Warning: Permanently added '[localhost]:50488' (ECDSA) to the list of known hosts. 2025/01/26 01:48:38 fuzzer started 2025/01/26 01:48:38 dialing manager at localhost:40883 syzkaller login: [ 73.763377] cgroup: Unknown subsys name 'net' [ 73.858001] cgroup: Unknown subsys name 'cpuset' [ 73.893263] cgroup: Unknown subsys name 'rlimit' [ 79.522386] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 01:48:56 syscalls: 200 2025/01/26 01:48:56 code coverage: enabled 2025/01/26 01:48:56 comparison tracing: enabled 2025/01/26 01:48:56 extra coverage: enabled 2025/01/26 01:48:56 setuid sandbox: enabled 2025/01/26 01:48:56 namespace sandbox: enabled 2025/01/26 01:48:56 Android sandbox: enabled 2025/01/26 01:48:56 fault injection: enabled 2025/01/26 01:48:56 leak checking: enabled 2025/01/26 01:48:56 net packet injection: enabled 2025/01/26 01:48:56 net device setup: enabled 2025/01/26 01:48:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 01:48:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 01:48:56 USB emulation: enabled 2025/01/26 01:48:56 hci packet injection: enabled 2025/01/26 01:48:56 wifi device emulation: enabled 2025/01/26 01:48:56 802.15.4 emulation: enabled 2025/01/26 01:48:56 fetching corpus: 0, signal 0/0 (executing program) 2025/01/26 01:48:58 starting 8 fuzzer processes 01:48:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24060004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x20001000}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '**\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x40050) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}]}, 0x60}}, 0x90) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000005) syz_genetlink_get_family_id$net_dm(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xfc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0133f05a4ed5d61906cc1ec2cf7bcb43"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ae0aadce15eb6fc824dd2af0fb7ea283"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6dd6be66336c7a762f2f55501b97cedd"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x87}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2441}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x739}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) 01:48:58 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x20000001) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x873832fd936227d6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x70, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5da4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3b}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000086}, 0x8000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008801}, 0x8001) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc68}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20000012) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000014) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xa4025c700fe20235}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004011) 01:48:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x60e000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x67b, 0x501900) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000000240)) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0xc4000, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x9}}], [{@audit}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '/dev/vcsa#\x00'}}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0x1000}}, './file0/file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x7f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x1c0, 0x0) 01:48:58 executing program 3: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x98}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x81}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) r2 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40) personality(0x4000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x94602b953c7c525f, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x50}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xfe}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040885}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4081) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x404c001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000b80), r7) [ 93.311795] audit: type=1400 audit(1737856138.734:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:48:58 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x5c401, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) rt_sigtimedwait(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={0x0, 0x989680}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7800, 0x1, 0x6, 0x6, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x67, 0x0, 0x80, 0x0, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@timestamp_addr={0x44, 0x1c, 0x52, 0x1, 0x0, [{@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x80000001}]}, @rr={0x7, 0x17, 0xf0, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp={0x44, 0x18, 0xd4, 0x0, 0x0, [0x80000001, 0x8, 0x401, 0x4, 0x7]}, @lsrr={0x83, 0x17, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0xb, 0x17, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2]}, @lsrr={0x83, 0x7, 0xd4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0xf, 0x8d, {0x8d, 0x21, "00a8e755e0febeb3e51ed8ba36cfffac0c1234fc81b82b20ce73fbfe2d4f30a89e774b1648660957ebf27672a8bd9fb47b24f5d3d5aeb287417144a31c4fb2aaff2f26422a4fb14b3f6c3c2342f3005c33235a8d9e4659ee94fcbcc80a27c11363e9d61e516e590a8bd40bc9885599efa85678e59b394d91c1cf2074522ac3457bc0bee2b8b91a8e8f6cf2"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000600)={0x44, &(0x7f0000000400)={0x20, 0x16, 0x14, "aef01e1466b7fefb4add316ce99781caaa8e686b"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0x20, 0x81, 0x3, "fcf511"}, &(0x7f0000000500)={0x20, 0x82, 0x3, "b61bbc"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "fc77"}, &(0x7f0000000580)={0x20, 0x84, 0x4, "1fabb87a"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "1c4825"}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x101440, 0x0) timerfd_gettime(r5, &(0x7f0000000800)) rt_sigtimedwait(&(0x7f0000000840)={[0x8000]}, 0x0, &(0x7f0000000880), 0x8) r6 = syz_open_dev$vcsa(&(0x7f00000008c0), 0xac, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$char_usb(r1, &(0x7f0000000940)="8fa89b9645019def8e234622ac0ec29aaf44d2b25a56c11de53d3fe37436422b89bfa141f7cf12f3bace0a8b243676780110073c08fd764a53cdbaead96556d6aec5d9adf27ea00c909c8485828e40f784d85d35ed14c2130937fc816930086c3fb3bf46645da82f7ca93548f842dc52d5784f27924f1a250c6fe48bd7f222a70d31b1e315076b53444e906de5a1b34a86ea183f239ee0695b1bfe29f8b669b1777e834ddaef8aedf8dddb582e30cb3c", 0xb0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file1\x00'}) 01:48:58 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4000014) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44804}, 0x20000000) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x210, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x220028c0}, 0x4811) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x3c}}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48820}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x23}]}, 0x1c}}, 0x20040800) 01:48:58 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x9, 0x3f, 0x4, @private1, @loopback, 0x700, 0x700, 0x1, 0x8}}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth1_macvtap\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, '.\x00'}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)={0x0, 0x3, [@local, @local, @local]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'bond_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f00000004c0)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000540)=0x1) 01:48:58 executing program 7: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xffffffffffffffff) socketpair(0x25, 0x1, 0x79a, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x5, 0x1e, 0x100, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x40, 0x7800, 0x0, 0xffff}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240100c0}, 0x1085) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) socketpair(0x9, 0x1, 0x85, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x2401c000) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000480)={{0x9}, 0x1, 0x6, 0x8, {0x8, 0x1}, 0x5, 0x7655}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000500)={0x8, 0x8000, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', r1, 0x29, 0x40, 0x4, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x784b, 0x0, 0x5, 0x8}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008080) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8010) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000001) [ 94.681037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.682568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.688593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.690862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.692216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.693181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.700429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.702048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.710201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.714907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.716233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.719667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.741462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.745249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.748946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.756504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.769011] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.770577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.804465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.818039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.830035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.864071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.869186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.871611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.873860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.877332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.879269] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.880228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.881089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.894349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.895406] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.900743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.903114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.907097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.908410] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.913797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.924857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.925753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.928777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.929471] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.930772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.931465] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.031099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.032607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.034887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.095418] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.103139] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.110963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.714080] Bluetooth: hci0: command tx timeout [ 96.777769] Bluetooth: hci1: command tx timeout [ 96.841858] Bluetooth: hci2: command tx timeout [ 96.905976] Bluetooth: hci6: command tx timeout [ 96.969859] Bluetooth: hci4: command tx timeout [ 96.969933] Bluetooth: hci3: command tx timeout [ 97.034730] Bluetooth: hci5: command tx timeout [ 97.162825] Bluetooth: hci7: command tx timeout [ 98.763189] Bluetooth: hci0: command tx timeout [ 98.826735] Bluetooth: hci1: command tx timeout [ 98.890716] Bluetooth: hci2: command tx timeout [ 98.953721] Bluetooth: hci6: command tx timeout [ 99.017748] Bluetooth: hci4: command tx timeout [ 99.017840] Bluetooth: hci3: command tx timeout [ 99.082270] Bluetooth: hci5: command tx timeout [ 99.209796] Bluetooth: hci7: command tx timeout [ 100.809748] Bluetooth: hci0: command tx timeout [ 100.874109] Bluetooth: hci1: command tx timeout [ 100.937806] Bluetooth: hci2: command tx timeout [ 101.002360] Bluetooth: hci6: command tx timeout [ 101.065855] Bluetooth: hci4: command tx timeout [ 101.067698] Bluetooth: hci3: command tx timeout [ 101.129891] Bluetooth: hci5: command tx timeout [ 101.258837] Bluetooth: hci7: command tx timeout [ 102.857690] Bluetooth: hci0: command tx timeout [ 102.922733] Bluetooth: hci1: command tx timeout [ 102.985869] Bluetooth: hci2: command tx timeout [ 103.050723] Bluetooth: hci6: command tx timeout [ 103.114146] Bluetooth: hci4: command tx timeout [ 103.115054] Bluetooth: hci3: command tx timeout [ 103.178708] Bluetooth: hci5: command tx timeout [ 103.306719] Bluetooth: hci7: command tx timeout [ 157.429668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.432210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.434111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.441408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.446435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.449145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.465749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.470493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.473225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.495008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.498529] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.500339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.537281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.537578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.542309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.543854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.545406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.548259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.553940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.559303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.560102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.561252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.562544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.564706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.566252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.567809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.573878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.574037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.582887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.589473] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.591096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.594295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.596514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.597303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.602472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.608239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.623152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.634637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.656147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.664151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.675279] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.684783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.704859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.715936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.721781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.740130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.747527] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.754076] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.498846] Bluetooth: hci0: command tx timeout [ 159.562879] Bluetooth: hci1: command tx timeout [ 159.625885] Bluetooth: hci3: command tx timeout [ 159.689805] Bluetooth: hci4: command tx timeout [ 159.692042] Bluetooth: hci5: command tx timeout [ 159.693504] Bluetooth: hci2: command tx timeout [ 159.753751] Bluetooth: hci7: command tx timeout [ 159.882775] Bluetooth: hci6: command tx timeout [ 161.546037] Bluetooth: hci0: command tx timeout [ 161.610215] Bluetooth: hci1: command tx timeout [ 161.673884] Bluetooth: hci3: command tx timeout [ 161.737941] Bluetooth: hci5: command tx timeout [ 161.739245] Bluetooth: hci4: command tx timeout [ 161.739277] Bluetooth: hci2: command tx timeout [ 161.801814] Bluetooth: hci7: command tx timeout [ 161.929788] Bluetooth: hci6: command tx timeout [ 163.593723] Bluetooth: hci0: command tx timeout [ 163.659248] Bluetooth: hci1: command tx timeout [ 163.722037] Bluetooth: hci3: command tx timeout [ 163.785748] Bluetooth: hci5: command tx timeout [ 163.786493] Bluetooth: hci4: command tx timeout [ 163.787803] Bluetooth: hci2: command tx timeout [ 163.849759] Bluetooth: hci7: command tx timeout [ 163.977725] Bluetooth: hci6: command tx timeout [ 165.641682] Bluetooth: hci0: command tx timeout [ 165.706279] Bluetooth: hci1: command tx timeout [ 165.769666] Bluetooth: hci3: command tx timeout [ 165.833676] Bluetooth: hci4: command tx timeout [ 165.835650] Bluetooth: hci2: command tx timeout [ 165.836086] Bluetooth: hci5: command tx timeout [ 165.897685] Bluetooth: hci7: command tx timeout [ 166.026364] Bluetooth: hci6: command tx timeout [ 220.315565] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.322043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.328004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.334844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.342383] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.347523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.564246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.570080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.577384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.585359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.590179] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.593069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.714774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.717995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.723464] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.731910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.737430] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.748035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.846119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.849954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.863457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.865307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.871520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.880016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.897370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.906018] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.912126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.922940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.947581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.950737] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.951458] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.955073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.962322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.966165] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.968017] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.970200] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.981759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.983573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.992676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.994467] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.997348] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.999097] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.002469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.041017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.046010] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.048238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.067333] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.070015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 222.410044] Bluetooth: hci0: command tx timeout [ 222.665771] Bluetooth: hci1: command tx timeout [ 222.794660] Bluetooth: hci2: command tx timeout [ 223.050902] Bluetooth: hci3: command tx timeout [ 223.114758] Bluetooth: hci5: command tx timeout [ 223.115711] Bluetooth: hci6: command tx timeout [ 223.115759] Bluetooth: hci4: command tx timeout [ 223.178721] Bluetooth: hci7: command tx timeout [ 224.457764] Bluetooth: hci0: command tx timeout [ 224.715634] Bluetooth: hci1: command tx timeout [ 224.841685] Bluetooth: hci2: command tx timeout [ 225.097836] Bluetooth: hci3: command tx timeout [ 225.161671] Bluetooth: hci4: command tx timeout [ 225.162699] Bluetooth: hci5: command tx timeout [ 225.162915] Bluetooth: hci6: command tx timeout [ 225.226663] Bluetooth: hci7: command tx timeout [ 226.506736] Bluetooth: hci0: command tx timeout [ 226.761694] Bluetooth: hci1: command tx timeout [ 226.891683] Bluetooth: hci2: command tx timeout [ 227.145793] Bluetooth: hci3: command tx timeout [ 227.209679] Bluetooth: hci5: command tx timeout [ 227.210129] Bluetooth: hci4: command tx timeout [ 227.210716] Bluetooth: hci6: command tx timeout [ 227.274874] Bluetooth: hci7: command tx timeout [ 228.553661] Bluetooth: hci0: command tx timeout [ 228.809670] Bluetooth: hci1: command tx timeout [ 228.937744] Bluetooth: hci2: command tx timeout [ 229.193691] Bluetooth: hci3: command tx timeout [ 229.257708] Bluetooth: hci4: command tx timeout [ 229.260654] Bluetooth: hci6: command tx timeout [ 229.261094] Bluetooth: hci5: command tx timeout [ 229.322039] Bluetooth: hci7: command tx timeout [ 282.522918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.526076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.530098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.539095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.543627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.546319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.584090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.592299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.596024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.609999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.617035] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.620091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.709119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.714305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.718088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.734985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.743432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.749550] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.800971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.815977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.822124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.844430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.848017] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.866885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.894258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.922006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.928814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.930968] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.949209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.949638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.955785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.960030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.971298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.974947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.975111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.980399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.983773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.990503] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.994663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.997059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.998311] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.000435] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.002291] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.013804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.026016] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 283.029049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.031310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.035328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.618106] Bluetooth: hci0: command tx timeout [ 284.683864] Bluetooth: hci1: command tx timeout [ 284.809660] Bluetooth: hci2: command tx timeout [ 285.001898] Bluetooth: hci3: command tx timeout [ 285.129825] Bluetooth: hci7: command tx timeout [ 285.129876] Bluetooth: hci5: command tx timeout [ 285.131273] Bluetooth: hci4: command tx timeout [ 285.132120] Bluetooth: hci6: command tx timeout [ 286.666646] Bluetooth: hci0: command tx timeout [ 286.731692] Bluetooth: hci1: command tx timeout [ 286.858665] Bluetooth: hci2: command tx timeout [ 287.051621] Bluetooth: hci3: command tx timeout [ 287.177735] Bluetooth: hci4: command tx timeout [ 287.178256] Bluetooth: hci6: command tx timeout [ 287.178653] Bluetooth: hci5: command tx timeout [ 287.178703] Bluetooth: hci7: command tx timeout [ 288.713672] Bluetooth: hci0: command tx timeout [ 288.777726] Bluetooth: hci1: command tx timeout [ 288.905822] Bluetooth: hci2: command tx timeout [ 289.097779] Bluetooth: hci3: command tx timeout [ 289.226423] Bluetooth: hci6: command tx timeout [ 289.226910] Bluetooth: hci7: command tx timeout [ 289.227730] Bluetooth: hci5: command tx timeout [ 289.227809] Bluetooth: hci4: command tx timeout [ 290.761717] Bluetooth: hci0: command tx timeout [ 290.826087] Bluetooth: hci1: command tx timeout [ 290.953745] Bluetooth: hci2: command tx timeout [ 291.145715] Bluetooth: hci3: command tx timeout [ 291.273709] Bluetooth: hci4: command tx timeout [ 291.274173] Bluetooth: hci5: command tx timeout [ 291.274693] Bluetooth: hci6: command tx timeout [ 291.275120] Bluetooth: hci7: command tx timeout [ 345.500416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.503283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.505724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.513412] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.528137] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.537115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.575502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.586043] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.588889] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.596973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.600805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.605011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.625758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.639532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.643978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.647177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.648966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.651875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.661050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.665541] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.671827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.682828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.688759] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.710782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.905178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.911965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.923079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.930033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.932040] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.941262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.944047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.959291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.964963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.982765] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.983796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.997038] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.009989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.012226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.018443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.023079] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.025976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 346.032217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.033611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.035226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 346.038838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.053942] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.081237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.086997] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.593654] Bluetooth: hci0: command tx timeout [ 347.721706] Bluetooth: hci1: command tx timeout [ 347.721745] Bluetooth: hci2: command tx timeout [ 347.787617] Bluetooth: hci3: command tx timeout [ 348.169695] Bluetooth: hci7: command tx timeout [ 348.169943] Bluetooth: hci4: command tx timeout [ 348.170751] Bluetooth: hci5: command tx timeout [ 348.171756] Bluetooth: hci6: command tx timeout [ 349.641656] Bluetooth: hci0: command tx timeout [ 349.769756] Bluetooth: hci2: command tx timeout [ 349.770264] Bluetooth: hci1: command tx timeout [ 349.834136] Bluetooth: hci3: command tx timeout [ 350.217936] Bluetooth: hci5: command tx timeout [ 350.218424] Bluetooth: hci6: command tx timeout [ 350.218538] Bluetooth: hci4: command tx timeout [ 350.219179] Bluetooth: hci7: command tx timeout [ 351.689747] Bluetooth: hci0: command tx timeout [ 351.817774] Bluetooth: hci1: command tx timeout [ 351.818268] Bluetooth: hci2: command tx timeout [ 351.881905] Bluetooth: hci3: command tx timeout [ 352.265781] Bluetooth: hci4: command tx timeout [ 352.266361] Bluetooth: hci6: command tx timeout [ 352.267172] Bluetooth: hci5: command tx timeout [ 352.268006] Bluetooth: hci7: command tx timeout [ 353.739125] Bluetooth: hci0: command tx timeout [ 353.866904] Bluetooth: hci2: command tx timeout [ 353.867396] Bluetooth: hci1: command tx timeout [ 353.930870] Bluetooth: hci3: command tx timeout [ 354.314676] Bluetooth: hci6: command tx timeout [ 354.315164] Bluetooth: hci7: command tx timeout [ 354.315858] Bluetooth: hci5: command tx timeout [ 354.316311] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 01:54:07 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=000000000000009c RCX=ffffffff814f3e3e RDX=1ffff11001dd0bc0 RSI=0000000000000008 RDI=ffffffff87f0af30 RBP=ffff88800ee85de0 RSP=ffff88802761f708 R8 =0000000000000000 R9 =fffffbfff0fe15e6 R10=ffffffff87f0af37 R11=0000000000000001 R12=ffff88800ee85340 R13=158c55b4184455a9 R14=ffffffff86405170 R15=0000000000000000 RIP=ffffffff81abd4e8 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb9bcedf540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9bd396038 CR3=0000000028698000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888027608001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888027607901 RSI=ffff8880276078f8 RDI=ffff888027607338 RBP=ffff888027607380 RSP=ffff8880276072a0 R8 =ffffffff8683e52a R9 =ffff888027607368 R10=000000000003ab7c R11=0000000000021e9f R12=ffff888027607388 R13=ffff888027600000 R14=ffff888027607900 R15=ffff888027607328 RIP=ffffffff81348d51 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f037ca52368 CR3=0000000033ad6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000