syzkaller login: [ 63.164406] sshd (231) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:53789' (ECDSA) to the list of known hosts. 2025/01/29 09:38:08 fuzzer started 2025/01/29 09:38:09 dialing manager at localhost:40187 [ 65.510503] cgroup: Unknown subsys name 'net' [ 65.606650] cgroup: Unknown subsys name 'cpuset' [ 65.627183] cgroup: Unknown subsys name 'rlimit' [ 70.860781] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 81.071515] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 09:38:25 syscalls: 205 2025/01/29 09:38:25 code coverage: enabled 2025/01/29 09:38:25 comparison tracing: enabled 2025/01/29 09:38:25 extra coverage: enabled 2025/01/29 09:38:25 setuid sandbox: enabled 2025/01/29 09:38:25 namespace sandbox: enabled 2025/01/29 09:38:25 Android sandbox: enabled 2025/01/29 09:38:25 fault injection: enabled 2025/01/29 09:38:25 leak checking: enabled 2025/01/29 09:38:25 net packet injection: enabled 2025/01/29 09:38:25 net device setup: enabled 2025/01/29 09:38:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 09:38:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 09:38:25 USB emulation: enabled 2025/01/29 09:38:25 hci packet injection: enabled 2025/01/29 09:38:25 wifi device emulation: enabled 2025/01/29 09:38:25 802.15.4 emulation: enabled 2025/01/29 09:38:25 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 09:38:26 starting 8 fuzzer processes 09:38:26 executing program 0: r0 = syz_io_uring_setup(0x4b39, &(0x7f0000000000)={0x0, 0x47aa, 0x8, 0x0, 0x2cd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r0, 0x8000000) r1 = syz_io_uring_setup(0x2631, &(0x7f0000000140)={0x0, 0x38d4, 0x8, 0x3, 0x369, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_setup(0xa02, &(0x7f0000000240)={0x0, 0x5b06, 0x2, 0x0, 0x330, 0x0, r1}) msgget$private(0x0, 0x20) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) io_uring_enter(r1, 0xd3c, 0x8dfe, 0x1, &(0x7f0000000300)={[0xffffffffffffdeed]}, 0x8) r2 = io_uring_setup(0xc7b, &(0x7f0000000340)={0x0, 0x9545, 0x20, 0xfff, 0x310, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1) r3 = syz_io_uring_setup(0x60a7, &(0x7f00000004c0)={0x0, 0x7edc, 0x10, 0x3, 0x314}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x30, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r4, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x122010, r1, 0x10000000) r5 = syz_open_dev$hidraw(&(0x7f0000000600), 0x2, 0x4082) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000640)={0x20, "868f0e2cc495128b19837bbc88046280703032aa2170c5b5b191ae14dd518ee7009025a9ab5a509d362e5232f348ec0a426d19f36552df2c47a145e8d0806be2"}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f00000006c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1b) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x6) 09:38:26 executing program 1: setuid(0xee00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x4c, 0x7, 0x0, @remote, @mcast2, 0x50, 0x80, 0x4, 0x400}}) r3 = syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) setuid(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x24000000) ioctl$TUNSETOWNER(r3, 0x400454cc, r1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2001c880) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000640)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x492840, 0x0) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 09:38:26 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r0, 0xfffffffffffffffa, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r0, 0x8, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'macvtap0\x00', @broadcast}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000340)={r2, 0x0, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r2, 0x5, 0xffffffffffffffff, 0x9, 0x80000}) r3 = syz_io_uring_setup(0x1231, &(0x7f00000003c0)={0x0, 0x689, 0x0, 0x2, 0x2d5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000004c0)=r2) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000500)=r2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000540)={r1, 0x5, 0x7fffffff}) msgsnd(0x0, &(0x7f0000000580)={0x3, "afc0f8a7f242b96f2748de9222dc13d1ae7a7281293b280b96dac11d1c63a06054126d746dbd06c3f7b8ac8e3a38edd026e5da96f0850d160ca5234baff18b9fdc21edab68c51c925482366436359a6f847f0aed8469d81eb32b512a1250dc90fd3225702b5400d4"}, 0x70, 0x800) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000600)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x3f, &(0x7f0000000640)=@generic={0x3, 0x0, 0x37, "38806294", "419624aaaa108a5608427d9bf284ac98aaa904e81ed6f0010c45519c12f3855a5f45ce4215b42e2b2dd8724817557273d278884e718647"}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000680)=r1) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000700)=0x20) 09:38:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x33, 0x1, 0x8, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10, 0x7800, 0x4, 0x6}}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008042) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_PID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) socketpair(0x1f, 0x4, 0x6, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}}, 0x6488c) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x200000, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f00000005c0)={'macvlan1\x00'}) io_uring_setup(0x67b, &(0x7f0000000600)={0x0, 0xd265, 0x4, 0x3, 0x27d, 0x0, r9}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', r1, 0x4, 0x3f, 0x5a, 0x9, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x10, 0xfffffffd, 0x30000000}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6_vti0\x00', r11, 0x2f, 0x40, 0x1, 0x0, 0x31, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x3, 0x80000000}}) [ 83.194785] audit: type=1400 audit(1738143507.037:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:38:27 executing program 6: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x800) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x40, 0x80000000, 0x20, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x7, 0x0, 0x5}}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008064) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r9) r10 = socket(0xa, 0xa, 0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xef6333dcdb744f9b}, 0x20040004) 09:38:27 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0xfffffe00, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x81, 0x3, 0x0, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10, 0x1, 0x1000, 0x7}}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) prctl$PR_SET_PDEATHSIG(0x1, 0x30) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r0, 0x4, 0x4, 0x0, 0x6, 0x2b, @loopback, @local, 0x700, 0x10, 0x4, 0x7fffffff}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000003c0)) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x4010) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040084) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) 09:38:27 executing program 5: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8002}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c880}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20400040}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x24000001) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x4800) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r9, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x78, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xb996e726d95189f5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040014}, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x710db98b05c9d348}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}}, 0x8000) 09:38:27 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4c040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r4) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r5, 0xa00, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe4, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x64}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4040040) [ 84.564337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.567663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.569516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.575026] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.577532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.578744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.618311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.621054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.622912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.625780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.627634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.628767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.639708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.647068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.648639] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.650717] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.651930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.653051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.692021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.694816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.710686] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.711681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.732616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.733559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.734429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.745584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.752137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.767018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.768150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.769087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.773560] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.775066] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.775654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.777019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.779893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.783436] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.784304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.786211] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.793887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.798500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.799450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.803605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.805287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.811281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.813177] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.814282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.820957] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.822462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.648204] Bluetooth: hci0: command tx timeout [ 86.711643] Bluetooth: hci1: command tx timeout [ 86.712628] Bluetooth: hci2: command tx timeout [ 86.839717] Bluetooth: hci5: command tx timeout [ 86.904440] Bluetooth: hci6: command tx timeout [ 86.905202] Bluetooth: hci3: command tx timeout [ 86.906266] Bluetooth: hci4: command tx timeout [ 86.967548] Bluetooth: hci7: command tx timeout [ 88.695502] Bluetooth: hci0: command tx timeout [ 88.759508] Bluetooth: hci1: command tx timeout [ 88.760104] Bluetooth: hci2: command tx timeout [ 88.888613] Bluetooth: hci5: command tx timeout [ 88.951507] Bluetooth: hci4: command tx timeout [ 88.952004] Bluetooth: hci3: command tx timeout [ 88.952507] Bluetooth: hci6: command tx timeout [ 89.015593] Bluetooth: hci7: command tx timeout [ 90.743479] Bluetooth: hci0: command tx timeout [ 90.807568] Bluetooth: hci1: command tx timeout [ 90.808164] Bluetooth: hci2: command tx timeout [ 90.935564] Bluetooth: hci5: command tx timeout [ 90.999580] Bluetooth: hci6: command tx timeout [ 91.000104] Bluetooth: hci3: command tx timeout [ 91.001534] Bluetooth: hci4: command tx timeout [ 91.063611] Bluetooth: hci7: command tx timeout [ 92.791792] Bluetooth: hci0: command tx timeout [ 92.856501] Bluetooth: hci2: command tx timeout [ 92.857319] Bluetooth: hci1: command tx timeout [ 92.983522] Bluetooth: hci5: command tx timeout [ 93.047621] Bluetooth: hci3: command tx timeout [ 93.048290] Bluetooth: hci6: command tx timeout [ 93.049149] Bluetooth: hci4: command tx timeout [ 93.111625] Bluetooth: hci7: command tx timeout [ 144.867741] syz-executor.0 (278) used greatest stack depth: 23800 bytes left [ 147.910095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.915810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.918179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.924324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.927557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.927629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.929873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.930094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.932264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.954018] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.976152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.983974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.987551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.987559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.990471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.992562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.005238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.006901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.033091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.044618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.057488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.062202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.068030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.072315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.074824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.078837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.096717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.109884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.115441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.118170] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.119824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.121953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.135078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.136984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.139435] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.144520] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.150007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.155710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.157827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.179765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.183762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.203683] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.220575] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.227496] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.229858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.233461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.243948] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.245928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.007564] Bluetooth: hci0: command tx timeout [ 150.071457] Bluetooth: hci2: command tx timeout [ 150.137527] Bluetooth: hci1: command tx timeout [ 150.199573] Bluetooth: hci3: command tx timeout [ 150.200655] Bluetooth: hci6: command tx timeout [ 150.263583] Bluetooth: hci4: command tx timeout [ 150.455605] Bluetooth: hci7: command tx timeout [ 150.456528] Bluetooth: hci5: command tx timeout [ 152.055817] Bluetooth: hci0: command tx timeout [ 152.121438] Bluetooth: hci2: command tx timeout [ 152.183450] Bluetooth: hci1: command tx timeout [ 152.247496] Bluetooth: hci6: command tx timeout [ 152.247970] Bluetooth: hci3: command tx timeout [ 152.312630] Bluetooth: hci4: command tx timeout [ 152.503472] Bluetooth: hci7: command tx timeout [ 152.503937] Bluetooth: hci5: command tx timeout [ 154.103548] Bluetooth: hci0: command tx timeout [ 154.167518] Bluetooth: hci2: command tx timeout [ 154.231761] Bluetooth: hci1: command tx timeout [ 154.295558] Bluetooth: hci6: command tx timeout [ 154.296535] Bluetooth: hci3: command tx timeout [ 154.359526] Bluetooth: hci4: command tx timeout [ 154.553459] Bluetooth: hci5: command tx timeout [ 154.554324] Bluetooth: hci7: command tx timeout [ 156.151444] Bluetooth: hci0: command tx timeout [ 156.215492] Bluetooth: hci2: command tx timeout [ 156.279407] Bluetooth: hci1: command tx timeout [ 156.343485] Bluetooth: hci3: command tx timeout [ 156.343974] Bluetooth: hci6: command tx timeout [ 156.408380] Bluetooth: hci4: command tx timeout [ 156.600457] Bluetooth: hci7: command tx timeout [ 156.600955] Bluetooth: hci5: command tx timeout [ 209.997129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.002359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.004272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.007831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.013156] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.014799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.237020] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.240827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.243144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.250106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.253683] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.256845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.277410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.281444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.286230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.291917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.294585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.299956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.378862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.397393] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.406696] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.409913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.423548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.438902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.440555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.441208] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.444136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.467455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.483572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.495885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.505270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.512748] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.524624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.529433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.530928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.537206] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.541600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.542994] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.548755] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.605666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.621590] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.628096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.658270] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.703903] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.720655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.735113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.736412] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.737287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.088484] Bluetooth: hci0: command tx timeout [ 212.280437] Bluetooth: hci1: command tx timeout [ 212.345367] Bluetooth: hci2: command tx timeout [ 212.471570] Bluetooth: hci3: command tx timeout [ 212.599436] Bluetooth: hci4: command tx timeout [ 212.600184] Bluetooth: hci5: command tx timeout [ 212.795629] Bluetooth: hci6: command tx timeout [ 212.921006] Bluetooth: hci7: command tx timeout [ 214.136423] Bluetooth: hci0: command tx timeout [ 214.327468] Bluetooth: hci1: command tx timeout [ 214.391516] Bluetooth: hci2: command tx timeout [ 214.519795] Bluetooth: hci3: command tx timeout [ 214.647761] Bluetooth: hci4: command tx timeout [ 214.648981] Bluetooth: hci5: command tx timeout [ 214.839523] Bluetooth: hci6: command tx timeout [ 214.967459] Bluetooth: hci7: command tx timeout [ 216.184546] Bluetooth: hci0: command tx timeout [ 216.376363] Bluetooth: hci1: command tx timeout [ 216.440506] Bluetooth: hci2: command tx timeout [ 216.568462] Bluetooth: hci3: command tx timeout [ 216.696433] Bluetooth: hci5: command tx timeout [ 216.696911] Bluetooth: hci4: command tx timeout [ 216.887390] Bluetooth: hci6: command tx timeout [ 217.016538] Bluetooth: hci7: command tx timeout [ 218.232470] Bluetooth: hci0: command tx timeout [ 218.425465] Bluetooth: hci1: command tx timeout [ 218.489616] Bluetooth: hci2: command tx timeout [ 218.615847] Bluetooth: hci3: command tx timeout [ 218.744838] Bluetooth: hci5: command tx timeout [ 218.746233] Bluetooth: hci4: command tx timeout [ 218.936474] Bluetooth: hci6: command tx timeout [ 219.064394] Bluetooth: hci7: command tx timeout [ 272.197023] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.208685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.212226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.217608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.224180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.226264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.288191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.292946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.295701] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.297549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.299600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.303487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.310039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.317533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.319650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.322243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.324429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.327183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.361896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.366723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.374672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.396187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.398153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.410912] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.412623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.416792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.418300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.431488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.442667] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.448604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.475457] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.477584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.480832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.486543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.501145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.511928] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.515231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.521209] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.523144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.534271] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.537631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.554790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.557768] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.559758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.571923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.579244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.584742] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.586818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.296376] Bluetooth: hci0: command tx timeout [ 274.359446] Bluetooth: hci2: command tx timeout [ 274.423424] Bluetooth: hci1: command tx timeout [ 274.487485] Bluetooth: hci3: command tx timeout [ 274.552169] Bluetooth: hci5: command tx timeout [ 274.553852] Bluetooth: hci4: command tx timeout [ 274.679477] Bluetooth: hci7: command tx timeout [ 274.680933] Bluetooth: hci6: command tx timeout [ 276.343511] Bluetooth: hci0: command tx timeout [ 276.407681] Bluetooth: hci2: command tx timeout [ 276.472627] Bluetooth: hci1: command tx timeout [ 276.535527] Bluetooth: hci3: command tx timeout [ 276.599685] Bluetooth: hci4: command tx timeout [ 276.600906] Bluetooth: hci5: command tx timeout [ 276.727455] Bluetooth: hci6: command tx timeout [ 276.728299] Bluetooth: hci7: command tx timeout [ 278.391392] Bluetooth: hci0: command tx timeout [ 278.455566] Bluetooth: hci2: command tx timeout [ 278.519481] Bluetooth: hci1: command tx timeout [ 278.583451] Bluetooth: hci3: command tx timeout [ 278.647481] Bluetooth: hci4: command tx timeout [ 278.647944] Bluetooth: hci5: command tx timeout [ 278.776391] Bluetooth: hci7: command tx timeout [ 278.777014] Bluetooth: hci6: command tx timeout [ 280.439617] Bluetooth: hci0: command tx timeout [ 280.503513] Bluetooth: hci2: command tx timeout [ 280.567438] Bluetooth: hci1: command tx timeout [ 280.631607] Bluetooth: hci3: command tx timeout [ 280.695449] Bluetooth: hci5: command tx timeout [ 280.695893] Bluetooth: hci4: command tx timeout [ 280.823428] Bluetooth: hci6: command tx timeout [ 280.823902] Bluetooth: hci7: command tx timeout [ 335.090005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.092171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.102550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.105873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.107648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.110084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.172936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.185577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.186961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.213925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.216215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.246183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.272207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.282236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.284214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.299930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.305901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.309725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.314377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.316802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.318167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.333250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.336504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.343800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.344891] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.379553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.380665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.383601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.385027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.386766] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.395064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.399184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.406580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.413463] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.414223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.415147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.425195] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.427352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.437642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.459032] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.462568] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.468790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.502924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.533555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.559599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.583674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.618520] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.627921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.143402] Bluetooth: hci0: command tx timeout [ 337.361504] Bluetooth: hci3: command tx timeout [ 337.400488] Bluetooth: hci2: command tx timeout [ 337.425760] Bluetooth: hci1: command tx timeout [ 337.463400] Bluetooth: hci4: command tx timeout [ 337.530387] Bluetooth: hci5: command tx timeout [ 337.531367] Bluetooth: hci6: command tx timeout [ 337.733896] Bluetooth: hci7: command tx timeout [ 339.192896] Bluetooth: hci0: command tx timeout [ 339.383543] Bluetooth: hci3: command tx timeout [ 339.447440] Bluetooth: hci1: command tx timeout [ 339.447464] Bluetooth: hci2: command tx timeout [ 339.511566] Bluetooth: hci4: command tx timeout [ 339.575443] Bluetooth: hci6: command tx timeout [ 339.575523] Bluetooth: hci5: command tx timeout [ 339.768630] Bluetooth: hci7: command tx timeout [ 341.239471] Bluetooth: hci0: command tx timeout [ 341.434398] Bluetooth: hci3: command tx timeout [ 341.498420] Bluetooth: hci2: command tx timeout [ 341.499153] Bluetooth: hci1: command tx timeout [ 341.559386] Bluetooth: hci4: command tx timeout [ 341.623374] Bluetooth: hci6: command tx timeout [ 341.623874] Bluetooth: hci5: command tx timeout [ 341.816435] Bluetooth: hci7: command tx timeout [ 343.287668] Bluetooth: hci0: command tx timeout [ 343.479434] Bluetooth: hci3: command tx timeout [ 343.544437] Bluetooth: hci1: command tx timeout [ 343.544518] Bluetooth: hci2: command tx timeout [ 343.607475] Bluetooth: hci4: command tx timeout [ 343.671381] Bluetooth: hci6: command tx timeout [ 343.671872] Bluetooth: hci5: command tx timeout [ 343.863996] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:43:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888015dd14a0 RCX=00000000000d000c RDX=0000000000000001 RSI=ffffea000039e680 RDI=ffff888008c4f780 RBP=ffff888008c4f780 RSP=ffff888025d177c8 R8 =ffff88800e79a4a0 R9 =00000000000d000c R10=ffffea000039e601 R11=0000000000000001 R12=0000000000000001 R13=ffff888025d17828 R14=ffff88800e79a4a0 R15=ffff88800e79a4a0 RIP=ffffffff81a4903a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd57b991f0 CR3=0000000035b0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000020000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88800ccb8a50 RBP=ffff88800ccb8a50 RSP=ffff88802ea076b8 R8 =0000000000000001 R9 =0000000000020016 R10=0000000000000000 R11=0000000000000003 R12=ffff88800ccb8000 R13=ffffffff85c18d40 R14=0000000000000000 R15=0000000000020000 RIP=ffffffff814fd890 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f571157f540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f86d7f7627c CR3=000000002b918000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000