Warning: Permanently added '[localhost]:57713' (ECDSA) to the list of known hosts. 2024/11/18 14:06:11 fuzzer started 2024/11/18 14:06:11 dialing manager at localhost:39771 syzkaller login: [ 102.339146] cgroup: Unknown subsys name 'net' [ 102.465798] cgroup: Unknown subsys name 'cpuset' [ 102.492141] cgroup: Unknown subsys name 'rlimit' 2024/11/18 14:06:29 syscalls: 202 2024/11/18 14:06:29 code coverage: enabled 2024/11/18 14:06:29 comparison tracing: enabled 2024/11/18 14:06:29 extra coverage: enabled 2024/11/18 14:06:29 setuid sandbox: enabled 2024/11/18 14:06:29 namespace sandbox: enabled 2024/11/18 14:06:29 Android sandbox: enabled 2024/11/18 14:06:29 fault injection: enabled 2024/11/18 14:06:29 leak checking: enabled 2024/11/18 14:06:29 net packet injection: enabled 2024/11/18 14:06:29 net device setup: enabled 2024/11/18 14:06:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/18 14:06:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/18 14:06:29 USB emulation: enabled 2024/11/18 14:06:29 hci packet injection: enabled 2024/11/18 14:06:29 wifi device emulation: enabled 2024/11/18 14:06:29 802.15.4 emulation: enabled 2024/11/18 14:06:29 fetching corpus: 0, signal 0/0 (executing program) 2024/11/18 14:06:31 starting 8 fuzzer processes 14:06:31 executing program 0: getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={0x0, 0xf1, 0x30}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'vmac64(sm4)\x00'}}, &(0x7f0000000180)="d67d04c971040a68c69f26f5fd9368e0fd698b18d690c947989a861aee7431a7d7026c4e8b79735ad892d33c80cb3ca7fb3df052d9c4c1590fda6907d127e6dd90d49df7f461a1717391d54fd93053ea83e1c9ea4c8c027d193c6c8c274d70e1f7d29115d039ebde127c0200c52edd88744dbf907775d63acd9610361ecc5e2edd0370465885bbb6522b9a51a2b6c89b1f5f2fc720cb81342cec416546d0e78436e4396835be59133ff7e5ae5351924a7a2938ce05534ce67fc49600a779d3d85b4ad7c1fed74949cc769ffa0509c963a40b1419c049915a2c8acb5f4a6ada9382db1c9c6958d40abe014f4e686f232279", &(0x7f0000000280)=""/48) r3 = getgid() r4 = getgid() getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)=0x0) r7 = getgid() r8 = getgid() getgroups(0x9, &(0x7f0000000380)=[r1, r3, r1, r0, r4, r5, r7, r8, r1]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(r10, 0xc0286687, &(0x7f0000000440)={0x1, 0x0, 0x2, &(0x7f0000000400)=""/2}) r11 = geteuid() getgroups(0x3, &(0x7f0000000480)=[r9, r2, r6]) keyctl$chown(0x4, 0x0, r11, r13) keyctl$chown(0x4, 0x0, r11, r12) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', 'vmac64(sm4)\x00', 0x20, 0x75}, 0x34, 0xfffffffffffffffd) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0xaa202, 0x0) ioctl$BLKSECTGET(r14, 0x1267, &(0x7f0000000540)) r15 = geteuid() keyctl$get_persistent(0x16, r15, 0xfffffffffffffffd) 14:06:31 executing program 1: ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'bond_slave_1\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000440)=0x800) r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x501, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) pselect6(0x40, &(0x7f00000005c0)={0x2, 0x6, 0x10000, 0x6, 0x7f, 0x2, 0x7ef7fafa, 0x8}, &(0x7f0000000600)={0x7, 0x5a, 0x0, 0x65, 0x5a, 0x0, 0x20, 0x3}, &(0x7f0000000640)={0xfff, 0x800, 0x2, 0x8, 0xff, 0x80, 0xada2, 0x3}, &(0x7f00000006c0)={r2, r3+60000000}, &(0x7f0000000740)={&(0x7f0000000700)={[0x80000000]}, 0x8}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000780)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x111100, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000880)={0x1ff, 0x0, &(0x7f0000000840)=[r0, r0, r0, r5, r0, r0, r0]}, 0x7) clock_gettime(0x2, &(0x7f00000008c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x80, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x8380, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, r6, {0x80}}, './file0\x00'}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x6, 0xff, 0xff, 0x7fff, 0xc, @dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x700, 0x20}}) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9c}]}, 0x2c}}, 0x20000000) 14:06:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c811}, 0x24000050) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x4}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0xc00, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004051}, 0x8a5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x308caa8768e0e14e}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x91}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0xc801}, 0xc4881) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x9df20) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040090}, 0x737811519336434a) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x208, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = memfd_secret(0x80000) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x48011) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000001b80)={&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000b80)=""/4096, 0x1000}) [ 121.269668] audit: type=1400 audit(1731938791.498:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:06:31 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x78}}, 0x8090) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40044) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x1c}}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x14000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000380)={0x1, 0x3, 0x4}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x228100, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000600)={&(0x7f0000000540), &(0x7f0000000580)=""/83, 0x53}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf8}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4004031) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x28014}, 0x20008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x14}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x50040001) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}]}, 0x74}}, 0x48800) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb4, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r3) 14:06:31 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @sco, @llc={0x1a, 0x334, 0x8, 0x4, 0x60, 0xff, @remote}, @phonet={0x23, 0x7, 0x80, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth0_to_team\x00', 0x6, 0xfffffffffffffff9, 0x1}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x6, 0x0, 0xff, 0x74f703ea]}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x44840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44050}, 0x20000040) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r2, 0x600, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tape_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x24044090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x44100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xbb9c001809953779}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffe}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf4, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x48010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 14:06:31 executing program 7: keyctl$assume_authority(0x10, 0x0) r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "635e2b00f8657fe4f28fc46cba62aaad006aad9c17a8773c6706c2e0cc45067dc6ea645c6fc09a9df31c483567aa9fe65972ac76a4a2c8f161c7104996944be3", 0x31}, 0x48, 0xfffffffffffffffa) keyctl$unlink(0x9, r0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$negate(0xd, r2, 0x10000, r3) r4 = add_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="c0f85f7c995134178ad6d0f4b17c7777aee8c22ca6f00d6809eb49a5998a1ba1b8820d5a912d6e30b0ce5d461a739f93490df5eb22660445c3af5f85989bd471b18f0d40b0d8da6928664e928657de27331288cb909303730d44a6be5da6b35776551655934aba3157f718679d5300ee2b46568db53e7bb9793d3314fc42ecc9d27e5b52053667d2fe47adbf610ecb12573a9071a803d0e51ed7d9697390e3f1e02f264f5286c6ad1fdc4e5c1dd3aaf5c627913397c1228a2976fa58", 0xbc, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000003c0)=':8\x00', &(0x7f0000000400)) keyctl$instantiate(0xc, r0, &(0x7f0000000440)=@encrypted_load={'load ', 'default', 0x20, 'user:', '85baa174f0cb1142', 0x20, 0xda, 0x20, [0x39, 0x37, 0x37, 0x33, 0x36, 0x31]}, 0x3f, r0) keyctl$get_keyring_id(0x0, r4, 0x15ee) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "87035a65c88f15aef49c044f684e2889bcf8913191772fcc0101792cdea78f3fc3cd6da1da025ea057447b0e8152efdc8cb71c84336219f4d45b47d005b2e27d", 0x1c}, 0x48, 0xfffffffffffffffa) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008841) keyctl$negate(0xd, r0, 0x4, r2) r6 = request_key(&(0x7f0000000680)='cifs.spnego\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='keyring\x00', 0x0) keyctl$read(0xb, r6, &(0x7f0000000740)=""/106, 0x6a) r7 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000007c0)='.dead\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)='fscrypt:', r7) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000ac0)=[{&(0x7f0000000900)="8525f375b3771f856f58cce2d7eb66a5a7833216d42907fdd1a332ad8a3c54d707b8183d76850c1ac8af28aab512e870b94fc9c6bcd9c242169ff429981832590932edee1fae2898b81158d8a76ae9de6229947cc7cb07d6a75b2ec75b6aa73f2ccdcafb04423cd71f3261ae2d8e16b5b4db1b497814e4affc6a29ece51da0f9635ff524582293417c8a", 0x8a}, {&(0x7f00000009c0)="6dd9f77d42f0ef4a1dfdc885a3058d1264bb7b1f5ee66e2eb07d0cc51e58d3a2ff170eaf4d7fbedfb433a77ad5e330d9985ef890e58ef6dc66a25cc2e9a33bc377f2e46308824e42ae0eb34a4e26a7de85871a07abf9a195ec259a74538151e3a806b3a724b52fe40f9cac8ec9d7eb", 0x6f}, {&(0x7f0000000a40)="c34640304434219b39aaa911a8a3302187fe1608e555e39d6fd8f61f7901b43ac2c27a2e28ddfbba3b9492c5bdd70136ace5e126736c6b0b22e2fd2260c9a38fa486dc05fd4c", 0x46}], 0x3, 0x0) 14:06:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "1d9338dd1cb787f38e21be7bea1ecd5e"}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000001040)) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '@/(#:*\x00'}, &(0x7f00000010c0)='\x00', 0x1, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x12bc80, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000001240)={0x1, 0x8aed, 0xfa, &(0x7f0000001140)=""/250}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3, {0x26b1}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r5, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x98b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6004}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000001440)) r6 = socket$netlink(0x10, 0x3, 0xe) connect$netlink(r6, &(0x7f0000001480)=@unspec, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f00000014c0), 0x2000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000001500)={0x0, 0x0, 0x12}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001540), 0x280800, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) fsetxattr(r1, &(0x7f0000001580)=@known='trusted.syz\x00', &(0x7f00000015c0)='\x00', 0x1, 0x0) r8 = socket(0x3, 0x4, 0x640) connect$netlink(r8, &(0x7f0000001600)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) 14:06:31 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4482, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x248801, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x101, 0x1, 0x5, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x6]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0xc842e4832c5395d, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x0, 0x1, 0xd, @dev={0xfe, 0x80, '\x00', 0x31}, @local, 0x7, 0x8, 0x81, 0x3c18}}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20) fsetxattr(0xffffffffffffffff, &(0x7f0000000480)=@random={'trusted.', '-$%/\\]^:[/\x00'}, &(0x7f00000004c0)='*(\x00', 0x3, 0x2) r4 = socket(0x1a, 0x2, 0x200) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000640)={0x1, 0x3f, 0x30, &(0x7f0000000600)=""/48}) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005200)='/sys/module/configfs', 0x200, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000005500)={0x198, 0x0, &(0x7f0000005300)=[@dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001700)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/4096, 0x1000, 0x2, 0x34}, @fda={0x66646185, 0x1, 0x0, 0x3b}}, &(0x7f0000001780)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f00000029c0)={@ptr={0x70742a85, 0x0, &(0x7f00000017c0)=""/206, 0xce, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f00000018c0)=""/4096, 0x1000, 0x1, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f00000028c0)=""/238, 0xee, 0x2, 0x5}}, &(0x7f0000002a40)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002a80)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x6, 0x0, 0x29}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000002b00)={0x0, 0x18, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002bc0)={@ptr={0x70742a85, 0x0, &(0x7f0000002b40)=""/79, 0x4f, 0x0, 0x20}, @fda={0x66646185, 0xa, 0x2, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002c40)={0x0, 0x28, 0x48}}}, @enter_looper, @clear_death, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000005240)={@ptr={0x70742a85, 0x1, &(0x7f0000002c80)=""/54, 0x36, 0x1, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000002cc0)=""/207, 0xcf, 0x2, 0x15}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000052c0)={0x0, 0x28, 0x50}}}], 0x3a, 0x0, &(0x7f00000054c0)="17351dc62662824ed0879204ec59db5e01ae19aefe104965f424e58ac24d019cfd416e3de1af7309a09bc6b32d55fd48cf00081a995a2cafe5fd"}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x1) r7 = memfd_secret(0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000005540)) [ 122.708476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.710413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.717964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.720015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.721409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.722809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.725140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.726433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.728864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.729881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.733616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.734874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.736396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.737688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.756648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.760953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 122.762207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.774803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.777426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.780750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.785066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.786127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.789400] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.790352] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.794141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.800583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.804757] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.815453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.816242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.817402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.819746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.822352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.823314] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.824617] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 122.825748] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.841243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.851267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.852117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.856809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.859940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.868735] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.873873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.875136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.877221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.879289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.893705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.895319] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.896990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.796338] Bluetooth: hci1: command tx timeout [ 124.859587] Bluetooth: hci2: command tx timeout [ 124.860317] Bluetooth: hci0: command tx timeout [ 124.923655] Bluetooth: hci5: command tx timeout [ 124.923748] Bluetooth: hci4: command tx timeout [ 124.924339] Bluetooth: hci6: command tx timeout [ 124.925922] Bluetooth: hci7: command tx timeout [ 124.989532] Bluetooth: hci3: command tx timeout [ 126.846602] Bluetooth: hci1: command tx timeout [ 126.907824] Bluetooth: hci0: command tx timeout [ 126.908333] Bluetooth: hci2: command tx timeout [ 126.971671] Bluetooth: hci6: command tx timeout [ 126.972188] Bluetooth: hci4: command tx timeout [ 126.972248] Bluetooth: hci7: command tx timeout [ 126.973270] Bluetooth: hci5: command tx timeout [ 127.035645] Bluetooth: hci3: command tx timeout [ 128.892589] Bluetooth: hci1: command tx timeout [ 128.956159] Bluetooth: hci2: command tx timeout [ 128.956195] Bluetooth: hci0: command tx timeout [ 129.019610] Bluetooth: hci7: command tx timeout [ 129.019671] Bluetooth: hci5: command tx timeout [ 129.020101] Bluetooth: hci4: command tx timeout [ 129.020549] Bluetooth: hci6: command tx timeout [ 129.083577] Bluetooth: hci3: command tx timeout [ 130.939554] Bluetooth: hci1: command tx timeout [ 131.003558] Bluetooth: hci0: command tx timeout [ 131.004573] Bluetooth: hci2: command tx timeout [ 131.067707] Bluetooth: hci4: command tx timeout [ 131.068201] Bluetooth: hci5: command tx timeout [ 131.068424] Bluetooth: hci7: command tx timeout [ 131.068769] Bluetooth: hci6: command tx timeout [ 131.131573] Bluetooth: hci3: command tx timeout [ 185.744266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.747108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.749336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.773035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.777868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.780084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.807677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.812329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.814952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.821961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.827914] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.831210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.839938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.846883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.868550] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.885915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.889872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.895144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.896900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.911624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.915142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.932543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.939064] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.955065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.299431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.306523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.325677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.334492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.343720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.381388] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.396808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.404590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.414705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.416200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.419704] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.421289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 186.424928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.429141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.438603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.440587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.448205] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.451978] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 186.453682] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.511768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.517934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.526331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.569136] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 186.573983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.837539] Bluetooth: hci0: command tx timeout [ 187.900578] Bluetooth: hci1: command tx timeout [ 187.963531] Bluetooth: hci2: command tx timeout [ 188.027709] Bluetooth: hci3: command tx timeout [ 188.476688] Bluetooth: hci4: command tx timeout [ 188.540653] Bluetooth: hci6: command tx timeout [ 188.604506] Bluetooth: hci5: command tx timeout [ 188.733505] Bluetooth: hci7: command tx timeout [ 189.883596] Bluetooth: hci0: command tx timeout [ 189.950588] Bluetooth: hci1: command tx timeout [ 190.012507] Bluetooth: hci2: command tx timeout [ 190.075504] Bluetooth: hci3: command tx timeout [ 190.526498] Bluetooth: hci4: command tx timeout [ 190.588622] Bluetooth: hci6: command tx timeout [ 190.652519] Bluetooth: hci5: command tx timeout [ 190.780505] Bluetooth: hci7: command tx timeout [ 191.931574] Bluetooth: hci0: command tx timeout [ 191.995558] Bluetooth: hci1: command tx timeout [ 192.059847] Bluetooth: hci2: command tx timeout [ 192.124124] Bluetooth: hci3: command tx timeout [ 192.571576] Bluetooth: hci4: command tx timeout [ 192.635560] Bluetooth: hci6: command tx timeout [ 192.699547] Bluetooth: hci5: command tx timeout [ 192.829496] Bluetooth: hci7: command tx timeout [ 193.980620] Bluetooth: hci0: command tx timeout [ 194.045592] Bluetooth: hci1: command tx timeout [ 194.108514] Bluetooth: hci2: command tx timeout [ 194.172671] Bluetooth: hci3: command tx timeout [ 194.619567] Bluetooth: hci4: command tx timeout [ 194.684520] Bluetooth: hci6: command tx timeout [ 194.748500] Bluetooth: hci5: command tx timeout [ 194.875556] Bluetooth: hci7: command tx timeout [ 247.574262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.579133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.591468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.595721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.597471] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.598690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.709223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.715871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.718653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.725226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.727981] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.729567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.787658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.794227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.796853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.800106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.809308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.811083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.919315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.922956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.924692] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.936545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.949156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.951240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.955082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.955952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.964742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.966062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.968304] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.973722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.978390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.980305] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 247.981314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.986092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.990835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.997835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.018909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.021723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.024973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.027164] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.029719] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.031986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.034925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.041501] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 248.045704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.047737] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.063339] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.074628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.659577] Bluetooth: hci0: command tx timeout [ 249.789499] Bluetooth: hci1: command tx timeout [ 249.851564] Bluetooth: hci2: command tx timeout [ 250.044556] Bluetooth: hci3: command tx timeout [ 250.046275] Bluetooth: hci6: command tx timeout [ 250.107767] Bluetooth: hci4: command tx timeout [ 250.171592] Bluetooth: hci7: command tx timeout [ 250.235571] Bluetooth: hci5: command tx timeout [ 251.707628] Bluetooth: hci0: command tx timeout [ 251.837485] Bluetooth: hci1: command tx timeout [ 251.900201] Bluetooth: hci2: command tx timeout [ 252.091748] Bluetooth: hci3: command tx timeout [ 252.092260] Bluetooth: hci6: command tx timeout [ 252.157503] Bluetooth: hci4: command tx timeout [ 252.219532] Bluetooth: hci7: command tx timeout [ 252.283566] Bluetooth: hci5: command tx timeout [ 253.755591] Bluetooth: hci0: command tx timeout [ 253.883526] Bluetooth: hci1: command tx timeout [ 253.947494] Bluetooth: hci2: command tx timeout [ 254.141521] Bluetooth: hci3: command tx timeout [ 254.142023] Bluetooth: hci6: command tx timeout [ 254.203724] Bluetooth: hci4: command tx timeout [ 254.267539] Bluetooth: hci7: command tx timeout [ 254.331538] Bluetooth: hci5: command tx timeout [ 255.803534] Bluetooth: hci0: command tx timeout [ 255.933475] Bluetooth: hci1: command tx timeout [ 255.995620] Bluetooth: hci2: command tx timeout [ 256.187656] Bluetooth: hci6: command tx timeout [ 256.188163] Bluetooth: hci3: command tx timeout [ 256.251757] Bluetooth: hci4: command tx timeout [ 256.315613] Bluetooth: hci7: command tx timeout [ 256.379626] Bluetooth: hci5: command tx timeout [ 309.966859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.973861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.997720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.003195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.010074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.019121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.033681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.035861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.038353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.044239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.046076] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.047698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.093127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.094771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.095846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.098121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.099647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 310.100823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.156023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.179163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.180809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.200137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.202803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.206507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.212731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.218810] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.224110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.234640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.241560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.244969] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.246208] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.247754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.254633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.255818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.260949] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.264654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.311525] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.318671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.320679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.329090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.333244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 310.335829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.365549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.372167] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.375023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.384854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.386974] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 310.390695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.059543] Bluetooth: hci0: command tx timeout [ 312.123577] Bluetooth: hci2: command tx timeout [ 312.123586] Bluetooth: hci1: command tx timeout [ 312.316505] Bluetooth: hci4: command tx timeout [ 312.316519] Bluetooth: hci3: command tx timeout [ 312.379646] Bluetooth: hci5: command tx timeout [ 312.443605] Bluetooth: hci6: command tx timeout [ 312.507546] Bluetooth: hci7: command tx timeout [ 314.108845] Bluetooth: hci0: command tx timeout [ 314.171512] Bluetooth: hci1: command tx timeout [ 314.172551] Bluetooth: hci2: command tx timeout [ 314.363618] Bluetooth: hci3: command tx timeout [ 314.363856] Bluetooth: hci4: command tx timeout [ 314.430518] Bluetooth: hci5: command tx timeout [ 314.492676] Bluetooth: hci6: command tx timeout [ 314.555789] Bluetooth: hci7: command tx timeout [ 316.157455] Bluetooth: hci0: command tx timeout [ 316.220498] Bluetooth: hci2: command tx timeout [ 316.220897] Bluetooth: hci1: command tx timeout [ 316.412491] Bluetooth: hci4: command tx timeout [ 316.412508] Bluetooth: hci3: command tx timeout [ 316.477471] Bluetooth: hci5: command tx timeout [ 316.539582] Bluetooth: hci6: command tx timeout [ 316.604472] Bluetooth: hci7: command tx timeout [ 318.203529] Bluetooth: hci0: command tx timeout [ 318.267511] Bluetooth: hci1: command tx timeout [ 318.267536] Bluetooth: hci2: command tx timeout [ 318.459538] Bluetooth: hci3: command tx timeout [ 318.460803] Bluetooth: hci4: command tx timeout [ 318.523571] Bluetooth: hci5: command tx timeout [ 318.588494] Bluetooth: hci6: command tx timeout [ 318.652489] Bluetooth: hci7: command tx timeout [ 372.376041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.387929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.391671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.396928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.399495] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 372.400879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.551860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.582154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.584207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.586339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.589583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.591738] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 372.593349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.595009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.598604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.607211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.612788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.617522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.619058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.620669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.623590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.628057] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 372.629191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.631811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.635287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.636369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.638796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 372.638904] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 372.650010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.651099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.658979] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.691706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.694810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.696488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.706258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.718850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.724051] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.727428] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.732660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.734511] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 372.735839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 372.736872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.748748] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.755042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.759646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.800318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.814777] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 372.815964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.465484] Bluetooth: hci0: command tx timeout [ 374.651700] Bluetooth: hci4: command tx timeout [ 374.715631] Bluetooth: hci3: command tx timeout [ 374.716637] Bluetooth: hci1: command tx timeout [ 374.716659] Bluetooth: hci2: command tx timeout [ 374.779568] Bluetooth: hci5: command tx timeout [ 374.781118] Bluetooth: hci6: command tx timeout [ 374.908516] Bluetooth: hci7: command tx timeout [ 376.508518] Bluetooth: hci0: command tx timeout [ 376.699561] Bluetooth: hci4: command tx timeout [ 376.763637] Bluetooth: hci2: command tx timeout [ 376.763723] Bluetooth: hci3: command tx timeout [ 376.764130] Bluetooth: hci1: command tx timeout [ 376.828464] Bluetooth: hci6: command tx timeout [ 376.828997] Bluetooth: hci5: command tx timeout [ 376.956559] Bluetooth: hci7: command tx timeout [ 378.557455] Bluetooth: hci0: command tx timeout [ 378.748603] Bluetooth: hci4: command tx timeout [ 378.811689] Bluetooth: hci1: command tx timeout [ 378.811719] Bluetooth: hci3: command tx timeout [ 378.812190] Bluetooth: hci2: command tx timeout [ 378.875512] Bluetooth: hci5: command tx timeout [ 378.875648] Bluetooth: hci6: command tx timeout [ 379.004534] Bluetooth: hci7: command tx timeout [ 380.606440] Bluetooth: hci0: command tx timeout [ 380.796511] Bluetooth: hci4: command tx timeout [ 380.859725] Bluetooth: hci3: command tx timeout [ 380.861038] Bluetooth: hci1: command tx timeout [ 380.861485] Bluetooth: hci2: command tx timeout [ 380.923530] Bluetooth: hci6: command tx timeout [ 380.928658] Bluetooth: hci5: command tx timeout [ 381.051596] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:11:41 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=1ffff11002cbbfc2 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000246 RSP=ffff8880165dfdf8 R8 =0000000000000000 R9 =0000000000000000 R10=ffff888025f6a5bc R11=0000000000000000 R12=ffffffff85c16180 R13=00007f932bb32018 R14=0000000000000000 R15=ffff88800f2b2f80 RIP=ffffffff813040de RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f932b65e540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f932bb32018 CR3=000000001a8b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=ffff888009031a60 RCX=ffff888027337970 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffff888027337910 R8 =0000000000000000 R9 =ffffed100120638d R10=0000000000009fa0 R11=0000000000000001 R12=ffff888031293000 R13=0000000000040002 R14=ffff888027337970 R15=0000000000000001 RIP=ffffffff81520434 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2e5b24d540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2e5b3e84a1 CR3=0000000018c64000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000