0}, &(0x7f0000000140)=""/23, 0x17, &(0x7f00000002c0)={&(0x7f0000000180)={'sha224-arm64-neon\x00'}, &(0x7f00000001c0)="29bfc4c240e06af60577825027ba8786351a23303d55d329e8bb1a5d00ce590a7553ecd97b84a92d758f5979943d87a703bd53d129e45006a8e6940fa63ac8bfa8bd0fa298a98c16ebf5a679c8b89c269ccb9f7e5062f2785aecce89242bf57a4261679bbbe5f47f16e132d8996e4462cd10766d6d547444863f8fe317e17663d45949940f4cc7f5f2b53a0c45b2d4002da74214ce58c0fb0be131e3b7362ac6f3f9f62221d8dffcf548ba2bcb4f0ea0d3337d53aa86099832ad3ffc08f3c997b455bbdc5062afcac0fa4b1d38d9a8675687139db10a68941ded5c0ca91b48b22bc5e40e909c14d8f23facd7cfe73ae748939c", 0xf3}) r1 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="efaef794dc9edcdc0dc0a7a7b792f56238fb2e55626fc2d8fd4ad39d034555dc85d343d06e9bccc346261d56b2f6e9361faa44001513fd4cc8fd92694c4153d56a625800a9ebfd9f72cfc5833833dba91c3a362d6e4e67d2af7eb643e67f61e2fe7debe565489aae13721dfbb3e85429cd9f98dba16e1a5c2b5c39158d8c246153b2ab0c50fcfd4dcff5b2076ce218c21fad86252f2c2219a9062c3339c6edc7126d14e8788846c31e00fe2f7235775d37b9", 0xb2, r0) keyctl$get_keyring_id(0x0, r1, 0x5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xa9, 0x7, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7, 0x8, 0x7fff, 0x2000000}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', r2, 0x2f, 0x1f, 0xad, 0x20, 0x36, @private1, @rand_addr=' \x01\x00', 0x8758, 0x80, 0x8, 0x9}}) request_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='\x00', r0) keyctl$get_keyring_id(0x0, r1, 0xb2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000680)={r1, 0xbf, 0x30}, &(0x7f00000006c0)={'enc=', 'raw', ' hash=', {'sm3\x00'}}, &(0x7f0000000740)="c959d6918d4563cf0660d274154c422bf4a9b597def8f39e00a680a8a8dfae0183abc008f1e4cfcf158f89ac500f726d39dfddadd6944046ac27b5869238581019dfd7fb7b547da3733fa4d5387db8060f4584b8bfa1b198784bd5ec6238671b9091473cce0fe3fa909da7ab447fb72408ddfaba6b3c9317a0493af6a85923a9b1699ec6cdf664c4bc4bc6b994e55a7231e9bfe863180e3b3daf6f816dcc9b07daa2bf95b6a504aa1f6d3a9e860e56c5de8b50fa7d917d57d581f4792a087c", &(0x7f0000000800)="6cc52b9a99b27e10e64cc334f6753c841ff81f57560d405adb114adb296af26cef5f5beb464938540664c6716829e602") r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x7f, 0x4, 0x34, @local, @private0, 0x8, 0x20, 0x0, 0x4}}) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x12000880) inotify_rm_watch(0xffffffffffffffff, r5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b32, 0x5) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x14c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x9c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x8}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40000}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x49a}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000c00)) 19:27:16 executing program 3: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ')\xae//\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0xe8d155c05d8519f3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0xf, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004040) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0x5bc, 0x10, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8000, 0x7, 0x100, 0x8000}}) socketpair(0xa, 0x6, 0x1, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xdbe}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1f}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xf8, 0x3, 0x1, 0x500, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1797]}, @CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}}, 0x4008000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000008}, 0x200080c4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe4, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6035cbf4570c55b6d49879fc80"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "31d5527d8bb6b0f72b324f547ed182"}], @key_params=[@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "61dbfb7f74"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ca4c35e5f3c753f02d03015989"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "246b6e3592"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x1) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4442202}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xd2}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1f}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4e}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x3f}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8100}, 0x4000004) 19:27:16 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0xec, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4044810}, 0x20000080) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x24008081}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0xc, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x7f, 0x8, {{0x1f, 0x4, 0x3, 0x1, 0x7c, 0x66, 0x0, 0x4, 0x0, 0x0, @multicast1, @local, {[@generic={0x86, 0x6, "e1dce427"}, @timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0x0, [{@remote, 0x80}, {@multicast2, 0xfffffffe}]}, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x6, [{@broadcast, 0xff}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x1f}, {@local, 0x3420}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @lsrr={0x83, 0xb, 0xb7, [@multicast1, @empty]}, @timestamp_addr={0x44, 0x14, 0xe8, 0x1, 0x5, [{@rand_addr=0x64010100, 0x7}, {@multicast2, 0xf1}]}, @end]}}}}}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x98, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000880}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'ip6_vti0\x00', r4, 0x29, 0x3, 0x2, 0x400, 0x60, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0x400, 0x2}}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder-control\x00', 0x802, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r5, 0x204, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x20000010) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, 0x1, 0x9, 0x301, 0x0, 0x0, {0x5}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_QUEUE_NUM={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x4800) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x98, r0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xffff}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf95d}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x20}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x80}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xfc}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x55fa}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa831}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x809e}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, r0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe8, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "8a23d4c841aaadb3aaedce6137045254"}, @NL80211_ATTR_PMK={0x14, 0xfe, "be6e25bd0e79ec68f5e8288dbf2fbd31"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x15, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x4000041) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20004044) 19:27:16 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044051) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SVE_GET_VL(0x33, 0x1c4be) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x44000000) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "a989b59a44794ba3353ee2deaf"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3e37e732d586634ac3f9e30c63"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b963f21082961a68a011f68815"}]}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2de2ece156fb5e327cf3a58f8d"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "00fc04107e1c63a981c10b85ef"}, @NL80211_KEY_SEQ={0x5, 0x4, "f9"}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a9bf92e5564c0b13b6c78643af"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x805) pipe(&(0x7f0000000700)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) prctl$PR_SVE_GET_VL(0x33, 0x19031) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x24000040) socketpair(0x29, 0x80000, 0x3, &(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1404a20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000b00)) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000c80)={{0x5, 0x2f}, 'port0\x00', 0x80, 0x0, 0x2, 0x1062, 0xac, 0x7ff, 0x4e, 0x0, 0x2, 0x5}) 19:27:16 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400804d}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '(*`+-./}&]\xacs+*^\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000040) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x5, 0x6, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x10, 0x8001, 0xbe}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x840) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x80}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40040) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x801) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000900)={'\x00', 0xffffffff, 0x3, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x400c041) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x17}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x80000001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf3}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008092}, 0x4004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xc2}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x200}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x11}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041000}, 0x2000c091) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x800) socketpair(0x1d, 0xc, 0xed, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x51c}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffeffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004014) [ 85.911918] audit: type=1400 audit(1729970836.530:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:27:16 executing program 5: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000004}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x48094) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '!\\-*@#\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xa6\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x71}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c890}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0xb18d0c0ff3798f97}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xff}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x20002181) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xb, 0x0, 0x6}, [@CTA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000040) 19:27:16 executing program 6: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004885}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000020}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x4800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xc0011a60}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r11, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x396e0f36c9703f75}, 0x8014) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r0, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x14) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) 19:27:16 executing program 7: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x44, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x60}, 0x4000005) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0x2000c000) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x2, 0x9, 0x9ce799aa56086b91, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x2000c000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44880}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x114, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e3cdfcd970655b33bd6b4b52db"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e07b0976a74c75a10e1a727f65"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "94758674d3"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_SSID={0x1a, 0x34, @random="1cda47a3c45f6c313aa8eb6a3ad8c285d4dcfef5ed39"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x114}, 0x1, 0x0, 0x0, 0x44040}, 0x4080) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040814) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000890}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4000041) [ 87.329262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.342413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.345362] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.374878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.376328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.377405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.379383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.381584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.383222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.384042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.386612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.387988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.426203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.430280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.443365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.448276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.451763] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.461830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.479573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.484834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.491277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.493627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.497629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.499988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.504651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.506623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.510199] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.543227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.560602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.562246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.563631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.565859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.573767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.576178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.585075] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.589915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.630075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.630120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.632888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.634326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.672334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.674002] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.679553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.684911] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.685249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.687828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.691613] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.710898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.452309] Bluetooth: hci1: command tx timeout [ 89.454126] Bluetooth: hci0: command tx timeout [ 89.580198] Bluetooth: hci4: command tx timeout [ 89.581417] Bluetooth: hci2: command tx timeout [ 89.771713] Bluetooth: hci5: command tx timeout [ 89.772743] Bluetooth: hci6: command tx timeout [ 89.773318] Bluetooth: hci7: command tx timeout [ 89.774080] Bluetooth: hci3: command tx timeout [ 91.501127] Bluetooth: hci1: command tx timeout [ 91.501898] Bluetooth: hci0: command tx timeout [ 91.627697] Bluetooth: hci2: command tx timeout [ 91.629604] Bluetooth: hci4: command tx timeout [ 91.819643] Bluetooth: hci5: command tx timeout [ 91.821046] Bluetooth: hci7: command tx timeout [ 91.822421] Bluetooth: hci3: command tx timeout [ 91.823843] Bluetooth: hci6: command tx timeout [ 93.548616] Bluetooth: hci1: command tx timeout [ 93.549195] Bluetooth: hci0: command tx timeout [ 93.675763] Bluetooth: hci4: command tx timeout [ 93.676284] Bluetooth: hci2: command tx timeout [ 93.868611] Bluetooth: hci6: command tx timeout [ 93.869101] Bluetooth: hci7: command tx timeout [ 93.870217] Bluetooth: hci3: command tx timeout [ 93.871617] Bluetooth: hci5: command tx timeout [ 95.598532] Bluetooth: hci0: command tx timeout [ 95.599069] Bluetooth: hci1: command tx timeout [ 95.723598] Bluetooth: hci2: command tx timeout [ 95.724081] Bluetooth: hci4: command tx timeout [ 95.916611] Bluetooth: hci7: command tx timeout [ 95.917114] Bluetooth: hci5: command tx timeout [ 95.917611] Bluetooth: hci3: command tx timeout [ 95.918058] Bluetooth: hci6: command tx timeout [ 146.173122] modprobe (3479) used greatest stack depth: 23344 bytes left [ 149.962935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.971148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.973905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.980863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.983621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.984831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.084856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.087768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.089321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.090622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.095593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.099876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.102823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.110784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.112880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.138086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.149435] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.157019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.159276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.171090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.172616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.178377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.180536] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.181874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.345445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.350839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.358184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.374265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.381765] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.387940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.398106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.399762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.400801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.403774] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.406832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.412730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.415844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.417048] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.419870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.421328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.427636] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.430942] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.437700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.459762] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.461927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.463711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.493735] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.502079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.044762] Bluetooth: hci0: command tx timeout [ 152.171602] Bluetooth: hci2: command tx timeout [ 152.237629] Bluetooth: hci1: command tx timeout [ 152.237753] Bluetooth: hci3: command tx timeout [ 152.491658] Bluetooth: hci6: command tx timeout [ 152.491711] Bluetooth: hci5: command tx timeout [ 152.556588] Bluetooth: hci4: command tx timeout [ 152.620693] Bluetooth: hci7: command tx timeout [ 154.092651] Bluetooth: hci0: command tx timeout [ 154.220603] Bluetooth: hci2: command tx timeout [ 154.283579] Bluetooth: hci3: command tx timeout [ 154.286115] Bluetooth: hci1: command tx timeout [ 154.540564] Bluetooth: hci6: command tx timeout [ 154.541092] Bluetooth: hci5: command tx timeout [ 154.604797] Bluetooth: hci4: command tx timeout [ 154.668549] Bluetooth: hci7: command tx timeout [ 156.140560] Bluetooth: hci0: command tx timeout [ 156.268609] Bluetooth: hci2: command tx timeout [ 156.331574] Bluetooth: hci1: command tx timeout [ 156.332058] Bluetooth: hci3: command tx timeout [ 156.589640] Bluetooth: hci5: command tx timeout [ 156.590177] Bluetooth: hci6: command tx timeout [ 156.652541] Bluetooth: hci4: command tx timeout [ 156.716903] Bluetooth: hci7: command tx timeout [ 158.188558] Bluetooth: hci0: command tx timeout [ 158.316623] Bluetooth: hci2: command tx timeout [ 158.380580] Bluetooth: hci3: command tx timeout [ 158.380880] Bluetooth: hci1: command tx timeout [ 158.635555] Bluetooth: hci6: command tx timeout [ 158.636604] Bluetooth: hci5: command tx timeout [ 158.699560] Bluetooth: hci4: command tx timeout [ 158.763691] Bluetooth: hci7: command tx timeout [ 212.219163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.220776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.222806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.225125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.226699] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.227827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.342880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.349742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.351413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.355716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.358332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.359919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.361910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.362941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.369709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.373825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.380984] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.383019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.472011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.480788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.506010] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.519103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.528224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.533711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.541864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.549169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.560158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.587658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.592055] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.594482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.607695] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.612664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.615042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.616709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.622006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.627702] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.629323] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.657913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.665664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.671087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.673149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.675655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.698269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.700101] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.701217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.706278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.707836] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.710676] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.251772] Bluetooth: hci0: command tx timeout [ 214.444666] Bluetooth: hci2: command tx timeout [ 214.446659] Bluetooth: hci1: command tx timeout [ 214.571595] Bluetooth: hci3: command tx timeout [ 214.699607] Bluetooth: hci4: command tx timeout [ 214.701899] Bluetooth: hci5: command tx timeout [ 214.701922] Bluetooth: hci6: command tx timeout [ 214.766612] Bluetooth: hci7: command tx timeout [ 216.299547] Bluetooth: hci0: command tx timeout [ 216.496535] Bluetooth: hci2: command tx timeout [ 216.497078] Bluetooth: hci1: command tx timeout [ 216.619634] Bluetooth: hci3: command tx timeout [ 216.747580] Bluetooth: hci6: command tx timeout [ 216.748585] Bluetooth: hci5: command tx timeout [ 216.748673] Bluetooth: hci4: command tx timeout [ 216.811623] Bluetooth: hci7: command tx timeout [ 218.347587] Bluetooth: hci0: command tx timeout [ 218.539648] Bluetooth: hci2: command tx timeout [ 218.539829] Bluetooth: hci1: command tx timeout [ 218.667933] Bluetooth: hci3: command tx timeout [ 218.795793] Bluetooth: hci5: command tx timeout [ 218.795819] Bluetooth: hci6: command tx timeout [ 218.796879] Bluetooth: hci4: command tx timeout [ 218.860594] Bluetooth: hci7: command tx timeout [ 220.395550] Bluetooth: hci0: command tx timeout [ 220.587592] Bluetooth: hci1: command tx timeout [ 220.588704] Bluetooth: hci2: command tx timeout [ 220.716533] Bluetooth: hci3: command tx timeout [ 220.844588] Bluetooth: hci4: command tx timeout [ 220.845106] Bluetooth: hci6: command tx timeout [ 220.845719] Bluetooth: hci5: command tx timeout [ 220.908671] Bluetooth: hci7: command tx timeout [ 274.730336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.732856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.734229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.736510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.737906] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.739015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.895189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.897803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.899045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.900358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.903153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.908120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.909333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.913140] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.915461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.919188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.950595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.007198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.030973] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.034404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.037631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.039126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.040127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.042421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.043523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.062917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.069230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.075287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.077568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.081270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.086116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.087289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.089337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.093779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.094717] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.095770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.097834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.099356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.121257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.135699] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.136787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.148886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.170304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.171905] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.174892] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.176849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.177916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.180366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.779849] Bluetooth: hci0: command tx timeout [ 277.099738] Bluetooth: hci2: command tx timeout [ 277.163634] Bluetooth: hci5: command tx timeout [ 277.164322] Bluetooth: hci4: command tx timeout [ 277.165610] Bluetooth: hci3: command tx timeout [ 277.165653] Bluetooth: hci1: command tx timeout [ 277.227571] Bluetooth: hci6: command tx timeout [ 277.293545] Bluetooth: hci7: command tx timeout [ 278.827712] Bluetooth: hci0: command tx timeout [ 279.148662] Bluetooth: hci2: command tx timeout [ 279.211613] Bluetooth: hci4: command tx timeout [ 279.213092] Bluetooth: hci1: command tx timeout [ 279.214969] Bluetooth: hci3: command tx timeout [ 279.215496] Bluetooth: hci5: command tx timeout [ 279.275576] Bluetooth: hci6: command tx timeout [ 279.339572] Bluetooth: hci7: command tx timeout [ 280.875622] Bluetooth: hci0: command tx timeout [ 281.195553] Bluetooth: hci2: command tx timeout [ 281.259717] Bluetooth: hci4: command tx timeout [ 281.261600] Bluetooth: hci5: command tx timeout [ 281.261804] Bluetooth: hci3: command tx timeout [ 281.263275] Bluetooth: hci1: command tx timeout [ 281.323530] Bluetooth: hci6: command tx timeout [ 281.387526] Bluetooth: hci7: command tx timeout [ 282.923538] Bluetooth: hci0: command tx timeout [ 283.243545] Bluetooth: hci2: command tx timeout [ 283.307655] Bluetooth: hci3: command tx timeout [ 283.309612] Bluetooth: hci1: command tx timeout [ 283.309668] Bluetooth: hci5: command tx timeout [ 283.311615] Bluetooth: hci4: command tx timeout [ 283.371637] Bluetooth: hci6: command tx timeout [ 283.435606] Bluetooth: hci7: command tx timeout [ 337.020149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.023054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.026667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.034595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.036861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.038134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.137255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.140380] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.141948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.145619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.147125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.148289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.163405] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.168604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.169758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.184669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.193727] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.199931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.269242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.271888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.281450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.283151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.288530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.297545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.299730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.306685] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.307514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.314072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.315660] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.319339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.376381] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.382200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.385751] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.393343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.401070] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.403005] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.409078] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.417665] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.430886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.431311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.441884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.445705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.446855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.454760] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.456349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.457739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.463658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.465711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.115609] Bluetooth: hci0: command tx timeout [ 339.180731] Bluetooth: hci1: command tx timeout [ 339.244517] Bluetooth: hci2: command tx timeout [ 339.435593] Bluetooth: hci6: command tx timeout [ 339.436309] Bluetooth: hci4: command tx timeout [ 339.437009] Bluetooth: hci3: command tx timeout [ 339.501557] Bluetooth: hci7: command tx timeout [ 339.564582] Bluetooth: hci5: command tx timeout [ 341.163515] Bluetooth: hci0: command tx timeout [ 341.227526] Bluetooth: hci1: command tx timeout [ 341.292591] Bluetooth: hci2: command tx timeout [ 341.484593] Bluetooth: hci3: command tx timeout [ 341.485078] Bluetooth: hci4: command tx timeout [ 341.485865] Bluetooth: hci6: command tx timeout [ 341.547753] Bluetooth: hci7: command tx timeout [ 341.612500] Bluetooth: hci5: command tx timeout [ 343.211513] Bluetooth: hci0: command tx timeout [ 343.275626] Bluetooth: hci1: command tx timeout [ 343.339709] Bluetooth: hci2: command tx timeout [ 343.531539] Bluetooth: hci6: command tx timeout [ 343.532016] Bluetooth: hci4: command tx timeout [ 343.532524] Bluetooth: hci3: command tx timeout [ 343.596600] Bluetooth: hci7: command tx timeout [ 343.659524] Bluetooth: hci5: command tx timeout [ 345.259581] Bluetooth: hci0: command tx timeout [ 345.323636] Bluetooth: hci1: command tx timeout [ 345.387508] Bluetooth: hci2: command tx timeout [ 345.579531] Bluetooth: hci3: command tx timeout [ 345.579569] Bluetooth: hci4: command tx timeout [ 345.580003] Bluetooth: hci6: command tx timeout [ 345.643499] Bluetooth: hci7: command tx timeout [ 345.708210] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 19:32:26 Registers: info registers vcpu 0 RAX=ffffffff838a3d33 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=1ffff11004ee9f5a RSI=ffffffff838a3d33 RDI=ffff88802774fb40 RBP=ffff88802774fb10 RSP=ffff88802774fa70 R8 =0000000000000001 R9 =ffff88802774fab8 R10=000000000003c001 R11=00000000000945d5 R12=ffff88802774fb40 R13=0000000000000000 R14=ffff888026b63700 R15=0000000000000dc0 RIP=ffffffff813e8f74 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555746da400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9c2def9820 CR3=0000000028502000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000ff0000 XMM02=0000ff00000000000000000000ff0000 XMM03=000000000000ff000000000000000000 XMM04=00ff0000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888024ccf8a8 RCX=ffffffff86bee0f6 RDX=1ffff11004999f20 RSI=0000000000000000 RDI=00007fab2bff2be7 RBP=ffff888024ccf900 RSP=ffff888024ccf880 R8 =ffffffff86bee0fa R9 =ffff888024ccf8e8 R10=000000000003c001 R11=00000000000c2f81 R12=ffff888024ccf970 R13=0000000000000000 R14=ffff88802ed3b700 R15=0000000000092cc0 RIP=ffffffff8121ea15 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fab2bedb540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fab2c0764a1 CR3=0000000026e32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000