syzkaller login: [ 54.346413] sshd (231) used greatest stack depth: 23344 bytes left Warning: Permanently added '[localhost]:36466' (ECDSA) to the list of known hosts. 2024/10/29 08:58:28 fuzzer started 2024/10/29 08:58:29 dialing manager at localhost:45639 [ 65.823126] cgroup: Unknown subsys name 'net' [ 66.005255] cgroup: Unknown subsys name 'cpuset' [ 66.030244] cgroup: Unknown subsys name 'rlimit' 2024/10/29 08:58:46 syscalls: 204 2024/10/29 08:58:46 code coverage: enabled 2024/10/29 08:58:46 comparison tracing: enabled 2024/10/29 08:58:46 extra coverage: enabled 2024/10/29 08:58:46 setuid sandbox: enabled 2024/10/29 08:58:46 namespace sandbox: enabled 2024/10/29 08:58:46 Android sandbox: enabled 2024/10/29 08:58:46 fault injection: enabled 2024/10/29 08:58:46 leak checking: enabled 2024/10/29 08:58:46 net packet injection: enabled 2024/10/29 08:58:46 net device setup: enabled 2024/10/29 08:58:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/29 08:58:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/29 08:58:46 USB emulation: enabled 2024/10/29 08:58:46 hci packet injection: enabled 2024/10/29 08:58:46 wifi device emulation: enabled 2024/10/29 08:58:46 802.15.4 emulation: enabled 2024/10/29 08:58:46 fetching corpus: 0, signal 0/0 (executing program) 2024/10/29 08:58:47 starting 8 fuzzer processes 08:58:47 executing program 0: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x9) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x100000000000000, 0x200042) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/97) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180)) r2 = socket(0x22, 0xf, 0xa334) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0xf23b334220a1c97b, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x740}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x24000080) r4 = syz_open_dev$evdev(&(0x7f0000000380), 0xa6, 0x100) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000003c0)=""/24) r5 = memfd_secret(0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000400)=""/106) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fe00}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24008081) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4882) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000006c0)=[0x10000, 0x3]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000700)=[@window={0x3, 0x88, 0x2}, @window={0x3, 0x2, 0x6}, @window={0x3, 0x7ff, 0x1}, @window={0x3, 0x101}, @timestamp, @sack_perm, @sack_perm], 0x7) 08:58:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x65, 0x28840) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0xfffffff8) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x3, 0x1]) r1 = memfd_secret(0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/47) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x38000) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000140)={0x51, 0xca00, 0xf70c, {0xa47, 0xff}, {0x1, 0x3f}, @ramp={0x6cc9, 0x800, {0x0, 0xfff7, 0x3, 0xa1}}}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000180)=""/158) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x440) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000280)={0x8, 0x7, 0x2, 0x200, "c591e68597222700cd566690ee568738c0e2dec01dd44ec431402f431f3c4532"}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000002c0)=""/84) r4 = memfd_secret(0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000340)=""/180) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000400)=""/1) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000440)=0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x2, 0x40000) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f00000004c0)=""/45) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000580)={0x8, 0x48, &(0x7f0000000500)="b1cde93c820785979c64780b207ee5607a04079933050025f39d9e823534cb5de2a27f53adfddda8c145143f063ce8e82c2a58e4fbbdfec0f28f9031ba6bdb6942c809391b7522e2"}) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000005c0)=[0x0, 0x200]) 08:58:47 executing program 2: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0x0, 0x550, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x24}}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r1) r3 = socket(0xa, 0xb, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x26, 0x2, 0x9, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r2, 0x808, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x44041}, 0x4000) getsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000680), &(0x7f00000006c0)=0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r1) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40884}, 0x4015) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4000000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r8) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r9, 0x100, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r10, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000) [ 84.021830] audit: type=1400 audit(1730192327.975:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:58:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "01da2b119b1b699895b9db8e5666ccf9527bd5e71dc963fbfecfc28ea789b694"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20008000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000040}, 0x20004000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x100, 0x7f, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}]}, 0x58}}, 0x4004845) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x108, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffe) membarrier(0x1, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r5, 0x400, 0x80000001, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1cc, r7, 0x600, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x713513e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aaa3fa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xba1db1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f1bbc0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1319}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d79bebd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x212b1d7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6677}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66dbcd49}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b52a17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xebbc2da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e813e0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44d0c9ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe0da04b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60a98152}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x632f895b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fd85f5a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x229aeff7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44daa804}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x448bccdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712084e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d4d54a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c903b19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba98c18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8008001}, 0x81) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 08:58:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40050}, 0x18800) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000010) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4820}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0xc0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x9) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd9bf}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x404c084) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000009c0)={0x1, 0xc5, &(0x7f00000008c0)="195d11df2852827743b71fb0fe064538af766ee1d1d7849e7f70ecc5c1b0fc7ffb9a5275f3bb3788b81e8db97291b130a8d4f9d5fc3a5d77ba64c1bd8fbaef396a347bbee019f5260f6e18590e34a3817573f9601e8cee70816ebd81673cd86763c0b0867552e4e612768d1c109e500618d082575c8f831bda482ddde537f969b1c39d45480f5f7d27c0d7f5e3a0e093db526666a54c54e070d2ccb1ce7193404482bfe006919dd76cf135487b32fcc4c93fdc2654e94cef8393c6242163be9d1e85ad778d"}) socketpair(0x23, 0x4, 0x6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4044}}, 0x0, 0x0, 0x1d, 0x0, "5bb6025decc6756fc6c7c6c7025c0b406a9758adfa1bdc38db094bd88d6009586e18832cce1fde052ed24a03c901e0a110325204a71e3be446888e20fedb3bc657f517b9c868b15522b11c33eefa21c0"}, 0xd8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r6, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4c855) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000c80)=""/159, &(0x7f0000000d40)=0x9f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00'}) 08:58:47 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c811}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x24010040) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc850}, 0x4004081) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r0, 0x600, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x200040a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x49000) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4804}, 0x20004000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r11, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '*@%\\&{^\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4040000) 08:58:48 executing program 7: r0 = geteuid() ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x4, 0x9, 0x1c000, 0x1, 0x1, 0x8}) setresuid(r0, r0, r0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/188) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x1, 0x49, &(0x7f0000000100)="9fced3e7b5257572a6c405486e462afc951cd2e34d60d2e8ba3044a599f0b5f29ddc6aaa90fb966526bfa267f2b84f2da18c989a0245da74887d1d35d8f860f2facd2de51092b9763d"}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000280)={0x1f, 0x4f, 0xcdc, 0x7ff, 0x4, 0xfff}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c37e492}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47d1cb03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f00d164}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x164d2304}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e789929}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12b198bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x927f}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008021}, 0x44050) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000440)=""/46) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000480)) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x2, 0x40) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000500)=""/60) r2 = syz_open_dev$evdev(&(0x7f0000000540), 0x101, 0x2) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000580)={0x4, 0x1, 0x40, 0x7, 0x0, 0x6}) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000005c0)={0x3, 0x7fff, 0x5, 0x1, 0x3f, 0x8}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000600)=""/204) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000700)=[0x37, 0xd0c]) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000740)=""/130) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000800)=""/157) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000008c0)=""/134) 08:58:48 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x440d1}, 0x4000) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc854) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000003c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000400)=""/47) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4008810) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000007c0)='io.latency\x00', 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) [ 85.570439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.594370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.596805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.598746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.599912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.604020] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.605653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.607600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.612213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.614907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.616068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.622325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.632403] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.634118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.635051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.635193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.636311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.637732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.639430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.641690] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.642761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.643979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.647865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.658749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.663104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.664368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.664442] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.665842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.669393] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.670514] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.676369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.679335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.679930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.680204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.681447] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.682147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.684248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.686309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.687640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.689187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.690409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.692785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.697079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.707792] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.713313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.718245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.726129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.728904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.665070] Bluetooth: hci2: command tx timeout [ 87.666174] Bluetooth: hci1: command tx timeout [ 87.666365] Bluetooth: hci0: command tx timeout [ 87.730604] Bluetooth: hci7: command tx timeout [ 87.731298] Bluetooth: hci3: command tx timeout [ 87.792658] Bluetooth: hci5: command tx timeout [ 87.793487] Bluetooth: hci4: command tx timeout [ 87.793791] Bluetooth: hci6: command tx timeout [ 89.713670] Bluetooth: hci2: command tx timeout [ 89.714227] Bluetooth: hci0: command tx timeout [ 89.715290] Bluetooth: hci1: command tx timeout [ 89.778374] Bluetooth: hci7: command tx timeout [ 89.778398] Bluetooth: hci3: command tx timeout [ 89.840627] Bluetooth: hci6: command tx timeout [ 89.843656] Bluetooth: hci4: command tx timeout [ 89.844141] Bluetooth: hci5: command tx timeout [ 91.760614] Bluetooth: hci0: command tx timeout [ 91.761622] Bluetooth: hci1: command tx timeout [ 91.761675] Bluetooth: hci2: command tx timeout [ 91.824610] Bluetooth: hci3: command tx timeout [ 91.825763] Bluetooth: hci7: command tx timeout [ 91.888616] Bluetooth: hci4: command tx timeout [ 91.888691] Bluetooth: hci5: command tx timeout [ 91.889152] Bluetooth: hci6: command tx timeout [ 93.808635] Bluetooth: hci1: command tx timeout [ 93.810243] Bluetooth: hci0: command tx timeout [ 93.810275] Bluetooth: hci2: command tx timeout [ 93.872738] Bluetooth: hci7: command tx timeout [ 93.872763] Bluetooth: hci3: command tx timeout [ 93.945350] Bluetooth: hci5: command tx timeout [ 93.945964] Bluetooth: hci6: command tx timeout [ 93.946499] Bluetooth: hci4: command tx timeout [ 97.511467] hrtimer: interrupt took 6636930 ns [ 148.107680] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.110053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.111420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.112999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.120066] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.121716] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.124734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.125953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.126963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.135954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.146091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.147186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.162165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.169787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.175360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.178487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.181721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.183742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.191927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.199398] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.200881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.203112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.214639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.222690] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.243987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.246857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.249081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.253144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.268731] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.270936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.293437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.296789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.300086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.308917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.311910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.313348] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.317188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.319451] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.321021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.332355] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.335032] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.336426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.341854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.344303] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.345778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.350417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.355758] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.357036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.209666] Bluetooth: hci0: command tx timeout [ 150.211906] Bluetooth: hci1: command tx timeout [ 150.321644] Bluetooth: hci4: command tx timeout [ 150.322416] Bluetooth: hci3: command tx timeout [ 150.323035] Bluetooth: hci2: command tx timeout [ 150.384622] Bluetooth: hci7: command tx timeout [ 150.385267] Bluetooth: hci5: command tx timeout [ 150.448629] Bluetooth: hci6: command tx timeout [ 152.240627] Bluetooth: hci0: command tx timeout [ 152.242793] Bluetooth: hci1: command tx timeout [ 152.369312] Bluetooth: hci2: command tx timeout [ 152.370273] Bluetooth: hci3: command tx timeout [ 152.370783] Bluetooth: hci4: command tx timeout [ 152.433688] Bluetooth: hci5: command tx timeout [ 152.434215] Bluetooth: hci7: command tx timeout [ 152.497720] Bluetooth: hci6: command tx timeout [ 154.288615] Bluetooth: hci1: command tx timeout [ 154.289161] Bluetooth: hci0: command tx timeout [ 154.416722] Bluetooth: hci4: command tx timeout [ 154.417263] Bluetooth: hci3: command tx timeout [ 154.417771] Bluetooth: hci2: command tx timeout [ 154.481756] Bluetooth: hci7: command tx timeout [ 154.482289] Bluetooth: hci5: command tx timeout [ 154.546560] Bluetooth: hci6: command tx timeout [ 156.336719] Bluetooth: hci0: command tx timeout [ 156.337309] Bluetooth: hci1: command tx timeout [ 156.464773] Bluetooth: hci2: command tx timeout [ 156.465317] Bluetooth: hci3: command tx timeout [ 156.466649] Bluetooth: hci4: command tx timeout [ 156.530591] Bluetooth: hci5: command tx timeout [ 156.531117] Bluetooth: hci7: command tx timeout [ 156.592583] Bluetooth: hci6: command tx timeout [ 210.244313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.247312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.248017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.252040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.252679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.258422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.262185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.264095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.265416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.278571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.280340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.281995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.370631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.376851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.389795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.398798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.406635] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.412746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.486227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.489040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.491600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.502844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.510656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.511742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.513732] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.514876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.523044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.541482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.547943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.551763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.570121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.577930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.580942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.606791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.615437] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.619898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.681532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.697651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.701776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.743628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.750991] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.755420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.117323] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.142788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.147956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.185775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.198821] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.206966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.336687] Bluetooth: hci0: command tx timeout [ 212.337838] Bluetooth: hci1: command tx timeout [ 212.465846] Bluetooth: hci2: command tx timeout [ 212.593615] Bluetooth: hci3: command tx timeout [ 212.656733] Bluetooth: hci4: command tx timeout [ 212.721895] Bluetooth: hci5: command tx timeout [ 212.849611] Bluetooth: hci6: command tx timeout [ 213.297607] Bluetooth: hci7: command tx timeout [ 214.385668] Bluetooth: hci0: command tx timeout [ 214.386230] Bluetooth: hci1: command tx timeout [ 214.514554] Bluetooth: hci2: command tx timeout [ 214.640610] Bluetooth: hci3: command tx timeout [ 214.704632] Bluetooth: hci4: command tx timeout [ 214.768855] Bluetooth: hci5: command tx timeout [ 214.897576] Bluetooth: hci6: command tx timeout [ 215.345666] Bluetooth: hci7: command tx timeout [ 216.433677] Bluetooth: hci0: command tx timeout [ 216.435326] Bluetooth: hci1: command tx timeout [ 216.560569] Bluetooth: hci2: command tx timeout [ 216.689707] Bluetooth: hci3: command tx timeout [ 216.753677] Bluetooth: hci4: command tx timeout [ 216.816601] Bluetooth: hci5: command tx timeout [ 216.946407] Bluetooth: hci6: command tx timeout [ 217.392586] Bluetooth: hci7: command tx timeout [ 218.481665] Bluetooth: hci1: command tx timeout [ 218.483594] Bluetooth: hci0: command tx timeout [ 218.609581] Bluetooth: hci2: command tx timeout [ 218.736565] Bluetooth: hci3: command tx timeout [ 218.800640] Bluetooth: hci4: command tx timeout [ 218.864575] Bluetooth: hci5: command tx timeout [ 218.994618] Bluetooth: hci6: command tx timeout [ 219.441602] Bluetooth: hci7: command tx timeout [ 272.705322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.716763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.720091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.724477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.728224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.729748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.803431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.812745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.817288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.819801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.823284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.824844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.892120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.893911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.902248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.912827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.919143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.920532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.956131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.969743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.973120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.979195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.986434] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.999577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.069891] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.072126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.097124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.097897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.099104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.105278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.106011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.109193] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.110275] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.121180] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.123661] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.125563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.185624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.218681] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.224833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.230278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.280650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.286736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.287871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.289337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.308831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.314744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.340113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.343719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.736598] Bluetooth: hci0: command tx timeout [ 274.865624] Bluetooth: hci1: command tx timeout [ 274.994648] Bluetooth: hci2: command tx timeout [ 275.121642] Bluetooth: hci3: command tx timeout [ 275.184676] Bluetooth: hci7: command tx timeout [ 275.250659] Bluetooth: hci6: command tx timeout [ 275.376891] Bluetooth: hci4: command tx timeout [ 275.441299] Bluetooth: hci5: command tx timeout [ 276.784609] Bluetooth: hci0: command tx timeout [ 276.912613] Bluetooth: hci1: command tx timeout [ 277.042591] Bluetooth: hci2: command tx timeout [ 277.168905] Bluetooth: hci3: command tx timeout [ 277.232630] Bluetooth: hci7: command tx timeout [ 277.297018] Bluetooth: hci6: command tx timeout [ 277.424657] Bluetooth: hci4: command tx timeout [ 277.488599] Bluetooth: hci5: command tx timeout [ 278.832595] Bluetooth: hci0: command tx timeout [ 278.961185] Bluetooth: hci1: command tx timeout [ 279.088638] Bluetooth: hci2: command tx timeout [ 279.216628] Bluetooth: hci3: command tx timeout [ 279.280551] Bluetooth: hci7: command tx timeout [ 279.344615] Bluetooth: hci6: command tx timeout [ 279.472587] Bluetooth: hci4: command tx timeout [ 279.536575] Bluetooth: hci5: command tx timeout [ 280.880566] Bluetooth: hci0: command tx timeout [ 281.009563] Bluetooth: hci1: command tx timeout [ 281.136634] Bluetooth: hci2: command tx timeout [ 281.264617] Bluetooth: hci3: command tx timeout [ 281.328755] Bluetooth: hci7: command tx timeout [ 281.392581] Bluetooth: hci6: command tx timeout [ 281.522648] Bluetooth: hci4: command tx timeout [ 281.584913] Bluetooth: hci5: command tx timeout [ 335.187163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.190883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.196630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.208270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.285055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.287667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.289059] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.292838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.292849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.293152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.295002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.295429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.299975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.302432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.306380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.308751] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.311763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.311826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.420199] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.422761] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.427901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.429715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.433199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.440105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.442848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.443809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.447143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.448429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.449721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.450424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.452121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.454273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.456028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.457038] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.457968] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.491374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.502587] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.506054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.513696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.518194] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.525968] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.528242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.536864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.539699] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.542109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.581429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.584152] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.586443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.329594] Bluetooth: hci1: command tx timeout [ 337.331348] Bluetooth: hci0: command tx timeout [ 337.393736] Bluetooth: hci2: command tx timeout [ 337.584591] Bluetooth: hci7: command tx timeout [ 337.585423] Bluetooth: hci3: command tx timeout [ 337.586242] Bluetooth: hci4: command tx timeout [ 337.649748] Bluetooth: hci5: command tx timeout [ 338.032830] Bluetooth: hci6: command tx timeout [ 339.379616] Bluetooth: hci0: command tx timeout [ 339.380147] Bluetooth: hci1: command tx timeout [ 339.440656] Bluetooth: hci2: command tx timeout [ 339.632713] Bluetooth: hci4: command tx timeout [ 339.633237] Bluetooth: hci7: command tx timeout [ 339.633823] Bluetooth: hci3: command tx timeout [ 339.696586] Bluetooth: hci5: command tx timeout [ 340.081631] Bluetooth: hci6: command tx timeout [ 341.425513] Bluetooth: hci1: command tx timeout [ 341.426039] Bluetooth: hci0: command tx timeout [ 341.488584] Bluetooth: hci2: command tx timeout [ 341.680587] Bluetooth: hci3: command tx timeout [ 341.681102] Bluetooth: hci7: command tx timeout [ 341.681610] Bluetooth: hci4: command tx timeout [ 341.746564] Bluetooth: hci5: command tx timeout [ 342.128559] Bluetooth: hci6: command tx timeout [ 343.474521] Bluetooth: hci0: command tx timeout [ 343.475041] Bluetooth: hci1: command tx timeout [ 343.537631] Bluetooth: hci2: command tx timeout [ 343.728581] Bluetooth: hci4: command tx timeout [ 343.729100] Bluetooth: hci7: command tx timeout [ 343.729656] Bluetooth: hci3: command tx timeout [ 343.793837] Bluetooth: hci5: command tx timeout [ 344.177536] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 09:03:58 Registers: info registers vcpu 0 RAX=ffffffff87edc980 RBX=1ffff110059e8e5b RCX=ffffffff812ef5ee RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff87ed4eb0 RBP=ffff888015ffb700 RSP=ffff88802cf472b0 R8 =0000000000000000 R9 =fffffbfff0fda9d6 R10=ffffffff87ed4eb7 R11=0000000000000000 R12=0000000000000008 R13=ffff888015ffc190 R14=0000000000000100 R15=0000000000000000 RIP=ffffffff812f9106 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f00ed59f313 CR3=0000000027bce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802a407c58 RCX=ffffffff8169c784 RDX=ffff888034125280 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000020 RSP=ffff88802a407b38 R8 =0000000000000000 R9 =fffff940000368d0 R10=0000000000000000 R11=0000000000000001 R12=ffffea00001b4680 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88802a407d98 RIP=ffffffff8169c787 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7cd82865d0 CR3=000000002ce96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000