Warning: Permanently added '[localhost]:12887' (ECDSA) to the list of known hosts. 2025/05/01 05:13:20 fuzzer started 2025/05/01 05:13:21 dialing manager at localhost:43767 syzkaller login: [ 101.011584] cgroup: Unknown subsys name 'net' [ 101.151925] cgroup: Unknown subsys name 'cpuset' [ 101.199835] cgroup: Unknown subsys name 'rlimit' 2025/05/01 05:13:43 syscalls: 203 2025/05/01 05:13:43 code coverage: enabled 2025/05/01 05:13:43 comparison tracing: enabled 2025/05/01 05:13:43 extra coverage: enabled 2025/05/01 05:13:43 setuid sandbox: enabled 2025/05/01 05:13:43 namespace sandbox: enabled 2025/05/01 05:13:43 Android sandbox: enabled 2025/05/01 05:13:43 fault injection: enabled 2025/05/01 05:13:43 leak checking: enabled 2025/05/01 05:13:43 net packet injection: enabled 2025/05/01 05:13:43 net device setup: enabled 2025/05/01 05:13:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/01 05:13:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/01 05:13:43 USB emulation: enabled 2025/05/01 05:13:43 hci packet injection: enabled 2025/05/01 05:13:43 wifi device emulation: enabled 2025/05/01 05:13:43 802.15.4 emulation: enabled 2025/05/01 05:13:43 fetching corpus: 0, signal 0/0 (executing program) 2025/05/01 05:13:44 starting 8 fuzzer processes 05:13:44 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(0x0, 0x9, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000100)={r0, r1+60000000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) pkey_alloc(0x0, 0x2) pkey_free(0xffffffffffffffff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8000) io_pgetevents(0x0, 0x8a6, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x1a8]}, 0x8}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x29, 0x1, 0x9, 0x4, 0x4d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x101, 0x1ff}}) keyctl$clear(0x7, 0xfffffffffffffffb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000480)=0x80, 0x800) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0xc080}, 0x1) io_setup(0x66bc, &(0x7f0000001a80)=0x0) io_pgetevents(r7, 0x1ff, 0x4, &(0x7f0000001ac0)=[{}, {}, {}, {}], &(0x7f0000001b40), &(0x7f0000001bc0)={&(0x7f0000001b80)={[0x1000]}, 0x8}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r5, {r4}}, './file0\x00'}) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000002040)={0x1, 0x1, 0x1b, 0x8, 0xef, &(0x7f0000001c40)}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004940}, 0x1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 05:13:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x8000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0xec24c77cf8fefefa) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x2835190c08b8b01f, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x61}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8044) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c087}, 0x44854) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r5, 0x37, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2048}, 0xc048080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r6, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x20}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), r4) sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x36c, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1a0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52f28bd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42ff7741}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54332d3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x532dfe2c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c814d29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f89a5fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7579f9cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73a8065b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x349cdc59}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe5ce324}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25095503}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42372668}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x718f827f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da6d30e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b2773c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d08b52c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49dd5338}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b3873ad}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71be6982}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fdf7673}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ca78432}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38415563}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f21112e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7be34cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c9f78e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1ac, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75a100ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeee87a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4107337d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134b1d19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffff00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eb98279}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ea6deaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x674442b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x329d062c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x470dfbe2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b501ce1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23ca950a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34ade509}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17ecdd85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ed627c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dedda6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30e6e470}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xebc7b35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc80987d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cefd9b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21068a79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74eb01cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f0f7cbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x234c7b46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b35058}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 05:13:44 executing program 2: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x4, 0x17e1, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040054}, 0x40004) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x88c) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x40040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0283}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xe03d1407106ce089}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r7, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004082}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r9, 0x424, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 123.936787] audit: type=1400 audit(1746076424.407:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:13:44 executing program 3: ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x0, [{{}, 0x7}, {{}, 0x8}, {{}, 0x1}]}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2cc182, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r1, 0x540d) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/147, 0x93}, {&(0x7f0000001240)=""/151, 0x97}], 0x3, &(0x7f0000001340)=""/92, 0x5c}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x400880, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000001440)={0xfffff000, 0x101}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33856be5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27a4ca64}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1186a44b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x666e22df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3958d8bc}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x200480c4) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000015c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r3 = syz_open_dev$vcsa(&(0x7f0000001640), 0x3f, 0x20180) ioctl$RTC_UIE_ON(r3, 0x7003) openat$procfs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/mdstat\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000016c0)) socket$inet6(0xa, 0xa, 0xfffffffa) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001a80)={'syztnl1\x00', &(0x7f0000001a00)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x6, 0x17c, 0x34, @private1, @local, 0x1, 0x20, 0x8, 0x5893}}) 05:13:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000020) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8004000) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4090) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = socket(0x26, 0x800, 0x9) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x46000000}, 0x54) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000700)=0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000740)={0xfffffff9, 0x7ff, 0x2, 0x100, 0x40, "8c35478f93b7bf777cb0b056a1044079bc719e", 0x546}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000780)) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x80) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000940)) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000009c0)={0x0, @llc={0x1a, 0x206, 0x2, 0xf9, 0x3, 0x4, @multicast}, @l2tp={0x2, 0x0, @local, 0x1}, @l2tp={0x2, 0x0, @multicast1}, 0xfffe, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)='nr0\x00', 0x0, 0xf6, 0x1}) sendto$packet(0xffffffffffffffff, &(0x7f0000000a80)="9cc98a29b689576887f45a1117a09079d28bfb12e6be1bb35f07b3a02e47028b035648860c32504f41e679d3da1a88e76f7df46d30ce8555359f1a5673ecc670cc43eb46f965bc24347b5fdc71dad8de6f96bea7d69cd1e3822d76c422c9078cd6ad8cddf763a9043a7de10725931dba668c79c97855fc6e66227b788e3620f6442c7f76", 0x84, 0x8050, &(0x7f0000000b40)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 05:13:44 executing program 5: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050000}, 0x20040081) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}}, 0x88050) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x71}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2078ed724b6b9c7f}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x5, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ac0)={'wpan4\x00'}) 05:13:44 executing program 6: r0 = socket(0x23, 0xa, 0x37a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001680)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000016c0)={'wg2\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000001700)=0x849, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001740), 0x400003, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001780), 0x10440, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000017c0)={0x6e, 0x8, 0x6, 0x0, 0x0, [{{r1}, 0x80}, {{r0}, 0x7}, {{r2}, 0x81}, {{r3}, 0x4}, {{r0}, 0x100000000}, {{r0}, 0x4}]}) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r4, {r1}}, './file0\x00'}) r5 = syz_open_dev$vcsa(&(0x7f0000001900), 0x2, 0x82000) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000001940)) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x138d) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000001980)={0x0, 0xf7d7, 0x5, 0x81, 0x7, "d237266f4f2608cb3ce1654ac60de6b0fa1e13", 0x5, 0x3f}) accept4$packet(0xffffffffffffffff, &(0x7f0000004c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004c80)=0x14, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004d40)={'ip_vti0\x00', &(0x7f0000004cc0)={'gre0\x00', r7, 0x7800, 0x8000, 0x0, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x64, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @remote, {[@noop, @generic={0x7, 0x2}, @generic={0x7, 0xf, "bde1455603e0e78693d7310d42"}, @noop, @noop]}}}}}) ioctl$KIOCSOUND(r6, 0x4b2f, 0xb49) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000004d80)=0x3) 05:13:44 executing program 7: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/137) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000100)=""/190) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x1, 0x1, 0x13, 0x1d, 0x10a, &(0x7f00000001c0)}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffffa) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000640)) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000680)={0xffff, 0x8}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000006c0)={0x0, @aes256, 0x0, @desc1}) ioctl$KDSKBLED(r0, 0x4b65, 0x4) ioctl$RTC_WIE_ON(r1, 0x700f) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000700)={0x0, @aes128, 0x0, @desc3}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000780)) [ 125.222244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.225845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.232293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.243154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.253059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.332239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.336237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.340125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.347487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.353142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.422284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.424910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.430036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.437141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.452325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.456577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.460277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.471016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.480503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.492834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.496372] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.498550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.509084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.514535] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.554261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.575003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.603816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.652936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.689077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.690904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.704213] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.707274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.707427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 125.726393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 125.733895] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.763493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.765478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 125.775129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 125.781938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.796364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.297366] Bluetooth: hci0: command tx timeout [ 127.425115] Bluetooth: hci1: command tx timeout [ 127.616885] Bluetooth: hci4: command tx timeout [ 127.617172] Bluetooth: hci3: command tx timeout [ 127.680739] Bluetooth: hci2: command tx timeout [ 127.807781] Bluetooth: hci6: command tx timeout [ 127.807942] Bluetooth: hci5: command tx timeout [ 127.872755] Bluetooth: hci7: command tx timeout [ 129.344749] Bluetooth: hci0: command tx timeout [ 129.472654] Bluetooth: hci1: command tx timeout [ 129.664333] Bluetooth: hci3: command tx timeout [ 129.665696] Bluetooth: hci4: command tx timeout [ 129.728698] Bluetooth: hci2: command tx timeout [ 129.855716] Bluetooth: hci6: command tx timeout [ 129.856079] Bluetooth: hci5: command tx timeout [ 129.920666] Bluetooth: hci7: command tx timeout [ 131.391995] Bluetooth: hci0: command tx timeout [ 131.519803] Bluetooth: hci1: command tx timeout [ 131.711742] Bluetooth: hci4: command tx timeout [ 131.712242] Bluetooth: hci3: command tx timeout [ 131.776880] Bluetooth: hci2: command tx timeout [ 131.904718] Bluetooth: hci6: command tx timeout [ 131.904750] Bluetooth: hci5: command tx timeout [ 131.967984] Bluetooth: hci7: command tx timeout [ 133.440665] Bluetooth: hci0: command tx timeout [ 133.567703] Bluetooth: hci1: command tx timeout [ 133.759720] Bluetooth: hci3: command tx timeout [ 133.760196] Bluetooth: hci4: command tx timeout [ 133.825070] Bluetooth: hci2: command tx timeout [ 133.952234] Bluetooth: hci5: command tx timeout [ 133.952252] Bluetooth: hci6: command tx timeout [ 134.016926] Bluetooth: hci7: command tx timeout [ 188.128944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.131959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.136284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.138329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.141560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.144470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.152543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.155524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.160825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.165843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.265025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.274481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.275664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.279161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.280940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.291366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.299408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.303134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.317298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.320163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.321846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.322329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.325943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.329214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.332166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.334282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.336371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.342560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.350728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.351737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.352704] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.353915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.357581] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.401670] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.406101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.456761] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.458211] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.468448] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.481542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.499988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.208012] Bluetooth: hci1: command tx timeout [ 190.209058] Bluetooth: hci0: command tx timeout [ 190.399814] Bluetooth: hci5: command tx timeout [ 190.463704] Bluetooth: hci4: command tx timeout [ 190.656698] Bluetooth: hci3: command tx timeout [ 190.719752] Bluetooth: hci7: command tx timeout [ 190.720531] Bluetooth: hci2: command tx timeout [ 190.720569] Bluetooth: hci6: command tx timeout [ 192.256044] Bluetooth: hci0: command tx timeout [ 192.256146] Bluetooth: hci1: command tx timeout [ 192.448753] Bluetooth: hci5: command tx timeout [ 192.512237] Bluetooth: hci4: command tx timeout [ 192.703750] Bluetooth: hci3: command tx timeout [ 192.767922] Bluetooth: hci6: command tx timeout [ 192.767978] Bluetooth: hci7: command tx timeout [ 192.768387] Bluetooth: hci2: command tx timeout [ 194.304204] Bluetooth: hci0: command tx timeout [ 194.304872] Bluetooth: hci1: command tx timeout [ 194.495737] Bluetooth: hci5: command tx timeout [ 194.559900] Bluetooth: hci4: command tx timeout [ 194.751730] Bluetooth: hci3: command tx timeout [ 194.815917] Bluetooth: hci2: command tx timeout [ 194.816396] Bluetooth: hci6: command tx timeout [ 194.816935] Bluetooth: hci7: command tx timeout [ 196.351925] Bluetooth: hci0: command tx timeout [ 196.352901] Bluetooth: hci1: command tx timeout [ 196.543693] Bluetooth: hci5: command tx timeout [ 196.607943] Bluetooth: hci4: command tx timeout [ 196.801571] Bluetooth: hci3: command tx timeout [ 196.863746] Bluetooth: hci7: command tx timeout [ 196.864224] Bluetooth: hci6: command tx timeout [ 196.864701] Bluetooth: hci2: command tx timeout [ 248.101376] syz-executor.6 (2778) used greatest stack depth: 24392 bytes left [ 250.018463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.022880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.026191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.034945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.042159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.165174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.169574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.177441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.188321] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.193577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.251291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.254249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.265138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.277169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.291111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.323059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.326276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.330450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.351167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.355063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.408876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.423730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.446732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.449960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.452268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.456218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.459760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.464201] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.475041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.495187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.642213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.644230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.676496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.677440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.721112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.729086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.748144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.773025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.796367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.830875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.095860] Bluetooth: hci0: command tx timeout [ 252.287725] Bluetooth: hci1: command tx timeout [ 252.351724] Bluetooth: hci2: command tx timeout [ 252.417213] Bluetooth: hci3: command tx timeout [ 252.607704] Bluetooth: hci5: command tx timeout [ 252.608740] Bluetooth: hci4: command tx timeout [ 252.863793] Bluetooth: hci7: command tx timeout [ 252.928151] Bluetooth: hci6: command tx timeout [ 254.145008] Bluetooth: hci0: command tx timeout [ 254.338783] Bluetooth: hci1: command tx timeout [ 254.399785] Bluetooth: hci2: command tx timeout [ 254.464691] Bluetooth: hci3: command tx timeout [ 254.656718] Bluetooth: hci4: command tx timeout [ 254.657212] Bluetooth: hci5: command tx timeout [ 254.913033] Bluetooth: hci7: command tx timeout [ 254.977367] Bluetooth: hci6: command tx timeout [ 256.191706] Bluetooth: hci0: command tx timeout [ 256.385703] Bluetooth: hci1: command tx timeout [ 256.447695] Bluetooth: hci2: command tx timeout [ 256.511999] Bluetooth: hci3: command tx timeout [ 256.703757] Bluetooth: hci5: command tx timeout [ 256.704220] Bluetooth: hci4: command tx timeout [ 256.961635] Bluetooth: hci7: command tx timeout [ 257.024729] Bluetooth: hci6: command tx timeout [ 258.239975] Bluetooth: hci0: command tx timeout [ 258.433039] Bluetooth: hci1: command tx timeout [ 258.495890] Bluetooth: hci2: command tx timeout [ 258.559785] Bluetooth: hci3: command tx timeout [ 258.753659] Bluetooth: hci4: command tx timeout [ 258.754158] Bluetooth: hci5: command tx timeout [ 259.007681] Bluetooth: hci7: command tx timeout [ 259.071694] Bluetooth: hci6: command tx timeout [ 312.931090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.934553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.940569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.948483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.956476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.959254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.985893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.988466] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.998126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.002313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.069511] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.075149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.080278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.093120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.101840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.300056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.309557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.317907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.322175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.343461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.344997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.350237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.351119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.355180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.365582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.375908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.384098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.391175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.418098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.490156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.534998] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.637233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.637262] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.642315] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.676456] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.710957] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.717335] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.730112] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.732253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.762096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.008814] Bluetooth: hci0: command tx timeout [ 315.071736] Bluetooth: hci1: command tx timeout [ 315.199691] Bluetooth: hci2: command tx timeout [ 315.455830] Bluetooth: hci3: command tx timeout [ 315.583719] Bluetooth: hci4: command tx timeout [ 315.584498] Bluetooth: hci5: command tx timeout [ 315.839858] Bluetooth: hci7: command tx timeout [ 315.903688] Bluetooth: hci6: command tx timeout [ 317.055748] Bluetooth: hci0: command tx timeout [ 317.119714] Bluetooth: hci1: command tx timeout [ 317.247957] Bluetooth: hci2: command tx timeout [ 317.505768] Bluetooth: hci3: command tx timeout [ 317.631720] Bluetooth: hci5: command tx timeout [ 317.632213] Bluetooth: hci4: command tx timeout [ 317.887877] Bluetooth: hci7: command tx timeout [ 317.953685] Bluetooth: hci6: command tx timeout [ 319.103870] Bluetooth: hci0: command tx timeout [ 319.167907] Bluetooth: hci1: command tx timeout [ 319.295671] Bluetooth: hci2: command tx timeout [ 319.551891] Bluetooth: hci3: command tx timeout [ 319.679758] Bluetooth: hci4: command tx timeout [ 319.680213] Bluetooth: hci5: command tx timeout [ 319.936972] Bluetooth: hci7: command tx timeout [ 319.999833] Bluetooth: hci6: command tx timeout [ 321.151873] Bluetooth: hci0: command tx timeout [ 321.217639] Bluetooth: hci1: command tx timeout [ 321.345796] Bluetooth: hci2: command tx timeout [ 321.599793] Bluetooth: hci3: command tx timeout [ 321.727720] Bluetooth: hci5: command tx timeout [ 321.728169] Bluetooth: hci4: command tx timeout [ 321.983711] Bluetooth: hci7: command tx timeout [ 322.047704] Bluetooth: hci6: command tx timeout [ 375.197349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.203939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.207647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.218966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.225495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.376975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.382031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.389209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.397046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.409074] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.489571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.494176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.502997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.518671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.530350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.659469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.683071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.697154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.702219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.707001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.708960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.721138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.724087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.734227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.740966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.765746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.795145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.829109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.837270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.867158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.881020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.888078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.891879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.898063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.915370] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.915528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.931991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.956670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 376.007408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.036052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.280717] Bluetooth: hci0: command tx timeout [ 377.472662] Bluetooth: hci1: command tx timeout [ 377.599804] Bluetooth: hci2: command tx timeout [ 377.856259] Bluetooth: hci4: command tx timeout [ 377.919688] Bluetooth: hci3: command tx timeout [ 377.983975] Bluetooth: hci6: command tx timeout [ 378.047699] Bluetooth: hci5: command tx timeout [ 378.175753] Bluetooth: hci7: command tx timeout [ 379.329819] Bluetooth: hci0: command tx timeout [ 379.519705] Bluetooth: hci1: command tx timeout [ 379.649716] Bluetooth: hci2: command tx timeout [ 379.905785] Bluetooth: hci4: command tx timeout [ 379.968674] Bluetooth: hci3: command tx timeout [ 380.031790] Bluetooth: hci6: command tx timeout [ 380.096676] Bluetooth: hci5: command tx timeout [ 380.224715] Bluetooth: hci7: command tx timeout [ 381.375717] Bluetooth: hci0: command tx timeout [ 381.569476] Bluetooth: hci1: command tx timeout [ 381.696843] Bluetooth: hci2: command tx timeout [ 381.954099] Bluetooth: hci4: command tx timeout [ 382.015684] Bluetooth: hci3: command tx timeout [ 382.080807] Bluetooth: hci6: command tx timeout [ 382.144822] Bluetooth: hci5: command tx timeout [ 382.271713] Bluetooth: hci7: command tx timeout [ 383.423716] Bluetooth: hci0: command tx timeout [ 383.616088] Bluetooth: hci1: command tx timeout [ 383.743825] Bluetooth: hci2: command tx timeout [ 383.999934] Bluetooth: hci4: command tx timeout [ 384.063732] Bluetooth: hci3: command tx timeout [ 384.129981] Bluetooth: hci6: command tx timeout [ 384.191726] Bluetooth: hci5: command tx timeout [ 384.319691] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:18:49 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888035477f30 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81350bc2 RDI=ffff88806ce31850 RBP=ffffffff85c1bac0 RSP=ffff888035477210 R8 =0000000000000001 R9 =ffff888035477308 R10=000000000003b145 R11=000000000000ac83 R12=ffffffff81350bc2 R13=ffff888035477310 R14=ffff888035477f00 R15=ffff8880354772c8 RIP=ffffffff81518549 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5647000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f00e6f196f4 CR3=00000000276fd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ffffffffffffffffffffffffffff00 XMM02=ffffffffffffffff00ffff000000ff00 XMM03=ffffffffffffffff00ffff000000ff00 XMM04=ffffffffffff00000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888015a97a40 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888026c97a01 RSI=ffff888026c97a38 RDI=ffff888026c97a38 RBP=ffff888026c97668 RSP=ffff888026c975a0 R8 =0000000000000001 R9 =ffff888026c97650 R10=000000000003b145 R11=00000000000265ad R12=ffff888026c97670 R13=ffff888026c97658 R14=ffff888026c97a38 R15=ffff888026c97610 RIP=ffffffff81351f58 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9dc941a540 00000000 00000000 GS =0000 ffff8880e5747000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffea08e3f48 CR3=000000002a505000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000