Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:58908' (ECDSA) to the list of known hosts. 2024/12/12 18:20:34 fuzzer started 2024/12/12 18:20:34 dialing manager at localhost:43887 syzkaller login: [ 59.631692] cgroup: Unknown subsys name 'net' [ 59.756154] cgroup: Unknown subsys name 'cpuset' [ 59.790610] cgroup: Unknown subsys name 'rlimit' 2024/12/12 18:21:00 syscalls: 200 2024/12/12 18:21:00 code coverage: enabled 2024/12/12 18:21:00 comparison tracing: enabled 2024/12/12 18:21:00 extra coverage: enabled 2024/12/12 18:21:00 setuid sandbox: enabled 2024/12/12 18:21:00 namespace sandbox: enabled 2024/12/12 18:21:00 Android sandbox: enabled 2024/12/12 18:21:00 fault injection: enabled 2024/12/12 18:21:00 leak checking: enabled 2024/12/12 18:21:00 net packet injection: enabled 2024/12/12 18:21:00 net device setup: enabled 2024/12/12 18:21:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/12 18:21:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/12 18:21:00 USB emulation: enabled 2024/12/12 18:21:00 hci packet injection: enabled 2024/12/12 18:21:00 wifi device emulation: enabled 2024/12/12 18:21:00 802.15.4 emulation: enabled 2024/12/12 18:21:00 fetching corpus: 0, signal 0/0 (executing program) 2024/12/12 18:21:01 starting 8 fuzzer processes 18:21:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x80000000, [0x2, 0x3b83], 0xfff}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000040)="530371da7a9bd4adb2445d89d2e3b283100be4c8322987de32552e62c07fd41203e7602f13bd707be4ca78a8cb729249c1e01f9c0b55024b100f2213380de76adff99faa343fe34cf77cfeb424c57a84ef7900929217471a00b434aed5c6e713ffbcacd6cab109ab64") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000180)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xa11e, [0x10001, 0x200], 0x1}, 0x10) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)="5e426f5c7575a9dfb24d8fa2ab649c3b36fb67a33f2a43521e740a30cb1351fd9d1e23961a7c023b1b6107a2a038327ffd76e64bced07cee6f4c6483a50d309c85971c25d947e83c3a1e97655dae8f2070b868c3aaa88bc9c2bb1e36fb4ffae4f878547d06fc7b6a14a2a0cc1c37faa1ccc4df091c854f8640b1c5fc48ff52956318de4ebae0c3ae2458893d458fd7c938aedabb9d82", 0x96}, 0x1, 0x0, 0x0, 0x44011}, 0x0) getpeername(r0, &(0x7f0000000340)=@llc, &(0x7f00000003c0)=0x80) r2 = openat$cgroup_devices(r1, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000440)={'a', ' *:* ', 'r\x00'}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r5 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000540)) r6 = memfd_secret(0x0) getsockopt$inet6_buf(r6, 0x29, 0x2d, &(0x7f0000000580)=""/113, &(0x7f0000000600)=0x71) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@local, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8) ioctl$KDMKTONE(r3, 0x4b30, 0x40) 18:21:01 executing program 4: kexec_load(0x0, 0xa, &(0x7f0000000640)=[{&(0x7f0000000000)="47f1b9dd", 0x4, 0xccad, 0x2}, {&(0x7f0000000040)="dcb32a38e35b811247343e0130745ddfc0a2c8ca0fb30c5d6ba644181c894f23471383061f064e3260d3efecf0833a3db05d65004d5645c572a414294a105bff1445fb4fce2742a834e9c4ca2c0b21cefaf38cbc9c9e36bcfaf507c9bd002d1277acdddbda05b2e824988c24122b9dd6eb729b50fa2147f99fe19fc96151fb8dad", 0x81, 0xfff, 0x1}, {&(0x7f0000000100)="b06e03a8cdee7bd974edc120de83d75c54c28a6f4be044f192974f105a95023a3be81452ddb0967c0f85c28868fc9e553e41b6b1030cdbb89ef1f9d9a7ff4b080635cf442d9cf23c2d1a4e1fef721bea580e6e1d47432227142dfc0d67e60d1e62e43d9e58b334ed273bf3fd33e75dac95ad273cb9cea23e04d0e5c877f56508994efbc9747d8e956898a7b1648b242c", 0x90, 0x1, 0x1}, {&(0x7f00000001c0)="fce53963d0770143cd78af5cac5e3690dc7bd5548bde", 0x16, 0x679, 0x46d5}, {&(0x7f0000000200)="4c065ed166b6e1a27e3820dad41f752bcf67be8f32927aee95abff354cd61985fd395e2da73fedc1883e9c9941917da554f4fcb338b2c8c4acefa537b8f2bb7d9dc04ee8d0145ae592c4abfef47e6bbd788ee22aefb87c3c2229ce0198bb55f7b59d173d3d6ed585aac63dc04f3f7ee0dc5cf26734ff82db8cbe185b75c6238abcf0a195add97a1469433c0910a028e368d289aa69d27bc62f1972db8f735771f3fb55b9e3e39308fb6abb", 0xab, 0x0, 0x47}, {&(0x7f00000002c0)="e677f575f41478695c4a50ec808690b3c5499e531846199db64e59c3bc5f0c9be8f02ba301c2d5a1e5ac4ccb7adb7771c1ef7f8cb237367b6bfd63c7d8679e801d4545bc30fa932821b581354099f5cc50bfcd747065e43062e0e3aeea1fa3afad7eba94c2", 0x65, 0x2, 0x100}, {&(0x7f0000000340)="5893e99d8c1c3fad600813dcae78c2d6d6f2eee2a5a24a4179ab57dcedf7000137cd37b6cc6be7909005fe1fb0becfcdcdef71f779142c19e7e9ad8306df29fb140f6833d38fa2c926610661aabc", 0x4e, 0x3f, 0x7}, {&(0x7f00000003c0)="21a4ed1014e922ebd12d1fce97b4dec452b7a2d3ed771449f5d1e4abfd972af25a490675c69e19e2a35138ece75033f3ed9dfda4f60c49399f82930c31588f30121126bb25b8ac27f7215322fa3c4ac52785dcbbcc7e6d9745e30bd9e469a7e2acd1278641ff9ac14905f7c8fada49d8e2c2848f23d4bd2b0aeb6b69923956c40b4efb2cb2f36cf8e9c83566258566fdb88f5bd4ea0dc93de4e373c5ca788a5f4fabc7dc224f2d2d963c029b4966039a1ef96a82ac509c60624ce9c89ee4f0e48eb20204a0c50e3f0b97b44c7a800278b312ca4398bd727883bd2b3c4e4672a7", 0xe0, 0x0, 0x3}, {&(0x7f00000004c0)="ab62d8432f061575d12e94656c32bd490914238ea04756336c13e1070f2d8ab6ec29988d104a24c806a49f88917b079eab0fc4561663a1c86be2d1c183b40f9bb61367148317080d82f411984068752a5525b99eb4dabef4368b2916fb75fb", 0x5f, 0x400, 0xaf19}, {&(0x7f0000000540)="d4b75e2f6bc2e5cc6da65100176cb643b6e46d11c5440315b4560bb5445bb1acdd6d51d44c7da9c40a958f279a0d3e363be36b4d7135732228e78170522580b61206ec8d6b55a4733d260f578199c11e8e34e96bea94b808c651ef023822afe814e0df118fbb59023902d397deb8e62c65bc57820fcf48495df508d333b86aceafc19b6e7f6389100d2dd85db31f0b20fc31924a2c054f5339af801020790291fce522dff564556e09bbcb2182acdf1d521cf1d107621d2c255af687aa596f036143058584114b5c953d5b6bf4790b", 0xcf, 0x81, 0x1ff}], 0x160000) kexec_load(0x100000001, 0x1, &(0x7f0000000880)=[{&(0x7f0000000780)="27e2319b8c5c87645aa6b5542fe9a55bed79ae5c1511fb0faae13d6c52d7ae6403b65a9dae980916d23faf5de0b69b23e4c3694d6ea83eb6183a0ba22f97f95ced314201e0d15befd2f074b60e443412baa73e96c56cf57d742c5a2bce4fdfa2c4741fbc00d72e726a272222e1d46cf2625b7d2ac670e0bb9370d5b7a2889af5fa011d8931edc3a1961fdf2dc0640dbe02474a20822ac8a67e3c813bb655ded0089adef034ac792bc9544d97d94b12bbd079ea83aa5c803d1208289e806646bd12bbc3689497031c497710a50a691e170b4b4ac30e36aba3d40b03e23a65658d3cf6d4ef", 0xe4, 0x200, 0x2}], 0x160000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080d0}, 0x800) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000b80)={0xfffffffffffffffd, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa8, r1, 0xa00, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40054}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getpeername(r2, &(0x7f0000000bc0)=@ethernet={0x0, @local}, &(0x7f0000000c40)=0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x11f93515e8b4d0a4}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDMKTONE(r4, 0x4b30, 0x4) r5 = memfd_secret(0x0) bind$bt_hci(r5, &(0x7f0000000dc0)={0x1f, 0x4, 0x2}, 0x6) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000e00)) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000e40)={'wpan3\x00'}) pipe(&(0x7f0000000e80)={0xffffffffffffffff}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000ec0)) 18:21:01 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x40008) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004804}, 0x20040850) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1002088}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044024}, 0x802) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000007c0), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x8094) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, r7, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088b4}, 0x50) 18:21:01 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400402}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x46a074b0017d3a27, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x48804) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x814) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r3, 0x606, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x58}}, 0x20004080) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x400}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000d00), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) 18:21:01 executing program 3: mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x776e6197b45e7b4d, &(0x7f0000000080)={[{}, {}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, '\x8c#'}}, {@obj_type={'obj_type', 0x3d, '&'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '[\x9b*-%'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '!{'}}]}) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f00000001c0)={[{@memory_localevents}], [{@euid_gt={'euid>', 0xee00}}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') r0 = memfd_secret(0x80000) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x40000010) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x80000900) chroot(&(0x7f0000000300)='./file0\x00') setxattr(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)=@random={'btrfs.', 'FIRMWARE_CHECK'}, &(0x7f00000003c0)='\x00', 0x1, 0x1) mount$cgroup2(0x0, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000480)={[{@memory_localevents}, {@memory_recursiveprot}, {@subsystem='memory'}, {@memory_localevents}, {@memory_recursiveprot}], [{@fsname={'fsname', 0x3d, 'appraise'}}, {@euid_lt}, {@measure}, {@audit}, {@obj_type={'obj_type', 0x3d, '\x81'}}, {@smackfshat={'smackfshat', 0x3d, 'FIRMWARE_CHECK'}}]}) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x1) write$vga_arbiter(r0, &(0x7f0000000600)=@target={'target ', {'PCI:', '4', ':', '8', ':', '4', '.', '17'}}, 0x14) symlink(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) inotify_add_watch(r0, &(0x7f00000006c0)='./file0\x00', 0x80000000) getpeername(r0, &(0x7f0000000700)=@qipcrtr, &(0x7f0000000780)=0x80) syz_open_dev$char_usb(0xc, 0xb4, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000900)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/230, 0xe6, 0x1, &(0x7f00000008c0)=""/56, 0x38}, &(0x7f0000000940)=0x40) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000980)={0x7}, 0x4) setxattr(&(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00)=@random={'system.', '-*.\x00'}, &(0x7f0000000a40)='\x00', 0x1, 0x2) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x8000) 18:21:01 executing program 5: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=@hopopts={0x0, 0x23, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @mcast2}, @generic={0x40, 0xe8, "01863872bf100b4c6bcd327e235c581ce385828af3688981c508eb33ba6d6d5929f83c70eda8098f6778ee0bd8ea45c1b57f4bc59799aa2dbfaa52e7b610369b792ab030c9383c178663122561d9cdeb7fde4bca4301b25a2e577f82d3738c57dc08d151e2b26b9598d3d1162bc84bcad7c11c670cd781b9c539ee09cd7661cdc358aea54c6a2cf5a7c25a9d306c114b038d0c8bff4f81a36d200fee4835b3c2248d60012fb261a99c5f9dd1af1a84b306dce597d240873e7c5bde04f9b98380aacff5ae6b455c21bccf968d50a3292741e826d7a13637e4d91359ee4a4fa80340033ad63aa27ba0"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x128) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48) read$char_usb(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=0x7, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x480c5}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xa0020200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x13}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x48}}, 0x800) socketpair(0x5, 0x6, 0x4, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r4, 0x29, 0xd2, &(0x7f0000000680)="364d4339179948b123aa42c20b3af215cbd4e5aaf54082f422aa2995380bd85249902645ce7387c6f07d5186af8320a76dfcf0ab0db440a07f3a36baea5718b5923bc80499c3d1", 0x47) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r5, 0xa, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000840)={0x4, 0x5, "b5d997", 0x2, 0x84}) write$bt_hci(0xffffffffffffffff, &(0x7f00000008c0)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"d13ac9"}}}, 0x7) [ 80.750658] audit: type=1400 audit(1734027662.009:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:21:02 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1840, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = getpgid(0xffffffffffffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7f, 0x8, 0x8, 0xa5, 0x0, 0xffffffffffff7fff, 0x20002, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x1, @perf_config_ext={0x6, 0x7fff}, 0x2a12, 0x7f, 0xfffffffa, 0x0, 0x6, 0x8, 0x1b4, 0x0, 0x3, 0x0, 0x3}, r2, 0x2, r3, 0xc36b0141f5f2e71f) write$cgroup_devices(r3, &(0x7f0000000180)={'b', ' *:* ', 'r\x00'}, 0x8) ioctl$TIOCEXCL(r3, 0x540c) bind$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @none={0x0, 0x3}}, 0x14) waitid(0x2, r2, 0x0, 0x2, &(0x7f0000000200)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xb80, 0x0) read$rfkill(r4, &(0x7f0000000300), 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r5, 0x540c) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x8, 0x8, 0x3, 0x6, 0x0, 0x6, 0x4, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x95, 0x200}, 0x4040, 0xe76c, 0x8001, 0x6, 0x2, 0x2, 0x5, 0x0, 0x7ff, 0x0, 0x6}, r4, 0xd, r4, 0x1) read$rfkill(r3, &(0x7f00000003c0), 0x8) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000400)) 18:21:02 executing program 7: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="094d92d90f04313891d930fcfd5054f5d8a8210cbb5566fd1176c773eddf0af0cd980d59a0095091ca2d5b720aeb5badbeeb018d806813f8503a676693a5beb1a3e25d31dcd0bde21b4fd250f2edc21dc18d07a3db06ea84d57e63622a74411ab0aa005e29a7414a374adcf4d0f4d02ce931f98d768d5b78af5db533058f06f6817caef66453a03967cb7acf4cc56914558bb659806b1b3655ccea7c217f7ae634d84e3c2ac1197ee4206e042d", 0xad}, 0x1, 0x0, 0x0, 0x810}, 0x800) socketpair(0x3, 0x4, 0x401, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000001c0), 0x4) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair(0x23, 0x2, 0xff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x302, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000380), 0x4) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000400)=0x5, 0x4) r8 = accept(r6, 0x0, &(0x7f0000000440)) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r9, 0x6de95bb38b70c0c4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x20, 0x1f, 0x1f, 0x6, 0x0, 0x7f, 0x1c109, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000600), 0x8}, 0x10000, 0x9, 0xfffffffb, 0x5, 0x6, 0x80000000, 0x40, 0x0, 0xc5de, 0x0, 0x135c}, r2, 0x10, r6, 0xa) getpgid(r2) r10 = accept(r4, &(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000800)=0x80) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000840), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r8, 0x6, 0x10, &(0x7f0000000880)=0x1, 0x4) [ 82.187551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.190528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.210252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.216459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.221216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.223751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.262298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.269829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.272418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.275459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.282507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.286412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.288063] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.292640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.302642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.317092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.331434] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.333391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.348279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.362497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.367638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.369907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.373357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.375573] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.378395] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.381344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.382812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.389190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.390466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.392858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.398393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.401292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.403788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.406244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.408514] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.411195] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.421429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.423377] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.431507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.433789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.442045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.444761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.446129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.453623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.456372] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.461365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.479299] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.490359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.268154] Bluetooth: hci0: command tx timeout [ 84.331591] Bluetooth: hci1: command tx timeout [ 84.459059] Bluetooth: hci2: command tx timeout [ 84.523060] Bluetooth: hci3: command tx timeout [ 84.523717] Bluetooth: hci4: command tx timeout [ 84.524317] Bluetooth: hci7: command tx timeout [ 84.588080] Bluetooth: hci6: command tx timeout [ 84.588719] Bluetooth: hci5: command tx timeout [ 86.315646] Bluetooth: hci0: command tx timeout [ 86.379049] Bluetooth: hci1: command tx timeout [ 86.507997] Bluetooth: hci2: command tx timeout [ 86.571262] Bluetooth: hci7: command tx timeout [ 86.571713] Bluetooth: hci4: command tx timeout [ 86.572253] Bluetooth: hci3: command tx timeout [ 86.635047] Bluetooth: hci5: command tx timeout [ 86.635086] Bluetooth: hci6: command tx timeout [ 88.363052] Bluetooth: hci0: command tx timeout [ 88.427040] Bluetooth: hci1: command tx timeout [ 88.556165] Bluetooth: hci2: command tx timeout [ 88.619592] Bluetooth: hci3: command tx timeout [ 88.619622] Bluetooth: hci7: command tx timeout [ 88.620286] Bluetooth: hci4: command tx timeout [ 88.683989] Bluetooth: hci5: command tx timeout [ 88.684528] Bluetooth: hci6: command tx timeout [ 90.411089] Bluetooth: hci0: command tx timeout [ 90.476169] Bluetooth: hci1: command tx timeout [ 90.603156] Bluetooth: hci2: command tx timeout [ 90.667122] Bluetooth: hci7: command tx timeout [ 90.667595] Bluetooth: hci4: command tx timeout [ 90.668088] Bluetooth: hci3: command tx timeout [ 90.733703] Bluetooth: hci6: command tx timeout [ 90.734205] Bluetooth: hci5: command tx timeout [ 142.586691] syz-executor.1 (282) used greatest stack depth: 24432 bytes left [ 145.096685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.103311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.105593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.120273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.129532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.131759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.242389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.263612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.265277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.269488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.275602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.281187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.292578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.304903] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.306623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.312100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.319202] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.325357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.326110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.330775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.341365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.354159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.366552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.369496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.389112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.391470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.410425] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.432330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.448720] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.453112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.484418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.497463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.500528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.502913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.508139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.510633] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.512743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.540629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.547360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.571435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.596612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.610444] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.623374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.649417] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.653266] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.657789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.679908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.683349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.238635] Bluetooth: hci0: command tx timeout [ 147.404195] Bluetooth: hci1: command tx timeout [ 147.438016] Bluetooth: hci3: command tx timeout [ 147.438587] Bluetooth: hci2: command tx timeout [ 147.563094] Bluetooth: hci5: command tx timeout [ 147.564194] Bluetooth: hci4: command tx timeout [ 147.755157] Bluetooth: hci6: command tx timeout [ 147.819339] Bluetooth: hci7: command tx timeout [ 149.291039] Bluetooth: hci0: command tx timeout [ 149.420005] Bluetooth: hci1: command tx timeout [ 149.483296] Bluetooth: hci2: command tx timeout [ 149.483784] Bluetooth: hci3: command tx timeout [ 149.612080] Bluetooth: hci4: command tx timeout [ 149.613020] Bluetooth: hci5: command tx timeout [ 149.803253] Bluetooth: hci6: command tx timeout [ 149.868100] Bluetooth: hci7: command tx timeout [ 151.339050] Bluetooth: hci0: command tx timeout [ 151.467069] Bluetooth: hci1: command tx timeout [ 151.532031] Bluetooth: hci2: command tx timeout [ 151.532870] Bluetooth: hci3: command tx timeout [ 151.660055] Bluetooth: hci4: command tx timeout [ 151.662317] Bluetooth: hci5: command tx timeout [ 151.851351] Bluetooth: hci6: command tx timeout [ 151.916017] Bluetooth: hci7: command tx timeout [ 153.388257] Bluetooth: hci0: command tx timeout [ 153.534033] Bluetooth: hci1: command tx timeout [ 153.618061] Bluetooth: hci2: command tx timeout [ 153.618995] Bluetooth: hci3: command tx timeout [ 153.707106] Bluetooth: hci5: command tx timeout [ 153.708053] Bluetooth: hci4: command tx timeout [ 153.899122] Bluetooth: hci6: command tx timeout [ 153.963238] Bluetooth: hci7: command tx timeout [ 207.421966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.425310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.430488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.436506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.440819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.443822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.487708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.494200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.496314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.500845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.515272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.517680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.616452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.628535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.637675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.644466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.655401] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.657679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.738059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.758670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.762539] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.770603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.776095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.780477] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.841579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.854502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.886408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.907326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.915221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.917486] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.925280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.933319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.957836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.987604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.994692] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.043413] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.220854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.237490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.241422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.261127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.272529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.288626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.294392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.321334] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.330977] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.331341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.356187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.358689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.515214] Bluetooth: hci0: command tx timeout [ 209.579082] Bluetooth: hci1: command tx timeout [ 209.707039] Bluetooth: hci2: command tx timeout [ 209.835066] Bluetooth: hci3: command tx timeout [ 210.027004] Bluetooth: hci4: command tx timeout [ 210.219268] Bluetooth: hci5: command tx timeout [ 210.411042] Bluetooth: hci6: command tx timeout [ 210.475188] Bluetooth: hci7: command tx timeout [ 211.563085] Bluetooth: hci0: command tx timeout [ 211.627033] Bluetooth: hci1: command tx timeout [ 211.755058] Bluetooth: hci2: command tx timeout [ 211.884363] Bluetooth: hci3: command tx timeout [ 212.075269] Bluetooth: hci4: command tx timeout [ 212.267071] Bluetooth: hci5: command tx timeout [ 212.460978] Bluetooth: hci6: command tx timeout [ 212.523196] Bluetooth: hci7: command tx timeout [ 213.612071] Bluetooth: hci0: command tx timeout [ 213.675081] Bluetooth: hci1: command tx timeout [ 213.803213] Bluetooth: hci2: command tx timeout [ 213.931067] Bluetooth: hci3: command tx timeout [ 214.123027] Bluetooth: hci4: command tx timeout [ 214.315134] Bluetooth: hci5: command tx timeout [ 214.507031] Bluetooth: hci6: command tx timeout [ 214.571020] Bluetooth: hci7: command tx timeout [ 215.660038] Bluetooth: hci0: command tx timeout [ 215.723051] Bluetooth: hci1: command tx timeout [ 215.852039] Bluetooth: hci2: command tx timeout [ 215.979218] Bluetooth: hci3: command tx timeout [ 216.171301] Bluetooth: hci4: command tx timeout [ 216.363240] Bluetooth: hci5: command tx timeout [ 216.556996] Bluetooth: hci6: command tx timeout [ 216.619405] Bluetooth: hci7: command tx timeout [ 269.564501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.567626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.570622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.577371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.581477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.588230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.754217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.760343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.762291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.769408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.770545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.774720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.781145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.785715] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.787483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.789388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.797155] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.799814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.839387] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.844100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.851279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.860623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.869751] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.875315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.915839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.922325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.925870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.941556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.948314] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.950618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.037808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.041345] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.042780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.047196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.063620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.065763] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.073596] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.077465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.093480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.094450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.103866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.125502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.138467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.166289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.169621] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.175168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.191754] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.224301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.659163] Bluetooth: hci0: command tx timeout [ 271.851029] Bluetooth: hci1: command tx timeout [ 271.916001] Bluetooth: hci3: command tx timeout [ 271.917288] Bluetooth: hci2: command tx timeout [ 272.043061] Bluetooth: hci4: command tx timeout [ 272.171038] Bluetooth: hci7: command tx timeout [ 272.299364] Bluetooth: hci6: command tx timeout [ 272.300642] Bluetooth: hci5: command tx timeout [ 273.707977] Bluetooth: hci0: command tx timeout [ 273.900146] Bluetooth: hci1: command tx timeout [ 273.964358] Bluetooth: hci2: command tx timeout [ 273.965282] Bluetooth: hci3: command tx timeout [ 274.091251] Bluetooth: hci4: command tx timeout [ 274.220130] Bluetooth: hci7: command tx timeout [ 274.347061] Bluetooth: hci5: command tx timeout [ 274.347879] Bluetooth: hci6: command tx timeout [ 275.755222] Bluetooth: hci0: command tx timeout [ 275.946990] Bluetooth: hci1: command tx timeout [ 276.012044] Bluetooth: hci2: command tx timeout [ 276.012631] Bluetooth: hci3: command tx timeout [ 276.139930] Bluetooth: hci4: command tx timeout [ 276.267065] Bluetooth: hci7: command tx timeout [ 276.395987] Bluetooth: hci5: command tx timeout [ 276.396483] Bluetooth: hci6: command tx timeout [ 277.817046] Bluetooth: hci0: command tx timeout [ 277.994975] Bluetooth: hci1: command tx timeout [ 278.059099] Bluetooth: hci2: command tx timeout [ 278.059686] Bluetooth: hci3: command tx timeout [ 278.187096] Bluetooth: hci4: command tx timeout [ 278.316026] Bluetooth: hci7: command tx timeout [ 278.442998] Bluetooth: hci5: command tx timeout [ 278.443504] Bluetooth: hci6: command tx timeout [ 332.159088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.163223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.165514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.179381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.185356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.187565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.219854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.223330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.225471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.232233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.242326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.244312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.293832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.299982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.306069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.310543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.313309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.322461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.324797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.328159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.329689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.347494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.352161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.355220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.356360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.364094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.366700] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.368266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.376199] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.379088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.379718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.389439] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.392983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.395124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.399336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.400539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.413486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.416694] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.418363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.440623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.445182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.446813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.450072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.470627] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.472426] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.490075] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.498345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.501439] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.250980] Bluetooth: hci0: command tx timeout [ 334.316451] Bluetooth: hci1: command tx timeout [ 334.443154] Bluetooth: hci3: command tx timeout [ 334.444100] Bluetooth: hci2: command tx timeout [ 334.507154] Bluetooth: hci4: command tx timeout [ 334.508204] Bluetooth: hci5: command tx timeout [ 334.572089] Bluetooth: hci7: command tx timeout [ 334.572756] Bluetooth: hci6: command tx timeout [ 336.300117] Bluetooth: hci0: command tx timeout [ 336.364042] Bluetooth: hci1: command tx timeout [ 336.494087] Bluetooth: hci2: command tx timeout [ 336.494216] Bluetooth: hci3: command tx timeout [ 336.556029] Bluetooth: hci4: command tx timeout [ 336.556918] Bluetooth: hci5: command tx timeout [ 336.619048] Bluetooth: hci7: command tx timeout [ 336.619961] Bluetooth: hci6: command tx timeout [ 338.348015] Bluetooth: hci0: command tx timeout [ 338.411071] Bluetooth: hci1: command tx timeout [ 338.539082] Bluetooth: hci2: command tx timeout [ 338.539556] Bluetooth: hci3: command tx timeout [ 338.603341] Bluetooth: hci4: command tx timeout [ 338.604916] Bluetooth: hci5: command tx timeout [ 338.667991] Bluetooth: hci7: command tx timeout [ 338.668028] Bluetooth: hci6: command tx timeout [ 340.396936] Bluetooth: hci0: command tx timeout [ 340.459983] Bluetooth: hci1: command tx timeout [ 340.586983] Bluetooth: hci2: command tx timeout [ 340.587963] Bluetooth: hci3: command tx timeout [ 340.650967] Bluetooth: hci5: command tx timeout [ 340.651213] Bluetooth: hci4: command tx timeout [ 340.715124] Bluetooth: hci7: command tx timeout [ 340.715157] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 18:26:03 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86840d44 RDX=1ffff1100452eeff RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888022977808 RSP=ffff888022977740 R8 =ffffffff86840d48 R9 =ffff8880229777f0 R10=000000000003a7f3 R11=0000000000024174 R12=ffff888022977810 R13=ffff8880229777f8 R14=0000000000000005 R15=ffff8880229777b0 RIP=ffffffff8134a14a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2221ffd260 CR3=0000000015812000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416b445900000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff819ca112 RBX=ffffffff815f1290 RCX=0000000000000001 RDX=1ffff110066b8ea0 RSI=ffffffff819ca112 RDI=ffff8880335c7570 RBP=ffff8880335c7540 RSP=ffff8880335c74a0 R8 =0000000000000001 R9 =ffff8880335c74e8 R10=000000000003a7f3 R11=0000000000021153 R12=ffff8880335c7570 R13=0000000000000000 R14=ffff88802b811bc0 R15=0000000000000cc0 RIP=ffffffff815f1290 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa7e4aea1f0 CR3=00000000157f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000