Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:6423' (ECDSA) to the list of known hosts.
2025/06/02 20:20:55 fuzzer started
2025/06/02 20:20:56 dialing manager at localhost:34361
syzkaller login: [   95.522074] cgroup: Unknown subsys name 'net'
[   95.674303] cgroup: Unknown subsys name 'cpuset'
[   95.732634] cgroup: Unknown subsys name 'rlimit'
2025/06/02 20:21:24 syscalls: 209
2025/06/02 20:21:24 code coverage: enabled
2025/06/02 20:21:24 comparison tracing: enabled
2025/06/02 20:21:24 extra coverage: enabled
2025/06/02 20:21:24 setuid sandbox: enabled
2025/06/02 20:21:24 namespace sandbox: enabled
2025/06/02 20:21:24 Android sandbox: enabled
2025/06/02 20:21:24 fault injection: enabled
2025/06/02 20:21:24 leak checking: enabled
2025/06/02 20:21:24 net packet injection: enabled
2025/06/02 20:21:24 net device setup: enabled
2025/06/02 20:21:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/02 20:21:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/02 20:21:24 USB emulation: enabled
2025/06/02 20:21:24 hci packet injection: enabled
2025/06/02 20:21:24 wifi device emulation: enabled
2025/06/02 20:21:24 802.15.4 emulation: enabled
2025/06/02 20:21:24 fetching corpus: 0, signal 0/0 (executing program)
2025/06/02 20:21:26 starting 8 fuzzer processes
20:21:26 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x4000010)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x48dc0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x320, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x200088d0)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder-control\x00', 0x800, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000003c0)=<r3=>0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000400)={"93eda2d839235b26f7817e9b381c00b3", r3, r3, {0xfff, 0xb547}, {0x15, 0xeee}, 0x3, [0x1f, 0x7fff, 0x7, 0xffffffffffffff01, 0x7f, 0x0, 0x81, 0xc67f, 0x6, 0x3, 0x8, 0x30000000, 0x4, 0x9, 0x9, 0x6]})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x404202, 0x1c1}, 0x18)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r5, 0x410, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000700), 0x101000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000780))
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000007c0)={0x568c4f5a, 0xc6, "01e9430bc236b0076709a393c83035b8825d90e65a122166eac7e62977f1c280616d57e8b91b7c8c728b42c48056269abfb95340fcd2b67bcf36f35289dac8cbf2dfd57449f1f57480ffaa84f51a73c074dca984bc2d44451c1d851c8cdd59dc6d00b0a8ed8c5e240cf7dfe757266fe2f4280e4385cbd36d90d5d3f2c74031c0e134ab534a402485eb4bd631799fcc8a045f8d42f4e813946b8e64e7ce420790d2977036d711e90ed3389ce881a1ceba3507478e40ca4a4a91f17ca04fa9350bc861043b67a4"})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000008c0)=0x1)

20:21:26 executing program 1:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c804}, 0x20000000)
getrusage(0x1, &(0x7f0000000180))
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10840600}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008090}, 0x815)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x20000054)
getrusage(0x1, &(0x7f0000000500))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, 0x0, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000810)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x7c83ef2b4cce1bf5}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x30000840)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r5)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xf6d8e800aad1fb5a}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), r4)
sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r6, 0xf10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x60}, 0x1, 0x0, 0x0, 0x404c897}, 0x89c)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4090)

20:21:26 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1d, 0x20800)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x5, 0x3, 0x7})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2f, 0x8, 0x40, 0xfffffffd, 0x4, @mcast1, @private0, 0x40, 0x700, 0x401, 0x2}})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0))
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000240)={0x7f, 0x80, 0x8})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000500)={0x5, 0x101})
ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000540))
sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008054)
sendmsg$AUDIT_SET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x3e9, 0xa09, 0x70bd25, 0x25dfdbfd, {0x40, 0x0, 0x2, 0xffffffffffffffff, 0x6, 0xfffffffa, 0x4, 0x7f, 0x0, 0x8001}, ["", "", "", "", "", "", "", ""]}, 0x38}}, 0x20004010)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

[  125.257076] audit: type=1400 audit(1748895686.408:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:21:26 executing program 3:
write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="5c2402ee6d640e9f1c14e36c2aa9c09cca5d99d4719ca807f17d558077c1e5590385143b72fe608139049119bc848c32b67e9f0d82352071754587b67908bf800150c502f546f1233b6e58a3", 0x4c)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004800)
ioprio_get$pid(0x0, 0x0)
syz_extract_tcp_res(&(0x7f00000003c0), 0x80000000, 0x40)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1d}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xef}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40810}, 0x2000000)
inotify_init1(0x80800)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x453, 0x200, 0x70bd29, 0x25dfdbfd, "f2271d45309af7a93b1cc4b598a60f0aa0f74666758496e700e3d295ff1c1206e180a4846cfc8770becbd263", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4011)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c0}, 0x5c1a05c76ea973c)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, 0x0, 0x218, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x70}}, 0x84)

20:21:26 executing program 5:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0x2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$FIONCLEX(r1, 0x5450)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000140)="6da20c8cce8792f218efd1624ac7d46ed7ea9ddb08ec378d98ef7396b4f00b8480c5d2237741509b067003fd0141b531ba7482d75e06b1cf3d")
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000180)="784be9c15322178ba314a0b2f5f3629da891d98819e1e89eadd8636b47cdec6d4275e65c316e080e09f3e4791d25e9a0ddb5633576066af4cbc5ba709b7ffab2f455d25e9bbc22453d57197c9f4b698431dbbe29f6e650f7f1ef336ff5c088")
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
read$hidraw(r4, &(0x7f0000000240)=""/166, 0xa6)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000300), 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000340)={"06383953bb02289dc85b417038b8421f", 0x0, 0x0, {0x2, 0x6d}, {0x25c, 0x747}, 0x3, [0x4, 0x3, 0x20, 0x2, 0x9, 0x7, 0x100, 0x7, 0x400, 0x3, 0x9, 0x5, 0x12, 0x6, 0x609b3184, 0x4]})
write$hidraw(r0, &(0x7f0000000440)="7e0ab7d1b4900059f11873bdb7505884460b3248eb42b103b58cf5b61d508c707d89d7d748db9b11c17868c0c015898de32130f572b2520188eca13d65c96e0de897009ff0569d848d77593eec09b53ae23b86bbf58b6831bdfc74679edea6dfd9e7442b5833f590e08b2fa140ae01646973d4425b748602", 0x78)
pipe2(&(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$hidraw(r6, &(0x7f0000000500)="fc1ab12acaf3ed1f8233fe5d687f8353159974f9b2701cdac7aff936a4354ca142e397649ac81382", 0x28)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_open_dev$hidraw(&(0x7f0000000540), 0xd414, 0x101000)
ioctl$HIDIOCGRDESCSIZE(r7, 0x80044801, &(0x7f0000000580))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x700, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x200400c1)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000700)={0x21, "d84ee2f64d1e3cac12b5c92b0c56a4e3786ad4679f0816e42281eca452188f84a1"})

20:21:26 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x40000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4081)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5}, [@CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4094}, 0x4000011)
r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0xd04, 0x80000)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r1)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x16, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20000085)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6018df97efb3"}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff0000}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x24000015)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x83}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0c07699118ba"}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x884)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, 'Z\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x24004004)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x48080)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x800)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000a40))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r9)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80)

20:21:26 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x400c800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0xe3ca6e03602712ce, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000800)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x1)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa0, 0x453, 0x200, 0x70bd28, 0x25dfdbfb, "234b93c1bcbe366938a992427c0c9c978ead22e8589e8466076c652e592846c9217a933407b9c4778c02587ede14c6773b9214297008417a63db36536217a259f10c66d07262ef1b27e44d6401df170968d85ace28ac2fcabe4d6461613fd859b08f24916b76504931761f427a434055fa5013d221574d3f9f0fc23b0851c4e4dc2a84c7f4318f331ea7d2173380", ["", "", "", "", "", "", "", "", "", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x800, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48040}, 0xc1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x8000)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4050050)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, 0x453, 0x2, 0x70bd2a, 0x25dfdbfb, "6eb0aed84fa564ee0bbb4a2d0027f50101e5286c125290e31fad585605c08f18538846906b2089854b5bdc6ac0f106ee7bc1927b21f10778b14b1cb3dfdb3c0c260ddce0dc85ec25452bbe56abf7c78075a53fb540633bc500d040bc33f74c4917d96f2bb45745298aee", ["", "", "", "", ""]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20048841)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xdde8}, @CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

20:21:26 executing program 7:
r0 = getpgrp(0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2b}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x81, 0x3]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x60}}, 0x20000050)
pipe2(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x301, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x4880)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x3c4800, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x500, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008040)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000006}, 0x80)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48885)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000800)={0xffffffff, 0x68})
r8 = syz_open_dev$mouse(&(0x7f0000000840), 0x4, 0x40000)
ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000880)={'custom0\x00'})
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000009c0))
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4001)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r9, 0x515, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000)

[  126.675990] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.681193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.683724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.686113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.688227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.696073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.698830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.703037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.717053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.724354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.730911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.737837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.740647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.755948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.759267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.813145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.824870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.829628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.849830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.855115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.859189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.864967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.873919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.893912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.897994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.952302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.963692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.965821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.976974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.981883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.986256] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.991889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.005396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.014881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.051682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.052307] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.059296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.070688] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.075201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.078295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.745959] Bluetooth: hci1: command tx timeout
[  128.809915] Bluetooth: hci2: command tx timeout
[  128.810656] Bluetooth: hci0: command tx timeout
[  128.937487] Bluetooth: hci3: command tx timeout
[  129.001455] Bluetooth: hci4: command tx timeout
[  129.066046] Bluetooth: hci5: command tx timeout
[  129.192736] Bluetooth: hci6: command tx timeout
[  129.193327] Bluetooth: hci7: command tx timeout
[  130.793690] Bluetooth: hci1: command tx timeout
[  130.857464] Bluetooth: hci2: command tx timeout
[  130.857926] Bluetooth: hci0: command tx timeout
[  130.985457] Bluetooth: hci3: command tx timeout
[  131.051426] Bluetooth: hci4: command tx timeout
[  131.113743] Bluetooth: hci5: command tx timeout
[  131.241764] Bluetooth: hci7: command tx timeout
[  131.242220] Bluetooth: hci6: command tx timeout
[  132.842214] Bluetooth: hci1: command tx timeout
[  132.904663] Bluetooth: hci2: command tx timeout
[  132.905107] Bluetooth: hci0: command tx timeout
[  133.032521] Bluetooth: hci3: command tx timeout
[  133.096587] Bluetooth: hci4: command tx timeout
[  133.160854] Bluetooth: hci5: command tx timeout
[  133.290599] Bluetooth: hci6: command tx timeout
[  133.291037] Bluetooth: hci7: command tx timeout
[  134.888450] Bluetooth: hci1: command tx timeout
[  134.954683] Bluetooth: hci0: command tx timeout
[  134.955120] Bluetooth: hci2: command tx timeout
[  135.080429] Bluetooth: hci3: command tx timeout
[  135.145477] Bluetooth: hci4: command tx timeout
[  135.210446] Bluetooth: hci5: command tx timeout
[  135.336535] Bluetooth: hci7: command tx timeout
[  135.336973] Bluetooth: hci6: command tx timeout
[  188.990250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.994987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.997818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.017441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.021136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.119270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.126983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.130300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.142332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.150906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.179774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.192133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.197026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.211852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.218194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.252844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.255850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.257730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.262676] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.280147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.343325] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.347964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.352753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.371875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.381941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.406848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.417521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.428564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.448720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.449214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.459629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.494807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.496949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.527079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.550643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.652148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.671865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.691519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.695722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.732803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.080756] Bluetooth: hci0: command tx timeout
[  191.208493] Bluetooth: hci1: command tx timeout
[  191.272449] Bluetooth: hci2: command tx timeout
[  191.336543] Bluetooth: hci3: command tx timeout
[  191.528452] Bluetooth: hci4: command tx timeout
[  191.656465] Bluetooth: hci6: command tx timeout
[  191.784657] Bluetooth: hci7: command tx timeout
[  191.784940] Bluetooth: hci5: command tx timeout
[  193.128885] Bluetooth: hci0: command tx timeout
[  193.256459] Bluetooth: hci1: command tx timeout
[  193.320803] Bluetooth: hci2: command tx timeout
[  193.384495] Bluetooth: hci3: command tx timeout
[  193.576524] Bluetooth: hci4: command tx timeout
[  193.705432] Bluetooth: hci6: command tx timeout
[  193.833431] Bluetooth: hci7: command tx timeout
[  193.833963] Bluetooth: hci5: command tx timeout
[  195.176732] Bluetooth: hci0: command tx timeout
[  195.304605] Bluetooth: hci1: command tx timeout
[  195.370652] Bluetooth: hci2: command tx timeout
[  195.434386] Bluetooth: hci3: command tx timeout
[  195.624445] Bluetooth: hci4: command tx timeout
[  195.754383] Bluetooth: hci6: command tx timeout
[  195.880514] Bluetooth: hci5: command tx timeout
[  195.880549] Bluetooth: hci7: command tx timeout
[  197.224633] Bluetooth: hci0: command tx timeout
[  197.353645] Bluetooth: hci1: command tx timeout
[  197.417454] Bluetooth: hci2: command tx timeout
[  197.481494] Bluetooth: hci3: command tx timeout
[  197.674401] Bluetooth: hci4: command tx timeout
[  197.801624] Bluetooth: hci6: command tx timeout
[  197.928740] Bluetooth: hci7: command tx timeout
[  197.931406] Bluetooth: hci5: command tx timeout
[  251.263920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.270302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.277459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.289772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.299065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.394603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.399977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.404904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.427169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.445840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.492823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.499000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.504921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.535655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.557154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.615249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.624987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.638042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.698494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.720998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.726425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.745567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.748172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.756906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.774490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.778078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.783041] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.788659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.790865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.795001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.796765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.799215] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.800081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.801868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.823658] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.823714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.850879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.860834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.880078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.914974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.354137] Bluetooth: hci0: command tx timeout
[  253.480442] Bluetooth: hci1: command tx timeout
[  253.672663] Bluetooth: hci2: command tx timeout
[  253.865451] Bluetooth: hci4: command tx timeout
[  253.865488] Bluetooth: hci3: command tx timeout
[  253.992483] Bluetooth: hci7: command tx timeout
[  254.056539] Bluetooth: hci5: command tx timeout
[  254.056662] Bluetooth: hci6: command tx timeout
[  255.400976] Bluetooth: hci0: command tx timeout
[  255.528602] Bluetooth: hci1: command tx timeout
[  255.721097] Bluetooth: hci2: command tx timeout
[  255.912501] Bluetooth: hci4: command tx timeout
[  255.914588] Bluetooth: hci3: command tx timeout
[  256.043406] Bluetooth: hci7: command tx timeout
[  256.104473] Bluetooth: hci5: command tx timeout
[  256.105189] Bluetooth: hci6: command tx timeout
[  257.448861] Bluetooth: hci0: command tx timeout
[  257.576581] Bluetooth: hci1: command tx timeout
[  257.768794] Bluetooth: hci2: command tx timeout
[  257.960477] Bluetooth: hci3: command tx timeout
[  257.960975] Bluetooth: hci4: command tx timeout
[  258.088452] Bluetooth: hci7: command tx timeout
[  258.152646] Bluetooth: hci6: command tx timeout
[  258.152888] Bluetooth: hci5: command tx timeout
[  259.497993] Bluetooth: hci0: command tx timeout
[  259.624452] Bluetooth: hci1: command tx timeout
[  259.817398] Bluetooth: hci2: command tx timeout
[  260.008599] Bluetooth: hci4: command tx timeout
[  260.009119] Bluetooth: hci3: command tx timeout
[  260.137643] Bluetooth: hci7: command tx timeout
[  260.202423] Bluetooth: hci5: command tx timeout
[  260.202864] Bluetooth: hci6: command tx timeout
[  313.468590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.479207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.483632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.493044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.504837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.666770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.675206] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.679136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.687411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.694947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.714886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.732200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.746321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.770716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.775004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.859891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.883640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.893090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.926655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.937921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.034548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.057441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.077190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.113695] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.117806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.120041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.134754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.135025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.150609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.150687] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.188551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.205069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.207179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.220951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.223672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.244074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.251948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.258937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.259096] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.267777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.561457] Bluetooth: hci0: command tx timeout
[  315.753979] Bluetooth: hci1: command tx timeout
[  315.816588] Bluetooth: hci2: command tx timeout
[  316.009454] Bluetooth: hci3: command tx timeout
[  316.329477] Bluetooth: hci4: command tx timeout
[  316.330874] Bluetooth: hci6: command tx timeout
[  316.332098] Bluetooth: hci5: command tx timeout
[  316.456532] Bluetooth: hci7: command tx timeout
[  317.609558] Bluetooth: hci0: command tx timeout
[  317.800456] Bluetooth: hci1: command tx timeout
[  317.864964] Bluetooth: hci2: command tx timeout
[  318.056502] Bluetooth: hci3: command tx timeout
[  318.376652] Bluetooth: hci6: command tx timeout
[  318.376685] Bluetooth: hci5: command tx timeout
[  318.377492] Bluetooth: hci4: command tx timeout
[  318.504524] Bluetooth: hci7: command tx timeout
[  319.657241] Bluetooth: hci0: command tx timeout
[  319.848743] Bluetooth: hci1: command tx timeout
[  319.913440] Bluetooth: hci2: command tx timeout
[  320.105209] Bluetooth: hci3: command tx timeout
[  320.424553] Bluetooth: hci5: command tx timeout
[  320.426283] Bluetooth: hci6: command tx timeout
[  320.426403] Bluetooth: hci4: command tx timeout
[  320.552724] Bluetooth: hci7: command tx timeout
[  321.704710] Bluetooth: hci0: command tx timeout
[  321.897872] Bluetooth: hci1: command tx timeout
[  321.961423] Bluetooth: hci2: command tx timeout
[  322.156018] Bluetooth: hci3: command tx timeout
[  322.472556] Bluetooth: hci6: command tx timeout
[  322.472628] Bluetooth: hci5: command tx timeout
[  322.473498] Bluetooth: hci4: command tx timeout
[  322.600484] Bluetooth: hci7: command tx timeout
[  376.125740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.130052] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.135813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.149068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.156254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.207908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.210413] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.213901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.215804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.221537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.221712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.238927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.240726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.247268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.264850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.266498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.272949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.277383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.299810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.314893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.345874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.350577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.354187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.358937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.367091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.370141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.378302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.384971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.386998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.393042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.409244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.412955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.435977] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.464093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.467788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.559786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.573160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.587117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.601885] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.610918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.216577] Bluetooth: hci0: command tx timeout
[  378.345495] Bluetooth: hci2: command tx timeout
[  378.346256] Bluetooth: hci1: command tx timeout
[  378.472658] Bluetooth: hci3: command tx timeout
[  378.536683] Bluetooth: hci4: command tx timeout
[  378.601469] Bluetooth: hci6: command tx timeout
[  378.602223] Bluetooth: hci5: command tx timeout
[  378.664753] Bluetooth: hci7: command tx timeout
[  380.264683] Bluetooth: hci0: command tx timeout
[  380.392471] Bluetooth: hci2: command tx timeout
[  380.392923] Bluetooth: hci1: command tx timeout
[  380.520439] Bluetooth: hci3: command tx timeout
[  380.584771] Bluetooth: hci4: command tx timeout
[  380.648654] Bluetooth: hci5: command tx timeout
[  380.649163] Bluetooth: hci6: command tx timeout
[  380.712449] Bluetooth: hci7: command tx timeout
[  382.312494] Bluetooth: hci0: command tx timeout
[  382.440701] Bluetooth: hci2: command tx timeout
[  382.441169] Bluetooth: hci1: command tx timeout
[  382.568590] Bluetooth: hci3: command tx timeout
[  382.632574] Bluetooth: hci4: command tx timeout
[  382.696574] Bluetooth: hci5: command tx timeout
[  382.697029] Bluetooth: hci6: command tx timeout
[  382.760539] Bluetooth: hci7: command tx timeout
[  384.361560] Bluetooth: hci0: command tx timeout
[  384.488476] Bluetooth: hci1: command tx timeout
[  384.488952] Bluetooth: hci2: command tx timeout
[  384.616568] Bluetooth: hci3: command tx timeout
[  384.680917] Bluetooth: hci4: command tx timeout
[  384.744660] Bluetooth: hci6: command tx timeout
[  384.745106] Bluetooth: hci5: command tx timeout
[  384.808699] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
20:26:34  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff8880307e7880 RCX=ffffffff8226a390 RDX=ffff8880347d9b80
RSI=ffffffff82263bfa RDI=0000000000000001 RBP=0000000000000001 RSP=ffff8880307e77c8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000007 R13=0000000000000007 R14=0000000000000005 R15=0000000000000001
RIP=ffffffff82263c01 RFL=00000207 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6c8840c269 CR3=00000000272e8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff825da1dd RDX=ffff888036860000
RSI=0000000000000fe0 RDI=0000000000000000 RBP=00007fe92feda9b0 RSP=ffff88800f57fd88
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=00007fe92feda9b0 R13=ffff88803485d520 R14=0000000000000fe0 R15=ffffffff8582bb20
RIP=ffffffff81738728 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe92feb3020 CR3=0000000027f7f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000